If you supply wheelchairs, prosthetics, orthotics, oxygen equipment, or any other durable medical equipment to Medicare patients, there is a federal bond requirement standing between you and your billing privileges — and if you get it wrong, Medicare will not pay you a single dollar. The DMEPOS bond is not optional, not temporary, and not a formality. It is a continuous federal financial guarantee that every qualifying supplier must obtain before enrolling and maintain for as long as they bill Medicare. Here is everything you need to understand before you apply.
What Is a DMEPOS Bond?
A DMEPOS bond — short for Durable Medical Equipment, Prosthetics, Orthotics, and Supplies bond — is a federal surety bond required by the Centers for Medicare and Medicaid Services (CMS) for suppliers of Medicare Part B covered items. The bond is also commonly called a Medicare bond, Medicare surety bond, Medicaid bond, or medical supply surety bond depending on the context.
The bond is a three-party agreement:
| Party | Role |
|---|---|
| Principal | The DMEPOS supplier purchasing the bond |
| Obligee | CMS — the federal agency requiring and enforcing the bond |
| Surety | The licensed bond company that issues the bond and pays valid claims |
The bond guarantees that if a DMEPOS supplier submits fraudulent or inaccurate billing statements and CMS suffers a financial loss — through overpayments, civil monetary penalties (CMPs), or OIG assessments — the surety company will reimburse CMS up to the full bond amount. The supplier then owes that amount back to the surety under the indemnity agreement both parties signed.
Why This Bond Exists: The Balanced Budget Act of 1997
The DMEPOS bond requirement did not appear out of nowhere. Congress created it through the Balanced Budget Act of 1997 after CMS identified that improper and fraudulent payments to durable medical equipment suppliers had become a serious and growing problem draining the Medicare program. Fraudulent suppliers were billing for equipment never delivered, equipment billed at inflated codes, and equipment supplied to patients who did not need it. The $50,000 surety bond requirement was established as the legislative response — a direct deterrent to fraudulent enrollment and a mechanism to ensure CMS could recover financial harm when fraud occurred.
The regulation was published as a final rule in the Federal Register on January 2, 2009 (CMS-6006-F), codified at 42 CFR 424.57, and amended by a technical correction in November 2014 (CMS-6006-F3). The current authoritative text lives at 42 CFR 424.57(d).
Who Is Required to Purchase a DMEPOS Bond?
Every individual or business entity that sells or rents Medicare Part B covered items to Medicare beneficiaries must obtain and maintain a DMEPOS surety bond as a condition of enrollment. This includes suppliers of wheelchairs, power scooters, hospital beds, walkers, oxygen and oxygen equipment, CPAP devices, orthotics, prosthetics, and related supplies.
A separate $50,000 bond is required for each National Provider Identifier (NPI) assigned to the supplier for Medicare billing purposes. If a supplier operates six locations, each with its own NPI, the total bond requirement is $300,000. However, suppliers may file either a separate bond per location or a single comprehensive bond with a rider or amendment covering each additional location — the rider approach reduces administrative complexity for multi-location operators. One exception applies to sole proprietorships: regardless of how many locations a sole proprietorship operates, it is only required to post a single $50,000 bond.
Bond Amount: Base and Elevated Requirements
The standard base bond is $50,000 per enrolled NPI. However, CMS also prescribes an elevated bond amount of $50,000 per occurrence of an adverse legal action within the 10 years preceding enrollment, revalidation, or reenrollment. Adverse legal actions include prior Medicare revocations, OIG exclusions, and felony convictions related to healthcare fraud. A supplier with two adverse legal actions in the past decade would need a $150,000 bond — $50,000 base plus two additional $50,000 increments. CMS’s determination about elevated bond amounts is solely for purposes of setting the bond requirement; it is not a creditworthiness finding and does not affect the surety’s independent underwriting decision.
Who Is Exempt From the DMEPOS Bond Requirement?
CMS regulations provide exemptions for several categories of suppliers under 42 CFR 424.57(d)(15):
| Exempt Category | Conditions Required |
|---|---|
| Government-operated DMEPOS suppliers | Must have a comparable surety bond under state law |
| Pharmacies and pharmaceutical companies | Selling to Medicare; no additional conditions |
| State-licensed orthotic and prosthetic personnel in private practice | Solely owned and operated; billing only for O&P and related supplies; making custom products |
| Physicians and nonphysician practitioners | Furnishing items only to their own patients as part of their own professional service |
| Physical and occupational therapists in private practice | Solely owned and operated; items furnished only to own patients; billing only for O&P and supplies |
| Dentists; hospitals; medical centers and clinics including sleep clinics | Included in broader nonphysician practitioner exemption category |
| Optical suppliers and eye doctors | Eyeglasses, eye prosthetics, and related items |
| Mastectomy supply providers | Included in broader nonphysician practitioner exemption category |
The nonphysician practitioner exemption under Section 1842(b)(18) of the Social Security Act specifically covers: physician assistants, nurse practitioners, clinical nurse specialists, certified registered nurse anesthetists, certified nurse-midwives, clinical social workers, and clinical psychologists — but only when furnishing items to their own patients as part of their own professional service.
Being exempt from accreditation does not mean being exempt from the bond requirement. The two are completely separate mandates. If a previously exempt supplier no longer qualifies for the exception — for any reason — they must obtain a bond within 60 days of knowing or having reason to know they no longer meet the exemption criteria.
The Bond Is Continuous — Not Annual
This is one of the most practically misunderstood aspects of the DMEPOS bond. The bond is explicitly required to be continuous under 42 CFR 424.57(d)(4). It does not expire at the end of a year, though suppliers may choose to renew on annual or multi-year terms depending on their surety.
If the bond lapses at any point — because the supplier failed to renew, the premium went unpaid, or the surety notified CMS of a coverage gap — Medicare billing privileges are immediately revoked. During a lapse, Medicare does not pay for any items furnished, and the supplier cannot charge the beneficiary for those items either. Both the financial and operational consequences of a coverage gap are immediate and severe.
The 2-Year Tail Liability Window: What Almost No One Tells You
Here is the regulatory detail most commercial guides skip entirely. Under 42 CFR 424.57(d)(5)(iii), when a DMEPOS supplier’s billing privileges are revoked or the bond lapses, the surety’s liability does not simply end on the final day of bond coverage. The last bond or rider remains in effect through the last day of the bond coverage period, and the surety remains liable for unpaid claims, CMPs, or assessments that:
- Were based on overpayments or other events that occurred during the term of the bond, AND
- Were imposed or assessed by CMS or the OIG during the 2 years following the date of billing privilege termination or bond lapse — whichever is later.
This 2-year tail means a supplier who exits Medicare and stops paying their bond premium is not simply free of the bond’s consequences. The surety remains exposed to claims for two full years after the exit date. This is why surety companies underwrite DMEPOS bonds carefully and why pricing is influenced not just by credit score but by the supplier’s Medicare history.
How Bond Pricing Works
The credit check used to underwrite a DMEPOS bond application is a soft pull — it does not affect the owner’s credit score. Pricing is based primarily on the credit score of the business owners. For a standard $50,000 bond:
| Credit Score | Annual Premium | Monthly Premium |
|---|---|---|
| 680 and above | $250 | $25 |
| 650–679 | $500 | $50 |
| 625–649 | $1,000 | $100 |
| 600–624 | $1,250 | $125 |
| 550–599 | $1,500 | $150 |
| 500–549 | $2,000 | $200 |
Applicants with strong credit and established operating history qualify for rates at or near the low end of this range. Applicants with prior Medicare irregularities, bankruptcies, unpaid liens, prior bond claims, or prior license suspensions will face higher rates or may need to work with specialty surety markets. Monthly pay-as-you-go options are also available for suppliers who prefer to manage the cost on a monthly basis rather than paying annually.
The Separate Insurance Requirement
The surety bond and the comprehensive liability insurance requirement are two separate obligations — not substitutes for each other. CMS requires DMEPOS suppliers to carry comprehensive liability insurance with a minimum limit of $300,000. Suppliers that manufacture their own items must also carry product liability and completed operations coverage. Both the bond and the liability policy must be in place before CMS approves enrollment.
How to Get a DMEPOS Bond
The process moves through four steps: apply, receive your quote, pay your premium, and file the bond with your regional CMS contractor. The application asks for basic business information, the total number of NPIs being bonded, your Medicare enrollment history, and financial information on the business owners. The surety runs a soft credit check and, depending on the bond size, may also request business and personal financial statements. Most qualified applicants receive approval within 24 hours.
Swiftbonds works with DMEPOS suppliers nationwide, including multi-location operators and applicants with non-standard credit profiles.
Swiftbonds LLC
Voted 2025 Surety Bond Agency of the Year
4901 W. 136th Street
Leawood KS 66224
(913) 214-8344
https://swiftbonds.com/
Where to File: The Post-2022 Change You Need to Know
One of the most significant administrative changes in recent DMEPOS enrollment history took effect on November 7, 2022, and most commercial guides have not updated to reflect it. The National Supplier Clearinghouse (NSC) — which previously handled all DMEPOS enrollment nationally — was replaced by two regional contractors:
Suppliers located east of the Mississippi River now submit their enrollment applications and surety bonds to Novitas Solutions (NPE East). Suppliers located west of the Mississippi River continue working with Palmetto GBA (NPE West). If you have read a guide telling you to mail your bond to the old Palmetto GBA address in Columbia, SC — that instruction is outdated. File with your regional NPE based on your geography.
The Full Medicare Enrollment Process
Obtaining the bond is one step in a larger enrollment sequence. CMS requires DMEPOS suppliers to complete all steps before billing privileges are granted:
- Obtain all applicable state business licenses for your supplier category
- Obtain an NPI for each practice location through the NPPES website
- Purchase comprehensive liability insurance at minimum $300,000 coverage
- Complete the CMS-855S enrollment application through the PECOS system and pay the $595 application fee
- Purchase your surety bond
- Submit through NPE East (Novitas) or NPE West (Palmetto GBA) based on your geography
The effective date of your Medicare billing privileges is tied directly to the effective date of your surety bond as validated by the CMS contractor. If your bond is effective on a date later than your application submission date, your billing privileges begin on the bond effective date — not the application date. Delays in obtaining the bond delay when you can start billing Medicare.
Revalidation is required every 3 years.
What Happens When a Bond Changes or Ends
When changing from one surety to another, the replacement bond must be submitted to the CMS contractor at least 30 days before the previous bond expires. There must be no gap in coverage. Liability splits at the changeover date: the new surety is responsible for claims beginning on the effective date of the new bond; the previous surety remains responsible for anything that occurred up to that date.
To cancel a bond, the supplier must provide written notice at least 30 days in advance to both the CMS contractor and the surety. Cancellation without a replacement bond in place triggers billing privilege revocation.
What Happens If a Claim Is Filed
When CMS receives sufficient evidence of a supplier’s liability — unpaid claims, civil monetary penalties, or OIG assessments — it sends written notice to the surety. The surety is required to pay CMS up to the full bond amount within 30 days of receiving that notice. Because CMS submits claims with documentation of the basis for liability, claims are generally decided in CMS’s favor when evidence of fraudulent billing exists.
The supplier remains financially responsible: the surety pays CMS on the supplier’s behalf and then seeks full reimbursement from the supplier under the indemnity agreement. One important protection exists for suppliers: if the surety has paid CMS and the supplier subsequently succeeds in appealing the underlying determination — through all levels of review including judicial review — CMS is required to refund the supplier the amount paid that relates to the successfully appealed matter.
Frequently Asked Questions
What is a DMEPOS bond? A DMEPOS bond is a federal surety bond required by CMS for suppliers of durable medical equipment, prosthetics, orthotics, and supplies who bill Medicare. It guarantees that if the supplier commits billing fraud or fails to pay CMS-assessed claims or penalties, the surety company will compensate CMS up to the bond’s face value. The supplier then repays the surety under their indemnity agreement.
Who needs a DMEPOS bond? Any individual or business entity that sells or rents Medicare Part B covered items to Medicare beneficiaries must obtain a DMEPOS bond — with specific exemptions for government-operated suppliers, pharmacies, certain sole-practice therapists and O&P personnel, and certain physicians and nonphysician practitioners.
How much is the DMEPOS bond? The base bond is $50,000 per enrolled NPI. Suppliers with adverse legal actions in the past 10 years must add $50,000 per adverse action. Sole proprietorships with multiple locations need only one $50,000 bond total.
How much does the DMEPOS bond cost? Annual premiums for a $50,000 bond start at $250 for applicants with credit scores above 680 and go up to $2,000 or more for lower credit scores. The credit check is a soft pull and does not affect the owner’s credit score. Monthly payment options are available.
Is the DMEPOS bond a one-time purchase? No. The bond is continuous and must remain in force for as long as the supplier participates in Medicare. If the bond lapses, billing privileges are immediately revoked.
What is the difference between the DMEPOS bond and accreditation? They are completely separate requirements. Accreditation is a quality-standards compliance process. The surety bond is a financial guarantee. Being exempt from one does not mean you are exempt from the other. Both must be addressed independently as part of the Medicare enrollment and compliance process.
What happens when I add a new location? When enrolling a new practice location, you must submit either a new $50,000 bond for that location or a rider/amendment to your existing bond. The new bond or rider must be effective from the date of the new location’s enrollment.
Where do I file the bond today? As of November 7, 2022, the National Supplier Clearinghouse no longer handles DMEPOS enrollment. Suppliers east of the Mississippi River file with Novitas Solutions (NPE East). Suppliers west of the Mississippi River file with Palmetto GBA (NPE West).
What is the 2-year tail liability? After a supplier’s billing privileges are revoked or their bond lapses, the surety remains liable for claims imposed by CMS or the OIG during the 2 years following the termination date — as long as those claims relate to events that occurred during the bond’s active term. Suppliers cannot exit Medicare and assume their surety obligation immediately disappears.
Can I get a refund if a claim is reversed on appeal? Yes. Under 42 CFR 424.57(d)(14), if the surety has paid CMS under a bond and the supplier successfully appeals the underlying determination through all levels of review, CMS must refund the supplier the amount paid that relates to the matter successfully appealed.
Conclusion
The DMEPOS bond is one of the most consequential compliance requirements in the Medicare supplier enrollment process — and one of the most frequently misunderstood. Its continuous nature, the 2-year tail liability window after revocation, the post-2022 change to regional NPE contractors, the billing privilege effective date tied to the bond effective date, and the appeal refund mechanism are all details that can have significant operational and financial consequences for suppliers who are not fully informed. Approach this bond with the same care and documentation discipline you bring to your Medicare enrollment application itself.
5 Interesting Things About DMEPOS Bonds That You Won’t Find on Most Sites
1. The bond requirement was originally supposed to apply to ALL DMEPOS suppliers with no exemptions. The proposed rule considered requiring every single DMEPOS supplier to post a bond, regardless of entity type or practice structure. The exemptions for physicians, therapists, and O&P personnel were added in the final rule after the provider community submitted formal comments arguing that the fraud risk was concentrated in DME retail operations — not in practitioner-owned settings where items are billed as part of direct patient care. The exemption structure is a direct result of the regulatory comment process, not the original legislative intent.
2. CMS’s creditworthiness determination and the surety’s creditworthiness determination are legally separate assessments. When CMS reviews a supplier’s history and concludes they are NOT subject to an elevated bond amount, that finding does not indicate the supplier is creditworthy to obtain a bond in the surety market. The two evaluations use different criteria, serve different purposes, and are conducted by entirely different entities. A supplier can be cleared of elevated bond requirements by CMS and still be declined by every surety company in the standard market.
3. The DMEPOS bond obligation extends to suppliers that have been purchased or had a change of ownership.When a business entity acquires a DMEPOS supplier through asset purchase or ownership transfer, the acquiring supplier must submit a new bond effective from the date of the purchase or transfer — not from the date of the enrollment application. If the bond effective date is later than the transfer date, billing privileges only begin on the bond date. The financial gap between the transfer date and the bond effective date is a risk that acquirers in DME transactions frequently fail to model.
4. A group practice — not just a sole-practice owner — can qualify for a surety bond exemption, but only if every individual member of the group independently meets the exemption criteria. This is a nuance buried in the CMS FAQ that no commercial page covers. A multi-provider group practice in which each practitioner furnishes DMEPOS items only to their own patients as part of their own professional services may claim the exemption for the group as a whole. But if even one member of the group does not individually meet the criteria, the entire group loses access to the exemption.
5. The DMEPOS bond covers claims from the Office of Inspector General (OIG), not just CMS. Most descriptions of the bond focus on CMS’s role as the protected party. But the surety’s payment obligation explicitly extends to CMPs and assessments imposed by the OIG — the federal watchdog agency that investigates fraud, waste, and abuse in federal healthcare programs. The OIG has independent authority to impose civil monetary penalties and exclusions. When the OIG assesses a DMEPOS supplier, those assessments are also covered under the surety bond and subject to the 30-day payment obligation. This dual CMS/OIG coverage makes the DMEPOS bond one of the broadest financial guarantee instruments in the commercial surety market.
Leave a Reply