Why Bomi Reverifies TIN and NPI Records

Last updated: August 18, 2026.

The most common reason Bomi resubmits a credentialing or roster application is not that we doubt a clinician was credentialed. It is that the payer may have the clinician’s individual NPI on file without the practice’s current organization NPI and billing TIN attached to it.

That discrepancy is enough to break the billing relationship: the payer can recognize the therapist while failing to recognize the therapist as participating under this practice.

Does the payer currently connect this clinician’s Type 1 NPI to this practice’s Type 2 NPI, billing TIN, service location, and product or network—with a usable effective date?

Three Identifiers Must Describe One Billing Relationship

A Type 1 NPI identifies the individual clinician. A Type 2 NPI identifies an organization such as a group practice. The TIN identifies the person or entity reporting the income. They are related, but they are not interchangeable.

CMS makes the distinction explicit. Its NPI fact sheet says Type 1 NPIs are for individuals and Type 2 NPIs are for organizations, including physician groups. It also says having an NPI does not ensure credentialing, guarantee payment, or enroll a provider in a health plan—and that updating NPPES does not automatically update Medicare enrollment. Read the CMS NPI Fact Sheet.

The professional claim itself depends on separate fields. CMS instructs billers to report the rendering clinician’s NPI in Item 24J, the federal tax ID in Item 25, and the billing provider’s NPI in Item 33a. A payer therefore has to recognize the whole combination, not merely find the therapist’s NPI somewhere in its system. Read the CMS-1500 completion instructions.

UnitedHealthcare applies the same logic: each delegate-roster row represents a unique provider-name, NPI, location, and TIN combination, and its portal asks practices to verify each professional associated with a specific TIN. Read the UnitedHealthcare Delegate Roster Submission Data Dictionary Review UnitedHealthcare’s provider-data update process.

This is why “I am in-network” and “our group is in-network” can both sound correct while claims still fail. The payer might have the individual NPI under an old employer’s TIN, the new group TIN without the clinician on its roster, or the right identifiers attached to a different product or location.

What a TIN/NPI Discrepancy Looks Like

• The therapist’s Type 1 NPI is active, but the payer links it to a former group or solo TIN.

• The practice’s Type 2 NPI is recognized, but the payer still has the prior legal entity’s TIN.

• The group and TIN are active, but the therapist is absent from that roster or product.

• The directory shows the therapist, but the payer’s claims or enrollment record does not contain the same combination.

None of these necessarily means the practice made a mistake. Payers maintain credentialing, contracting, directory, and claims data across separate workflows, and an update in one place does not prove every downstream relationship changed with it.

Payer Records Really Do Drift

Federal policy assumes provider data changes and requires repeated verification. Under the No Surprises Act, commercial plans and issuers must verify provider-directory information at least every 90 days, update their systems after receiving changes, and remove providers whose in-network status they cannot verify. Providers must submit updates when a network agreement begins or ends and when directory information materially changes. Read the CMS overview of provider-directory requirements.

CAQH found that different plan contracts, technologies, and formats make provider data difficult to synchronize, and that outside data cannot replace direct outreach. Read The Hidden Causes of Inaccurate Provider Directories. The HHS Office of Inspector General likewise found inactive “ghost” providers in Medicare Advantage and Medicaid managed-care behavioral health directories. Read the HHS OIG behavioral health network report.

A directory is evidence, not proof that the payer’s billing file contains the required TIN/NPI relationship. A current, scoped payer determination is stronger evidence.

Resubmitting Has No Adverse Credentialing Consequence

A correctly routed reverification or record-update request does not, by itself, hurt the provider’s standing. It is not a complaint, sanction, termination request, or quality event. It asks the payer to confirm or correct the relationship already represented by the NPI and TIN data.

CMS draws this line clearly. The same Medicare enrollment system handles initial enrollment, revalidation, and changes to existing information, while “final adverse actions” are a separate category covering events such as license suspension, program exclusion, or certain felony convictions. CMS also says it generally does not take administrative action merely because revalidation reveals information that was not updated on time, unless the underlying change made the enrollment ineligible. Read the CMS Medicare provider-enrollment guidance.

Routine rechecking is built into credentialing: NCQA requires recredentialing every three years, while Medicare and federal Medicaid guidance generally require revalidation every five years. Read the NCQA credentialing standards overview Read the CMS Medicare revalidation guidance Read the CMS Medicaid revalidation guidance Minnesota says timely, eligible Medicaid providers should not experience a billing interruption during revalidation. Read the Minnesota DHS revalidation FAQ.

Commercial payers publish routine maintenance paths too. Aetna provides group-change forms, and Cigna uses current CAQH data for recredentialing and asks for the NPI or TIN when checking status. Review Aetna’s provider forms Read Cigna’s credentialing and recredentialing guidance.

The payer may confirm the record, request documents, return a duplicate, or require a different form. Those are administrative outcomes—not repercussions to the provider’s standing. An underlying eligibility problem can affect participation; asking the payer to verify the TIN/NPI relationship does not create that problem.

What Bomi Means by “Resubmit”

Bomi does not blindly send duplicate applications to every payer. We use “resubmit” as shorthand for reopening the payer’s current workflow when the exact participation relationship cannot be verified. Depending on the payer, that may be:

• a roster addition for the clinician under the group’s TIN;

• an affiliation or location update;

• a demographic or TIN change request;

• a recredentialing or CAQH re-attestation;

• or a new participation application when the payer confirms that one is required.

Bomi does not ask the payer to terminate or replace an existing relationship while checking it. We identify the exact individual NPI, organization NPI, TIN, location, product, and network; preserve the submission confirmation; and ask for the effective date in writing.

The correct workflow matters. Medicare returns unsolicited early revalidations but directs providers to use PECOS for current enrollment changes. Read the CMS Medicare enrollment maintenance rules Bomi therefore submits the payer’s current-state transaction—not a random duplicate form.

When Bomi Will Reverify

We reverify when the payer cannot confirm the exact billing setup, especially after a new group affiliation, TIN, entity, or location change—or when the directory, claims, portal, and phone representatives disagree.

The methodology: do not rely on memory, an old contract, or a directory screenshot when the payer cannot verify the live relationship. Put the exact relationship back through the payer’s own workflow and obtain a current answer.

For a behavioral health practice, that is not overcautious credentialing. It is how you keep “we should be in-network” from becoming months of avoidable denials.

Changing a practice entity or TIN? Use Bomi’s payer-by-payer EIN change checklist to preserve the working claim path while each payer updates its records.