Skip to Main Content

CMS to mask health insurance claim number and social security number on contractor correspondence starting April 2019

The Centers for Medicare and Medicaid Services (CMS) has issued a reminder notice that starting April 1, 2019, its Coordination of Benefits and Recovery Program (COB&R) program will mask the social security number (SSN) and the SSN-portion of the health insurance claim number (HICN) on all ongoing letters. This change is being under the SSN Fraud Prevention Act of 2017.

CMS provides the following information in relation to this upcoming change:

The first five digits of the SSN will be masked with asterisks (e.g., *****1234A). All outgoing hardcopy and electronic letters will be included in this change. Note that the Medicare Beneficiary Identifier, which is not SSN-based, will not be impacted by this change and will continue to appear in full.

As part of this change, parties should expect to see the above referenced masked notations on conditional payment correspondence issued by the Benefits Coordination and Recovery Center (BCRC) and Commercial Repayment Center (CRC) starting this April. 

This change will not impact the Medicare Beneficiary Identifier (MBI) number. The MBI number is the new, unique, 11-byte number that has replaced the SSN-based Medicare identifier pursuant to the Medicare Access and CHIP Reauthorization Act (MACRA) of 2015. This law requires CMS to discontinue all SSN-based Medicare identifiers and reissue all new Medicare cards with MBIs by April 2019. CMS started reissuing the cards last spring and recently announced it had finalized distribution of the new cards ahead of schedule. 

On another note, this update should have no impact on the Workers’ Compensation Review Contractor’s (WCRC) activities as the WCRC has already been masking the HICN for several years in its communications about Workers’ Compensation Medicare Set-Asides.

If you have any questions, please contact Mark Popolizio at

Mark Popolizio, J.D.

Mark Popolizio, J.D., is vice president of MSP compliance, Casualty Solutions at Verisk. You can contact Mark at

You might also like

Visualize Subscribe

Get the best of Visualize!

Get the latest news and insights straight to your inbox.

Subscribe now

You will soon be redirected to the 3E website. If the page has not redirected, please visit the 3E site here. Please visit our newsroom to learn more about this agreement: Verisk Announces Sale of 3E Business to New Mountain Capital.