It answers a question that a license or an identifier cannot: is this provider actually approved to participate in Medicare right now.
A provider can be licensed, credentialed, and hold a valid NPI, and still have Medicare claims denied. The reason usually lives in their enrollment status, which is exactly what this check exists to catch.
Why PECOS enrollment verification matters
PECOS, the Provider Enrollment, Chain, and Ownership System, is the authoritative Centers for Medicare & Medicaid Services database for who is enrolled and eligible to bill Medicare. A provider has to maintain an active enrollment record to be reimbursed, so an enrollment gap translates directly into denied claims and lost revenue.
The point that surprises billing teams is the ordering and referring rule. Since 2010, physicians and eligible practitioners who order or refer services for Medicare beneficiaries must themselves be enrolled in PECOS. Medicare will deny the claim when the ordering or referring provider is not enrolled, even if the billing provider did everything else correctly.
That is why verification happens before onboarding a provider and before submitting claims, rather than after a denial forces the question.
PECOS enrollment vs. an NPI
These two are constantly confused, and the difference is the crux of why verification is necessary.
An NPI number is an identifier that nearly every provider holds. PECOS enrollment is the active registration that authorizes a provider to bill Medicare. A provider can have a perfectly valid NPI and no active Medicare enrollment at all, because the two systems, NPPES and PECOS, track different things and do not automatically sync.
To order or refer Medicare services, a provider needs both a valid NPI and an active PECOS enrollment. Confirming one says nothing about the other.
To order or refer Medicare services, a provider needs both a valid NPI and an active PECOS enrollment. Confirming one says nothing about the other.
What enrollment statuses mean
Verification is not simply enrolled or not. The record carries a status, and each one has different consequences.
- An active enrollment means the provider can bill.
- A revoked enrollment means billing privileges have been terminated, often for non-compliance, sanctions, or a felony, and any claims submitted are denied.
- A deactivated enrollment means the provider has temporarily lost privileges, frequently for inactivity or a missed revalidation.
- An opt-out means the provider has formally chosen not to enroll and cannot bill Medicare, though they may still order and certify.
The one that carries the most weight is enrollment revocation, because it often comes with a re-enrollment bar lasting one to ten years, and CMS publishes a dataset of revoked providers still under an active bar.
How PECOS enrollment is verified
Verification generally starts from the NPI, since that is the most reliable way to find the right record, though a name search also works.
The authoritative source is the PECOS system itself, queried directly. For ordering and referring eligibility, CMS also publishes a public Order and Referring dataset, and for bulk checks there is the Medicare Fee-For-Service Public Provider Enrollment dataset.
Those public files are useful, but they carry a caveat: they are refreshed only monthly or quarterly, so they lag real changes, and absence from the ordering and referring file is not proof a provider cannot bill, since some enrolled providers simply do not order or refer. For a decision that affects a claim, the PECOS record itself is the definitive answer.
Where enrollment verification fits into compliance
Enrollment verification sits alongside primary source verification in credentialing and onboarding, and it stays relevant afterward because enrollment is not static.
Providers must complete revalidation on a periodic cycle, and a missed revalidation is a common path to deactivation.
Treated as a one-time check at hire, enrollment status quietly drifts out of date. Treated as something confirmed and monitored, it stays aligned with a provider’s actual ability to bill.
PECOS enrollment and exclusion status
Enrollment verification and exclusion screening answer related but distinct questions, and they reinforce each other.
Enrollment verification tells you whether a provider can bill Medicare. Exclusion screening tells you whether a provider is barred from federal healthcare programs entirely. The two overlap because an exclusion is one of the reasons an enrollment gets revoked.
So, a provider who turns up on the OIG exclusion list or the SAM exclusion list is also a provider whose Medicare billing privileges are at risk. Checking only one leaves the other blind spot open.
How Streamline Verify supports provider eligibility
Verifying Medicare enrollment and screening for exclusions are complementary eligibility checks, and both have to stay current across a full roster of providers rather than being confirmed once and forgotten.
Streamline Verify is a fully automated solution for the exclusion and sanction side of that picture. It continuously screens providers, employees, and vendors against the OIG LEIE, the SAM exclusion list, and applicable state Medicaid lists.
The platform flags potential matches for review, and records every check in a time-stamped audit trail. A provider revoked from Medicare because of an exclusion is exactly the kind of change that surfaces quickly through continuous screening.
As a fully automated solution, Streamline Verify does not perform PECOS enrollment verification itself. It keeps the exclusion and sanction component of Medicare compliance continuous and documented, so provider eligibility can be shown rather than assumed.
Want to see how automated exclusion screening supports your Medicare enrollment and eligibility checks?
