Georgia Medicare Beneficiary Identifier MBI Transition 2026

If you are a Medicare beneficiary in Georgia and you've been on Medicare longer than the spring of 2018, you remember the day you opened the mailbox and found a new Medicare card. The card looked different. The familiar number printed on the front, your Health Insurance Claim Number (HICN), which was based on your Social Security Number, was gone. In its place was a new, randomly-generated 11-character identifier called the Medicare Beneficiary Identifier (MBI).

That change was not cosmetic. It was the largest beneficiary identifier transition in Medicare's history, mandated by Congress, executed across hundreds of millions of records, and accompanied by a complete overhaul of provider billing systems, MAC claims processing infrastructure, Medicare Advantage and Part D plan operations, and beneficiary documentation. The change was authorized by Section 501 of the Medicare Access and CHIP Reauthorization Act of 2015 (MACRA).

The reason was straightforward. For more than 50 years from Medicare's enactment in 1965, every beneficiary's Medicare card prominently displayed their Social Security Number as the basis of the HICN. The HICN was on every claim, every coverage document, every Medigap policy, every provider record, every Medicare Summary Notice. After major healthcare data breaches in the mid-2010s, including the Anthem and OPM breaches, the security implications of routinely exposing SSNs in healthcare records had become indefensible. MACRA Section 501 required CMS to remove SSNs from Medicare cards and to assign every beneficiary a new MBI.

CMS executed the transition between April 2018 and April 2019. During a transition period from April 1, 2018 through December 31, 2019, both HICN and MBI were accepted in claims, eligibility queries, and other Medicare transactions. Beginning January 1, 2020, MBI-only requirements took effect. Today, every Georgia Medicare beneficiary's identifier in every Medicare transaction is the MBI.1

This guide explains the MACRA statutory mandate, the MBI structure, the transition timeline, the new card design, the provider system conversion, how Palmetto GBA (the Part A/B MAC for Alabama, Georgia, and Tennessee) and CGS Administrators (the DME MAC for Georgia) implemented the change, how to request a replacement card if yours was lost or never received, how the MBI interacts with Medicare Advantage and Part D plan-issued cards, how Railroad Retirement Beneficiaries (RRB) fit in, the identity theft reduction rationale, common compliance and beneficiary issues, and how this transition continues to affect every Medicare transaction in Georgia today.

The transition is complete. The MBI is in operation. The HICN is retired. The question for Georgia beneficiaries today is operational, covering how to get a replacement card, how to recognize scam calls asking for "Medicare number verification," how to coordinate the MBI with Medicaid for dual eligibles, and how to ensure providers have the correct MBI on file.

The statutory mandate

MACRA 2015

• Medicare Access and CHIP Reauthorization Act of 2015 (MACRA)
• Signed in 2015 by President Obama
• Repealed the Sustainable Growth Rate (SGR) physician payment formula
• Established the Quality Payment Program (MIPS and Advanced APMs)
• Among many other provisions, included Section 501 mandating SSN removal from Medicare cards1

Section 501: What It Required

1. Removal of SSNs from Medicare cards within 4 years of enactment
2. Replacement identifier that does not include SSN, BIC, or any embedded SSN
3. Distribution of new cards to all Medicare beneficiaries
4. Update of all CMS, MAC, MA plan, and Part D plan systems
5. Coordination with SSA, RRB, and other relevant agencies
6. Beneficiary education

Why MACRA Acted

• Anthem data breach (2015): tens of millions of records compromised, including SSNs
• OPM data breach (2014-2015): tens of millions of records compromised
• Numerous smaller healthcare breaches
• GAO and OIG reports documenting SSN exposure risk
• Bipartisan beneficiary advocacy organization concern (AARP, Medicare Rights Center, others)

The HICN: What Was Being Replaced

How the HICN Was Built

• Social Security Number (typically the wage earner's)
• Followed by one- or two-character BIC suffix
• Examples:
  • 123-45-6789-A: primary wage earner
  • 123-45-6789-B: spouse of wage earner
  • 123-45-6789-D: widow(er)
  • 123-45-6789-T: uninsured (Part A entitlement based on transitional or non-contributory status)
  • 123-45-6789-M: Part B only without Part A
• Multiple BIC codes existed for various entitlement categories

Problems

• SSN exposed on every Medicare card
• SSN exposed on every claim
• SSN exposed in provider records
• Spouses and widows had the wage earner's SSN with a different suffix, meaning multiple people were associated with one SSN
• Identity theft risk
• Difficult to remediate after a breach (one cannot change one's SSN)

The Medicare Beneficiary Identifier (MBI): What Replaced the HICN

How the MBI Is Built

The MBI is 11 characters made up only of numbers (0-9) and uppercase letters, with a fixed pattern: the 2nd, 5th, 8th, and 9th positions are always a letter, and the 1st, 4th, 7th, 10th, and 11th positions are always a number (an example format is 1EG4-TE5-MK73). Six letters are deliberately excluded from the character set, S, L, O, I, B, and Z, to avoid confusion between similar-looking letters and numbers such as "0" and "O." The characters are "non-intelligent," meaning they carry no hidden meaning and do not encode a Social Security Number, date of birth, or any beneficiary characteristic.1

Key properties

• Randomly generated by SSA
• No embedded meaning, does not encode SSN, DOB, age, sex, or any beneficiary characteristic
• Unique to each beneficiary: spouses, widows, and disabled adult children each get their own MBI (no shared identifier as with HICN)
• Stable: does not change with MA enrollment, state moves, or status changes (with limited exceptions)

Generation and distribution

• SSA generates MBIs for Medicare beneficiaries
• CMS coordinates distribution of new cards
• New cards mailed in geographic waves April 2018 through April 2019
• Beneficiaries received cards at their address of record

Medicare Beneficiary Identifier (MBI) Transition Timeline

April 2018

• Mass mailing of new cards began
• Mailing proceeded in geographic waves across the country
• New enrollees beginning April 2018 received MBI cards directly

April 1, 2018 through December 31, 2019 (transition period)

• HICN and MBI both accepted in claims
• Eligibility queries returned MBI
• Provider lookup tools available
• Beneficiary education campaign underway

Through April 2019

• All Medicare beneficiaries scheduled to receive new cards

January 1, 2020 to present

• MBI-only for Medicare transactions
• HICN no longer accepted in claims (with limited exceptions)
• All eligibility queries return MBI

Since January 1, 2020, Medicare claims must be submitted using the MBI no matter what date the service was performed.1

The new Medicare card design

• Red, white, and blue color scheme retained for recognizability
• MBI displayed prominently (replacing HICN)
• "Medicare Beneficiary Identifier" label
• Effective dates for Part A and Part B
• No SSN anywhere on card
• Paper card (not plastic), same material as historical card

Provider compliance

Since January 1, 2020, every Medicare claim must carry the MBI regardless of the date of service, so a Georgia provider's systems, verification workflow, and documentation all have to key on the MBI.1

System conversion

• Provider billing systems updated to accept MBI
• Practice management systems (PMS), electronic health records (EHR), clearinghouses, and payers all updated
• Transition support from MACs, vendors, and professional associations

Eligibility verification

• Providers verify MBI through:
  • Medicare card (beneficiary brings to appointment)
  • HIPAA Eligibility Transaction System (HETS) query
  • MAC provider portal (Palmetto GBA, CGS Administrators)
  • MBI Lookup Tool (CMS-provided during transition)

Documentation

• MBI on all claims
• MBI in EHR
• MBI in coverage documents
• MBI in beneficiary correspondence

MAC implementation in Georgia

Georgia's fee-for-service Medicare claims are handled by two different contractors. Palmetto GBA, LLC is the A/B MAC for Jurisdiction J, which processes fee-for-service Medicare Part A and Part B claims for Alabama, Georgia, and Tennessee under CMS contract number 75FCMC24C0023, effective September 1, 2024, with an anticipated contract end date of August 2031. Durable medical equipment claims in those states are processed separately: CGS Administrators, LLC is the DME MAC for Jurisdiction C, which processes fee-for-service Medicare DME claims for a 17-state southern territory that includes Alabama, Georgia, and Tennessee. Contractor identities change by procurement cycle, so verify the current contractor before relying on the name.2

Palmetto GBA (Part A/B MAC for Alabama, Georgia, and Tennessee)

• Updated all claims processing systems
• Provided provider education throughout transition
• Offered MBI lookup tools
• Coordinated with Georgia health systems

CGS Administrators (DME MAC for Georgia)

• Updated DMEPOS claims processing systems
• Coordinated with DMEPOS suppliers including major Atlanta CBA suppliers
• Provided supplier education

Coordination with Georgia Medicaid

• Georgia Department of Community Health (DCH) administers Medicaid
• Dual eligibles have both Medicare MBI and Georgia Medicaid ID
• Both identifiers used in dual coverage scenarios

Railroad Retirement Beneficiaries (RRB)

• Some Medicare beneficiaries receive benefits through the Railroad Retirement Board rather than SSA
• RRB beneficiaries also have MBIs
• New cards distributed through coordination between SSA, CMS, and RRB
• Replacement cards for RRB beneficiaries: contact the Railroad Retirement Board directly at 1-877-772-5772 or through rrb.gov; the RRB mails the card within about 30 days3

Medicare Advantage and Part D coordination

• MA plans (including Aetna, Humana, UnitedHealthcare, Kaiser, WellCare, others operating in Georgia) issue plan-specific cards with plan ID
• MA card and Medicare card with MBI; beneficiaries may carry both
• Part D plans issue plan-specific cards
• MBI is the underlying CMS identifier; plan IDs are for plan-specific operations
• If you are enrolled in a Medicare Advantage or Part D plan, you use that plan's own member ID card to get services, and a lost or damaged plan card is replaced by calling the plan, not Medicare3

Identity theft and Medicare scams

Why this matters

• Medicare scams remain common
• Scammers may ask for "Medicare number verification"
• The MBI is treated as sensitive; beneficiaries should not share it casually
• However, the MBI is needed for legitimate healthcare encounters

If you think you were targeted, take a breath: you are not on the hook for anything. Medicare will never call, email, or text you out of the blue to ask for your Medicare number or to charge you for a card, and a real Medicare card is always free, so no legitimate replacement card ever costs money. If a caller pressured you or you gave out your number, hang up and call 1-800-MEDICARE (1-800-633-4227) directly to report it and confirm your account. If your number was misused, CMS can issue you a new MBI on a new card at no cost.1,4

Red flags

• Unsolicited calls asking for Medicare number
• Pressure to "verify" Medicare information
• Offers of free medical equipment or "Medicare benefits"
• Threats of Medicare termination
• Requests for SSN or financial information

Legitimate uses

• Healthcare provider eligibility check
• Pharmacy at point of service
• Medicare provider portal authenticated access
• Medicare appeals correspondence

Reporting Medicare fraud

• 1-800-MEDICARE
• HHS OIG Hotline 1-800-HHS-TIPS (1-800-447-8477)
• Senior Medicare Patrol (SMP), in Georgia via GeorgiaCares

Replacement card process

Through Medicare.gov

1. Log into MyMedicare.gov
2. Request replacement card
3. Card mailed to address on file

Through 1-800-MEDICARE

• Call 1-800-633-42274
• Identity verification
• Request replacement

Through Social Security Administration

• Visit local SSA office
• Online request through ssa.gov
• Phone: 1-800-772-12135

For RRB beneficiaries

• Contact the Railroad Retirement Board through rrb.gov

Timing

• A mailed replacement typically arrives in about 30 days
• You can request only one replacement card per 30-day period
• If you need proof of coverage sooner, print an official copy instantly from your secure Medicare account
• Update address with SSA if address has changed3

Worked examples

The following are hypothetical scenarios that illustrate how the MBI shows up in everyday situations for Georgia beneficiaries.

Example 1: Fulton County, Age 70, New Card Receipt 2018

Patient: 70-year-old Fulton County resident, on Medicare since 2017. Experience: Received new Medicare card with MBI in May 2018 during Georgia's wave of mailings. Old HICN card retired. Provider visits: During transition period (April 2018 through December 2019), Emory practice accepted either HICN or MBI. After January 1, 2020, only MBI accepted. Outcome: Smooth transition; new card stored securely; MBI on file with all providers.

Example 2: DeKalb County, Age 75, Lost Card Replacement

Patient: 75-year-old DeKalb County resident, misplaced Medicare card in 2025. Process: Logged into MyMedicare.gov, requested replacement card; received new card within approximately 3 weeks at home address. Cost: Free; replacement cards are not charged to beneficiary. Alternative: Could have called 1-800-MEDICARE or visited SSA office.

Example 3: Cobb County, Age 68, Dual Eligible Coordination

Patient: 68-year-old Cobb County resident, dual eligible (Medicare + Georgia Medicaid). Identifiers:

• Medicare MBI on Medicare card
• Georgia Medicaid Member ID on Medicaid card
• Both used: providers verify both for proper billing coordination

Coordination: Medicare pays primary; Medicaid pays secondary or covers Medicare cost-sharing under QMB or another Medicare Savings Program.

Best practices for Georgia providers

1. Verify the MBI at every visit through the MAC portal or a HETS eligibility query
2. Store the MBI securely in the EHR and practice management systems, under the same HIPAA safeguards as any protected health information
3. Train front-office staff on MBI handling and scam awareness so they can reassure and warn beneficiaries
4. Educate beneficiaries to bring their Medicare card to appointments
5. Reconcile a new MBI promptly when CMS issues one (rare, but it happens after a suspected compromise)
6. Verify the MA plan ID separately from the MBI for Medicare Advantage beneficiaries
7. Coordinate with Georgia Medicaid for dual eligibles, keeping both the MBI and the Medicaid Member ID on file
8. Reference Palmetto GBA and CGS guidance and CMS New Medicare Card resources for current billing rules

Common issues

1. Still holding an old HICN card: request a free replacement; the SSN-based card is retired
2. Never received the new card: request a replacement through Medicare.gov, 1-800-MEDICARE, or SSA
3. Lost or stolen card: request a replacement, and if theft is suspected, watch your Medicare Summary Notices and report misuse to 1-800-MEDICARE
4. Scam calls: beneficiaries pressured to "verify" a Medicare number; hang up and call Medicare directly
5. MA or Part D card confusion: beneficiaries unsure which card to present at the point of service
6. Replacement delivery delay: a mailed card usually takes about 30 days; print an official copy online if you need it sooner
7. Dual-eligible coordination: both the Medicare MBI and the Georgia Medicaid Member ID are needed
8. RRB beneficiary process: railroad retirees replace their card through the RRB, not SSA

Learn More

Find personalized help navigating Medicare card and MBI questions in Georgia at brevy.com.

The information on Brevy.com is for educational purposes only and is not a substitute for professional legal, financial, or medical advice. Rules vary by state and program and change frequently. Always verify with the relevant agency or a qualified professional. Brevy is not a law firm, financial advisor, or healthcare provider.