Most businesses that need a surety bond deal with a state licensing agency, a local regulator, or a general contractor. DMEPOS suppliers deal with the federal government — specifically, with the Centers for Medicare & Medicaid Services — and the bond they must carry is not a formality, not optional, and not transferable between locations. If you supply wheelchairs, hospital beds, CPAP equipment, oxygen concentrators, prosthetics, orthotics, or any other durable medical equipment to Medicare beneficiaries, this bond is the financial guarantor standing between your business and your Medicare billing privileges. Understanding what it is, what it actually covers, what can disqualify you from getting it, and what happens when it lapses is the difference between a smooth enrollment and a suspended license.
What Is a Durable Medical Equipment Bond?
A durable medical equipment bond — formally called the DMEPOS surety bond, and commonly known as a Medicare bond, Medicare surety bond, CMS bond, or Medicaid bond — is a federally required surety bond that all suppliers of durable medical equipment, prosthetics, orthotics, and supplies (DMEPOS) must obtain and maintain as a condition of enrolling in and billing the Medicare program. The bond is required by the Centers for Medicare & Medicaid Services (CMS) under federal statute 42 CFR § 424.57, which implements Section 1834(a)(16) of the Social Security Act as amended by Section 4312 of the Balanced Budget Act of 1997.
CMS published the final rule implementing the bonding requirement in the Federal Register on January 2, 2009 (74 FR 166), with an effective date of March 3, 2009. The rule covers 35 pages of regulatory text, addresses bond amounts, bond cancellations and lapses, exceptions to the bond requirement, high-risk suppliers, and access to bonds — far more detail than most suppliers ever encounter in a standard surety guide.
Three parties are involved in every DME bond. The principal is the DMEPOS supplier purchasing and maintaining the bond. The obligee is CMS (or in some cases a state Medicaid agency). The surety is the bonding company that issues and backs the bond, guaranteeing payment of valid claims up to the bond’s face amount. If the supplier commits billing fraud, fails to pay civil monetary penalties, or incurs other financial obligations to Medicare that go unpaid, CMS can call on the surety to pay — and the surety will then seek full reimbursement from the supplier.
What Equipment Qualifies as DMEPOS — and Why It’s Regulated
The bond requirement stems from the nature of the DMEPOS supply chain. Medicare suppliers hold a unique position: they provide equipment directly to vulnerable Medicare beneficiaries and submit claims directly to the government for reimbursement. CMS identified a pattern of fraudulent and abusive billing practices — suppliers billing for equipment never delivered, overbilling for covered items, and submitting claims for medically unnecessary equipment — that cost the Medicare program hundreds of millions of dollars annually before the bond requirement was put in place. The bond was designed to create a financial backstop giving CMS a guaranteed recovery mechanism even after a fraudulent supplier has shut down or dispersed its assets.
Qualifying durable medical equipment must meet four criteria: it is durable and capable of repeated use; it is used for a medical reason; it has no practical use for someone without a medical condition; and it is used in the home with an expected lifespan of three or more years. Common items billed under DMEPOS and requiring a bond include blood glucose meters and testing supplies, mobility aids (canes, crutches, walkers, wheelchairs, power scooters), CPAP devices and accessories, commode chairs, hospital beds, oxygen equipment, patient lifts, traction equipment, and prosthetic and orthotic devices.
The Bond Amount: $50,000 Per NPI — With Escalations
The minimum bond amount set by federal statute is $50,000. Critically, this is not a per-business requirement — it is a per-National Provider Identifier (NPI) requirement. Every distinct practice location with its own NPI that bills Medicare independently requires a separate $50,000 bond. A supplier operating 10 locations with 10 NPIs must carry $500,000 in total Medicare bond coverage.
Federal statute 424.57 also requires additional bonds for adverse legal actions. For every adverse legal action that has occurred within the past 10 years, the supplier must post an additional $50,000 bond on top of the base requirement. Adverse legal actions include losing Medicare billing privileges, having a license or accreditation suspended or revoked, a felony conviction, and exclusion from a federal or state healthcare program. A supplier at a single location with two adverse legal actions in the past decade must post $150,000 — not $50,000.
For high-risk suppliers, CMS has the authority to require bond amounts beyond the statutory minimums. The final rule specifically addresses the high-risk supplier category, reflecting CMS’s intent to use elevated bonding as a risk-management tool for suppliers with a poor compliance history.
ProSure Group notes a detail that most guides miss: while the base DMEPOS bond runs continuously from its effective date until cancelled (no fixed expiration), CMS has established a 3-year duration specifically on elevated bond amounts tied to adverse legal actions. This means the elevated amount does not automatically become permanent — it can be revisited after the specified period if the supplier’s risk profile has improved.
Who Is Exempt from the Durable Medical Equipment Bond?
The following supplier categories are exempt from the federal bond requirement, provided specific qualifying conditions are met:
Government-operated DMEPOS suppliers that have provided CMS with a comparable surety bond under applicable state law are exempt. This includes federally-owned Indian Health Service facilities and state, local, and tribal government agencies. State-licensed orthotic and prosthetic personnel in private practice making custom-made orthotics and prosthetics are exempt if the business is solely owned and operated by the O&P personnel and bills only for orthotics, prosthetics, and related supplies. Physicians and non-physician practitioners — including nurse practitioners and clinical nurse specialists — are exempt if DMEPOS items are provided solely to their own patients as part of their professional services. Physical and occupational therapists in private practice are exempt if the business is solely owned and operated by the therapist, items are furnished only to the therapist’s own patients as part of their professional services, and the business bills only for orthotics, prosthetics, and supplies.
SuretyBonds.com makes an important point that most guides omit: there are no exceptions for nursing homes or pharmacies that bill Medicare for DMEPOS items. Pharmacies that dispense durable medical equipment alongside prescription drugs must obtain the bond for the DMEPOS component of their billing.
If a previously exempt supplier no longer qualifies — for example, if an O&P practice grows to include staff who are not licensed O&P personnel — the supplier must obtain a bond within 60 days to maintain compliance.
How Much Does a Durable Medical Equipment Bond Cost?
You pay a premium — a percentage of the bond’s face amount — not the full $50,000. The credit check is a soft pull that does not affect your credit score. For qualified applicants, premiums range from 0.5% to 2% of the bond amount; for applicants with weaker credit, rates of 3% to 5% are common; high-risk applicants may pay more or be declined by standard-market carriers. BondExchange’s published pricing table is one of the most precise benchmarks available:
| Credit Score | Annual Premium ($50,000 Bond) | Monthly Option |
|---|---|---|
| 680+ | $250 | $25/month |
| 650–679 | $500 | $50/month |
| 625–649 | $1,000 | $100/month |
| 600–624 | $1,250 | $125/month |
| 550–599 | $1,500 | $150/month |
| 500–549 | $2,000 | $200/month |
The bond is individually underwritten. For most applicants, the personal credit score of the business owner is the primary — and sometimes only — factor. Personal financial statements and business financial statements are rarely required but may be requested for higher bond amounts or weaker applicant profiles.
The Enrollment Process: Six Steps, and Where the Bond Fits
CMS’s official enrollment page at cms.gov lays out a six-step process for DMEPOS suppliers. Understanding the sequence matters because getting bonded at the wrong time can delay your enrollment.
Step 1 is obtaining DMEPOS accreditation from a CMS-approved accreditation organization. A CMS-approved AO will verify that your business meets the required DMEPOS Quality Standards and will conduct periodic unannounced site visits. Step 2 is obtaining an NPI for each practice location through NPPES. Step 3 is completing the enrollment application in PECOS (the online Medicare enrollment system) and submitting the Electronic Funds Transfer Authorization Agreement CMS-588. The comprehensive enrollment application is CMS-855S. Step 4 is paying the Medicare application fee — currently $688 for 2023 filings. Step 5 is working with your enrollment contractor to track the status of your application. Step 6 is posting the surety bond with your enrollment contractor.
A critical administrative change that many suppliers miss: Effective November 7, 2022, the National Supplier Clearinghouse (NSC) — which previously processed all DMEPOS Medicare enrollment applications and received all bond filings — no longer handles DMEPOS enrollment. All applications now go to one of two National Provider Enrollment contractors: NPE East (Novitas) or NPE West (Palmetto GBA), depending on your geographic region. Bonds and all enrollment documents must now be submitted to the correct NPE contractor, not the NSC address that older guides still reference.
Once enrolled, suppliers must keep their enrollment information current and report any change within 30 days. Changes that must be reported include changes in ownership, adverse legal actions, and changes in practice location. Failure to report changes timely can result in revocation of billing privileges.
How to Get Your Durable Medical Equipment Bond
The application is straightforward. Identify the correct bond amount based on your number of NPI locations and any adverse legal actions in the past 10 years. Apply through a Treasury-certified surety bond provider — CMS only accepts bonds from companies listed on the U.S. Department of the Treasury’s Circular 570 (list of certified surety companies). Swiftbonds issues DMEPOS bonds nationwide with standard-market pricing for qualified applicants and a bad-credit program for those with lower scores. The process is: apply online → soft credit check → receive your quote → pay premium → receive executed bond → sign the bond → submit the original to your designated NPE enrollment contractor along with any other required enrollment documents.
Swiftbonds LLC
2025 Surety Bond Agency of the Year
4901 W. 136th Street
Leawood KS 66224
(913) 214-8344
https://swiftbonds.com/
What Happens If Your Bond Lapses or Is Cancelled
A lapse in bond coverage triggers immediate CMS action. If your bond is cancelled and not replaced, CMS will revoke your Medicare billing privileges — effectively shutting down the revenue stream for your entire DMEPOS operation. The NFP guide underscores the program-level importance of this: because Medicare is the primary payer for most DMEPOS services, a billing privilege revocation is not a temporary inconvenience. It eliminates your ability to collect on claims for the duration of the lapse.
Frequently Asked Questions
Is the bond required nationwide? Yes. The federal DMEPOS bond requirement applies in all 50 states and U.S. territories. There is no state where a Medicare-participating DMEPOS supplier is exempt from the federal requirement. Some states, however, have additional state-level bond requirements for Medicaid. Minnesota stands out — DMEPOS suppliers in Minnesota must file a separate $50,000 Minnesota Health Care Programs DMEPOS Bond with the state Department of Human Services, in addition to the federal CMS bond.
What is a PTAN, and does it appear on the bond form? A Provider Transaction Access Number (PTAN) is the identifier assigned to your practice by the enrollment contractor after your enrollment is processed. Some bond forms request your PTAN if you already have one on file; initial applicants leave it blank. The applicant name on the bond must match exactly the legal name in the CMS enrollment records — a mismatch will cause the enrollment contractor to reject the bond and delay your enrollment.
Can multiple NPI locations be covered by a single bond document? Some surety companies allow multiple NPIs to be listed on a single blanket bond document, which simplifies administration. The total coverage must still equal $50,000 per NPI. Confirm with your surety provider whether they issue multi-NPI bonds or require separate instruments.
What surety companies are authorized to issue DMEPOS bonds? Only surety companies certified and listed on the U.S. Department of the Treasury’s Circular 570 are authorized. This list is publicly available at the Treasury’s website. CMS will not accept a bond from a non-Treasury-listed surety, regardless of the bond form’s content.
What information does the bond form need to include? The bond form must contain the legal name, address, tax identification number (TIN), NPI, and NSC/PTAN number (if applicable) of the supplier; the surety company’s name and state of incorporation; the bond amount; and the date the bond is signed. No single standard bond form is required by CMS — the regulation specifies that the bond must contain certain specific wording but does not mandate a single form. Most sureties use proprietary forms that include all required language.
Do I need to revalidate my enrollment? Yes. DMEPOS suppliers are required to revalidate their enrollment at least once every three years through PECOS. Revalidation includes confirming that all enrollment information is current and that your bond remains in force.
Conclusion
The durable medical equipment bond is the financial gateway to Medicare participation for every DME supplier. Its requirements are clear, its exemptions are specific and conditional, and its consequences for lapsing are immediate. Getting bonded through a Treasury-certified surety, submitting your bond to the correct NPE contractor (not the now-defunct NSC), maintaining continuous coverage, and reporting enrollment changes within 30 days are the operational pillars of DMEPOS bond compliance. Suppliers who treat the bond as a one-time paperwork item rather than an ongoing program compliance obligation are the ones most likely to find their billing privileges unexpectedly revoked.
5 Things About Durable Medical Equipment Bonds That the Top 10 Sites Don’t Cover
1. The HHS Office of Inspector General launched an active investigation in February 2025 specifically examining whether CMS has been underutilizing the surety bond program — and a prior OIG review found that CMS recovered only $263,000 from surety bonds out of $50 million in overpayments identified for collection between October 2009 and April 2011. The OIG’s 2013 report was the first to document how spectacularly the bond program had underperformed its stated purpose of fraud deterrence and overpayment recovery. A $50 million overpayment exposure yielding $263,000 in bond recoveries represents a 0.5% collection rate — far below what the program’s designers anticipated. The new OIG work plan project (number OEI-03-25-00080, announced February 17, 2025) will update and expand on this analysis, examining the total amount of outstanding DME overpayments that became eligible for surety bond collection in calendar year 2023, how much has been collected and left uncollected, what obstacles the Medicare Administrative Contractors and CMS face in collecting from bonds, and what changes could make bonds a more effective fraud deterrent. The projected completion is FY2027. This active investigation signals that the bond program’s practical effectiveness — not just its existence — is under federal scrutiny, with potential regulatory changes on the horizon.
2. The GAO formally reviewed the DMEPOS bond final rule in January 2009 and determined that CMS estimated the annual cost of the surety bond requirement at $102.3 million — making it one of the most expensive single-bond regulatory requirements ever imposed on a healthcare supply sector, and one that CMS itself acknowledged would fall disproportionately on small rural pharmacies and medical supply companies. The GAO review (GAO-09-299R) assessed CMS’s cost-benefit analysis and found that while CMS determined the rule would not have a “direct significant economic impact” under the Regulatory Flexibility Act, CMS simultaneously recognized the disproportionate burden on smaller entities and voluntarily prepared a Final Regulatory Flexibility Analysis. The analysis specifically called out rural pharmacies and small medical supply companies as bearing a greater relative burden than large chain pharmacies. This dual finding — “not a significant impact” legally, but materially disproportionate in practice — reflects the tension between Medicare program integrity goals and the compliance burden placed on small operators in underserved areas. No competing surety guide acknowledges the $102.3 million annual cost figure, the disproportionate impact finding, or the fact that CMS built multiple accreditation organization approvals into the final rule specifically to reduce burden on smaller suppliers who were more likely to use lower-cost accreditation bodies.
3. The original DMEPOS bond proposed rule was published on January 20, 1998 — over 11 years before the final rule took effect — making it one of the longest regulatory implementation gaps in Medicare’s history for a fraud-prevention measure, and the delay itself was a subject of specific commentary in the Federal Register’s final rule documentation. The Balanced Budget Act of 1997 authorized the bond requirement in August 1997. CMS published a proposed rule in January 1998. Then more than nine years passed before CMS published the final rule in January 2009. The Federal Register final rule explicitly addresses this gap, noting that CMS was aware of the “lapse in time between the statutory effective date” and the proposed rule, and responding to this in the comments section of the final rule. The decade-long delay between congressional authorization and regulatory implementation means that hundreds of thousands of Medicare DME billing decisions were made during a period when the bond requirement was legally authorized but not yet in force. Understanding this timeline matters because it explains why the final rule’s implementation guidance was so detailed — CMS had over a decade of accumulated comments, concerns, and practical questions from the industry to address in the final regulatory text.
4. The Federal Register final rule contains a dedicated section titled “Bond Cancellations and Lapses” (Section III.G), which addresses a specific scenario that no surety guide covers: what happens when a bond is cancelled by the surety — not by the supplier — and the regulatory distinction between voluntary and involuntary bond termination and its implications for CMS’s enforcement response. When a supplier voluntarily cancels a bond, it typically signals an intent to exit the Medicare program. When a surety cancels a bond, it typically signals that the surety has determined the supplier presents elevated claim risk — a risk signal that CMS treats differently than a voluntary exit. The final rule’s commentary on bond cancellations specifically addresses the scenario in which a surety cancels a bond because the supplier has become too risky to maintain coverage on, effectively creating a secondary signal to CMS that the supplier’s financial or compliance profile has deteriorated. Suppliers who receive a surety-initiated cancellation notice and fail to secure replacement coverage before the cancellation takes effect are not simply without a bond — they have been flagged through the involuntary cancellation mechanism in a way that may trigger heightened CMS scrutiny of their enrollment history. No competing guide distinguishes between voluntary and surety-initiated cancellations or explains the asymmetric CMS response.
5. The November 7, 2022 transition from the National Supplier Clearinghouse (NSC) to the National Provider Enrollment DMEPOS East and West contractors is a change that most surety bond guides — including those updated in 2023 and 2024 — still have not incorporated into their filing instructions, meaning that suppliers following older guides are mailing their bonds to a discontinued address and experiencing enrollment delays. The NSC was the centralized enrollment and bond-filing hub for DMEPOS suppliers for over two decades. Thousands of how-to guides, compliance checklists, and surety bond company instructions referenced the NSC’s Columbia, South Carolina address (Palmetto GBA, AG-495, P.O. Box 100142, Columbia, SC 29202) as the bond destination. Since November 7, 2022, that address no longer accepts DMEPOS enrollment applications or bond submissions. All applications and bonds now route to either NPE East (Novitas Solutions) or NPE West (Palmetto GBA’s separate NPE West operation), depending on the supplier’s geographic region. A supplier in the eastern United States who mails their bond to the old NSC address following an outdated surety guide is sending their compliance document to a discontinued processing center — and their enrollment clock is not running until the correct NPE contractor receives and processes the bond. CMS’s own enrollment page has been updated, but the surety bond industry has been slow to reflect this operational change in their published guides.
Leave a Reply