Mistakes during the physician credentialing process do not come as a warning; they emerge a few weeks later through a denied reimbursement, suspended payment, or a doctor treating patients without billing privileges.
Most medical practices view the physician credentialing process as an activity to be done only once. Just fill out the form, get approved, and go about your business. The thing is that the physician credentialing process involves ongoing renewal, deadlines, and annual updates, which results in denied reimbursement.
Below are some common gaps in the physician credentialing process that cost practices money today, all of which can easily be avoided using a proper checklist.
Why a Physician Credentialing Checklist Matters More Than Most Practices Realize
The problem of credentialing holds true even for established providers, who might have had their credentials lapse silently due to expired licenses, lapsed revalidation periods, or lapsing payers due to a change in the practice’s billing address.
CMS states clearly that failure to revalidate within the required timeframe would lead to a suspension of Medicare payments or even deactivate the billings completely. Reactivation will require submitting another new enrollment application entirely.
This would entail weeks without any payment as well as the possibility of lost payments that cannot be recovered anymore. The provider will still see his or her patients without receiving any reimbursements.
The 8 Credentialing Mistakes Practices Make Most Often
Practices of all sizes exhibit similar trends in credentialing failures. In 2026, these eight will be the most prominent.
1. Starting the Process Too Late
Credentialing by private health insurance companies takes between 90 and 120 days. Medicare and Medicaid may take longer. If physicians begin the process while they have existing patients, they are automatically setting themselves up for free billing days from day one.
The checklist fix is simple. Begin credentialing the moment a provider accepts an offer, before the start date is confirmed and before scheduling begins.
2. Submitting Incomplete CMS-855I Applications
The CMS-855I is the Medicare enrollment application for physicians and non-physician practitioners. Every field matters. A missing SSN, an unverified NPI match, a skipped practice location, or an unsigned section sends the application back to the start.
CMS is actively reviewing the CMS-855I enrollment application to ensure it captures all necessary credentials for providers intending to bill Medicare, with a formal comment request issued as recently as March 2026. That signals ongoing scrutiny of what gets submitted, not just whether it gets submitted. CMS
Verify every field against the PECOS pre-submission checklist before the application goes out. One missing item costs weeks.
3. Missing the Revalidation Window
All Medicare providers and suppliers are required to revalidate their enrollment information every five years. CMS posts revalidation due dates seven months in advance on the Medicare Revalidation List. Practices that are not actively monitoring those dates miss the window and face payment holds before anyone realizes the deadline passed.
The CMS Medicare Revalidation List is updated monthly, with due dates now posted through November 2026. Every practice should have at least one person assigned to check revalidation dates for every enrolled provider quarterly.
For a full breakdown of what the credentialing process requires at each stage, Delaware Medical Billing’s guide to the credentialing process and required documents covers the document standards that apply across Medicare and commercial payers.
4. Failing to Update PECOS After Practice Changes
A change in practice address, a new group affiliation, a phone number update, or a change in ownership all require a corresponding update in PECOS. Practices that update their internal systems without updating PECOS are creating a mismatch that causes claims to fail on submission.
CMS requires Medicare providers and suppliers to keep their enrollment information current at all times. Modifications involving any of the above will impact processing, claim payment, or provider identification, and as such, need to be updated in the PECOS system.
Administrative modifications within the practice setting need to be immediately reviewed with the PECOS system. It is a five-minute check that prevents weeks of denied claims.
5. Overlooking Payer-Specific Credentialing Requirements
Medicare credentialing runs through PECOS. The process of commercial payer credentialing takes place independently by each payer using their own documentation needs, timeline, and credentials renewal standards. A physician with Medicare credentialing does not automatically have credentialing for Aetna, Blue Cross Blue Shield, or any other commercial carrier.
A medical practice which makes an assumption that Medicare enrollment will cover all payers ends up with physicians billing commercial insurance where they have no credentialing yet. Such claims are not only denied but can cause a fraud alert.
Build a separate payer enrollment tracker that lists every carrier, the provider’s enrollment status with each one, and the next renewal or revalidation date.
6. Letting DEA Registrations and State Licenses Expire
If a doctor’s DEA registration expires, he cannot prescribe any drugs at all. If his state license for practicing medicine expires, he immediately loses billing rights with all payers at once. All of that occurs because no one monitored expirations dates.
It is the most preventable thing on the list, but still one of the most prevalent. Just having an expirations date calendar checked monthly takes care of both problems.
| Document | Renewal Frequency | Consequence of Lapse |
| State medical license | Varies by state, typically 1-2 years | Immediate loss of billing privileges |
| DEA registration | Every 3 years | Cannot prescribe controlled substances |
| Board certification | Every 7-10 years | Payer credentialing may lapse |
| Malpractice insurance | Annual | Payer contract violation |
| NPI record | No expiration, but must stay current | Claims reject if NPI data mismatches |
For a detailed breakdown of what each payer requires during enrollment, Delaware Medical Billing’s post on provider enrollment documentation requirements covers Medicare, Medicaid, and commercial payer standards in one place.
7. Billing Under the Wrong Provider NPI
Group practices sometimes bill services under the group NPI when the rendering provider’s individual NPI should appear on the claim. Both NPIs serve a function. Using the wrong one, or omitting the rendering provider NPI entirely, causes claims to fail payer edit checks automatically.
CMS requires that provider enrollment records in PECOS match the NPI, name, SSN, date of birth, and address on file with NPPES exactly. Any mismatch between PECOS and NPPES data triggers claim processing errors at the MAC level.
Verify that the rendering provider NPI on every claim matches the PECOS enrollment record for that provider. Group billing NPIs and individual rendering NPIs serve different fields and should never be substituted for each other.
8. Ignoring the 2026 Enrollment Application Fee
The 2026 Medicare enrollment application fee for institutional providers is $750, adjusted upward from the 2025 fee of $730. This covers the addition of new practice sites, revalidations, and new enrollments.
Applications are returned unprocessed if the right fee is not paid. This implies that the timeline is reset in its entirety. Before any enrollment or revalidation submission is processed, it is crucial to confirm the current charge. The checklist changes every year hence using an old one can easily lead to ignorance.
The CMS Provider Enrollment and Certification website, which is updated constantly until 2026, is the primary source for current enrollment criteria, fee levels, and PECOS recommendations. The CMS Medicare Revalidation list publishes deadlines seven months ahead of time for revalidation due dates relevant to your enrolled providers.
The Credentialing Checklist That Prevents These Mistakes
Run this checklist at every stage of the credentialing cycle.
At hire:
- Begin credentialing immediately upon offer acceptance
- Confirm NPI is active and matches NPPES exactly
- Gather all licensure, DEA, board certification, and malpractice documents
- Submit CMS-855I with all fields verified before sending
Ongoing:
- Check CMS revalidation due dates quarterly for every enrolled provider
- Update PECOS within 30 days of any practice change
- Maintain a separate commercial payer enrollment tracker per provider
- Track every document expiration date on a shared calendar reviewed monthly
Before billing:
- Confirm full credentialing approval from each payer before scheduling
- Verify rendering provider NPI appears correctly on claims
- Confirm the current enrollment application fee before revalidation submissions
Credentialing Gaps Cost More Than the Fix
Every item on this checklist takes minutes to verify. A missed revalidation, an expired license, or a wrong NPI on claims costs weeks of revenue and hours of rework.
Practices managing multiple providers across several payers need a credentialing system that runs continuously, not one that gets attention only when something breaks. Delaware Medical Billing’s physician billing services include credentialing support built into the billing workflow, so enrollment gaps get caught before they affect a single claim.
FAQs
What is a physician credentialing checklist?
A physician credentialing checklist is a structured list of documents, enrollments, and verification steps required to enroll a provider with Medicare, Medicaid, and commercial payers. It tracks application submissions, renewal dates, NPI accuracy, and payer-specific requirements across the full credentialing cycle.
How long does physician credentialing take?
Commercial payer credentialing typically takes 90 to 120 days. Medicare enrollment through PECOS can take longer depending on application completeness and MAC processing times. Starting the process at hire, rather than before a start date, is the most common cause of unpaid billing windows.
What happens if a physician’s Medicare enrollment lapses?
CMS places a hold on Medicare reimbursement for providers whose enrollment is deactivated. Reactivating requires resubmitting a complete enrollment application, which resets the entire processing timeline and leaves a gap in billing that is difficult to recover retroactively.
What is PECOS and why does it matter for credentialing?
PECOS is the Provider Enrollment, Chain and Ownership System used by CMS to manage Medicare enrollment for all providers and suppliers. It must reflect current practice information at all times. Outdated or mismatched data in PECOS causes claims to fail at the MAC level before they reach adjudication.
How often do physicians need to revalidate their Medicare enrollment?
All Medicare providers must revalidate their enrollment every five years. CMS posts revalidation due dates seven months in advance on the Medicare Revalidation List. Missing the window results in a payment hold or deactivation of billing privileges.
What documents are needed for physician credentialing?
Core documents include a current state medical license, DEA registration if applicable, board certification, proof of malpractice insurance, NPI confirmation, work history, and a completed CMS-855I for Medicare enrollment. Commercial payers may require additional documentation specific to their credentialing standards.
