Why am I getting a letter from CMS?

Editorial team Published on

You likely received a letter from the Centers for Medicare & Medicaid Services (CMS) because of a data security update, an account confirmation, or a change to your Medicare benefits.

Common Reasons for a CMS Letter

  • Data Incident Notification: CMS sends letters if your personal information or Medicare account was potentially affected by a data breach or unauthorized activity, often including a notice that they are issuing you a new Medicare card with a unique number.
  • Account Activity Confirmation: You may get a letter confirming changes or actions taken on your secure Medicare.gov account, such as setting up a new profile or changing passwords.
  • Medicare Card or Number Updates: CMS occasionally issues replacement cards or new Medicare Beneficiary Identifiers (MBIs) to protect your identity.
  • Employer Coverage Coordination: If you are an employer or have dual health coverage, CMS may write regarding primary and secondary payer coordination.

How to Verify the Letter

  • Check for Scams: Legitimate CMS letters will never ask you to pay money, wire cash, or provide sensitive personal details like a bank account number over the phone or internet.
  • Call Official Support: If you are unsure if the mail is real, call Medicare directly at 1-800-MEDICARE (1-800-633-4227).
  • Review Online: Log into your official Medicare Account to check for alerts or messages matching the letter.

Why did I get a bill from CMS Medicare?

You received a bill from the Centers for Medicare & Medicaid Services (CMS) because you owe a direct payment for your monthly Medicare Premium Bill (CMS-500) or an income-related surcharge Why Did I Receive a Notice Bill for My Medicare Premiums?.

Most people do not get a physical bill because their premiums are automatically taken out of their Social Security benefits.

Common Reasons for a CMS Bill

  • You do not collect Social Security yet: If you are enrolled in Medicare Part A or Part B but are not yet receiving Social Security or Railroad Retirement Board benefits, you must pay your premiums directly.
  • The bill covers multiple months: Medicare Part B is often billed Why Is My First Medicare Bill So High? quarterly (every 3 months) in advance. Your first bill is often higher because it includes past months owed from when your coverage first started plus the upcoming quarter.
  • You owe an IRMAA surcharge: If your modified adjusted gross income is above a certain limit, you must pay an extra charge called IRMAA (Income-Related Monthly Adjustment Amount) for Part B or Part D, even if your main premium is deducted elsewhere.
  • Your Social Security benefit is too low: If your monthly Social Security benefit does not cover the full cost of your combined premiums, you will get a bill for the difference.

Is CMS a legitimate company?

Yes, "CMS" can refer to a few different legitimate organizations, but the acronym is also frequently used by scammers.

1. Centers for Medicare & Medicaid Services (U.S. Government)

  • What it is: A legitimate federal agency inside the U.S. Department of Health and Human Services (HHS) that manages Medicare, Medicaid, and health insurance marketplaces.
  • Scam warning: Fraudsters frequently impersonate the federal to run phishing scams targeting medical providers via fake fax or email audits, or individuals regarding Medicare cards. The real agency does not initiate medical record audits via unsolicited faxes.

2. Capital Management Services, LP (Debt Collection)

  • What it is: Capital Management Services, LP is a legitimate, licensed third-party debt collection agency based in Buffalo, New York, operating since 2000.
  • Reputation: While legally registered, they have received numerous consumer complaints regarding aggressive collection tactics and communication issues.

3. CMS Law (CMS Cameron McKenna Nabarro Olswang LLP)

  • What it is: A large, legitimate international law firm headquartered in the UK.
  • Scam warning: The firm has issued warnings that scammers frequently use fake email domains mimicking their name to trick people into fake asset-purchasing deals or insolvency scams.

4. Central Management Solutions (Debt/Collections)

  • Users on Reddit generally agree that companies under similar names like Central Management Solutions often refuse to provide written proof of debt, displaying traits common to predatory or illegitimate collection operations.

Is CMS Social Security?

No, CMS (Centers for Medicare & Medicaid Services) is not Social Security, but the two federal agencies work closely together.

Key Differences

  • CMS (Centers for Medicare & Medicaid Services): A federal agency within the Department of Health and Human Services that administers the Medicare program, Medicaid, and the Children's Health Insurance Program (CHIP).
  • Social Security Administration (SSA): A separate federal agency that provides monthly income and retirement benefits.

How They Work Together

  • Enrollment: While CMS manages Medicare, the Social Security Administration processes applications and handles enrollment for Original Medicare (Parts A and B).
  • Automatic Sign-ups: People turning 65 who already receive Social Security retirement or disability benefits are automatically enrolled in Medicare through the SSA.

What is a CMS investigation?

A CMS investigation most commonly refers to a federal inquiry or audit by the Centers for Medicare & Medicaid Services (CMS) into healthcare providers for billing fraud, waste, or patient safety violations, but it can also refer to state-level financial audits of public school districts like Charlotte-Mecklenburg Schools (CMS).

Healthcare CMS Investigations (Centers for Medicare & Medicaid Services)

When dealing with federal healthcare programs, a CMS investigation looks at whether a clinic, hospital, or provider is following federal rules.

  • Triggers: Investigations start due to unusual billing patterns, patient complaints, data mining, or self-reports.
  • Common Types:
    • Fraud and Abuse Audits: Probes into false billing, upcoding (charging for a more expensive service than performed), unbundling (billing separate parts of a procedure as individual services), or kickbacks. Contractors like UPICs (Unified Program Integrity Contractors) handle these reviews.
    • Immediate Jeopardy Probes: Urgent safety reviews triggered when a facility’s conditions place patients at risk for serious injury or death. You can read more about these processes in Understanding CMS “Immediate Jeopardy” Investigations in Healthcare Facilities.
  • What to Do: Healthcare professionals facing unannounced visits are advised to remain calm, avoid on-the-spot document production if it disrupts patient care, and contact legal counsel immediately. Learn more via CMS Investigations: What Healthcare Professionals Need to Know.

Educational CMS Investigations (Charlotte-Mecklenburg Schools)

In regional news, a CMS investigation can refer to state audits of the Charlotte-Mecklenburg school district in North Carolina.

  • Triggers: Financial irregularities, questionable contract signings, or spending transparency issues.
  • Agencies Involved: The North Carolina Department of Public Instruction (DPI), the State Auditor's Office, and the State Bureau of Investigation (SBI).
  • Goals: These reviews determine if public education funds were managed according to state fiscal laws and to protect public trust.

What Should I Know About CMS' MSA Requirements?

9 related questions found

Is CMS the same thing as Medicare?

No, CMS is not the same thing as Medicare.

  • CMS stands for the Centers for Medicare & Medicaid Services, which is the federal government agency inside the U.S. Department of Health and Human Services.
  • Medicare is the actual government-funded health insurance program.

The Difference

  • CMS (The Agency): The administrative body that runs, manages, and oversees federal healthcare programs. Besides Medicare, CMS also oversees Medicaid, the Children's Health Insurance Program (CHIP), and the Health Insurance Marketplace.
  • Medicare (The Program): The specific health insurance benefit provided to people who are 65 or older, or who have certain disabilities or conditions.

What are the CMS incident-to-billing guidelines for 2026?

CMS incident-to billing allows services provided by auxiliary staff or non-physician practitioners to be billed under a supervising physician's National Provider Identifier (NPI) at 100% of the Medicare Physician Fee Schedule rate instead of an NPP's standard 85% rate.

Core 2026 Requirements

  • Noninstitutional Setting: Must occur in an office or clinic, not a hospital or skilled nursing facility.
  • Established Patient/Plan: The supervising physician must first perform an initial service and establish the diagnosis and treatment plan. New patients or new problems do not qualify for incident-to billing on the initial visit.
  • Direct Supervision Update: Effective January 1, 2026, CMS permanently allows real-time, two-way audio-video interactive telecommunications to satisfy direct supervision requirements for most services, meaning the physician does not always need to be physically in the office suite, though audio-only does not qualify.
  • Exclusions: Services with global surgery indicators of 010 or 090 (10-day or 90-day global periods) are excluded from virtual direct supervision and require physical presence.
  • State Law: Staff members must act within their permitted state scope of practice and employment relationship to the billing physician.

Why am I getting mail from CMS?

You likely received a letter from the Centers for Medicare & Medicaid Services (CMS) because of a data security update, an account confirmation, or a change to your Medicare benefits.

Common Reasons for a CMS Letter

  • Data Incident Notification: CMS sends letters if your personal information or Medicare account was potentially affected by a data breach or unauthorized activity, often including a notice that they are issuing you a new Medicare card with a unique number.
  • Account Activity Confirmation: You may get a letter confirming changes or actions taken on your secure Medicare.gov account, such as setting up a new profile or changing passwords.
  • Medicare Card or Number Updates: CMS occasionally issues replacement cards or new Medicare Beneficiary Identifiers (MBIs) to protect your identity.
  • Employer Coverage Coordination: If you are an employer or have dual health coverage, CMS may write regarding primary and secondary payer coordination.

How to Verify the Letter

  • Check for Scams: Legitimate CMS letters will never ask you to pay money, wire cash, or provide sensitive personal details like a bank account number over the phone or internet.
  • Call Official Support: If you are unsure if the mail is real, call Medicare directly at 1-800-MEDICARE (1-800-633-4227).
  • Review Online: Log into your official Medicare Account to check for alerts or messages matching the letter.

What is a CMS Medicare payment?

A CMS Medicare payment can refer to either a payment you make to the Centers for Medicare & Medicaid Services (CMS) for your coverage or a payment CMS makes to a healthcare provider for medical services.

Paying Your Medicare Premiums (To CMS)

If you pay your Medicare Part A, Part B, or Part D premiums directly rather than having them taken out of your Social Security check, a CMS Medicare payment is the money you send to the government.

  • Online Methods: You can pay securely using a credit card, debit card, or checking account through your Official Medicare Account.
  • Automatic Deductions: Medicare Easy Pay takes your monthly premium straight from your bank account automatically.
  • By Mail: You can mail a check or money order using the payment stub from your Medicare Premium Bill (CMS-500).

Provider Reimbursements (From CMS)

If you are looking at it from a medical or business view, a CMS payment is how Medicare reimburses doctors, hospitals, and clinics for treating patients.

  • Prospective Payment System (PPS): Medicare usually pays a set, predetermined rate for a specific service or diagnosis (such as a hospital stay), no matter how much care or how many resources the provider actually uses.
  • Statutory Formulas: Payment amounts are calculated using federal classification codes and relative cost averages for specific geographic areas and medical settings.

What are the CMS Medicare guidelines for 2026?

The Centers for Medicare & Medicaid Services (CMS) finalized major updates for Calendar Year (CY) 2026 focusing on payment adjustments, the Medicare Advantage program, and streamlined reporting.

Medicare Advantage and Part D Updates

  • Payment Increases: Government payments to Medicare Advantage (MA) plans increase by an average of 5.06% (about $25 billion).
  • Benefit Alignment: Part D rules align with the redesigned benefit structure and integrate provisions from the Inflation Reduction Act to manage prescription drug cost-sharing.
  • Prescription Payment Plan: Codifies operations for the Medicare Prescription Payment Plan, featuring an automatic election renewal unless the enrollee opts out.

Physician Fee Schedule (PFS) Changes

  • Conversion and Rates: Implements a 2.7% increase to the Medicare Economic Index (MEI) and updates valuation rules under the CY 2026 Physician Fee Schedule Final Rule.
  • Telehealth and Supervision: Expands covered telehealth services, removes specific frequency limits, and adopts virtual direct supervision rules.
  • Coding Adjustments: Expands the G2211 evaluation and management add-on code to home and residence visits, and introduces new behavioral health and Advanced Primary Care Management (APCM) codes.

Administrative and Regulatory Reductions

  • Quality Measures: Reduces overall administrative reporting burden by lowering the number of quality measures by 5% year-over-year.
  • Inpatient-Only List: Continues the three-year phase-out of the inpatient-only list by removing nearly 300 predominantly musculoskeletal procedures.