Missing Signatures in Medicare Records: Using Signature Attestations and Signature Logs in an ADR

Introduction

Few documentation problems are as frustrating as a signature issue. The service was provided, the clinician wrote a thorough note, and the claim was correct, but the note is unsigned or the signature is an unreadable scribble. When a Medicare contractor reviews that claim through an Additional Documentation Request (ADR), the missing or illegible signature can lead to delays or a denial.

Medicare has specific rules for these situations. CMS allows providers to use signature logs to identify illegible signatures and, in many cases, signature attestation statements to address missing signatures. But these tools have clear limits. Most importantly, an attestation cannot fix an unsigned order when a signature is required, and an attestation must come from the author of the record.

This article explains why signatures matter in Medicare medical review, the types of acceptable signatures, how signature logs work, when and how to use attestation statements, what attestations cannot do, how contractors request them, and how to prevent signature problems. It is educational and does not replace professional advice.

Why Signatures Matter in Medicare Review

CMS's Medicare Program Integrity Manual, Chapter 3, Section 3.3.2.4, explains that, for medical review purposes, Medicare requires that the person responsible for the beneficiary's care, including anyone who orders, provides, or certifies items or services, be identifiable as required by Medicare billing and coverage policy. Contractors review the totality of the medical record to determine whether this is met.

The manual describes two main reasons signatures are required:

1. To meet a specific signature requirement in a statute, regulation, National Coverage Determination (NCD), or Local Coverage Determination (LCD).

2. To resolve concerns about the authenticity of the documentation.

How Contractors Approach Signature Issues

According to CMS's manual:

• When a statute, regulation, NCD, or LCD requires a signature, the contractor first reviews the totality of the record to see whether the requirement is met. If not, the contractor may use the attestation process, unless the rule requires the signature to be in place before a specific event or date. If the attestation process does not resolve the issue, the contractor may deny the claim or take other action.

• If a signature is illegible, the contractor may use the signature log process.

• When no rule requires a signature, the contractor determines whether a signature is needed to identify the author for authenticity purposes. If not, the missing or illegible signature may be disregarded and review continues. If there are authenticity concerns, the contractor may use attestation, signature logs, denial, or a fraud referral, as appropriate.

• If the reviewer finds a reason to deny the claim that is unrelated to signatures, the reviewer does not need to proceed with signature authentication.

Acceptable Types of Signatures

Handwritten Signatures

CMS defines a handwritten signature as a mark or sign by an individual on a document signifying knowledge, approval, acceptance, or obligation.

Electronic Signatures

CMS accepts electronic signatures, but providers using them must have systems and software protected against modification and must apply sound administrative procedures. CMS notes that the individual whose name is on the electronic signature and the provider bear responsibility for the authenticity of the attested information, and it encourages physicians to check with their attorneys and malpractice insurers about alternative signature methods.

Stamped Signatures

CMS states that stamped signatures are not typically acceptable. The exception is a rubber stamp used by an author with a physical disability who can provide proof to a CMS contractor of an inability to sign due to the disability. By affixing the stamp, the provider certifies that he or she has reviewed the document.

Scribes and Transcription Tools

CMS's guidance explains that when a scribe is used, including artificial intelligence technology that transcribes medical record entries, the treating physician or practitioner must sign the entry. The scribe does not need to sign or date the entry, and providers do not need to document who or what transcribed it. The practitioner's signature affirms the entry.

Medical Students

CMS's guidance explains that when a teaching physician relies on a medical student's documentation for evaluation and management services, the teaching physician does not need to redocument the service but must review, sign, and date the entry.

Signature Dates

CMS's manual explains that if the applicable statute, regulation, NCD, and LCD are silent on whether a signature must be dated, the documentation must still allow the reviewer to determine the date the service was performed or ordered. CMS gives the example of an undated entry on a page surrounded by dated entries, which reviewers may reasonably treat as performed on the dated day.

Where a rule requires a dated signature, the date must be present.

Signature Logs

What Is a Signature Log?

CMS describes a signature log as a typed or printed listing of physicians and non-physician practitioners showing their names alongside their handwritten signatures or initials. A signature log can be included on the actual page where the illegible signature appears or as a separate document. It can be for an individual practitioner or a group.

When to Use a Signature Log

Use a signature log when signatures or initials in the record are illegible. CMS states that providers may submit a signature log or an attestation statement to support the identity of illegible signatures. CMS also accepts a printed name below the illegible signature in the original record.

Key Rules for Signature Logs

• Providers can create a signature log at any time. CMS states that contractors accept signature logs regardless of the date they were created.

• Including credentials is encouraged but not required. CMS instructs reviewers not to deny a claim for a signature log that is missing credentials.

• Logs should be filed so they can be easily accessed for future reviews.

How to Build a Signature Log

1. List each physician and non-physician practitioner who documents in your records.

2. Include each person's typed or printed full name and credentials.

3. Have each person provide their usual handwritten signature and initials.

4. Include the practitioner's NPI if helpful.

5. Update the log when clinicians join or leave and periodically for current staff.

6. Keep historical versions so you can support records from past years.

Signature Attestation Statements

What Is a Signature Attestation?

A signature attestation statement is a document in which the author of a medical record entry attests that he or she made the entry. CMS explains that an attestation may be used to address a missing signature on medical documentation other than orders.

Requirements for a Valid Attestation

According to CMS's manual, for an attestation to be considered for Medicare medical review purposes:

• It must be signed and dated by the author of the medical record entry.

• It must contain sufficient information to identify the beneficiary.

• It must be associated with a medical record entry.

CMS does not require a specific format, but the Program Integrity Manual provides sample language. As published by CMS, the sample attestation reads:

"I, [print full name of the physician/practitioner], hereby attest that the medical record entry for [date of service] accurately reflects signatures/notations that I made in my capacity as [insert provider credentials, e.g., M.D.] when I treated/diagnosed the above listed Medicare beneficiary. I do hereby attest that this information is true, accurate and complete to the best of my knowledge and I understand that any falsification, omission, or concealment of material fact may subject me to administrative, civil, or criminal liability."

Providers should confirm the current sample language in the manual and follow any MAC-specific guidance.

What an Attestation Should Include in Practice

• Beneficiary name and Medicare number or other identifier.

• Date of service of the entry being attested.

• Description of the document, such as "progress note" or "plan of care."

• Author's printed name and credentials.

• The attestation language.

• Author's signature.

• Date the attestation was signed.

When Attestations Are Not Accepted

CMS's manual and MLN guidance identify important limits:

• Unsigned orders. CMS will not consider attestations for orders when a signature is required. Reviewers will disregard unsigned orders in those situations.

• No associated record entry. Attestations without an associated medical record entry are not considered.

• Someone other than the author. Attestations from anyone other than the author of the entry, even a colleague in the same group, are not considered.

• Backdating. An attestation may be considered regardless of when it was created, unless the rule requires the signature to be in place before a specific event or date. An attestation cannot be used to backdate a plan of care or create missing documentation after the fact.

Why Unsigned Orders Are Different

Orders often establish the basis for a service, and many Medicare rules require a signed order before the service is provided or billed. Because an attestation created later cannot show that the order was signed when required, CMS does not accept attestations to fix unsigned orders. Providers should make sure orders are signed and dated according to applicable rules before services are billed.

How Contractors Request Signature Logs and Attestations

CMS's manual describes the process:

• If a reviewer finds that a signature is missing or illegible and a signature log or attestation would be appropriate, the contractor contacts the provider and asks whether it would like to submit one.

• The provider has 20 calendar days to submit the log or attestation, counted from the date of phone contact or the date the provider receives the letter.

• If the submitted log or attestation resolves the issue, the reviewer considers the medical record entry.

• The contractor's review timeframe is extended by 15 calendar days from receipt of the log or attestation.

• The contractor must document all contacts.

CMS notes that the 20-day and 15-day timeframes do not apply to CERT review contractors. CMS identifies review contractors that use these signature procedures as including MACs, UPICs, the SMRC, RACs, and the CERT contractor.

Should You Wait to Be Asked?

You do not have to wait. CMS's MLN fact sheet explains that submitting a complete record with proper signatures helps avoid medical review delays. Many providers include a signature log, and where appropriate an attestation, with the original ADR response. This can prevent delays and the risk of missing the 20-day window.

How to Handle Signature Issues in an ADR: Step by Step

Step 1: Review Every Signature Before Submission

During your pre-submission review, check every entry the reviewer will rely on: orders, certifications, plans of care, progress notes, and test interpretations.

Step 2: Classify the Issue

• Legible signature: no action needed.

• Illegible signature or initials: include a signature log, or confirm a printed name appears below the signature.

• Missing signature on documentation other than an order: consider whether the author can provide an attestation.

• Missing signature on an order where a signature is required: an attestation will not be accepted. Look for other evidence in the record that the order was properly signed, such as a signed copy elsewhere, an electronic signature in the EHR audit trail, or another signed document that meets the requirement.

• Missing date where a date is required: determine whether the requirement is met elsewhere in the record.

Step 3: Prepare Signature Logs

Include a current signature log covering every clinician whose signature appears in the packet.

Step 4: Obtain Attestations From Authors

If an attestation is appropriate, ask the author to review the specific entry and sign and date the attestation. Do not have anyone else sign on the author's behalf.

Step 5: Place Them in the Packet

Place signature logs and attestations at the end of the packet, list them in the index, and reference them in the cover letter.

Step 6: Respond to Contractor Requests Quickly

If the contractor contacts you about a signature issue, calendar the 20-day deadline and respond promptly.

What If the Author Is Unavailable?

Because CMS will not consider attestations from anyone other than the author, problems can arise when the clinician has left the organization, retired, or died. Options may include:

• Contacting the former clinician to request an attestation.

• Checking whether a signature log already exists that identifies the author's signature.

• Reviewing electronic health record audit trails to show the entry was electronically signed.

• Looking for other documentation that independently supports the service.

Planning ahead by maintaining current signature logs and making sure entries are signed promptly avoids most of these problems.

Amendments, Corrections, and Delayed Entries

CMS's manual explains that services should be documented at the time they are rendered. When entries are amended, corrected, or delayed, the date and author of the change must be identifiable, and the changes must be clearly and permanently marked. Amendments and late entries are reviewed under the same signature principles. Providers should never alter or add to records in response to an ADR in a way that suggests the documentation existed earlier than it did. Potentially fraudulent entries may be referred to a UPIC.

Preventing Signature Problems

• Require clinicians to sign and date entries promptly, ideally at the time of service.

• Configure EHR systems to flag unsigned entries and orders.

• Run regular reports of unsigned documents and follow up.

• Maintain a current signature log for all clinicians, and keep prior versions.

• Educate clinicians on signature requirements, including the need for signed and dated orders.

• Discourage illegible signatures and encourage printed names below handwritten signatures.

• Prohibit rubber stamps except for the narrow disability exception.

• Audit records for signature compliance as part of your compliance program.

• Make sure scribes and transcription tools are used in a way that the practitioner reviews and signs each entry.

Examples of How Signature Rules Apply

The following simplified, hypothetical examples illustrate how the rules may apply. Actual outcomes depend on the facts, the applicable coverage rules, and the reviewer's determination.

• An illegible signature appears on a physician progress note, and the packet includes a signature log identifying the physician. The reviewer can identify the author and continue the review.

• A progress note is unsigned, and the physician who wrote it signs and dates an attestation identifying the beneficiary and date of service. If no rule required the signature before a specific event, the reviewer may consider the note.

• An order for a diagnostic test is unsigned, and the test rules require a signed order. An attestation from the physician will not be considered, and the reviewer will disregard the unsigned order. The provider would need other acceptable evidence in the record that the requirement was met.

• A nurse practitioner's note is unsigned, and the attestation is signed by the supervising physician instead. CMS will not consider the attestation because it is not from the author.

• A plan of care must be signed before services are billed, but the physician signs an attestation months later. The attestation cannot be used to backdate the plan of care.

• A note signed with a rubber stamp is submitted, and the physician has no qualifying disability. The stamped signature generally is not acceptable.

Common Signature Mistakes

• Submitting illegible signatures without a signature log.

• Using attestations to try to fix unsigned orders.

• Having someone other than the author sign an attestation.

• Using attestations to create or backdate documentation.

• Using rubber stamps without qualifying for the disability exception.

• Failing to respond within the 20-day window after a contractor asks.

• Not keeping historical signature logs for former clinicians.

• Assuming electronic signatures are valid without proper system controls.

Frequently Asked Questions

Can I submit a signature log with my original ADR response?

Yes. CMS encourages providers to submit complete records with proper signatures to avoid delays, and contractors accept signature logs regardless of when they were created.

Can an attestation fix a missing signature on an order?

No. CMS will not consider attestations for orders when a signature is required.

Who can sign an attestation statement?

Only the author of the medical record entry. CMS will not consider attestations from anyone else, even within the same group.

How long do I have to respond if a contractor asks for an attestation?

Generally 20 calendar days from the date of phone contact or receipt of the letter. This timeframe does not apply to CERT.

Are stamped signatures acceptable?

Generally no. The exception is for an author with a physical disability who can provide proof of an inability to sign.

Conclusion

Missing and illegible signatures are among the most preventable causes of Medicare review problems. CMS provides useful tools to address them: signature logs to identify illegible signatures and signature attestation statements to address missing signatures on documentation other than orders. Those tools have clear limits, especially for unsigned orders and attestations by anyone other than the author. By understanding the rules, including signature logs and appropriate attestations with ADR responses, responding quickly to contractor requests, and building strong signature practices into daily operations, providers can keep signature issues from turning valid claims into denials.

How HealthBridge Can Help

HealthBridge is a healthcare management consulting firm that helps providers build signature logs, prepare compliant attestation processes, audit records for signature compliance, configure workflows to catch unsigned entries, and assemble ADR responses that address signature issues up front. If you have signature questions in an ADR or want to strengthen your signature practices, please get in touch with us. We will be happy to help you with this topic.

References

• Centers for Medicare & Medicaid Services. Medicare Program Integrity Manual, Chapter 3, Section 3.3.2.4, Signature Requirements, and Section 3.3.2.5, Amendments, Corrections, and Delayed Entries in Medical Documentation. https://www.cms.gov/regulations-and-guidance/guidance/manuals/downloads/pim83c03.pdf

• Centers for Medicare & Medicaid Services. Complying with Medicare Signature Requirements (MLN905364, July 2025). https://www.cms.gov/mln905364-complying-with-medicare-signature-requirements

• U.S. Department of Health and Human Services. MLN Matters SE1419, Medicare Signature Requirements: Educational Resources for Health Care Professionals. https://www.hhs.gov/guidance/sites/default/files/hhs-guidance-documents/se1419.pdf

• Centers for Medicare & Medicaid Services. MLN Matters MM6698, Signature Guidelines for Medical Review Purposes. https://www.cms.gov/Outreach-and-Education/Medicare-Learning-Network-MLN/MLNMattersArticles/Downloads/MM6698.pdf

• Centers for Medicare & Medicaid Services. MLN Matters MM8219, Stamped Signatures. https://www.cms.gov/Outreach-and-Education/Medicare-Learning-Network-MLN/MLNMattersArticles/Downloads/MM8219.pdf

• Centers for Medicare & Medicaid Services. Medicare Claim Review Programs (MLN Booklet). https://www.cms.gov/outreach-and-education/medicare-learning-network-mln/mlnproducts/downloads/mcrp-booklet-text-only.pdf

• U.S. Social Security Administration. Social Security Act, Section 1815, Payment to Providers of Services. https://www.ssa.gov/OP_Home/ssact/title18/1815.htm

• U.S. Social Security Administration. Social Security Act, Section 1833, Payment of Benefits. https://www.ssa.gov/OP_Home/ssact/title18/1833.htm

• Electronic Code of Federal Regulations. 42 CFR 405.930, Failure to Respond to Additional Documentation Requests. https://www.ecfr.gov/current/title-42/section-405.930