PECOS Enrollment: A Step-by-Step Guide for Providers

PECOS — the Provider Enrollment, Chain, and Ownership System — is the internet-based system CMS maintains for Medicare provider and supplier enrollment. It is the digital home of the paper CMS-855 application family: anything you could mail on an 855 form, you can file (faster, with built-in validation) in PECOS. Your Medicare Administrative Contractor (MAC) processes whatever you submit there.

Enrollment is not the same as credentialing, and the distinction trips up new practices constantly. Credentialing is the verification of your education, training, licensure, and work history that a payer (or a hospital) performs before granting participation. Enrollment is the act of registering with a specific payer's billing system — for Medicare, that is PECOS — so claims under your NPI actually adjudicate and pay. You can be a fully licensed, board-certified physician and still have every Medicare claim deny because you were never enrolled, or because your enrollment lapsed. For a fuller breakdown of how these two processes interlock, see our provider enrollment glossary entry and the difference between enrollment and credentialing.

Why it matters operationally: an active, accurate PECOS record is a precondition for getting paid by Medicare, for reassigning your benefits to a group so the group can bill on your behalf, and — increasingly — for other providers to bill. Medicare denies lab, imaging, DME, and home-health claims when the ordering or referring provider is not enrolled in PECOS, so your enrollment status affects downstream billers, not just you. In our enrollment work we routinely trace a cluster of CO-16 / N264 / N265 denials back to a single referring physician whose PECOS record had quietly deactivated at revalidation — a reminder that PECOS hygiene is a revenue issue, not just a paperwork one.

The single most important early decision is picking the correct 855 form. Filing the wrong one is the most common cause of an enrollment being returned or rejected. The form is determined by what you are enrolling — an individual, an organization, a reassignment, or an order/refer-only role — not by your specialty.

A few decision rules that resolve most confusion:

• Solo practitioner billing under their own NPI/Tax ID: file an 855I (and CMS-588 for EFT). No 855B needed.
• A new group entity: file an 855B for the group, then an 855R for each individual who will reassign benefits to it, plus an 855I for any individual not already enrolled.
• Joining an existing group as an already-enrolled physician: you typically file an 855R (reassignment to the new group) and an 855I change of information — you do not re-do your whole individual enrollment from scratch.
• A physician who never bills Medicare but orders labs/imaging or certifies home health: file an 855O so their NPI is PECOS-enrolled for ordering/referring (this prevents downstream CO-16/N264 denials).

When in doubt, the controlling question is: am I enrolling a person, an organization, a reassignment, or an order-only role? That answer selects the form.

PECOS does not create your identity — it links to one. Two prerequisites must exist before you can submit anything.

1. An active NPI (National Provider Identifier). You obtain your NPI from NPPES (the National Plan and Provider Enumeration System), not from PECOS. Individuals get a Type 1 NPI; organizations get a Type 2 NPI. PECOS enrollment is then associated with that NPI — your Medicare billing privileges attach to it. If your NPPES information (legal name, practice address, taxonomy) is wrong or out of date, it can cause a PECOS mismatch, so reconcile NPPES first. An NPI without a Medicare enrollment cannot bill Medicare; an NPI with an active PECOS enrollment can.

2. An I&A (Identity & Access Management System) account. Before logging into PECOS you register in I&A, which controls who is authorized to act on a provider's or organization's behalf. I&A is where you establish roles — Authorized Official (AO), Delegated Official (DO), and authorized/staff-end users — so that a credentialing coordinator or billing company can manage the enrollment without the physician keying everything personally.

Information to have ready before you open the application:

• Legal business name and Tax Identification Number (TIN/EIN), plus SSN for individuals
• NPI(s) — Type 1 for the individual, Type 2 for the group
• State license number(s), DEA (if applicable), board certification, and medical school/training history
• Practice location address(es) — a physical practice address is required; a PO box alone will not do
• Correspondence and "special payments" addresses
• Ownership and managing-control information (names, SSNs, addresses) for the entity
• Bank account details for EFT (CMS-588)
• Any final adverse legal actions to disclose

Gathering this packet before you start is the single biggest determinant of speed. A PECOS application that stalls almost always stalls because a license number, an ownership disclosure, or a supporting document was missing — and the MAC issues a development request that adds weeks. Our provider enrollment checklist lays out the full document set so the application goes in complete the first time.

The sequence below is the clean-application path. The same flow applies whether you file online in PECOS or on paper; PECOS just validates as you go and routes electronically to your MAC.

1. Confirm (or obtain) the NPI in NPPES. Verify legal name, address, and taxonomy match what you will enter in PECOS. Fix NPPES first if anything is stale.
2. Set up your I&A account and roles. Register the Authorized Official / Delegated Official and connect the individual's or organization's identity. Grant your enrollment staff or billing company surrogate access here.
3. Select the correct 855 form / enrollment scenario in PECOS. Individual = 855I; new group = 855B; reassignment = 855R; order/refer-only = 855O; DMEPOS = 855S; institutional = 855A. (See the form table above.)
4. Complete every required section. Identifying information, specialty, all practice locations, licensure, ownership/managing control, and the EFT/CMS-588 banking information. Incomplete sections are the #1 cause of development requests.
5. Add reassignments where applicable (855R). For a group, link each individual's billing rights to the group's Type 2 NPI/TIN. This is what lets the group bill for that provider's services.
6. Upload supporting documentation. License, IRS CP-575 / TIN confirmation, voided check or bank letter for EFT, and any documents the specific scenario requires.
7. Sign and certify. The individual practitioner or the Authorized Official must e-sign (or sign the printed CMS-855 certification statement). An unsigned certification will get the application returned.
8. Submit and pay any application fee. Institutional providers, suppliers, and DMEPOS pay a CMS application fee; most individual physician 855I enrollments do not. Verify the current fee in PECOS at submission.
9. Track the MAC's review and respond fast to development requests. The MAC verifies your data, may conduct a site visit (for certain supplier types), and may issue a development letter requesting clarification. Respond within the MAC's deadline — usually 30 days — or the application can be rejected and you start over.
10. Receive approval and note your effective date. Once approved, confirm your effective date and the date you may begin billing (see the effective-date section below).

Work these in order. Skipping the NPPES reconciliation or the I&A setup forces you to backtrack mid-application, and submitting before the EFT and signature steps are complete guarantees a return.

Reassignment is the mechanism that lets a group bill Medicare for the services its physicians and practitioners perform, and it is governed by the CMS-855R. Understanding it prevents the classic "the doctor is enrolled but the group still can't get paid" problem.

What reassignment actually does. By default, Medicare pays the individual who furnished the service. Reassignment transfers that right to bill and receive payment to the group/employer. After an approved 855R, the group bills under the group's Type 2 NPI and TIN with the individual's Type 1 NPI identified as the rendering provider on the claim. Both NPIs appear on the claim, and both enrollments must be active and correctly linked in PECOS for the claim to pay.

The two-NPI relationship in plain terms:

• Type 1 (individual) NPI — identifies who performed the service (rendering provider).
• Type 2 (organization) NPI — identifies who is billing and being paid (billing provider).
• The 855R is the bridge: it ties the individual's billing rights to the group's TIN so Medicare knows the group is authorized to bill for that person.

Common reassignment scenarios:

• New hire at an existing group: the already-enrolled physician files an 855R reassigning to the group (plus an 855I change to add the new practice location). The group does not file a new 855B.
• Physician works at two groups: they can reassign to multiple TINs — a separate 855R per group. Each reassignment is independent.
• Physician leaves a group: the group (or the individual) should terminate the reassignment in PECOS. Leaving stale reassignments active is a compliance and audit risk.

The most expensive linkage mistake is billing under the group before the 855R is approved, or with the wrong rendering/billing NPI combination. Those claims deny — and if the reassignment is never properly established, you may lose them to timely filing. In our enrollment audits, a recurring root cause of group-level Medicare denials is an 855R that was submitted but never finalized, so the group billed for a provider Medicare did not yet recognize as reassigned to that TIN. Confirm the reassignment shows as approved in PECOS before the first claim goes out.

Your effective date determines the earliest date of service you can bill, and it is governed by CMS rule — you do not get to choose it. Misunderstanding it is how practices lose the first weeks of a new provider's revenue.

The general rule. For physicians, non-physician practitioners, and physician/NPP organizations, the effective date is the later of (a) the date the MAC received a signed, processable enrollment application that was subsequently approved, or (b) the date the provider first began furnishing services at the new practice location. In short: the clock starts when a clean application lands at the MAC, not when you decide to apply.

Retroactive billing window. CMS allows limited retrospective billing for services furnished before the application was filed but after all requirements were met. For physicians and qualifying suppliers, that retrospective window is generally up to 30 days prior to the effective date — extended to 90 days only in a Presidentially-declared disaster/emergency that prevented timely enrollment. This is exactly why you should file before a provider starts, not after: every day you wait past the 30-day lookback is a day of services that can never be billed.

Practical takeaway: start the PECOS application 60–90 days before the provider's first patient day. Because credentialing with commercial payers runs in parallel and often takes longer, an early Medicare filing protects the effective date while everything else catches up. "Verify the current CMS rule with your MAC" applies to specifics — but the later-of effective date and 30-day retro framework are the load-bearing rules to plan around.

Enrollment is not set-and-forget. CMS requires every enrolled provider and supplier to revalidate their entire Medicare enrollment record on a recurring cycle, and missing it is one of the most common — and most preventable — causes of a sudden wave of Medicare denials.

The cadence:

• Most providers and suppliers: every 5 years.
• DMEPOS suppliers: every 3 years.

CMS sets each provider a revalidation due date (you can look yours up on the CMS revalidation lookup tool), and your MAC sends a revalidation notice ahead of it. You revalidate by submitting a complete, current 855 application in PECOS — the same form you would use to enroll (855I for individuals, 855B for groups, 855S for DMEPOS) — reverifying every section. CMS can also request off-cycle revalidation at any time for program-integrity reasons.

What happens if you miss it. If you do not revalidate by the due date, the MAC can place a hold on your claims and ultimately deactivate your enrollment. Deactivation does not erase your enrollment history, but it stops payment: claims with dates of service after the deactivation date deny until you reactivate, and reactivation can leave a coverage gap that costs real revenue. Worse, a deactivated referring physician triggers CO-16 / N264 / N265 denials on every lab, imaging, and DME claim that names them — so one missed revalidation can ripple across an entire referral network.

How to stay ahead of it:

1. Track every provider's revalidation due date in a credentialing calendar with 6-month, 90-day, and 30-day alerts. Do not wait for the MAC letter — letters get lost.
2. Respond as soon as the notice arrives. Submit the revalidation 60–90 days before the due date so a development request does not push you past deactivation.
3. Keep PECOS continuously accurate. A record that is already current (correct addresses, licenses, ownership, reassignments) revalidates in minutes; a stale one becomes a full clean-up project under deadline pressure.
4. Reconcile reassignments at revalidation. This is the natural moment to terminate stale 855R links for departed providers and confirm active ones.

Proactive revalidation tracking is the single highest-ROI piece of enrollment maintenance — it prevents an entirely avoidable revenue interruption. Outsourced provider enrollment services typically own this calendar so no due date is ever missed.

Processing time depends on the application type, whether a site visit is required, and — above all — whether the application went in clean. The bands below are planning estimates; your MAC's actual turnaround varies, so verify current processing times with your contractor.

Two levers move this timeline more than anything else. First, completeness: the difference between a clean 855 and one missing a license number or an ownership disclosure is the difference between a single review pass and two or three development round-trips — often a month or more. Second, lead time: start 60–90 days before the provider's first patient day so the effective date and the 30-day retro window protect the opening weeks of revenue rather than leaving them unbillable. Practices that treat enrollment as a project to launch before hiring, with a complete packet and tracked deadlines, consistently finalize in the lower bands; those that file reactively live in the upper ones.

Most enrollment delays are self-inflicted and fall into a short, repeatable list. Avoiding these gets you into the lower timeline bands and out of the development-request loop.

1. Filing the wrong 855 form. Submitting an 855I when you needed an 855B + 855R for a new group, or skipping the 855O for an order/refer-only physician. Re-read the form table and confirm whether you are enrolling a person, an organization, a reassignment, or an order-only role before you start.
2. NPPES / PECOS data mismatch. A legal name, address, or taxonomy that differs between NPPES and PECOS stalls the application. Reconcile NPPES first.
3. Incomplete ownership and managing-control disclosures. Groups must report owners and managing officials; omissions trigger development requests and, if they look like concealment, integrity scrutiny.
4. Missing or wrong EFT (CMS-588) information. Medicare pays only by electronic funds transfer; a bad routing number or missing voided check holds the whole application.
5. Billing before the reassignment (855R) is approved. The group bills under its TIN before Medicare has finalized the link, and the claims deny — sometimes past timely filing. Confirm "approved" in PECOS first.
6. Missing the revalidation due date. The quiet killer. A lapsed revalidation deactivates the enrollment and, for referring providers, triggers downstream CO-16 / N264 / N265 denials across the referral network. Track due dates proactively.
7. Ignoring or slow-walking a development request. The MAC's letter has a deadline (usually 30 days). Miss it and the application is rejected; you re-file and lose the queue position and potentially the favorable effective date.
8. Filing too late. Starting the application after the provider has already begun seeing patients sacrifices billable revenue beyond the 30-day retro window. File 60–90 days early.

A disciplined enrollment function — complete packets, NPPES reconciliation up front, tracked deadlines, and reassignment verification before first claim — converts PECOS from a recurring source of denials into routine, predictable maintenance. For practices without internal bandwidth, our provider credentialing and provider enrollment services own the form selection, submission, development responses, and the revalidation calendar end to end.