Provider Signals™Exclusion screening for DME & DMEPOS suppliers
Few Medicare benefits attract more fraud than durable medical equipment, and that record shapes how hard suppliers are policed. Provider Signals checks your owners, your billing and intake staff, and the ordering and referring NPIs behind your claims against 50+ federal and state lists, then keeps checking after the first pass.
DMEPOS sits at the center of Medicare's fraud map
Improper payments and outright fraud track durable medical equipment more closely than almost any other Medicare benefit. Investigators keep meeting the same playbook: shell suppliers, stolen beneficiary identities, and equipment billed but never delivered or never needed. The 2025 National Health Care Fraud Takedown put numbers on it. Prosecutors charged 324 defendants across $14.6 billion in alleged fraud, and the largest case was a DME operation. In "Operation Gold Rush," foreign-based actors used straw owners to buy medical-supply companies and billed Medicare roughly $10.6 billion for urinary catheters and similar items off stolen patient data.
CMS answered structurally. In February 2026 it froze new Medicare enrollment for seven categories of DMEPOS medical-supply company, pointing to a 17% revocation rate among those suppliers between 2023 and October 2025, nearly three times the rate for other DMEPOS types. For a supplier already enrolled, that climate carries a plain consequence: one excluded person attached to your billing reads as a program-integrity failure, not a clerical miss.
Your billing privilege is conditional, and CMS can pull it
A DMEPOS billing number is among the hardest credentials in Medicare to earn. You enroll and revalidate through PECOS, you satisfy the supplier standards, you carry accreditation, and you post a $50,000 surety bond for each NPI under 42 CFR 424.57. Every one of those gates assumes the people behind the company are eligible to take part in federal health programs. Your disclosed owners, managing employees, and authorized officials are named directly in the enrollment record. An exclusion among them does more than create penalty exposure; it can cost you the billing privilege the entire business depends on. Keeping those names clean protects the enrollment, not just the next claim.
The risk rides on the order, not only the payroll
Most exclusion programs ask a single question: who do you employ? For a supplier that frame is too small. You bill on orders written by physicians and non-physician practitioners you do not employ, and federal payment is barred for any item furnished on the order of an excluded provider. CMS already requires that the ordering or referring provider be enrolled or validly opted out before your claim will pay, so the NPIs driving your revenue are squarely your business. Put your high-volume ordering and referring providers on the same roster as your staff and watch all of them on one clock. Delivery contractors, fitters, intake coordinators, and warehouse vendors belong on that roster too, whether or not they sit on your payroll.
What a single excluded name costs
An OIG exclusion is total. No federal health program will pay for any item or service an excluded person furnishes, orders, or has a hand in, directly or indirectly. For DMEPOS, the indirect path is the dangerous one, because it reaches the clinician whose order you filled. The exposure stacks:
- Civil monetary penalties of more than $20,000 per item or service furnished, ordered, or claimed by an excluded person under 42 CFR 1003.210, before inflation adjustments push the figure higher.
- Assessments of up to three times the amount claimed.
- Repayment of every claim the excluded person touched, plus False Claims Act exposure.
A business shipping high volumes of low-cost supplies feels this fast, because per-item penalties multiply against item counts, not dollar values. A second wrinkle is unique to suppliers: DMEPOS leans on Medicaid and on federal procurement, so a name can read clean on the federal LEIE while still sitting on a state Medicaid list or carrying a SAM.gov debarment. All-state Medicaid and SAM.gov coverage ships on every Provider Signals plan, where most tools sell it as an upgrade.
Where Provider Signals fits a supplier's workflow
Supplier compliance tends to break in two predictable places: rosters that stretch past payroll, and a LEIE that moves every month. Provider Signals is set up for both:
- Owners and authorized officials on the roster from day one, since their eligibility underpins your enrollment, not just your liability.
- Ordering and referring providers monitored alongside staff, so an order from a newly excluded clinician raises an alert instead of a denied claim.
- Contractors and delivery vendors screened like employees, because indirect furnishing makes them your exposure.
- A dated, exportable screening record for accreditors, the National Supplier Clearinghouse, and your own compliance file.
How we compare to enterprise screening vendors
Legacy exclusion-screening vendors price for hospital systems, commonly $15,000 to $200,000 a year, and many still treat state Medicaid coverage as an add-on. Provider Signals runs the same continuous, all-source monitoring as self-serve software, priced to the size of your roster.
| Category | Provider Signals | Typical incumbent |
|---|---|---|
| All state Medicaid lists | Included, every plan | Often an add-on |
| Continuous re-screening | Yes | Varies / batch |
| Self-serve sign-up | Free in minutes | Sales cycle |
| Entry pricing | Free up to 10, then from $120/mo | ~$15K–$200K/yr |
OIG guidance points to screening at hire and again each month, matching the LEIE's monthly refresh. Provider Signals runs continuously instead, so a new match surfaces the day it posts rather than at your next manual sweep. Walk through the mechanics on the exclusion screening overview, compare neighboring segments on the industry hub, or size your roster on the pricing page.
How we match your roster
Exclusion screening is only as good as its matching. We match each person or entity against every source using the full identifier set together — NPI, first name, last or organization name, city, state, and ZIP — never one field alone. NPI alone misses records (the OIG LEIE and many lists don’t carry an NPI for every entry); a name or a location alone produces false matches on common names. When a source record has no NPI, we fall back to name plus location.
Because accuracy depends on your input, provide complete, correct details for every roster entry. When more than one possible match is found, we show you all candidates with their source records so you can confirm, select, or merge — we never auto-flag anyone as excluded. Always verify a match against the primary source before taking any action.
Frequently asked questions
How do you match my roster to the exclusion lists?
We match on the full identifier set together — NPI, first name, last or organization name, city, state, and ZIP — not on any single field. NPI alone misses entries (the LEIE and other lists don’t include an NPI for every record), and names or locations alone cause false matches, so when a source has no NPI we fall back to name plus location. The more complete and accurate your roster details, the more precise the match.
What happens when there’s more than one possible match?
We present every candidate match with its source record and let you select or merge the correct one — we never automatically mark a provider as excluded. A potential match is a prompt to verify against the primary OIG or SAM source, not a final determination. This keeps a human in the loop and protects against acting on a misidentification.
Are the doctors who write our orders really ours to screen?
Yes, and it is the step suppliers most often skip. Because Medicare will not pay for equipment furnished on an excluded provider's order, the ordering and referring NPIs behind your claims sit inside your risk, not outside it. Add your frequent orderers to the roster and Provider Signals tracks them on the same monthly clock as your own people.
Does screening protect our Medicare enrollment, not just spare us penalties?
That is the larger payoff. DMEPOS enrollment and revalidation through PECOS hinge on the eligibility of your disclosed owners, managing employees, and authorized officials. An exclusion among them can threaten the billing privilege itself, so we put those names on the roster first and keep watching them.
We already check the federal LEIE. Why do SAM.gov and state Medicaid matter for DME?
A person can clear the LEIE and still be debarred in SAM.gov or excluded by a state Medicaid program, and DMEPOS billing touches both federal procurement rules and state Medicaid. Every Provider Signals plan, the free tier included, screens SAM.gov, all state Medicaid lists, OFAC SDN, and Medicare Opt-Out next to the LEIE.
How often are we actually expected to screen?
OIG guidance lands on screening when you hire and monthly thereafter, in step with the LEIE's monthly update. Rather than leaving you to remember a recurring task, Provider Signals re-screens the full roster continuously and alerts you the moment a name matches.
Now that CMS has frozen DMEPOS enrollment, does our screening duty ease up?
No. The 2026 moratorium blocks certain new medical-supply companies from enrolling; it asks nothing less of suppliers already in the program. If anything, the scrutiny behind the freeze makes a documented, continuous screening control more valuable at audit, not less.
We ship thousands of low-dollar items. How bad is one excluded person, honestly?
Worse than the item price suggests. Penalties run more than $20,000 per item or service, plus assessments of up to three times the amount claimed, plus repayment of everything that person touched and possible False Claims Act liability. At high volume those per-item figures compound quickly, which is the whole argument for catching a match before the claim leaves.
Sources: CMS Fast Facts: DMEPOS suppliers · DOJ: 2025 National Health Care Fraud Takedown ($10.6B Operation Gold Rush) · Federal Register: nationwide DMEPOS enrollment moratorium · 42 CFR 424.57: DMEPOS supplier standards & surety bond · 42 CFR 1003.210: CMP amounts for excluded persons · OIG Exclusions Program.
Screen owners, staff, and your ordering providers — continuously.
Start free in minutes, or build a plan sized to your roster.
Provider Signals™ Risk — part of NPI Data Services, a product of VBC Risk Analytics, Inc. — does not provide legal advice. We are not a consumer reporting agency, and our screening tools are not FCRA background checks; use them as part of, not a substitute for, your own compliance program and counsel’s guidance. See our Terms.
Create your free account
Free forever — no credit card. One account lets you:
- Check any provider against 50+ federal & state exclusion & sanction lists — and get alerted the moment one is flagged.
- Track newly-licensed providers & new practices in your area, updated weekly.
Account created
Check your email to verify your account, then sign in.