Medicare revalidation: the cycle, the deadline, and what deactivation actually does.
Enrollment isn't a one-time event. Medicare requires every enrolled provider and supplier to revalidate their enrollment record on a recurring cycle, and the practices that get burned by this aren't the ones who don't know the rule exists — they're the ones who knew, assumed there was more time, and found out otherwise when claims started rejecting.
Key takeaways
- Revalidation runs roughly every five years, but the exact cycle varies by provider type and is set per-NPI, not on a single calendar for everyone.
- CMS notifies in advance by mail and through the PECOS message center — both of which are easy to miss if a practice's administrative contact has changed.
- A missed deadline deactivates, it doesn't warn. Claims for dates on or after deactivation reject outright until the matter is resolved.
- Reinstatement can mean reapplying, not just filing the overdue revalidation, depending on how long deactivation has been in place.
What revalidation actually is
Revalidation is Medicare periodically re-confirming that everything on file for an enrolled provider or supplier — practice locations, ownership, licensure, reassignment relationships — is still current and accurate. It isn't a re-application from scratch in the sense of proving eligibility all over again; it's a scheduled check-in that catches the drift that naturally accumulates over years of a practice adding locations, changing ownership structure, or a physician quietly moving between groups without every downstream record being updated to match.
The standard cycle runs on roughly a five-year schedule, but that figure is a general planning assumption, not a fixed rule that applies identically to every provider type. Some supplier categories revalidate on a different schedule, and CMS can also trigger an off-cycle revalidation for cause — following certain reported changes, or as part of program integrity screening. Because of that variation, the only way to know your actual due date with confidence is to look it up per-NPI rather than assume it matches what you remember from a previous cycle or what a colleague's practice experienced.
How to find your specific due date
CMS publishes a revalidation lookup tool that returns the due date on file for a specific NPI. This is the authoritative source — not an estimate based on when the provider originally enrolled, not a guess based on a five-year anniversary, but the actual date the contractor has recorded. Practices that manage more than a handful of enrolled providers benefit from checking every NPI in the group on a fixed schedule (quarterly is a reasonable cadence for a mid-sized practice) rather than waiting for a notice to prompt the check, precisely because notices are the part of this process most likely to get missed.
CMS notifies providers of an approaching revalidation in two ways: a letter to the correspondence address on file, and a message posted to the PECOS message center tied to the provider's enrollment record. Both channels depend on information staying current. A practice that has moved, changed its billing address, or had turnover in whoever monitors the PECOS account can miss both notification paths simultaneously and have no advance warning at all — which is exactly the scenario that turns a routine administrative task into a claims crisis.
What deactivation actually does, step by step
- The due date passes without a completed revalidationNo revalidation submitted, or one submitted but not yet processed and approved by the deadline.
- The contractor deactivates billing privilegesThis is not termination of the enrollment record itself, but the practical effect on cash flow is immediate and severe.
- Claims for dates of service on or after the deactivation date rejectNot just new claims — any claim dated from the deactivation forward denies, including services already delivered before anyone noticed the problem.
- The provider completes the revalidation, or a new application if requiredWhich path applies depends on how long the deactivation has been in place and the contractor's specific process; a prompt response after a short lapse is handled differently than a deactivation left unresolved for months.
- Privileges are reactivated and an effective date is set for resumed billingConfirm this date explicitly before resubmitting any held claims, the same discipline that applies to a brand-new enrollment's effective date.
The distinction between deactivation and termination matters practically, not just technically. Termination generally follows a more serious cause — program integrity issues, revocation for a specific violation — and carries its own reapplication bar. Deactivation for a missed revalidation is recoverable, but "recoverable" doesn't mean cheap: every claim denied during the deactivation window still has to be tracked, held, and resubmitted once privileges are restored, and depending on timely filing rules, some of that revenue can be permanently at risk if the resolution drags on too long.
Reinstatement: not always just a late filing
The instinct after a missed deadline is to simply complete the overdue revalidation and assume that resolves it. Sometimes it does. But depending on how long billing privileges have been deactivated and the specific contractor's process, reinstatement can instead require submitting a brand-new enrollment application — essentially starting over as if the practice were enrolling that provider for the first time, with a new effective date determined the same way a first-time enrollment's effective date is determined. That is a materially slower and more disruptive path than simply catching up on a form, and it's the outcome that makes ignoring an early deactivation notice so costly: the longer the gap goes unaddressed, the more likely the practice ends up in the full reapplication track rather than a quick reinstatement.
| Status | What it means | Action |
|---|---|---|
| Due date approaching | Notice may have been sent by mail or PECOS message center | Complete revalidation well ahead of the due date; don't wait for a reminder |
| Deadline missed, not yet deactivated | Some contractors allow a short window before deactivation takes effect | Submit immediately; treat as urgent regardless of stated grace period |
| Deactivated | Billing privileges suspended; claims from the deactivation date reject | Determine whether reinstatement requires revalidation alone or a full new application; act immediately either way |
| Reinstated | Privileges restored with a specific effective date | Confirm the effective date before releasing any held claims |
Keep a single tracked spreadsheet or system-of-record listing every enrolled NPI in your organization with its revalidation due date pulled directly from the CMS lookup tool, reviewed quarterly. Don't rely on mailed notices or the PECOS message center as your primary alert — treat them as a backup to a process you control.
Do and don't
- Check the CMS revalidation lookup tool per-NPI on a recurring schedule, not just when a notice arrives.
- Keep the correspondence address and PECOS account current so notices actually reach someone who acts on them.
- Submit revalidations well before the due date, not on the deadline itself.
- Treat any deactivation as an emergency and confirm with the contractor immediately whether reinstatement requires a new application.
- Don't assume every provider's due date falls on the same five-year anniversary.
- Don't rely solely on a mailed notice reaching the right person at a busy practice.
- Don't wait to see if a deactivation "resolves itself" — claims keep rejecting the entire time it's open.
- Don't assume completing the overdue form is automatically sufficient once privileges are already deactivated.
Don't let revalidation catch your practice off guard.
We track every enrolled provider's revalidation due date centrally and file well ahead of the deadline, so billing privileges never lapse.
Frequently asked questions
How do I find my Medicare revalidation due date?
CMS publishes a revalidation lookup tool where you enter an NPI and it returns the specific due date on file for that provider or supplier. Because the cycle varies by provider type and is tracked per-NPI rather than on one fixed calendar for everyone, this lookup is the only reliable source — don't assume your due date matches a colleague's or a rule of thumb, check the specific NPI.
What actually happens if we miss a revalidation deadline?
Missing the deadline results in deactivation of Medicare billing privileges, not immediate termination of the enrollment record. The practical effect is the same either way in the short term: claims for dates of service on or after the deactivation date reject outright, and they keep rejecting until the revalidation is completed and privileges are reactivated or a new enrollment is approved.
Does completing a late revalidation reinstate billing privileges automatically?
Not always. Depending on how long the deactivation has been in place and the specific contractor's process, reinstatement can require submitting a full new enrollment application rather than simply completing the overdue revalidation. That's a materially longer path back to billable status, which is why avoiding deactivation in the first place is worth real operational attention.
Confirm before you rely on this. Payer contact details, portal URLs, required documents and credentialing timelines change without notice, and payers periodically rename, merge or migrate their systems. The process information on this page reflects standard industry practice as of August 2026 and is provided for general education — verify current requirements directly with the payer before submitting an application.