You supply wheelchairs to nursing home residents. You rent CPAP devices to sleep apnea patients. You provide prosthetic limbs to veterans who lost them in service. And before you can bill Medicare for a single item — before you receive a single reimbursement from the program that covers most of your patients — federal law requires you to post a surety bond. The DMEPOS bond is not optional, not industry-specific, and not negotiable. It is a federal prerequisite for every supplier of durable medical equipment, prosthetics, orthotics, and supplies who participates in Medicare. This guide breaks down exactly what the bond is, why it exists, who needs it, how much it costs, what triggers a claim, and what happens if it lapses — before you submit your enrollment application.
What Is a DMEPOS Bond?
A DMEPOS bond — also called a Medicare bond, Medicare surety bond, CMS surety bond, or durable medical equipment suppliers bond — is a federally required surety bond that all suppliers of durable medical equipment, prosthetics, orthotics, and supplies must obtain and maintain in order to enroll in and bill the Medicare program. The bond is mandated by the Centers for Medicare & Medicaid Services (CMS) under the authority of the Balanced Budget Act of 1997 and formalized in a final rule published in the Federal Register on January 2, 2009.
Three parties are involved. The principal is the DMEPOS supplier — the individual or business entity purchasing and maintaining the bond. The obligee is CMS (or in some cases a state Medicaid agency). The surety is the bonding company that issues the bond and guarantees payment of valid claims up to the bond’s penal sum.
The bond is not insurance for your business. It is a financial guarantee to CMS that you will operate in compliance with Medicare regulations and that CMS can recover losses if you commit billing fraud, submit inaccurate billing statements, or fail to pay civil monetary penalties assessed against you.
Why the DMEPOS Bond Exists: The Fraud Problem
The bond requirement was introduced because CMS identified a serious and growing problem: improper and fraudulent payments to medical equipment suppliers were costing the Medicare program hundreds of millions of dollars annually. Suppliers were billing for equipment that was never delivered, overbilling for items that were provided, and structuring their operations to collect Medicare payments before disappearing. The Balanced Budget Act of 1997 addressed this by mandating a surety bond — creating a financial backstop that gives CMS a guaranteed recovery mechanism even when a supplier has no assets remaining to collect against.
The bond requirement is uniform across all 50 states. There is no state where Medicare-participating DMEPOS suppliers are exempt from the federal bonding requirement, though state-level bond requirements for state Medicaid programs vary.
What Qualifies as DMEPOS — and What the Bond Covers
DMEPOS stands for Durable Medical Equipment, Prosthetics, Orthotics, and Supplies. Under federal regulations, durable medical equipment is defined as equipment that meets all four of the following criteria: it is durable or capable of repeated use; it is used for a medical reason; it is of no practical use to someone who does not have a medical need for it; and it is used in the home with an expected lifespan of three or more years.
Common items that fall under DMEPOS and require a bond to bill to Medicare include blood glucose meters and testing supplies, mobility aids such as canes, crutches, walkers, wheelchairs, and power scooters, CPAP devices and supplies, commode chairs, hospital beds, oxygen equipment and accessories, patient lifts, traction equipment, and prosthetic and orthotic devices. Suppliers of any of these items who bill Medicare Part B are required to be bonded.
The Bond Amount: $50,000 Per NPI — and More in Some Cases
The minimum bond amount established by federal statute is $50,000. This is not a flat fee per business — it is a requirement per National Provider Identifier (NPI). Every distinct practice location that has its own NPI and bills Medicare separately requires its own $50,000 bond. A supplier operating 20 locations with 20 separate NPIs must maintain $1,000,000 in total Medicare bond coverage — one $50,000 bond for each NPI.
Federal statute 424.57 also requires an additional $50,000 bond for each adverse legal action that has occurred within the past 10 years. An “adverse legal action” includes any civil or criminal proceeding, termination from the Medicare or Medicaid program, revocation of a state license, and similar actions. A supplier with two adverse actions in the last decade must post $150,000 per location ($50,000 base + $100,000 for two adverse actions). This adverse action multiplier is a critical feature of DMEPOS underwriting that catches many applicants off guard.
| Bond Trigger | Additional Bond Amount Required |
|---|---|
| Each NPI (base requirement) | $50,000 |
| Each adverse legal action in past 10 years | +$50,000 each |
| High-risk designation by CMS | Bond amount may increase beyond minimums |
| Multiple locations (e.g., 5 NPIs) | $250,000 minimum |
| Multiple locations + 2 adverse actions | $350,000 minimum |
For suppliers deemed high-risk based on their enrollment history or compliance record, CMS has the authority to require bond amounts beyond the statutory minimums.
Who Is Exempt from the DMEPOS Bond?
The following supplier types are exempt from the federal DMEPOS bond requirement:
Government-operated DMEPOS suppliers that have provided CMS with a comparable surety bond under applicable state law are exempt. This includes federally-owned Indian Health Services, as well as state, local, and tribal government agencies. State-licensed orthotic and prosthetic personnel in private practice making custom-made orthotics and prosthetics are exempt, provided the business is solely owned and operated by licensed O&P personnel and bills only for orthotics, prosthetics, and related supplies. Physicians and non-physician practitioners — including nurse practitioners, clinical nurse specialists, and physician assistants — are exempt if the DMEPOS items are provided only to their own patients as part of their regular professional services. Physical and occupational therapists in private practice are exempt if the business is solely owned and operated by the therapist, the items are furnished only to their own patients as part of their professional services, and the business bills only for orthotic, prosthetic, and supply items.
If a previously exempt supplier no longer meets the conditions of their exemption — for example, if an O&P business expands to include employees who are not licensed O&P personnel — they must obtain a Medicare bond within 60 days to maintain their billing privileges.
How Much Does a DMEPOS Bond Cost?
You pay a premium — a percentage of the bond’s face amount — not the full $50,000. The premium is determined primarily by your personal credit score, though your business financials, years in business, and CMS compliance history also factor in. The credit check is a soft pull, meaning it does not affect your credit score.
| Credit Score | Annual Premium (on $50,000 bond) | Monthly Option |
|---|---|---|
| 680+ | $250 | $25/month |
| 650–679 | $500 | $50/month |
| 625–649 | $1,000 | $100/month |
| 600–624 | $1,250 | $125/month |
| 550–599 | $1,500 | $150/month |
| 500–549 | $2,000 | $200/month |
For suppliers with excellent credit, the annual premium for a standard $50,000 DMEPOS bond typically falls between $250 and $500. Some providers offer rates as low as 0.5% of the bond amount — $250 on a $50,000 bond — for well-qualified applicants. For suppliers with poor credit, rates between 3% and 5% are common, with some high-risk applicants paying more. Some surety companies will decline applicants with very poor credit outright, though most have bad-credit programs available.
Bond premiums are not refundable once the bond term begins. The bond renews annually, and your premium may change at renewal based on changes to your credit profile and business financials.
The Medicare Enrollment Process: Where the Bond Fits
Getting bonded is one of five required steps to enroll as a DMEPOS supplier in the Medicare program. Understanding where it sits in the process helps you sequence everything correctly.
The first step is obtaining all applicable state business licenses. CMS will not process an enrollment without confirmed state licensure. The second step is obtaining an NPI for each practice location through the NPPES website — one NPI per location, since the bond requirement is NPI-based. The third step is obtaining comprehensive liability insurance with a minimum limit of $300,000. For suppliers that manufacture their own items, the insurance must include product liability and completed operations coverage. The fourth step is completing the CMS enrollment application through the PECOS online system, paying the $595 application fee, and submitting all required documentation. All enrollment applications for DMEPOS suppliers are processed through the National Supplier Clearinghouse (NSC), administered by Palmetto GBA. The fifth step is purchasing the surety bond and filing it with the NSC.
DMEPOS suppliers must revalidate their enrollment at least once every three years through the PECOS system.
How to Get Your DMEPOS Bond
Getting bonded is the most efficient part of the entire enrollment process. Apply through a licensed surety bond provider, provide your NPI, entity information, and consent to a soft credit check, and receive your quote. Swiftbonds issues DMEPOS bonds nationwide for all supplier types, at standard-market rates for well-qualified applicants and with bad-credit programs for those with lower scores. The process is: apply online → soft credit check → receive quote → pay premium → receive executed bond document → sign the bond as indicated → mail the original bond with power of attorney to the National Supplier Clearinghouse.
Swiftbonds LLC
2025 Surety Bond Technology Provider of the Year
4901 W. 136th Street
Leawood KS 66224
(913) 214-8344
https://swiftbonds.com/
Filing the Bond: Where It Goes and What Must Be Included
Once you receive your executed bond form from the surety company, you are responsible for mailing the original — with original signatures from both the surety and the supplier, along with the surety’s power of attorney — to the National Supplier Clearinghouse at the following address:
National Supplier Clearinghouse Palmetto GBA, AG-495 P.O. Box 100142 Columbia, SC 29202-3142
The bond form must include the legal name, address, tax identification number (TIN), NPI, and NSC/PTAN number (if applicable) of the entity or individual purchasing the bond; the surety company’s name and state of incorporation; the bond amount; and the date the bond is signed. The applicant name on the bond must match exactly the legal name as it appears in the CMS enrollment records — a name mismatch is a common cause of bond rejection and enrollment delay.
What Triggers a DMEPOS Bond Claim?
Claims against the DMEPOS bond are filed by CMS — not consumers directly — when a supplier has been found to have submitted fraudulent or inaccurate billing statements, failed to pay civil monetary penalties (CMPs) assessed by CMS or the Office of Inspector General (OIG), or incurred other financial obligations to Medicare that remain unpaid. Upon receiving written notice from CMS, the surety is required to pay up to the full penal amount of the bond within 30 days. This 30-day payment deadline is codified in 42 CFR § 424.57(d) and is unusual in the surety market — most commercial bonds give the surety a broader investigation window before payment is required.
After the surety pays the claim, the supplier is required to reimburse the surety in full, including any accrued interest and legal costs. Failure to reimburse the surety will make renewal bonds essentially unavailable — and without a current bond, CMS will revoke the supplier’s billing privileges.
What Happens If the Bond Lapses or Is Cancelled?
A lapse in Medicare bond coverage is treated as a compliance failure with immediate consequences. CMS will revoke the supplier’s billing privileges if the bond is cancelled and not replaced before the cancellation takes effect. This means the supplier can no longer submit claims to Medicare or receive Medicare reimbursements — effectively shutting down the revenue stream for most DMEPOS businesses, which depend heavily on Medicare as their primary payer.
Bond cancellation requires advance notice under the bond’s terms. Suppliers whose bond is approaching cancellation should obtain replacement coverage before the cancellation date. Because the bond must be on file with the NSC before CMS will process an enrollment, getting bonded early in the application process — not as a final step — is the recommended approach.
Frequently Asked Questions
Is the DMEPOS bond required in every state? Yes. The federal DMEPOS bond requirement applies nationwide across all 50 states plus U.S. territories. There is no state where a Medicare-participating DMEPOS supplier is exempt from the federal $50,000 bond requirement. Some states also have separate state Medicaid bond requirements, including Florida, Texas, and Minnesota, which have historically required additional state-level bonds for Medicaid enrollment.
Does my bond cover all my locations? Not automatically. Each practice location with its own NPI requires a separate $50,000 bond. Some surety companies allow you to cover multiple NPIs under a single bond document, which simplifies administration while maintaining the required per-NPI coverage. Ask your surety provider specifically whether they offer a single blanket bond covering multiple NPIs or require separate instruments for each.
What is the PTAN and how does it relate to the bond? A PTAN (Provider Transaction Access Number) is the identification number assigned to a supplier by the NSC after enrollment is complete. When completing the bond form, you will include your PTAN if you already have one on file, or leave it blank on initial applications. The surety company’s bond form typically requests this number because the NSC uses it to match bond filings to the correct enrollment record.
Can I use any surety company? No. CMS only accepts bonds issued by surety companies that are certified and listed on the U.S. Department of the Treasury’s Circular 570. This is the official list of Treasury-approved sureties. Any bond issued by a company not on this list will not be accepted by the NSC. When selecting a surety provider, confirm their Treasury certification before purchasing.
What happens to my bond if my business ownership changes? An ownership change is treated as a new enrollment event by CMS. New suppliers or suppliers with ownership changes were required to submit bonds under the original 2009 implementation timeline, and that continues to apply today. Any material ownership change triggers new bond requirements based on the new owner’s credit profile and adverse action history. Your existing bond will typically need to be replaced with a new bond under the new ownership structure.
Do pharmacies need a DMEPOS bond? Pharmacies that sell DMEPOS items to Medicare beneficiaries — beyond dispensing prescription drugs — may need a DMEPOS bond. Alpha Surety explicitly identifies pharmacies as a common DMEPOS bond applicant. A pharmacy that dispenses only Medicare Part B drugs is exempt from the DMEPOS accreditation requirement but may still need the bond depending on the scope of DMEPOS items billed. Consult the NSC or your state pharmacy board for clarification on your specific situation.
How do I verify my bond is on file with CMS? After mailing your bond to the NSC at Palmetto GBA, you can follow up directly with the NSC to confirm receipt and acceptance. CMS also maintains a public database of active DMEPOS suppliers enrolled in the Medicare program, accessible through the CMS Provider Data website.
Conclusion
The DMEPOS bond is the gateway to Medicare participation for every supplier of durable medical equipment, prosthetics, orthotics, and supplies. Understanding that it is a per-NPI requirement, that adverse legal actions increase the required amount, that the surety must pay CMS within 30 days of written notice, and that a bond lapse results in immediate revocation of billing privileges — these are the details that determine whether your enrollment proceeds smoothly or stalls. Get bonded through a Treasury-certified surety, file the original bond with the NSC before your enrollment application, and keep it continuously in force for as long as you participate in Medicare.
5 Things About DMEPOS Bonds That the Top 10 Sites Don’t Cover
1. The BondAbility application form reveals that CMS inspects enrolled DMEPOS suppliers — and prior inspection irregularities are a material underwriting factor that can affect bond pricing or trigger declination, creating a direct link between CMS regulatory findings and a supplier’s cost of bonding. The BondAbility application asks suppliers to disclose the date of their last CMS inspection and whether any irregularities were discovered. This is one of the few public disclosures in the surety bond market of a specific regulatory examination history being treated as an underwriting variable. A supplier who received an adverse finding in a recent CMS inspection — for example, a finding that they failed to maintain required documentation or were billing for items not delivered — faces a surety underwriting process that treats the government’s own findings as evidence of elevated claim risk. This creates a feedback loop where CMS compliance problems directly increase the cost of maintaining the bond required to keep billing CMS. No competing guide explains this regulatory-to-underwriting feedback mechanism.
2. The NABP (National Association of Boards of Pharmacy) accredits DMEPOS pharmacies as a standalone accreditation category — and DMEPOS accreditation is entirely separate from, and not substituted by, the surety bond, meaning pharmacies face both requirements simultaneously and the two compliance tracks operate independently through different agencies. NABP’s accreditation programs include a dedicated DMEPOS Pharmacy accreditation track, administered separately from its community pharmacy accreditation programs. CMS requires DMEPOS suppliers to be accredited by a CMS-approved accreditation organization (AO) as a separate condition of maintaining Medicare billing privileges. The surety bond is processed through the National Supplier Clearinghouse (Palmetto GBA), while accreditation is managed through the chosen AO (such as NABP, ACHC, or The Joint Commission). Pharmacies operating DMEPOS programs must satisfy both tracks in parallel — the bond for the NSC and accreditation for a CMS-approved AO — and lapsing in either one independently results in loss of billing privileges. Most guides treat the bond in isolation from accreditation, failing to explain that they are co-requirements with separate enforcement channels.
3. The original 2009 implementation of the DMEPOS bond had two separate effective dates — May 4, 2009 for new suppliers and those with ownership changes, and October 2, 2009 for existing suppliers — a deliberate phased rollout that allowed the industry to absorb the requirement without simultaneous disruption to all active Medicare billers. CMS calibrated the implementation timeline to avoid a single date on which tens of thousands of active DMEPOS suppliers would simultaneously need to obtain bonds, which would have overwhelmed both the NSC processing capacity and the surety market. The phased approach gave established suppliers nearly six additional months to comply relative to new entrants. This phased structure was an administrative policy choice with no statutory basis — it was CMS’s own operational decision. No competing surety guide discusses the implementation timeline or explains the rationale for the split effective dates, which is useful context for understanding how the federal DMEPOS bond program was actually deployed at scale.
4. The Palmetto GBA exemption chart published for the CMS DMEPOS program reveals an asymmetry that virtually every guide misses: the exemption from accreditation and the exemption from the surety bond are controlled by separate criteria and do not co-apply — meaning a supplier can be exempt from accreditation but still required to post a bond, or vice versa. The Palmetto GBA accreditation and surety bond exemptions chart explicitly maps each supplier category against two separate columns: one for accreditation exemption and one for surety bond exemption. Government-operated DMEPOS suppliers are marked “N” for not exempt from accreditation, but “Y” for exempt from the bond — but only if they have provided CMS with a comparable state law bond. Occupational and physical therapists are marked “Y” for exempt from both — but only if two specific conditions are met simultaneously: the business is solely owned and operated by the therapist, and items are furnished only to the therapist’s own patients. A therapist who employs another therapist fails the “solely owned and operated” criterion and becomes subject to both requirements immediately. The interdependency and asymmetry of these two compliance tracks is a nuance that no competing surety guide describes.
5. The DMEPOS bond’s 30-day mandatory payment window for the surety after receiving CMS written notice is one of the shortest mandatory payment windows in the entire commercial surety bond market — and it has direct underwriting consequences because it limits the surety’s investigation time, making bond pricing for DMEPOS suppliers structurally higher than for equivalent credit profiles in other license bond categories. Most commercial surety bonds allow the surety a reasonable investigation period before being required to pay a claim — typically 30 to 90 days after the claim is substantiated, with no fixed deadline starting from the first notice of complaint. The DMEPOS bond, codified at 42 CFR § 424.57(d), requires the surety to pay up to the full penal amount within 30 days of receiving written notice from CMS. This compressed payment window means the surety has essentially no time to conduct an independent investigation or dispute the claim before the payment obligation is triggered. From a risk modeling perspective, this structural feature of the bond form makes DMEPOS bonds behave more like financial guarantee instruments than standard license bonds — and sureties price that compressed liability exposure into their rates. A DMEPOS supplier with the same credit profile as a contractor or auto dealer will pay a higher effective premium rate because the bond form itself creates elevated surety exposure through the 30-day mandatory payment clause.
Leave a Reply