For most providers, PECOS enrollment is the step where Medicare participation either moves forward or stalls. According to MAC processing data published by Palmetto GBA, an accurate and complete PECOS web submission takes an average of 7 days to process. Submit the same application with missing information and that timeline jumps to 35 days — a fivefold difference created entirely by preventable errors at submission. For a practice onboarding one or two providers at a time, that gap is an operational inconvenience. For a health system managing dozens of concurrent enrollments, it is a material revenue problem.
This article covers what PECOS is, who is required to register, why it matters to your revenue cycle, and how to navigate the system from access setup through approval — including how to read your application status and avoid the errors that trigger the most common delays.
What Is PECOS?
PECOS — Provider Enrollment, Chain, and Ownership System — is the Centers for Medicare and Medicaid Services (CMS) online portal for Medicare provider and supplier enrollment. It serves as the central management system through which healthcare providers enroll in Medicare, update their enrollment information, manage billing privileges, and complete revalidation.
The system is tightly integrated with two other CMS platforms: NPPES (National Plan and Provider Enumeration System), which issues National Provider Identifiers (NPIs), and the CMS Identity and Access Management (I&A) system, which controls portal access. Data flows directly from NPPES into PECOS, meaning any discrepancy in your NPI record — a name mismatch, outdated taxonomy code, or incorrect address — will surface as a conflict in your PECOS application before it can be processed.
In late 2023, CMS introduced PECOS 2.0 as part of a broader modernization initiative. The updated platform supports single applications for multiple provider enrollments, improved data validation against NPPES records in real time, and greater transparency throughout the application lifecycle.
Who Must Register in PECOS?
Any provider or supplier who wants to bill Medicare, or who orders and refers items and services covered by Medicare, must have an active enrollment record in PECOS. This includes:
- Physicians (MDs, DOs, podiatrists, optometrists, chiropractors)
- Nurse practitioners, physician assistants, and other advanced practice providers
- Physical, occupational, speech, and behavioral health therapists
- Group practices, clinics, and institutional providers such as hospitals and skilled nursing facilities
- Durable medical equipment (DME) suppliers and laboratories
Notably, providers who do not bill Medicare directly are not exempt if they order or refer Medicare-covered services. Under Section 6405 of the Affordable Care Act, a physician must be enrolled in PECOS for Medicare to reimburse home health services, DME supplies, or Part D prescriptions ordered by that provider — even if the physician never submits a claim. As of 2024, this requirement also extends to physicians who certify or recertify hospice services for Medicare patients.
Providers who choose not to participate in Medicare must formally opt out by filing an affidavit with their Medicare Administrative Contractor (MAC). Doing neither — enrolling nor opting out — creates compliance exposure and may result in denied claims for patients receiving referred services.
Why PECOS Enrollment Matters
PECOS enrollment is not a formality. It is the administrative prerequisite for Medicare reimbursement, and its status directly affects revenue timing. A provider cannot submit a billable Medicare claim until their enrollment is approved and a Provider Transaction Access Number (PTAN) is issued. Every day between application submission and approval represents deferred revenue — and as the Palmetto GBA data above illustrates, the length of that gap is largely within the organization’s control.
Beyond billing access, PECOS records affect ordering and prescribing privileges, compliance standing, and the outcomes of program integrity reviews. Outdated or inaccurate enrollment data can trigger payment holds, deactivation of billing privileges, and off-cycle revalidation requests. For a deeper look at how provider enrollment fits within the broader credentialing process, see Credentialing vs. Provider Enrollment.
Benefits of Using PECOS Over Paper Submissions
CMS continues to urge providers toward internet-based PECOS over paper CMS-855 forms, and the operational case is straightforward:
- Faster processing: Accurate PECOS web submissions average 7 days to process at Palmetto GBA; accurate paper submissions average 14 days. Both timelines extend significantly when applications are incomplete.
- Built-in validation: PECOS uses adaptive technology to display only the fields relevant to the provider type and enrollment scenario. Required fields cannot be left blank, reducing the rate of incomplete submissions at the point of entry.
- Electronic signatures: Wet ink signatures are not required. E-signatures are accepted, eliminating the delays associated with printing, signing, and mailing certification statements.
- Real-time status tracking: Providers can monitor application status directly within PECOS using their NPI or document control number, without waiting for MAC correspondence.
- Centralized record management: Enrollment updates, revalidations, and changes in practice location or ownership can all be managed through the same portal without restarting from a blank form.
Step-by-Step: How to Use PECOS for Medicare Enrollment
Step 1: Obtain and Verify Your NPI
Every PECOS enrollment begins with a valid NPI from NPPES. Individual providers need a Type 1 (individual) NPI. Organizations, group practices, and LLCs also need a Type 2 (organizational) NPI. Before starting PECOS, log into NPPES and confirm that your name, taxonomy codes, and practice address are current and accurate. PECOS pulls this data directly, and any mismatch will create downstream conflicts.
Step 2: Set Up Your CMS I&A Account
Access to PECOS is controlled through the CMS Identity and Access (I&A) Management System. First-time users must create an I&A account and establish the appropriate role. Key roles include the Authorized Official (AO), who holds legal signing authority for the organization, and the Delegated Official (DO), who can assist with enrollment management. For organizations using a third-party credentialing service or billing company, surrogacy connections must be established within I&A before those parties can access PECOS on the provider’s behalf.
Common setup failure: The designated AO lacks the legal authority required to sign enrollment applications for that entity type. Confirm legal authority before assigning the AO role to avoid a downstream rejection.
Step 3: Select the Correct Enrollment Application
PECOS mirrors the paper CMS-855 form family electronically. The application type is determined by provider type and enrollment scenario. The primary forms are:
- CMS-855I: Individual physicians and non-physician practitioners
- CMS-855B: Clinics, group practices, and certain suppliers
- CMS-855A: Institutional providers — hospitals, skilled nursing facilities, home health agencies
- CMS-855O: Ordering/referring only (providers who do not bill Medicare but must enroll to order or refer)
- CMS-855S: DMEPOS suppliers
PECOS’s adaptive logic will guide you toward the correct application sections based on your initial responses. However, understanding which form applies to your scenario before starting reduces the risk of selecting an incorrect enrollment type — a mistake that can invalidate the application entirely.
Step 4: Complete the Application and Upload Documentation
Fill out all required sections, including practice location(s), ownership and managerial structure (for organizations), tax identification number, and banking information for Electronic Funds Transfer (EFT) enrollment via CMS-588. Medicare will only issue payments by EFT, and the legal name on the bank account must match the name on file with the IRS exactly — including LLC, Inc., or other suffix designations. A mismatch here is one of the most common causes of rejection at the final review stage.
Upload supporting documentation at the time of submission, not after. Common required documents include current state license, DEA registration (where applicable), malpractice insurance documentation, and board certification. Incomplete documentation is the leading trigger for MAC development requests, which pause the processing clock and require a response within 30 calendar days.
Step 5: Electronically Sign and Submit
PECOS applications require an electronic or uploaded signature from the Authorized Official before they can be submitted. An application sitting in unsigned status is not under review — it is pending action on the applicant’s side. Once signed, the application is transmitted to the appropriate MAC for processing.
After submission, save your PECOS confirmation and note the Logistics and Tracking (L&T) ID. This number is required in all MAC correspondence and follow-up communications.
Step 6: Monitor Status and Respond to MAC Requests
PECOS provides real-time status updates accessible by NPI or L&T ID. Most MACs also offer status lookup tools on their own websites. If the MAC issues a development letter requesting additional information, respond within 30 calendar days with a complete, single response that includes the L&T ID and provider NPI. Partial responses often generate additional requests and further extend the timeline.
PECOS Application Status: What Each Code Means
Status | What It Means |
Pending | Application is under MAC review |
Opened for Corrections | MAC returned the application; must be resubmitted within 20 days or it is deleted |
Returned for Corrections | Rejected if corrections are not received within 30 days |
Rejected | Application was not approved; can be re-opened within 60 days, then must be modified within 120 days or it is deleted |
Enrolled | Application approved; PTAN has been issued |
Deactivated | Billing privileges have been suspended, typically due to missed revalidation |
Revoked | CMS has terminated Medicare enrollment; reinstatement requires a new application and, in some cases, a waiting period |
Common PECOS Errors and How to Resolve Them
NPI-NPPES mismatch: PECOS pulls data directly from NPPES. If the name, address, or taxonomy code in NPPES does not match the information on the enrollment application, the MAC will issue a development request. Resolve this by updating NPPES before submitting, not after.
Wrong Authorized Official: Only an individual with legal signing authority for the organization can serve as AO. If the AO designation is incorrect, the application will be rejected. Confirm legal authority against the organization’s governing documents before making the assignment.
EFT name mismatch: The name on the bank account submitted with CMS-588 must match the legal business name on the enrollment application exactly as it appears in IRS records. Even minor differences — “LLC” vs. “L.L.C.” — can trigger rejection.
Missing or unsigned certification: An application without a completed electronic signature is not transmitted to the MAC for review. Always confirm the certification step is completed before leaving the PECOS session.
Failure to respond to development request: MACs require a response to information requests within 30 calendar days. Missing this window can result in rejection, requiring the provider to restart the application process. Monitor all communication channels — including email spam and junk folders — for MAC correspondence after submission.
Reportable change not submitted: CMS requires providers to report certain changes within 30 calendar days of occurrence. These include changes in ownership or control, practice location changes, and final adverse legal actions. Failure to report on time can result in compliance flags and enrollment complications at revalidation.
Conclusion
PECOS enrollment is the operational gateway to Medicare participation, and the difference between a smooth process and a prolonged one almost always comes down to preparation and accuracy at submission. Understanding the system’s architecture — NPI verification, I&A access setup, correct form selection, documentation completeness, and post-submission monitoring — removes the variables that cause most delays.
For organizations managing multiple concurrent enrollments or providers across several states, the administrative load compounds quickly. With over 14 years of experience managing Medicare and payer enrollments, Neolytix supports healthcare organizations in navigating PECOS from initial submission through PTAN issuance and ongoing revalidation. Learn more about how our Provider Enrollment Services keep enrollment timelines predictable and billing privileges protected.
Frequently Asked Questions
What is the difference between PECOS enrollment and CAQH registration?
PECOS is the CMS system used specifically for Medicare enrollment. CAQH ProView is a separate database used by commercial payers to collect and verify provider credentialing information. Completing CAQH does not enroll a provider in Medicare, and Medicare enrollment through PECOS does not fulfill CAQH requirements. The two processes run in parallel and serve different purposes.
Can a provider bill Medicare while a PECOS application is pending?
Generally, no. A provider cannot submit Medicare claims until their PTAN is issued, which only occurs after CMS approves the enrollment application. In limited circumstances, retroactive billing may be permitted up to 30 days before the application received date. Providers joining a group already enrolled with Medicare may also bill under the group’s billing number temporarily in specific scenarios — confirm the rules with your MAC before assuming this option applies.
How often does PECOS enrollment need to be revalidated?
Individual providers and organizational providers must revalidate Medicare enrollment every five years. DMEPOS suppliers revalidate every three years. CMS posts revalidation due dates seven months in advance on the Medicare Revalidation Lookup Tool. Providers should not wait for a letter — submitting within the seven-month window before the due date is the correct approach. Failure to revalidate results in deactivation of billing privileges.
What triggers a PECOS record deactivation?
The most common cause is a missed revalidation deadline. Deactivation can also result from a failure to report a required change within the 30- or 90-day reporting window, or from non-payment of a required application fee. Once deactivated, a provider must submit a reactivation application before billing privileges are restored.
Does PECOS enrollment cover all payers or only Medicare?
PECOS covers Medicare enrollment only. Commercial payer enrollment, Medicaid enrollment, and CHIP enrollment are each managed through separate processes and systems. A provider enrolled in PECOS is not automatically enrolled with any commercial payer. Each payer maintains its own enrollment and credentialing requirements.
What is a PTAN and when is it issued?
A Provider Transaction Access Number (PTAN) is the unique identifier CMS assigns to a provider upon approval of their Medicare enrollment. It is required for claims submission. PTANs are issued only after the MAC approves the application — providers who have submitted but not yet received approval do not have billing privileges until the PTAN is confirmed.
Can a PECOS application be resubmitted after rejection?
Yes, with conditions. A rejected application can be re-opened in PECOS within 60 days of rejection and must be modified within 120 days of being re-opened or it will be deleted. A rejection resets the processing timeline, which is why first-submission accuracy is the most reliable way to protect enrollment speed.
