Original Medicare

CMS Is Banning Medicare Medical Supply Companies: What Beneficiaries Need to Know

Federal regulators are revoking enrollment and imposing permanent bans on fraudulent DMEPOS suppliers. Here is what the crackdown means for your coverage and how to protect your access to legitimate equipment.

March 18, 2026·By Senior Health Times Editorial Team·✓ Reviewed April 2026

Featured Resource

A healthcare worker measures a woman's blood pressure in an outdoor setting, emphasizing wellness and care.

Key Takeaways

✓CMS can revoke a DMEPOS supplier's Medicare billing privileges and impose a re-enrollment bar of up to 10 years under 42 CFR § 424.535, cutting off their ability to bill Medicare entirely.
✓If your supplier is banned, you must obtain a new Medicare-enrolled supplier before Medicare will cover your next order — contact 1-800-MEDICARE or use the Supplier Directory at Medicare.gov to find an approved replacement.
✓Suppliers banned under the National Supplier Clearinghouse (NSC) standards must meet 30 enrollment conditions, including maintaining a physical location and keeping accurate records — violations trigger immediate revocation.
✓Beneficiaries who unknowingly received equipment from a revoked supplier may still be held liable for the cost if Medicare denies the claim, so verifying supplier enrollment status before accepting any equipment is essential.
✓Report suspected DMEPOS fraud to the HHS Office of Inspector General hotline at 1-800-HHS-TIPS or online at oig.hhs.gov — tips from beneficiaries have directly led to multi-million-dollar fraud recoveries.

▶️

Watch: Video explainer

Search YouTube: “Medicare durable medical equipment fraud explained for seniors” →

We recommend Medicare.gov, AARP, or university-hosted explainer videos.

When CMS bans a Medicare-enrolled medical supply company, it revokes that supplier's billing privileges, meaning Medicare will no longer pay any claims the company submits — and beneficiaries who continue using that supplier risk being left with unexpected out-of-pocket bills.

What DMEPOS Suppliers Are and Why They Require Medicare Enrollment

DMEPOS stands for Durable Medical Equipment, Prosthetics, Orthotics, and Supplies. This category covers a wide range of products that Medicare Part B pays for, including wheelchairs, oxygen equipment, CPAP machines, diabetic testing supplies, and hospital beds used at home. Any company that wants to bill Medicare for these items must first obtain enrollment approval through the National Supplier Clearinghouse, a CMS contractor that vets suppliers against 30 specific standards outlined in 42 CFR § 424.57.

Those standards require suppliers to maintain a physical facility that is open during posted business hours, employ qualified staff, keep accurate delivery and patient records, and comply with all applicable state licensing laws. Suppliers must also carry liability insurance and cannot have owners or managing employees with prior felony convictions related to health care fraud. These requirements exist because DMEPOS has historically been one of the highest-fraud categories in the entire Medicare program.

How CMS Revokes Enrollment and Imposes Bans

CMS has authority under 42 CFR § 424.535 to revoke a supplier's Medicare billing privileges for a range of violations. Common grounds include submitting claims for equipment never delivered, billing for higher-cost items than were actually provided, operating without a valid state license, and failing a site visit conducted by a CMS contractor. Revocation can also occur when a supplier's owner or operator is excluded from federal health care programs by the OIG.

Once revoked, a supplier faces a re-enrollment bar that CMS can set anywhere from one to ten years depending on the severity of the conduct. In cases involving felony convictions or large-scale fraud schemes, CMS may also refer the matter to the Department of Justice. Between 2020 and 2023, CMS revoked billing privileges from more than 76,000 providers and suppliers across all categories, with DMEPOS consistently representing a disproportionate share of those actions.

The agency also uses a tool called the Automated Provider Enrollment system to flag suppliers that show patterns consistent with fraud before a formal investigation is complete. Suppliers identified through this system can have their payments suspended under 42 CFR § 405.371 while a review is ongoing, which effectively halts their operations even without a final revocation order.

The Role of Competitive Bidding in Reducing Fraud

CMS introduced the DMEPOS Competitive Bidding Program to address both cost and fraud simultaneously. Under this program, suppliers in designated geographic areas must submit bids to win contracts for specific product categories. Only winning bidders can supply Medicare beneficiaries in those areas at the contracted price. The program has been credited with reducing Medicare spending on certain equipment categories by more than 40 percent since its first round in 2011, while also shrinking the pool of eligible suppliers to those who can demonstrate financial stability and compliance.

Beneficiaries in competitive bidding areas must use contract suppliers for covered items or pay the full cost themselves. This requirement gives CMS additional leverage because a supplier that loses its contract through a fraud finding is immediately cut off from a large patient base.

What Happens to Beneficiaries When a Supplier Is Banned

The practical consequences for patients can be significant. If a supplier is revoked mid-rental — oxygen equipment, for example, is often rented on a monthly basis — the beneficiary may face a gap in service while locating a new enrolled supplier. Medicare does not automatically transfer ongoing rental agreements to a new company. The beneficiary or their caregiver must initiate that process.

For one-time purchases like a power wheelchair, a revocation after delivery but before the claim is paid can result in Medicare denying the claim entirely if the supplier's billing privileges were already suspended at the time of service. In those situations, beneficiaries have appeal rights under Medicare's standard claims appeal process, which begins with a redetermination request submitted to the Medicare Administrative Contractor within 120 days of the denial notice.

CMS publishes a list of excluded individuals and entities through the OIG, and the Medicare Supplier Directory at Medicare.gov allows beneficiaries to search for currently enrolled suppliers by product type and zip code. Using these tools before accepting any equipment is the most reliable way to avoid coverage gaps.

Recognizing the Warning Signs of a Fraudulent Supplier

Fraudulent DMEPOS suppliers often contact beneficiaries unsolicited by phone or door-to-door, offering free equipment in exchange for a Medicare number. They may claim a doctor has already approved the item or pressure beneficiaries to accept products they did not request. Legitimate suppliers do not cold-call Medicare beneficiaries, and Medicare itself prohibits suppliers from doing so under its marketing rules.

Other red flags include suppliers who cannot provide a physical address, who ask beneficiaries to sign blank delivery forms, or who offer cash payments in exchange for Medicare information. These tactics are associated with schemes that have cost Medicare billions of dollars annually and have resulted in federal prosecutions across multiple states.

What CMS and Congress Are Doing Next

CMS finalized updates to its supplier enrollment rules in 2023 that expanded the agency's authority to deny enrollment to suppliers with a pattern of compliance problems, even if no single violation would independently trigger revocation. The agency also increased the frequency of revalidation reviews, now requiring DMEPOS suppliers to revalidate their enrollment every three years rather than every five.

Legislation introduced in the 118th Congress, including provisions in broader Medicare fraud reduction bills, proposed giving CMS authority to require surety bonds of up to $65,000 for high-risk supplier categories and to conduct unannounced site visits at any time. Whether those provisions advance in the 119th Congress remains to be seen, but the regulatory direction is clearly toward tighter gatekeeping at the enrollment stage rather than relying solely on post-payment audits.

Sources & Further Reading

Frequently Asked Questions

How do I find out if my Medicare medical supply company has been banned or revoked?

Search the OIG List of Excluded Individuals and Entities at exclusions.oig.hhs.gov and use the Medicare Supplier Directory at Medicare.gov to confirm your supplier holds active billing privileges. You can also call 1-800-MEDICARE and ask a representative to verify a specific supplier's enrollment status before accepting any equipment or supplies.

Will Medicare still pay my claim if my supplier was revoked after I received the equipment?

Medicare will deny the claim if the supplier's billing privileges were revoked or suspended at the time the claim was submitted, even if you received the equipment in good faith. You have the right to appeal the denial by filing a redetermination request with the Medicare Administrative Contractor within 120 days of receiving the denial notice.

What is the difference between a Medicare revocation and an OIG exclusion for a DMEPOS supplier?

A CMS revocation under 42 CFR § 424.535 removes a supplier's Medicare billing privileges and imposes a re-enrollment bar of up to 10 years. An OIG exclusion under 42 U.S.C. § 1320a-7 is broader, barring the individual or entity from participation in all federal health care programs, including Medicaid, and is typically tied to criminal convictions or civil monetary penalty settlements.

Can a banned DMEPOS supplier reapply for Medicare enrollment?

Yes, but only after the re-enrollment bar period expires, which CMS sets between one and ten years depending on the violation. The supplier must reapply through the National Supplier Clearinghouse, pass a new site visit, and demonstrate that all conditions of participation are met. CMS can deny the new application if compliance concerns remain.

What should I do if a medical supply company contacts me unsolicited and asks for my Medicare number?

Do not provide your Medicare number. Legitimate Medicare-enrolled suppliers are prohibited from cold-calling beneficiaries to solicit business. Hang up and report the contact to the HHS OIG hotline at 1-800-HHS-TIPS or online at oig.hhs.gov. You can also report it to your State Health Insurance Assistance Program counselor for guidance.

How does the DMEPOS Competitive Bidding Program protect beneficiaries from fraudulent suppliers?

The program limits Medicare coverage in designated areas to suppliers who won contracts through a vetting process that includes financial review and compliance checks. Because only contract suppliers can bill Medicare at the approved rate in those areas, the pool of eligible companies is smaller and more closely monitored, reducing the opportunity for fraudulent operators to enter the market.

Editorial Standards

This article was written by the Senior Health Times editorial team and is intended for informational purposes only. It does not constitute financial, legal, or medical advice. Coverage details and costs vary by plan, carrier, and state. Always verify information with official sources including Medicare.gov and your state insurance commissioner.

Medicare DMEPOSsupplier fraudCMS enrollment revocationdurable medical equipmentMedicare Part BOIG exclusionscompetitive bidding programbeneficiary rights

Get Medicare news in your inbox

Stay current on Medicare policy, costs, and plan updates with our weekly digest.