Medicare Program Integrity Manual (Pub. 100-08), Ch. 10 § 10.2.5.3.2
Claims against Surety Bonds
10.2.5.3.2 – Claims against Surety Bonds
(Rev. 11682; Issued: 11-04-2022; Effective: 12-05-2022; Implementation: 12-05-2022)
(For purposes of this section, the term “contractor” means the enrollment contractor, unless
otherwise indicated. Durable Medical Equipment Medicare Administrative Contractors will be
referenced as “DME MACs.”)
Pursuant to 42 CFR § 424.57(d)(5)(i), the surety must pay CMS - within 30 days of receiving
written notice to do so - the following amounts up to the full penal sum of the bond:
1. The amount of any unpaid claim, plus accrued interest, for which the DMEPOS supplier is
responsible.
2.. The amount of any unpaid claim, CMP, or assessment imposed by CMS or the OIG on the
DMEPOS supplier, plus accrued interest.
This section 10.2.5.3.2 describes the procedures involved in making a claim against a surety
bond.
A. Background
For purposes of the surety bond requirement, 42 CFR § 424.57(a) defines an “unpaid claim” as
an overpayment (including accrued interest, as applicable) made by the Medicare program to the
DMEPOS supplier for which the supplier is responsible.
The policies in this section 10.2.5.3.2 only apply to overpayment determinations relating to
demands first made on or after March 3, 2009. A surety is liable for any overpayments based on
dates of service occurring during the term of the surety bond. (For purposes of determining
surety liability, the date of the initial demand letter was sent to the provider is the date on which
the service was performed/furnished.) Even if the overpayment determination is made after the
expiration of the surety bond, the surety remains liable if the date of service was within the
surety bond coverage period. In short, the date of service – rather than the date of the
overpayment determination or the date the overpayment demand letter was sent to the supplier---
is the principal factor in ascertaining surety liability.
As an illustration, assume that a supplier has a surety bond with Company X on August 1,
2015. It performs a service on October 1, 2015. The supplier ends its coverage with Company
X effective January 1, 2016 and obtains a new surety bond with Company Y effective that same
date. On February 1, 2016, CMS determines that the October 1, 2015 service resulted in an
overpayment; on March 2, 2016, CMS sends an overpayment demand letter to the
supplier. While the overpayment determination and the sending of the demand letter occurred
during Company Y’s coverage period, the date of service was within the Company X coverage
period. Thus, liability (and responsibility for payment) rests with Company X, even though the
supplier no longer has a surety bond with X.
B. Collections – Unpaid Claims
1. Delinquency Period
If the DME MAC determines – in accordance with CMS’s existing procedures for making
overpayment determinations - that (1) the DMEPOS supplier has an unpaid claim for which it is
liable, and (2) no waiver of recovery under the provisions of section 1870 of the Social Security
Act is warranted, the DME MAC shall attempt to recover the overpayment in accordance with
the instructions in CMS Pub. 100-06, chapter 4.
If 80 days have passed since the initial demand letter was sent to the DMEPOS supplier and full
payment has not been received, the DME MAC shall attempt to recover the overpayment. The
DME MAC shall review the “List of Bonded Suppliers” the last week of each month to
determine which suppliers that have exceeded this 80-day period have a surety bond. Said list:
• Will be electronically sent to the DME MACs by CMS’ Provider Enrollment & Oversight
Group on a monthly basis.
• Will be in the form of an Excel spreadsheet.
• Will contain the supplier’s legal business name, tax identification number, NPI, surety bond
amount, and other pertinent information.
If the supplier does not have a surety bond (i.e., is exempt from the surety bond requirement), the
DME MAC shall continue to follow the instructions in Pub. 100-06, chapter 4 regarding
collection of the overpayment.
2. Request for Payment from Surety – General Requirements
If, however, the supplier has a surety bond (and subject to situations (a) through (f) below), the
DME MAC shall send an “Intent to Refer” (ITR) letter to the supplier and a copy thereof to the
supplier’s surety. The letter ITR and copy shall be sent to the supplier on day 66 after the initial
demand letter was sent, and the surety notification shall be sent within 5 days. (The copy to the
surety can be sent via mail, e-mail, or fax.)
(NOTE: Under federal law, a delinquent debt must be referred to the Department of Treasury
within 120 days. (Per the chart below, this represents Day 150 of the entire collection cycle.) To
ensure that the DME MAC meets this 120-day limit but has sufficient time to prepare the surety
letter as described in the following paragraph, it is recommended that the DME MAC send the
ITR letter several days prior to the 90-day limit referenced in the previous paragraph. This will
give the DME MAC a few additional days beyond the 30-day deadline referenced in the next
paragraph to send the surety letter.)
If the DME MAC does not receive full payment from the supplier within 30 days of sending the
ITR letter (and subject to situations (a) through (f) below), the contractor shall notify the surety
via letter that, in accordance with 42 CFR § 424.57(d)(5)(i)(A), the surety must make payment of
the claim to CMS within 30 days from the date of the surety letter. (The DME MAC shall send a
copy of the surety letter to the supplier on the same date.) The DME MAC shall send the surety
letter no later than 30 days after sending the ITR letter (subject to the previous paragraph),
depending on the facts of the case. Consider the following situations:
a. If a DMEPOS supplier has withdrawn from Medicare or has had its enrollment deactivated or
revoked, the contractor shall send the ITR and the surety letter on the earliest possible day.
b. If the supplier has an extended repayment schedule (ERS) and is currently making payments,
the DME MAC shall not send an ITR letter or a surety letter. If the DME MAC is currently
reviewing an ERS application from the supplier, the contractor shall delay sending the ITR letter
and the surety letter until after the ERS review is complete.
c. If the aggregated principal balance of the debt is less than $25, the DME MAC shall not send an
ITR letter or a surety letter. It shall instead follow the instructions in CMS Pub. 100-06, chapter 4
regarding collection of the overpayment.
d. If the DME MAC believes the debt will be collected through recoupment, it shall not send an ITR
letter or a surety letter. It shall instead follow the instructions in Pub. 100-06, chapter 4 regarding
collection of the overpayment.
e. If the supplier has had a recent offset, the DME MAC may wait to see if future offsets will
close the debt, without sending the surety a letter. If the debt is still not paid in full or an ERS
has not been established, the DME MAC shall send the surety letter no later than the 115th day
after the initial demand letter was sent.
f. A payment demand letter shall not be sent to the surety if the DME MAC is certain that the
$50,000 surety bond amount in question has been completely exhausted.
(NOTE: The DME MAC may choose to aggregate debts from the same supplier into one surety
letter, provided they are at least 30 days delinquent.)
3. Contents of Surety Letter
The surety letter shall:
a. Follow the format of the applicable model letter found in section 10.7.16 of this chapter.
b. Identify the specific amount to be paid and be accompanied by “sufficient evidence” of the
unpaid claim. “Sufficient evidence” is defined in 42 CFR §424.57(a) as documents that CMS
may supply to the DMEPOS supplier’s surety to establish that the supplier had received
Medicare funds in excess of the amount due and payable under the statute and regulations.
c. Be accompanied by the following documents, which constitute “sufficient evidence” for
purposes of §424.57(a):
(i) Overpayment Services Report - A computer-generated “Overpayment Services Report”
containing the following information:
o Date of service (i.e., the date the service was furnished/performed, not the date of the
overpayment determination or the date of the overpayment or demand letter)
o Date on which supplier was paid
o Paid Amount
o Overpayment Amount
(NOTE: The report shall not include HICN or any information otherwise protected under the
Privacy Act.)
(ii) A copy of the overpayment determination letter that was sent to the supplier
(iii) A statement that payment shall be made via check or money order and that the Payee shall
be the DME MAC
(iv) Identification of the address to which payment shall be sent
The DME MAC shall only seek repayment up to the full penal sum amount of the surety bond.
Thus, if the supplier has a $60,000 unpaid claim and the amount of the supplier’s bond coverage
is $50,000, the DME MAC shall only seek the $50,000 amount. The remaining $10,000 will
have to be obtained from the supplier via the existing overpayment collection process.
4. Follow-Up Contact
Between 8 and 12 calendar days after sending the surety letter, the DME MAC shall contact the
surety by telephone or e-mail to determine whether the surety received the letter and, if it did,
whether and when payment will be forthcoming.
If the surety indicates that it did not receive the letter, the DME MAC shall immediately fax or e-
mail a copy of the letter to the surety. The surety will have 30 days from the original date of the
letter – not 30 days from the date the letter was resent to the surety – to submit payment. To
illustrate, suppose the DME MAC on April 1 sends the surety letter, which is also dated April 1.
It places the follow-up call to the surety on April 11. The surety states that it never received the
letter, so the contractor e-mails a copy of it to the surety that same day. Payment must be
received by May 1, or 30 days from the original date of the letter.
If the surety cannot be reached (including situations where a voicemail message must be left) or
if the surety indicates that it did receive the letter and that payment is forthcoming, no further
action by the contractor is required. If the surety indicates that payment is not forthcoming, the
contractor shall (1) attempt to ascertain the reason, and (2) follow the steps outlined below after
the 30-day period expires.
The contractor shall document any attempts to contact the surety by telephone and the content of
any resultant conversations with the surety.
5. Verification of Payment
a. Full Payment of the Claim is Made
If full payment (including interest, as applicable) is made within the aforementioned 30-day
period, the DME MAC shall, no later than 10 calendar days after payment was made:
(i) Update all applicable records to reflect that payment was made. (Payment from the surety
shall be treated as payment from the supplier for purposes of said record updates.)
(ii) Send a mailed, faxed, or (preferably) e-mailed letter to the supplier (on which the contractor
shall be copied):
• Stating that payment has been made, the date the payment was received, and the amount of
the payment
• Containing the following quoted verbiage:
“You must, within 30 calendar days of the date of this letter, obtain and submit to the
contractor additional surety bond coverage in the amount of (insert the amount that the surety
paid) so as to ensure that your total coverage equals or exceeds the required $50,000 amount”
(or higher if an elevated bond amount is involved due to a final adverse action). Failure to
timely do so will result in the revocation of your Medicare enrollment.
“Additional surety bond coverage may be obtained by (1) adding to the amount of your
existing surety bond so as to equal or exceed $50,000, or (2) cancelling your current surety
bond and securing a new $50,000 surety bond. (Obtaining a separate (insert the amount the
surety paid) surety bond is impermissible.) In either case, the effective date of the additional
coverage must be on or before the date that you submit the additional coverage to the
contractor.”
If the contractor does not receive the additional bond coverage within this 30-day period, it shall
revoke the DMEPOS supplier’s Medicare enrollment under § 424.535(a)(1) in accordance with
existing procedures. (The effective date of revocation shall be the date on which the DME MAC
received payment from the surety.) It is important that the contractor: (1) monitor the supplier’s
surety bond status upon receiving a copy of the DME MAC’s letter to the supplier; and (2) take
prompt action against the supplier (consistent with existing procedures) if the supplier does not
secure and timely submit the required additional coverage.
b. No Payment of the Claim Made
If the surety fails to make any payment within 30 calendar days of the date of the letter to the
surety, the DME MAC shall:
(i) Refer the debt to the Department of Treasury (by HIGLAS on the 120-day deadline)
immediately upon the expiration of said 30-day timeframe (i.e., preferably on the same day or
the day after, but in all cases no later than the 120-day deadline for sending delinquent debts to
the Department of Treasury) and as outlined in Pub. 100-06, chapter 4;
(ii) No later than 14 days after the 30-day period expires, contact the surety via e-mail or
telephone to ascertain the reason for non-payment. Only one contact is necessary. A voice mail
message may be left. The contractor shall document any attempts to contact the surety by
telephone and the content of any resultant conversations with the surety.
(iii) No later than 14 days after Step 2 has been completed – and if full payment still has not
been received -- send the letter found in section 10.7.16 of this chapter.
(iv) Include information relating to the surety’s non-payment in the report identified in section
10.2.5.3.2(D).
c. Partial Payment of the Claim is Made
If the surety pays part of the claim within the 30-day period and a balance is still due and owing,
the DME MAC shall do the following:
(i) Refer the unpaid debt to the Department of Treasury (by HIGLAS on the 12-day deadline)
immediately upon the expiration of said 30-day timeframe (i.e., preferably on the same day or
the day after, but in all cases no later than the 120-day deadline for sending delinquent debts to
the Department of Treasury) and as outlined in Pub. 100-06, chapter 4.
(ii) No later than 14 days after the 30-day period expires, contact the surety via e-mail or
telephone to ascertain the reason for the partial non-payment. Only one contact is necessary. A
voice mail message may be left. The contractor shall document any attempts to contact the
surety by telephone and the content of any resultant conversations with the surety.
(iii) No later than 14 days after Step (ii) has been completed – and if full payment still has not
been received -- send the letter found in Section 10.7.16 of this chapter.
(iv) Include information relating to the surety’s partial non-payment in the report identified in
section 10.2.5.3.2(D).
(v) No later than 10 calendar days after the partial payment was made:
• Update all applicable records to reflect that partial payment was made. (Payment from the
surety shall be treated as payment from the supplier for purposes of said record updates.)
• Send a mailed, faxed, or (preferably) e-mailed letter to the supplier (on which the contractor
shall be copied):
o Stating that partial payment was made, the date the payment was received, and the
amount of said payment
o Containing the following quoted verbiage:
“You must, within 30 calendar days of the date of this letter, obtain and submit to the
contractor additional surety bond coverage in the amount of (insert the amount that the
surety paid) so as to ensure that your total coverage equals or exceeds the required
$50,000 amount” (or higher if an elevated bond amount is involved due to a final adverse
action). Failure to timely do so will result in the revocation of your Medicare
enrollment.
Additional surety bond coverage may be obtained by (1) adding to the amount of your
existing surety bond so as to equal or exceed $50,000, or (2) cancelling your current
surety bond and securing a new $50,000 surety bond. (Obtaining a separate (insert the
amount the surety paid) surety bond is impermissible.) In either case, the effective date
of the additional coverage must be on or before the date that you submit the additional
coverage to the contractor.”
If the contractor does not receive the additional bond coverage within this 30-day period, it shall
revoke the DMEPOS supplier’s Medicare enrollment under § 424.535(a)(1) in accordance with
existing procedures. (The effective date of revocation shall be the date on which the DME MAC
received payment from the surety.) It is important that the contractor (1) monitor the supplier’s
surety bond status upon receiving a copy of the DME MAC’s letter to the supplier and (2) take
prompt action against the supplier (consistent with existing procedures) if the supplier does not
secure and timely submit the required additional coverage.
6. Successful Appeal
If the supplier successfully appeals the overpayment and the surety has already made payment to
the DME MAC on the overpayment, the DME MAC shall – within 30 calendar days of receiving
notice of the successful appeal - notify the surety via letter of the successful appeal and repay the
surety via check or money order.
7. Summary
The following chart outlines the timeframes involved in the surety bond collection process for
overpayments:
Day 1
Initial Demand Letter Sent
Day 31
Debt is Delinquent/Interest Starts
Day 41
Recoupment Starts
Day 66
Intent to Refer Letter Sent
Day 115
Surety Bond Letter Sent
Day 150
Referral to Treasury
C. Claims Pertaining to Assessments and CMPs
1. Request for Payment from Surety
Per 42 CFR § 424.57(a), an assessment is defined as a “sum certain that CMS or the OIG may
assess against a DMEPOS supplier under Titles XI, XVIII, or XXI of the Social Security Act.”
Under 42 CFR § 424.57(a), a CMP is defined as a sum that CMS has the authority, as
implemented by 42 CFR § 402.1(c) (or the OIG has the authority, under section 1128A of the
Act or 42 CFR Part 1003) to impose on a supplier as a penalty.
The CMS will notify the DME MAC of the need for the latter to collect payment from the surety
on an assessment or CMP imposed against a particular bonded DMEPOS supplier. Upon receipt
of this notification, the DME MAC shall – regardless of the amount of the assessment or CMP -
notify the surety via letter that, in accordance with 42 CFR § 424.57(d)(5)(i)(B), payment of the
assessment or CMP must be made within 30 calendar days from the date of the letter. The letter
(on which the contractor and the supplier/debtor shall be copied) shall:
• Follow the format of the applicable model letter found in Section 10.7.16 of this chapter.
• Identify the specific amount to be paid and be accompanied by “sufficient evidence.” This
includes all documentation that CMS (in its notification to the DME MAC as described
above) requests the DME MAC to include with the letter (e.g., OIG letter).
• State that payment shall be made via check or money order and that the Payee shall be CMS.
• Identify the address to which payment shall be sent.
2. Follow-Up Contact
Between 8 and 12 calendar days after sending the surety letter, the DME MAC shall contact the
surety by telephone or e-mail to determine whether the surety received the letter and, if it did,
whether and when payment is forthcoming;
If the surety indicates that it did not receive the letter, the DME MAC shall immediately fax or e-
mail a copy of the letter to the surety. The surety will have 30 days from the original date of the
letter – not 30 days from the date the letter was resent to the surety – to submit payment. To
illustrate, suppose the DME MAC on April 1 sends the surety letter, which is also dated April 1.
It places the follow-up call to the surety on April 11. The surety states that it never received the
letter, so the contractor e-mails a copy of it to the surety that same day. Payment must be
received by May 1, or 30 days from the original date of the letter.
If the surety cannot be reached (including situations where a voicemail message must be left) or
if the surety indicates that it received the letter and that payment is forthcoming, no further action
by the contractor is required. If the surety indicates that payment is not forthcoming, the
contractor shall (1) attempt to ascertain the reason and (2) follow the steps outlined below after
the 30-day period expires.
The contractor shall document any attempts to contact the surety by telephone and the content of
any resultant conversations with the surety.
3. Verification of Payment
a. Full Payment of the Claim is Made
If full payment (including interest, as applicable) is made within 30 calendar days of the date of
the letter to the surety, the DME MAC shall, no later than 10 calendar days after payment was
made:
(i) Update all applicable records to reflect that payment was made. (Payment from the surety
shall be treated as payment from the supplier for purposes of said record updates.)
(ii) Notify the applicable CMS Location (formerly CMS Regional Office) via letter or e-mail that
payment was made.
(iii) If the OIG imposed the CMP or assessment, notify the OIG via letter that payment was
made.
(iv) Send a mailed, faxed, or (preferably) e-mailed letter to the supplier (on which the enrollment
contractor shall be copied):
• Stating that payment has been made, the date the payment was received, and the amount of
said payment
• Containing the following quoted verbiage:
“You must, within 30 calendar days of the date of this letter, obtain and submit to the
contractor additional surety bond coverage in the amount of (insert the amount that the
surety paid) so as to ensure that your total coverage equals or exceeds the required $50,000
amount” (or higher if an elevated bond amount is involved due to a final adverse action).
Failure to timely do so will result in the revocation of your Medicare enrollment.
“Additional surety bond coverage may be obtained by (1) adding to the amount of your
existing surety bond so as to equal or exceed $50,000, or (2) cancelling your current surety
bond and securing a new $50,000 surety bond. (Obtaining a separate (insert the amount the
surety paid) surety bond is impermissible.) In either case, the effective date of the
additional coverage must be on or before the date that you submit the additional coverage to
the contractor.”
If the contractor does not receive the additional bond coverage within this 30-day period, it shall
revoke the DMEPOS supplier’s Medicare enrollment under § 424.535(a)(1) enrollment in
accordance with existing procedures. (The effective date of revocation shall be the date on
which the DME MAC received payment from the surety.) It is important that the contractor (1)
monitor the supplier’s surety bond status upon receiving a copy of the DME MAC’s letter to the
supplier and (2) take prompt action against the supplier (consistent with existing procedures) if
the supplier does not secure and timely submit the required additional coverage.
b. No Payment of the Claim is Made
If the surety fails to make any payment within the aforementioned 30-day timeframe, the DME
MAC shall:
(i) Continue collection efforts as outlined in Pub. 100-06, chapter 4;
(ii) No later than 14 days after the 30-day period expires, contact the surety via e-mail or
telephone to ascertain the reason for non-payment. Only one contact is necessary. A voice mail
message may be left. The contractor shall document any attempts to contact the surety by
telephone and the content of any resultant conversations with the surety.
(iii) No later than 14 days after Step 2 has been completed – and if full payment still has not been
received -- send the letter found in Section 10.7.16 of this chapter.
(iv) Include information relating to the surety’s non-payment in the report outlined in section
10.2.5.3.2(D).
c. Partial Payment of the Claim is Made
If the surety pays part of the claim within the 30-day period and a balance is still due and owing,
the DME MAC shall do the following:
(i) Continue collection efforts as outlined in Pub. 100-06, chapter 4;
(ii) No later than 14 days after the 30-day period expires, contact the surety via e-mail or
telephone to ascertain the reason for the partial non-payment. Only one contact is necessary. A
voice mail message may be left. The contractor shall document any attempts to contact the
surety by telephone and the content of any resultant conversations with the surety.
(iii) No later than 14 days after Step (ii) has been completed – and if full payment still has not
been received -- send the letter found in Section 10.7.16 of this chapter.
(iv) Include information relating to the surety’s partial non-payment in the report identified in
section 10.2.5.3.2(D).
(v) No later than 10 calendar days after the partial payment was made:
• Update all applicable records to reflect that partial payment was made. (Payment from the
surety shall be treated as payment from the supplier for purposes of said record updates.)
• Send a mailed, faxed, or (preferably) e-mailed letter to the supplier (on which the contractor
shall be copied):
o Stating that partial payment was made, the date the payment was received, and the
amount of said payment
o Containing the following quoted verbiage:
“You must, within 30 calendar days of the date of this letter, obtain and submit to the
contractor additional surety bond coverage in the amount of (insert the amount that the surety
paid) so as to ensure that your total coverage equals or exceeds the required $50,000 amount”
(or higher if an elevated bond amount is involved due to a final adverse action). Failure to
timely do so will result in the revocation of your Medicare enrollment.
“Additional surety bond coverage may be obtained by (1) adding to the amount of your
existing surety bond so as to equal or exceed $50,000, or (2) cancelling your current surety
bond and securing a new $50,000 surety bond. (Obtaining a separate (insert the amount the
surety paid) surety bond is impermissible.) In either case, the effective date of the additional
coverage must be on or before the date that you submit the additional coverage to the
contractor.”
If the contractor does not receive the additional bond coverage within this 30-day period, it shall
revoke the DMEPOS supplier’s Medicare enrollment under § 424.535(a)(1) in accordance with
existing procedures. (The effective date of revocation shall be the date on which the DME MAC
received payment from the surety.) It is important that the contractor (1) monitor the supplier’s
surety bond status upon receiving a copy of the DME MAC’s letter to the supplier and (2) take
prompt action against the supplier (consistent with existing procedures) if the supplier does not
secure and timely submit the required additional coverage.
4. Successful Appeal
If the DMEPOS supplier successfully appeals the CMP or assessment and the surety has already
made payment, CMS will – within 30 days of receiving notice of the successful appeal - notify
the surety via letter of the successful appeal and repay the surety.
D. Reporting Requirements
1. Contents
DME MACs shall compile a report on a quarterly basis in the format prescribed in existing CMS
directives. The report will capture the following elements:
a. Number of account receivables (debts) reviewed for possible surety bond letter development
b. Number of debts sent to the surety for recovery
c. Amounts recovered directly from sureties (1) during the quarter in question, and (2) since
March 3, 2009 (that is, the total/cumulative amount collected since the beginning of the surety
bond collection process)
d. Amounts paid by suppliers after the debt was referred to the surety for collection. The report
shall include the (1) amount for the quarter in question and (2) total/cumulative amount since
March 3, 2009.
e. Names of suppliers and billing numbers for which letters were sent to the surety and/or surety
bond recoveries were received
f. Names of suppliers on whose surety bond(s) the surety made payment in the last quarter and
to whom the DME MAC consequently sent notice to the supplier that it must obtain additional
surety bond coverage to reach the $50,000 threshold.
g. Names and addresses of sureties that have failed to make payment within the quarterly period.
For each instance of non-payment, the report shall identify (a) the amount that was requested, (b)
the amount that was paid (if any), (3) the name and tax identification number of the supplier in
question, and (4) the reason the surety did not pay (to the extent this can be determined).
2. Timing
The quarterly reports shall encompass the following time periods: January through March, April
through June, July through August, and September through December. Reports shall be
submitted to PEOG (with a copy to the DME MAC COR) --- via the following e-mail address:
XXXXXXXX@cms.hhs.gov --- by the 10th day of the month following the end of the reporting
quarter. Information on surety collections shall be reported once for each demand letter. That
action shall be reported only when the collection process has been fully completed for that
specific identified overpayment, which may be comprised of multiple claims. For example,
suppose the surety was sent a letter in December but its payment was not received until January.
That action would be documented in the report encompassing the months of January, February,
and March.