CMS designated PECOS as authoritative for Medicare enrollment. Most providers have never actually looked at what is in their record.
That matters now in a way it didn't before. Under the 2026 verification rules, state Medicaid systems must demonstrate alignment with PECOS records. The window between “we found a discrepancy” and “your enrollment is affected” is a lot shorter than it used to be.
Three classes of misalignment that matter
Wrong taxonomy doesn't generate a soft warning. It generates a denial.
Your taxonomy code tells payers exactly what type of services you're billing for. In behavioral health especially, the wrong code triggers automatic rejection — not a flag-and-investigate. Depending on how long the wrong code has been in your record, you're looking at a recoupment conversation that covers the entire period it was wrong.
PECOS records don't update themselves. If you changed credentialing, switched specialties, or moved from W2 to private practice without filing a CMS-855B/I refile, your PECOS taxonomy probably reflects the old you.
Partnership moves, retirements, and group splits don't auto-update PECOS.
The PPEF (CMS Public Provider Enrollment Extract) has ~2.98M enrollment records but only ~2.47M individual NPIs. That means roughly half a million NPIs have multiple enrollment records. Most are legitimate — telehealth, multi-state practice, hospital + private practice. But a meaningful subset have CONFLICTING state addresses that signal a stale record: a partnership move never refiled, a retirement never closed, a group-practice split where one half kept the legacy enrollment alive.
Under the new authoritative-source rule, if state Medicaid runs a verification check and your PECOS record points to an address you haven't practiced from in three years, that record might win.
Disclosures that were never updated after a partnership change.
The 2023 CMS Disclosure of Ownership and Additional Disclosable Parties IFR requires ownership disclosures be kept current. AINPI's H35 Stage B audit already cross-walks the CMS Quarterly All Owners files against federal exclusion lists via the PPEF ASSOCIATE_ID → NPI cross-walk; the PECOS-currency lens extends that to “ownership disclosure was last updated when.”
If you bought into or out of a practice partnership and the disclosure update never made it back to CMS, your ownership record is now a flag waiting to happen.
What to do this week
- 1Look at your PECOS record. The authoritative-source rule presumes you have. Log in to pecos.cms.hhs.gov and compare PROVIDER_TYPE / NUCC taxonomy / practice location to what you actually do today.
- 2If you're a behavioral-health provider, do this first. Behavioral-health wrong-taxonomy is the highest-recoupment category. The denial is automatic, the recoupment covers the full window the wrong code was in place.
- 3If you moved or split a partnership, close the old enrollment. A CMS-855B/I refile or termination submission is trivial relative to the cost of an active-but-stale record winning a verification check.
- 4If you operate a group practice, audit the roster. AINPI's per-state CSVs (forthcoming when H37–H39 ship) will list NPIs in your state with PECOS misalignment so you can triage before payer audits catch them.
For state Medicaid agencies
The 2026-04-23 CMS State Medicaid Director letter Element 3 requires using federal database information in revalidation. The 2026 PECOS authoritative-source rule sharpens what that means in practice. AINPI's H37 / H38 / H39 work will publish:
- Per-state CSV of NPIs with PECOS-NPPES taxonomy mismatch
- Behavioral-health subset (highest-recoupment risk, smallest cohort, easiest to triage)
- Per-state CSV of NPIs with conflicting multi-state enrollments
Same shape as the existing /for-state-medicaid/<state> CMO-facing pages. The PECOS workstream slots in as the next layer of ammunition for SMD-letter Element 4 (“other comprehensive measures”).
H37, H38, and H39 are pre-registered with their null hypotheses, denominators, and data sources fixed before computation. The PPEF file (~321 MB) is already on disk for the H35 Stage B work; no new data ingestion is required.
See: H37 · H38 · H39 · methodology v0.7.0-draft