Medicare signature requirements: attestations and signature logs
On a Medicare medical review, a missing or illegible signature does not automatically sink a claim. Program Integrity Manual chapter 3, section 3.3.2.4 lets the reviewer use the whole medical record, and gives you a signature log for an illegible signature and an attestation statement for a missing one.
Written by Salman Saeed, CEO and Co-Founder · Reviewed by a Certified Medical Coder · Last reviewed October 2026In short: Medicare requires the person who provided, ordered or certified the service to be identifiable in the record. A reviewer may ask for a signature log or an attestation within 20 calendar days. An attestation cannot be used to backdate a signature that a rule requires before a given event.
What are Medicare's signature requirements?
For medical review, Medicare requires that the people responsible for the care of the beneficiary, including those who provide, order or certify items and services, be identifiable as such. Section 3.3.2.4 of Program Integrity Manual (PIM) chapter 3 cites Social Security Act sections 1815(a) and 1833(e) for this and tells contractors to consider the totality of the medical record.
The section applies to Medicare Administrative Contractors (MACs), Unified Program Integrity Contractors (UPICs), the Supplemental Medical Review Contractor, CERT and Recovery Audit Contractors (RACs). It says signatures are required on review for two separate purposes.
What happens when a signature is missing or illegible?
It depends on whether a rule requires the signature, and the manual sets a different remedy for each case.
| Situation | What the reviewer does |
|---|---|
| A statute, regulation, NCD or LCD requires the signature and it is missing | Uses the totality of the record. If it is not an event-timed requirement, the attestation process may be used. If that does not resolve it, the contractor may pursue a denial and other corrective action. |
| A required signature is illegible | The signature log process may be used. |
| No rule requires a signature and it is missing or illegible | The reviewer decides whether the signature is needed to identify the author for authenticity. If not, the missing or illegible signature is disregarded and the review continues on coverage, coding and billing. |
| No explicit rule, but authenticity concerns | The reviewer may pursue the attestation, signature log, denial or fraud referral process. |
There is also a shortcut. The manual says that if the reviewer finds reasons for denial unrelated to signatures, the reviewer need not proceed to signature authentication.
Which signatures does Medicare accept?
Handwritten
The manual defines a handwritten signature as a mark or sign by an individual on a document signifying knowledge, approval, acceptance or obligation. Stamped signatures are not typically acceptable. CMS permits a rubber stamp only for an author with a physical disability who can prove to the contractor that they cannot sign, and affixing the stamp certifies that the author reviewed the document.
Electronic
Are electronic signatures acceptable? The manual does not ban them. It says providers using electronic systems should recognize the potential for misuse or abuse, need systems and software protected against modification, and should apply administrative procedures that correspond to recognized standards and laws. The person whose name is on the alternate signature method and the provider bear responsibility for the authenticity of the information. Physicians are encouraged to check with their attorneys and malpractice insurers about alternative signature methods.
Scribes and AI transcription
When a scribe documents a note, CMS does not require the scribe to sign or date it. The treating physician or non-physician practitioner's signature indicates that they affirm the note adequately documents the care. The manual says the same practitioner concurrence is required when artificial intelligence technology captures the transcription of medical record entries.
When can a signature log be used?
A signature log is for an illegible signature or initials. It lists the typed or printed name of the author next to the initials or signature, and it can sit on the page where the initials appear or be a separate document.
Reviewers are encouraged to ask providers to list credentials in the log, but they shall not deny a claim for a log that lacks credentials. They shall consider every log submitted regardless of when it was created. A log solves an identification problem; it does not supply a signature that is not there.
What is a signature attestation statement?
An attestation statement is a signed, dated statement by the author of a medical record entry confirming that the entry reflects their signature or notations. To be valid for Medicare review it must be signed and dated by the author of the entry and contain enough information to identify the beneficiary.
The manual offers sample wording in which the practitioner prints their name, names the date of service and their credentials, and attests that the information is true, accurate and complete, and that falsification may lead to administrative, civil or criminal liability. CMS neither requires nor instructs providers to use a certain form, so a different format that meets the validity points is acceptable.
| Attestation rule | Source in section 3.3.2.4 |
|---|---|
| Must be signed and dated by the author of the entry | Part D |
| Must identify the beneficiary | Part D |
| Not considered if there is no associated medical record entry | Note in Part D |
| Not accepted from a different person, even in the same group | Note in Part D |
| Accepted regardless of creation date, unless a rule requires the signature before a given event or date | Note in Part D |
| Cannot backdate a plan of care that must be signed before therapy begins | Example in Part D |
How long do I have to respond, and can a missing signature be fixed after a denial?
When the contractor needs an attestation or log it shall ask whether the billing entity wants to submit one within 20 calendar days. The CERT contractor is excluded from that window. The 20 days begin on the date of the phone contact or the date the request letter is received, and for mail without receipt notification the contractor counts the sent date plus anticipated mail time.
If a reviewer asked for an attestation or log, the time to complete the review is extended by 15 calendar days from receipt of it. If the submission resolves the issue, the reviewer considers the contents of the entry.
A MAC phones a hospital billing office about an illegible physician signature on Monday, September 14, 2026.
The manual governs the review stage, so ask for the attestation or log request in writing and answer it inside the window. If a denial is issued anyway, the levels and deadlines are in Medicare appeal levels. Late additions to a record are different from signatures: section 3.3.2.5 requires the date and author of any amendment, correction or delayed entry to be identifiable and the change clearly and permanently denoted.
Does the signature need a date, and what about ER records?
If the relevant statute, regulation, NCD and LCD are silent on whether a signature must be dated, reviewers shall make sure the documentation has enough information to tell the date the service was performed or ordered. The manual's example is a one-page hospital response with three entries: a dated therapy note, an undated physician note and a dated nursing note, where the reviewer concludes the physician visit was on October 4th.
Section 3.3.2.4 applies to the records a contractor reviews and does not carve out any care setting, so the same tests apply to emergency department physician notes, nursing notes and orders reviewed in an audit. An ER group that uses scribes should make sure the treating practitioner's own signature is on the note. The audit side of this is covered in billing and coding audits, and record handling in medical records management.
Where signatures look false rather than missing, section F says suspected fraud shall result in a referral to the UPIC. For coding levels in the ED, see ED facility level coding and medical coding.
If this rule is costing you claims, our denial management team can help.
We check every rule, code and deadline against the official source. See our editorial policy.
Common questions
Straight answers from the team that does the work.
Ask a billing lead directly. A 20-minute call, Monday to Friday, 9am to 5pm Eastern.
01What are Medicare's signature requirements?
Under Program Integrity Manual chapter 3, section 3.3.2.4, the people who provide, order or certify services must be identifiable in the record. Signatures are required to meet a statute, regulation, NCD or LCD, and to resolve authenticity concerns. Reviewers weigh the whole record.
02What is a signature attestation statement?
A statement signed and dated by the author of a medical record entry that identifies the beneficiary and confirms the entry reflects their signature or notations. The manual gives sample wording but does not require a set format. An attestation from anyone other than the author is not considered.
03When can a signature log be used?
When a signature or initials are illegible. The log lists the author's printed name beside the initials or signature, on the page itself or on a separate document. Reviewers must consider logs whatever their creation date and cannot deny a claim because credentials are missing from a log.
04Are electronic signatures acceptable?
The manual does not prohibit them. It says providers need systems protected against modification, should follow recognized standards and laws, and that the named individual and the provider are responsible for authenticity. Stamped signatures are not typically acceptable, except for an author with a physical disability who can prove it.
05Can a missing signature be fixed after a denial?
During review, often yes: the manual tells reviewers to consider attestations whatever their creation date, unless a rule requires the signature before a given event. An attestation cannot backdate, for example, a plan of care that must be signed before therapy begins. After a denial, see Medicare appeal levels for the deadlines.
06Do requirements apply to ER records?
Yes. Section 3.3.2.4 applies to the records Medicare review contractors examine and does not carve out the emergency department. ER notes follow the same tests for signature, attestation, log and date, and a scribe entry needs the treating practitioner's signature to show they affirm the note.
Documentation gaps costing claims?
Denials worked within 48 hours.