A Medicare revalidation notice is not a formality you can file and forget. It has a hard deadline, and missing it doesn’t just delay anything, it deactivates your Medicare billing privileges, with a gap you usually can’t bill retroactively. The notice is Medicare asking you to re-verify everything on file, and under PECOS 2.0’s real-time validation, the re-verification is stricter than it used to be. The practices that handle it cleanly treat the notice as a deadline the day it arrives; the ones that get burned treat it as paperwork for later.
Revalidation is a routine, scheduled requirement, every Medicare-enrolled provider and supplier has to revalidate their enrollment information on a recurring cycle, and it’s separate from your initial enrollment and from commercial re-credentialing. This post explains what revalidation is, when it’s due, exactly what to do when the notice arrives, and what happens if you miss it.
What Revalidation Actually Is
Revalidation is the process of re-verifying all the information in your Medicare enrollment record to confirm it’s still accurate and that you still meet enrollment requirements. CMS requires all enrolled providers and suppliers to revalidate their enrollment on a regular cycle, and it’s how Medicare keeps its provider file current and screens out enrollments that no longer qualify.
The cycle is set by provider type. Most providers and suppliers revalidate every five years. DMEPOS suppliers revalidate every three years. CMS can also request off-cycle revalidation at any time, which has become more common as the agency tightens provider-data accuracy. Your revalidation due date is assigned to you, not chosen, and you can look it up on the Medicare Revalidation List rather than waiting to be surprised.
Revalidation is distinct from two things it’s often confused with. It’s not your initial PECOS enrollment, it’s the periodic renewal of it. And it’s not commercial re-credentialing, which runs on separate payer cycles, the kind of re-credentialing covered in our re-credentialing deadline guide. Revalidation is specifically the Medicare side.
When It’s Due, and How You’ll Know
Your Medicare Administrative Contractor (MAC) sends a revalidation notice ahead of your due date, typically about two to three months before. The notice comes by email or mail to the contacts on file in your enrollment record, which is exactly why keeping that contact information current matters so much: a notice sent to an address nobody checks is the single most common reason a revalidation gets missed.
Two things to know about timing. First, you don’t have to wait for the notice, your due date is published on the CMS Medicare Revalidation List, and you can check it anytime by looking up your NPI. Proactive providers verify their date and start early rather than waiting on the MAC. Second, CMS generally won’t process a revalidation submitted too far ahead of the due date (more than six months early is usually returned), so there’s a window: not too early, and never late.
The safest habit is to treat your revalidation date like any other credentialing deadline, calendared with a reminder well ahead, the same discipline that prevents the lapses in our cost of credentialing delays guide. Knowing the date in advance turns revalidation from a scramble into a scheduled task.
What to Do When the Notice Arrives
When a revalidation notice lands, work through it in order. The goal is a complete, accurate submission the first time, because under PECOS 2.0’s real-time validation, incomplete or inconsistent submissions get flagged immediately rather than sliding through.
Confirm the deadline and don’t wait. Note the due date and start now. Revalidation often surfaces small issues (an expired document, an address that changed) that take time to fix, and you want that time.
Review every section of your enrollment record. Revalidation is a full re-verification, so go through the whole record: practice locations, correspondence address, reassignments of benefits, ownership and managing control information, licenses, and specialty/taxonomy. Anything that changed since your last submission needs updating.
Reconcile your data across systems first. This is the PECOS 2.0 wrinkle. The system cross-checks your submission against NPPES, the IRS, and other federal data in real time, so your legal name, address, and Tax ID need to match across all of them before you submit. A mismatch that the old system might have tolerated now triggers a flag. The systems and why they must agree are covered in our guide to how NPPES, PECOS, and CAQH differ.
Submit through PECOS (or the paper CMS-855). The fastest route is revalidating electronically through PECOS, which pre-populates your existing record so you’re confirming and correcting rather than starting over. The corresponding paper forms (the CMS-855 series) are the alternative, but electronic submission is faster and less error-prone.
Pay the fee if you’re an institutional provider. Institutional providers owe the application fee with revalidation; individual physicians and non-physician practitioners are exempt.
Respond fast to any development request. If your MAC asks for additional information after you submit, respond by the deadline they give. Unanswered development requests are a common cause of revalidation failing even after a timely submission.
Do you know your next revalidation date?
The audit maps every provider’s revalidation deadline and checks whether your PECOS, NPPES, and IRS data would pass PECOS 2.0’s real-time validation before you submit.
Check My Revalidation Dates →What Happens If You Miss It
Missing a revalidation deadline carries real, and largely unrecoverable, consequences, which is why the notice deserves immediate attention.
If you don’t revalidate by your due date, your MAC can place a hold on your enrollment and ultimately deactivate your Medicare billing privileges. Deactivation means you can’t bill Medicare, and reactivation requires submitting a full revalidation to get reinstated. The damage is in the gap: when you’re deactivated, there’s typically an effective-date gap between deactivation and reactivation during which Medicare won’t pay for services, and that revenue is generally not recoverable retroactively. A provider can keep seeing Medicare patients in good faith during that gap, and every claim from the period is lost, the same clawback-adjacent dynamic covered in our guide to retroactive recoupment for an uncredentialed provider.
For a group, one provider’s missed revalidation is worse than it looks, because their reassigned billing stops, and the practice absorbs the lost Medicare revenue for that provider until reinstatement is complete, which can take weeks. When we take on a practice that just had a provider deactivated, the back-dated revenue lost during the gap is usually the first thing we have to quantify, and some of it is simply gone. The entire problem is preventable with a tracked date and an early start.
Frequently Asked Questions
Most Medicare providers and suppliers revalidate every five years. DMEPOS suppliers revalidate every three years. CMS can also request off-cycle revalidation at any time. Your specific due date is assigned to you and published on the CMS Medicare Revalidation List, where you can look it up by NPI rather than waiting for the notice.
Your Medicare Administrative Contractor (MAC) sends a revalidation notice, usually about two to three months before your due date, by email or mail to the contacts in your enrollment record. Because notices go to the contact information on file, keeping that current is essential. You can also check your due date anytime on the CMS Medicare Revalidation List instead of waiting for the notice.
If you don’t revalidate by the deadline, your MAC can place a hold on and then deactivate your Medicare billing privileges. Deactivation stops you from billing Medicare, and there’s typically an effective-date gap during reactivation when Medicare won’t pay, revenue that generally can’t be recovered retroactively. Reactivation requires submitting a full revalidation, which can take weeks.
The fastest way is electronically through PECOS, which pre-populates your existing record so you confirm and correct rather than start over. Review every section (locations, reassignments, ownership, licenses, taxonomy), make sure your data matches across NPPES and IRS records, submit, pay the application fee if you’re an institutional provider, and respond promptly to any development request from your MAC.
No. Revalidation is the periodic re-verification of your Medicare enrollment specifically, on a five-year cycle for most providers. Re-credentialing refers to the separate, recurring process commercial payers use to re-verify your credentials on their own cycles. They’re different processes with different timelines, and both have to be tracked so neither lapses.
Don’t Let a Revalidation Notice Become a Deactivation
A Medicare revalidation notice is a deadline, not paperwork, and the cost of missing it is deactivated billing privileges plus a revenue gap you usually can’t recover. Handled early, with your data reconciled across systems, it’s a routine renewal. Handled late, it’s weeks of lost Medicare revenue.
MedBillingTech manages Medicare revalidation and enrollment for solo providers, group practices, and behavioral health organizations, tracking every revalidation date, reconciling your PECOS, NPPES, and IRS data before submission, and handling the filing end to end so nothing lapses. Flat fee of $150 per application, with a 97% client retention rate. Mark Wood, our COO, has spent more than 20 years in payer enrollment.
If you want to know where your revalidation dates stand and whether your enrollment data would survive PECOS 2.0’s checks, the free credentialing audit maps your enrollment posture and flags upcoming deadlines in 15 minutes. Or call (307) 243-2190 to talk through a revalidation notice.
Pingback: Provider Credentialing: The Complete Guide (2026)
Pingback: PECOS 2.0: What Changed for Medicare Enrollment in 2026
Pingback: Re-Credentialing Deadlines: Avoid Costly Lapses