Medicaid & Medicare Billing Bonds
A Medicaid provider bond (or Medicare billing bond) is a guarantee to the program that pays your claims — a state Medicaid agency or CMS — that you will bill honestly and repay what you owe if an audit finds otherwise. It protects the taxpayer-funded program, not your practice. Unlike a license bond you set once and forget, this one is driven by two moving parts: how many enrolled locations you run, and whether an audit ever reaches back into your billing history.
Why “$50,000” is only the starting number
The DMEPOS figure everyone quotes — $50,000 — is a per-NPI baseline, not a company-wide cap. A supplier that bills Medicare from four enrolled locations does not post one $50,000 bond; it posts one for each National Provider Identifier. The requirement scales with your footprint, and it can climb higher still: CMS and state agencies impose elevated amounts on providers with a history of adverse actions, so a prior overpayment finding or a past revocation can raise the figure your notice demands.
How the required amount scales with your NPIs
The $50,000 DMEPOS baseline multiplies per enrolled location, then climbs after adverse actions
One enrolled NPI
$50,000
The federal DMEPOS baseline — one bond per Medicare-enrolled location.
Two enrolled NPIs
$100,000
$50,000 filed for each location; the total tracks your footprint.
Four enrolled NPIs
$200,000
A multi-site supplier posts four separate $50,000 bonds, not one blanket bond.
Prior adverse action
Higher
CMS or a state agency can set an elevated amount above the baseline — the exact figure is on your notice.
Amounts follow the $50,000-per-NPI DMEPOS rule; elevated amounts apply after final adverse actions. Your CMS or state Medicaid enrollment notice controls the exact figure.
The takeaway: read your enrollment or revalidation notice for the exact figure and the exact NPIs it covers before you buy. A bond written for one location when the program expected four is not compliant, and enrollment does not start until the correct bonds are on file. For how premium is calculated on the amount you land on, see our guide to what surety bonds actually cost.
Federal and state requirements, side by side
The federal DMEPOS bond applies nationwide; state Medicaid bonds apply program by program, and each names its own agency as obligee. Amounts and covered provider types change with rulemaking, so treat the figures below as orientation and confirm against your enrollment notice before filing.
Provider bond requirements by program
Federal DMEPOS baseline plus representative state Medicaid programs
| Program | Bond amount | Obligee | What it attaches to |
|---|---|---|---|
| Federal — DMEPOS (all states) | $50,000 per NPI | CMS (Centers for Medicare & Medicaid Services) | Medicare DME billing privileges; elevated after adverse actions |
| Florida | $50,000 | Florida Agency for Health Care Administration (AHCA) | Medicaid enrollment for designated provider types |
| Texas | $50,000 minimum per location | Texas Health and Human Services Commission (HHSC) | DME provider enrollment and re-enrollment under 1 TAC §352.15 |
| Alabama | $50,000 per NPI | Alabama Medicaid Agency | DME and medical-supply providers enrolling in Medicaid, per Ala. Admin. Code 560-X-13-.02 |
| Home health agencies | $50,000 baseline where imposed | CMS / state Medicaid agency | HHA surety bond programs in designated states |
| Other states | Varies by program | State Medicaid agency | High-risk provider categories — confirm with your enrollment analyst |
Bond amounts shown are obligee requirements, not premiums. Elevated amounts can be imposed on providers with prior adverse actions; your enrollment notice controls the exact figure.
Sources: 42 CFR 424.57 (CMS DMEPOS); Fla. Admin. Code 59A-25.002 (AHCA); 1 Tex. Admin. Code 352.15 (HHSC); Ala. Admin. Code 560-X-13-.02 (Alabama Medicaid Agency).
Which providers the bonding rules actually reach
Bonding targets the provider categories where improper-payment risk has historically been highest. Two layers can apply at once — the federal DMEPOS rule and your state's Medicaid enrollment rules:
Federal layer: DMEPOS suppliers
Sellers of durable medical equipment, prosthetics, orthotics, and supplies must post the CMS bond to obtain or keep Medicare billing privileges — $50,000 for each enrolled location's NPI, with higher amounts imposed after adverse actions.
State layer: designated Medicaid providers
States such as Florida (AHCA), Texas (HHSC), and Alabama require a surety bond from designated provider types at Medicaid enrollment — commonly DME and medical-supply companies, home health agencies, and non-emergency transport providers.
If you bill both programs in a bonding state, expect to carry both bonds simultaneously — each names a different obligee and answers to a different auditor.
Why a provider-bond claim can surface years after you billed
Claims on billing bonds come from auditors, not customers, and auditors look backward. Each trigger below maps to a program-integrity rule you agreed to at enrollment — and because recoveries follow audits, the exposure outlives the year the billing happened. Our guide to how to keep a surety claim from being filed walks through the documentation habits that stop most of these before they start:
Unpaid overpayment determinations
The most common trigger. An audit finds the program paid you more than it should have — upcoding, unbundling, insufficient documentation — and the provider fails to repay. The agency recovers the unpaid overpayment from the surety.
Billing for services not rendered or not medically necessary
Claims submitted for equipment never delivered, visits that never happened, or services without the required physician orders are program violations that convert directly into recoverable losses against the bond.
Unpaid civil money penalties and assessments
For DMEPOS suppliers, the bond expressly covers CMS-imposed civil money penalties and assessments that the supplier fails to pay — not just raw overpayments.
Enrollment fraud and misrepresentation
Falsified enrollment applications, concealed ownership by excluded individuals, or operating after revocation can void your enrollment and expose the bond to the losses the program suffered in the meantime.
When the surety pays CMS or a state agency, it recovers every dollar from you under your indemnity agreement — and because audit recoveries can reach the full penal sum, provider-bond claims are among the largest in the license-bond world. Cancelling the bond does not close the door: the surety stays liable for a tail period, so clean records for the bonded years are your only durable protection.
What a government obligee makes you prove to get bonded
Provider-bond underwriting is document-driven because the obligee is a government payer that screens ownership and history. Have this ready before you apply:
Legal entity name and NPI(s)
The bond must match your enrollment record exactly — one DMEPOS bond per NPI.
The program and obligee
CMS for Medicare DMEPOS; the state Medicaid agency for state bonds.
Required bond amount from your notice
Standard baseline or an elevated amount if adverse actions apply.
Owner consent to a soft credit check
Credit is the primary pricing factor for standard amounts.
Ownership and control disclosures
Carriers screen for excluded individuals and prior revocations.
Audit and claims history
Prior overpayment findings must be disclosed — they drive placement and collateral.
When you can post cash or a letter of credit instead
Some programs accept alternative security in place of a surety bond. The choice is about capital, not compliance — all three satisfy the obligee where permitted, but they tie up very different amounts of your working cash:
Surety bond
An annual premium keeps your working capital in the practice — critical for providers who carry receivables while waiting on program reimbursement. You indemnify the surety for paid claims.
Cash deposit / escrow
Where allowed, the full amount sits with the agency for the life of your enrollment — and at $50,000 per NPI, a multi-location supplier locks up capital that most would rather keep in inventory.
Letter of credit
Accepted by some state programs, but it consumes bank borrowing capacity and carries its own fees and collateral — a real cost for practices that rely on credit lines to bridge reimbursement lag.
Other bonds healthcare providers and payers carry
Healthcare organizations typically carry several of these together:
DMEPOS scope, elevated amounts, and audit tails — answered
Is the Medicaid provider bond the same as the DMEPOS bond?
They are related but distinct. The DMEPOS bond is a federal requirement: CMS requires durable medical equipment, prosthetics, orthotics, and supplies suppliers to post a $50,000 surety bond per National Provider Identifier to enroll in Medicare. Medicaid provider bonds are state requirements — agencies like Florida AHCA and Texas HHSC require certain provider types to post a bond as a condition of Medicaid enrollment. A DME supplier billing both programs in one of those states can need both bonds at the same time.
Why is my required bond amount higher than $50,000?
Two common reasons. First, the DMEPOS bond is $50,000 per NPI — a supplier with multiple enrolled locations posts $50,000 for each, so the total scales with your footprint. Second, CMS and state agencies can impose elevated bond amounts on providers with a history of adverse actions, such as final overpayment determinations or prior enrollment revocations. If your notice specifies a higher amount, the bond must be written to that figure exactly.
Can a claim on this bond be filed years after the billing happened?
Yes, and this is unusual among license bonds. Overpayments surface through audits, and audits look backward. The DMEPOS regulation lets CMS recover unpaid claims, civil money penalties, and assessments from the surety for actions arising from the bonded period, and sureties remain liable for a tail period after cancellation. Practically, that means clean billing records are your only durable protection — terminating the bond does not erase exposure for the years it covered.
What happens if my bond lapses while I am enrolled?
Enrollment and the bond are linked. A lapsed or cancelled bond without an immediate replacement is grounds for revocation of Medicare billing privileges for a DMEPOS supplier, and state Medicaid agencies treat it the same way — enrollment is suspended or terminated until a compliant bond is back on file. Because re-enrollment can take months and interrupts revenue completely, treat the bond renewal date as a hard operational deadline.
Do any providers get an exemption from the DMEPOS bond?
A narrow set. Government-operated suppliers that have provided CMS a comparable guarantee, and certain state-licensed orthotic and prosthetic personnel in private practice, can qualify for exemption. Physicians and non-physician practitioners are exempt when the DMEPOS items are furnished only to their own patients as part of their professional service. If you think you qualify, get the exemption confirmed in writing before you skip the bond — billing unbonded when a bond was required is an enrollment violation.
Does every enrolled location need its own bond, or can one bond cover all my NPIs?
Each enrolled NPI carries its own $50,000 DMEPOS obligation, so a supplier billing Medicare from four locations needs $200,000 in total penal sum — CMS will not accept a single $50,000 bond stretched across multiple NPIs. In practice a carrier can issue the separate bonds together under one account with one renewal date, which keeps the paperwork manageable, but each bond form still names its specific NPI and practice location. Add or close a location and the bonding has to be adjusted before that NPI can bill. State Medicaid bonds work the same way — the bond attaches to the enrolled provider record, not to the company as a whole.
All content is researched from official state and federal sources (.gov) and verified before publication. BuySuretyBonds.com works with Treasury-certified, A-minimum rated surety carriers serving all 50 states.
General information, not legal, billing-compliance, or underwriting advice. Federal and state provider bonding rules, covered provider types, and bond amounts change with rulemaking. Confirm the current requirement in your CMS or state Medicaid enrollment notice, and request a quote for your specific bond amount and profile.
Count your NPIs, then bond before your billing privileges wait on paperwork
Tell us the program, the required amount from your notice, and every NPI you enroll — we'll place one compliant bond per location so a lapse never suspends your revenue.
Get my free provider bond quote