Written by Amanda McGurk · Published November 13, 2026 · Last reviewed November 13, 2026
It can, and your denial rate is no longer a required defense. CMS's CY 2027 home health final rule deletes the four factors CMS had to weigh before revoking Medicare enrollment for a pattern of noncompliant claims. CMS set no numeric threshold and would not say whether coding disagreements count.
| Question | Before the CY 2027 rule | After the CY 2027 rule |
|---|---|---|
| Revocation standard, 42 CFR 424.535(a)(8)(ii) | A "pattern or practice of submitting claims that fail to meet Medicare requirements" | Same sentence |
| Factors CMS must consider | 4: share of claims denied, final adverse action history, type of noncompliance, other circumstances | None listed |
| Numeric threshold for a "pattern" | None | None. CMS declined to add one |
| Effective date of an abusive billing revocation | Last date of service on the claims in question | Last date of service on the claims in the pattern or practice |
| Other revocation grounds | Some prospective, 30 days after notice | All retroactive |
| Window to submit remaining claims after revocation | 60 calendar days after the revocation effective date | 15 calendar days from the revocation letter |
Source: CY 2027 HH PPS final rule, 91 FR 72022 (Federal Register, November 9, 2026) .
What is an abusive billing revocation?
An abusive billing revocation is CMS ending a provider's or supplier's Medicare enrollment under 42 CFR 424.535(a)(8)(ii) because it finds "a pattern or practice of submitting claims that fail to meet Medicare requirements." A revoked provider cannot bill Medicare and, per the final rule , is "generally barred from reenrolling in Medicare for a period of 1 to 10 years."
The change sits in a home health payment rule, but 424.535 governs every enrolled provider and supplier. CMS wrote that it must "ensure that all providers are compliant irrespective of their relative risk level or provider or supplier type." Hospitals, physician groups, and ASCs are in scope, and so are the claims RCM companies code for them.
Why a low denial rate stopped being a shield
Many coding leaders treat a low denial rate as proof the coding is sound. CMS rejected that reasoning when it removed the denial-percentage factor: "Non-compliant billing often occurs notwithstanding a low percentage of denied claims, especially with providers that submit many claims." It added that the old factor ignored rejected claims, and that "it is the lack of compliance itself, rather than the type of claim involved, that is pertinent."
A health system or RCM firm can hold a small denial rate while one templated note repeats the same documentation gap across thousands of paid claims. Those claims surface later, in a CERT sample, a RAC review, or a targeted probe. The CMS FY 2025 improper payments fact sheet put the Medicare fee-for-service improper payment rate at 6.55%, or $28.83 billion.
What changed in the final rule?
The four factors are gone. Paragraphs (A) through (D) told CMS to consider the percentage of claims denied, any history of final adverse actions, the type of noncompliance, and other relevant facts. CMS removed all four and the sentence introducing them, and finalized the change "without modification."
No definition of "pattern or practice." CMS refused to set "numerical and time thresholds." Commenters asked CMS to state that "isolated, inadvertent, immaterial, clerical, or promptly corrected claim errors" are not a pattern. CMS called the request "overbroad" and said its view that "several of the provider's claims" can be enough dates to 2014. Elsewhere in the rule, CMS wrote that "non-compliance remains non-compliance regardless of the degree thereof."
No education step first. Commenters asked for Targeted Probe and Educate and a chance to resubmit before any revocation. CMS declined, saying routine resubmission would leave providers "less incentive to initially submit correct claims."
Retroactivity: what is new. Abusive billing revocations were already retroactive to "the last date of service on the claims in question." The rule moves that date into 424.535(g) with near-identical wording. What is new: CMS will "make the remainder of current prospective revocation grounds retroactive," replacing the old default of 30 days after notice. A revoked provider now has 15 calendar days from the revocation letter to submit claims for earlier services.
CMS also wrote that it will "only revoke under this ground when genuinely warranted and not as a matter of course," and that it may still look at denial rates. It noted that only "about 3 percent of providers are ever revoked" out of "well over 2 million." Those factors are now CMS's choice to weigh, not its obligation.
Do coding errors count as claims that fail Medicare requirements?
CMS left that open. Commenters asked whether "technical denials, documentation deficiencies, or coding disagreements" count, and whether claims overturned on appeal stay in the analysis. CMS said it "did not propose to interpret or clarify" either point.
Our reading: a code the documentation does not support produces a claim that fails Medicare requirements, so a repeated coding error could form part of a pattern CMS evaluates. CMS has not said so. Plan as if it can.
Pattern or practice vs. an isolated error
An isolated error is one wrong code on one claim, which you correct and refund. A pattern is the same error repeated across claims, often traced to one physician, template, or charge rule. Revocation risk sits with patterns, so group audit findings by source instead of only counting them.
A worked example
A 10-physician group bills Medicare through an RCM company. Its denial rate is low and it has no prior adverse actions.
A post-payment review samples 100 paid claims and finds 9 where the billed visit level is higher than the note supports. All 9 trace to one templated note used by 3 physicians for 6 months.
Under the old text, CMS had to weigh the low denial rate and clean history, both in the group's favor. Under the final rule, neither is required. If CMS revokes, the effective date is the last date of service in that pattern, the group has 15 calendar days from the letter to submit remaining claims, and a re-enrollment bar of 1 to 10 years follows.
The group can still appeal. CMS said it does not "postpone revocations or recoupment pending the completion of appeals," so cash stops while the appeal runs.
How to reduce revocation exposure from coding patterns
- Audit paid claims as well as denials. Sample by physician, template, and high-volume code family on a fixed schedule. The periodic coding audit guide covers how to structure it.
- Fix the source and measure the repeat rate. Correcting one claim does not end a pattern. Retire the template or charge rule behind it, then check the next sample.
- Keep a code-level record. Log the documentation passage behind each code and who confirmed it. A medical coding audit trail is how you show a reviewer when an error was found and stopped.
- Start with known risk areas. The FY2025 CERT coding error analysis shows where Medicare reviewers find the most errors.
- Size and refund overpayments with counsel. A pattern finding is also a repayment question. See what the FCA self-disclosure pilot means for coding overpayments .
- Check your enrollment file. The same rule makes a missed PECOS change report retroactive to the day after it was due.
RCM companies carry this exposure for every client they code for. See how MediCodio AI supports RCM companies .
How MediCodio AI addresses it
A pattern question is answered with evidence of consistent coding. CODIO AI applies the same rules to every chart and checks codes against NCCI edits, MUE limits, and LCD or NCD coverage policy before a code reaches a claim.
Complete charts flow through AutoPilot for fully autonomous coding. Charts where the documentation is thin or contradictory stay in CoPilot, where certified coders review and finalize the output.
Every code ships with its documentation passage and the compliance rule behind it, a 100% code-level audit trail your compliance team can sample. Nothing runs autonomous on day one. Everything starts in review, and the autonomous lane widens one specialty, surgeon, or case type at a time as your team audits first-pass accuracy on your own charts.
No platform can promise CMS will not revoke an enrollment. A documented coding record helps your team catch a repeat error early and show when it was fixed.
What has not changed
Providers still carry the duty CMS set out in its December 5, 2014 rule: to be "responsible for submitting valid claims at all times." Revocations remain appealable under 42 CFR part 498, and the revocation letter states the basis and your appeal rights.
The effective date needs watching. In its comment responses CMS wrote, "Our finalized enrollment provisions are effective on January 1, 2027." The rule's DATES line prints January 4, 2026, which falls before publication, and no Federal Register correction had posted when we last reviewed this post. We will update this post if CMS corrects it.
Frequently asked questions
Does a low denial rate protect us from an abusive billing revocation?
Not as a required factor. CMS removed denial percentage from 42 CFR 424.535(a)(8)(ii), writing that noncompliant billing "often occurs notwithstanding a low percentage of denied claims." CMS may still consider denial rates, but paid claims with coding errors can count toward a pattern. Review paid claims as well as denials.
How many bad claims make a pattern or practice?
CMS will not say. It declined to set a numeric or time threshold and refused to exclude isolated or clerical errors. CMS says its view that "several" noncompliant claims can be enough dates to 2014. Track repeat errors by template, physician, and code family so you see a pattern before a reviewer does.
Does this rule apply to hospitals, physician groups, and ASCs?
Yes. The change appears in the CY 2027 home health final rule, but 42 CFR 424.535 covers every Medicare-enrolled provider and supplier. Hospitals, physician groups, ASCs, and suppliers are in scope. RCM companies are not enrolled providers, but the claims they code and submit build their clients' compliance record.
How far back can an abusive billing revocation reach?
The revocation takes effect on the last date of service on the claims in the pattern, which was already true before this rule. Claims paid after that date are exposed to recoupment. The provider gets 15 calendar days from the revocation letter to submit earlier claims and faces a re-enrollment bar of 1 to 10 years.
What should coding and compliance teams do first?
Pull a sample of paid Medicare claims and group findings by template, physician, and code family. Fix the source of any repeat error, document the correction, and size any overpayment with counsel. Keep a code-level record of the documentation behind each code so you can show when an error was found and stopped.
Book a Demo and we will run an accuracy check on a sample of your own charts, with the documentation passage and rule behind every code, before you commit to anything. Book a Demo
Sources