Starting a medical wig business means opening a healthcare supply operation, not a retail salon, and the licensing path reflects that. To legally fit and bill for cranial prostheses, you need federal provider identifiers, appropriate state licensing, enrollment as a DMEPOS supplier (which requires accreditation and a surety bond), liability insurance at CMS minimums, credentialing with private insurance carriers, and a HIPAA-compliant facility. Plan on several months and meaningful upfront cost before your first claim goes out.
Get Your Federal Identifiers First
Two federal numbers anchor every form you’ll fill out from here forward, so apply for both before anything else.
The National Provider Identifier (NPI) is a 10-digit number assigned through the National Plan and Provider Enumeration System. Every healthcare provider that files insurance claims needs one, and the online application is the fastest route.1Centers for Medicare & Medicaid Services. How to Apply Your NPI will appear on every claim, every enrollment application, and every credentialing profile.
The Employer Identification Number (EIN) comes from the IRS. It functions as your business’s tax identifier and is required to open a business bank account, hire staff, and file returns.2Internal Revenue Service. Get an Employer Identification Number The application is free and issues the number immediately online.
Handle State Licensing
State-level rules vary, but most jurisdictions expect medical wig providers to hold a general business license plus, often, a cosmetology or specialty license. The cosmetology question turns on how your state defines cosmetology practice. Many states treat custom fitting, cutting, and styling a wig on a client’s head as cosmetology services, which triggers the license. Others have carved out exceptions for medical prosthetic devices or don’t classify wig fitting as cosmetology at all.
Check with your state cosmetology board before assuming you’re exempt. Operating without the right license can disqualify you from insurance contracts later. Initial cosmetology license application fees generally run $25 to $125, though the bigger investment is the training hours most states require before you can sit for the exam. If you plan to work in more than one state, expect to apply separately in each; a Cosmetology Licensure Compact has been adopted by six states but is not yet in effect.3Council on Licensure, Enforcement and Regulation. More States Approve Cosmetology Licensure Compact
Enroll as a DMEPOS Supplier
Cranial prostheses are classified as durable medical equipment, so insurance carriers expect you to be enrolled as a DMEPOS (Durable Medical Equipment, Prosthetics, Orthotics, and Supplies) supplier. Medicare enrollment is the foundation. Traditional Medicare generally does not reimburse for wigs under HCPCS code A9282, but completing Medicare enrollment establishes the credentialing infrastructure that private insurers rely on. Skip any layer here and later applications will stall.
Accreditation From a CMS-Approved Organization
Before Medicare approves your supplier application, you must be accredited by a CMS-approved accreditation organization. As of January 2026, eight organizations hold CMS approval, among them the Accreditation Commission for Health Care (ACHC), the Healthcare Quality Association on Accreditation (HQAA), and the Joint Commission.4Centers for Medicare & Medicaid Services. DMEPOS Accreditation Organizations Fee structures vary, but initial accreditation typically totals $3,500 to $13,000 across the application fee, on-site survey, and documentation review. Annual renewal generally runs $1,000 to $5,000.
The $50,000 Surety Bond
CMS requires most DMEPOS suppliers to post a $50,000 surety bond for each NPI under which they bill Medicare. A second practice location means a second bond. Suppliers with certain adverse legal actions in their history may face an elevated bond above the base amount. A narrow exemption exists for state-licensed orthotic and prosthetic personnel in private practice who solely bill for orthotics, prosthetics, and supplies, but most cranial prosthesis providers will not qualify.
The CMS-855S Application
DMEPOS suppliers enroll using form CMS-855S. You can submit on paper or, faster, through the Provider Enrollment, Chain, and Ownership System (PECOS).5Centers for Medicare & Medicaid Services. Enrollment Applications Alongside the application, you’ll typically submit an Electronic Funds Transfer Authorization (CMS-588) and a Medicare Participating Supplier Agreement (CMS-460). The Medicare enrollment application fee for 2026 is $750, due with every initial enrollment, revalidation, or new practice location.6Federal Register. Provider Enrollment Application Fee Amount for Calendar Year 2026
Facility Standards
Federal regulations require your practice location to be at least 200 square feet.7eCFR. 42 CFR 424.57 – Special Payment Rules for Items Furnished by DMEPOS Suppliers The space must comply with state licensure rules, federal accessibility requirements, and the full set of DMEPOS supplier standards under 42 CFR 424.57. Any changes to your enrollment information must be reported within 30 days.
Carry the Right Business Insurance
You need two distinct policies, and they cover different things. General liability insurance covers physical risks like a client tripping in your waiting area. Professional liability, sometimes called errors and omissions, covers claims that your professional services caused harm, such as a poorly fitted prosthesis that injured a client’s scalp or an allergic reaction to materials you selected.
For Medicare DMEPOS enrollment, CMS requires comprehensive liability insurance of at least $300,000 per incident, and the policy must remain active at all times. Your accreditation organization will verify the policy directly with your insurance agent. Private carriers that credential you as in-network often set higher thresholds; $1,000,000 per occurrence is common in their requirements. Professional liability policies for medical wig providers generally cost between $500 and $1,500 annually depending on revenue and staffing. Don’t let coverage lapse even briefly. A gap can trigger removal from insurance networks, and getting back in is harder than getting in the first time.
Get Credentialed With Private Insurance Carriers
Private insurance is where most of your revenue will come from, since traditional Medicare does not typically reimburse for cranial prostheses. Start by building a profile on the CAQH (Council for Affordable Quality Healthcare) Provider Data Portal. Over 2.5 million providers maintain information there, and most major carriers pull credentialing data from CAQH rather than processing separate applications.8CAQH. Provider Credentialing Solutions Your CAQH profile serves as a single credentialing application accepted in all 50 states.
Each carrier will want your NPI, EIN, proof of liability insurance, DMEPOS accreditation documentation, a W-9, and your state licenses. Some request a copy of your business lease and photos of your facility. A few may conduct a site visit before approving you. Prepare organized digital copies, because you’ll submit the same documents repeatedly across different insurance panels.
The credentialing review period typically runs 30 to 90 days per carrier, though some are faster if you apply through CAQH. Once approved, you’re in-network, which changes your clients’ out-of-pocket costs significantly and makes your business more attractive to patients with coverage. Keep your CAQH profile current; letting it go stale can delay revalidation or cause carriers to drop you.
Set Up a HIPAA-Compliant Operation
The moment you handle insurance claims and medical records, you become a HIPAA-covered entity. The Health Insurance Portability and Accountability Act’s privacy and security rules apply to every aspect of how you collect, store, and share patient information.9HHS.gov. Summary of the HIPAA Privacy Rule In practical terms, you need a private consultation room where discussions about a client’s medical history and fittings cannot be overheard. Clients will be sharing diagnoses, prescriptions, and treatment details.
Physical records must be stored in locked cabinets in a restricted area. Electronic records require software that provides end-to-end encryption and meets federal security standards for electronic protected health information. Practice management software designed for medical billing handles both requirements and generally runs $50 to $200 per month. All computers and tablets need password protection and automatic log-offs.
Train every employee who touches patient information on your privacy policies; this is a legal requirement. HIPAA violations carry tiered civil penalties. For unknowing violations, fines start at $141 per incident and can reach $71,162 per violation. For willful neglect that goes uncorrected, the minimum penalty is $71,162 per violation, with an annual cap exceeding $2.1 million.10Federal Register. Annual Civil Monetary Penalties Inflation Adjustment Figures are inflation-adjusted annually.
Bill Insurance Correctly
Getting paid requires three things to line up on every claim: the right procedure code, the right diagnosis code, and documentation proving medical necessity.
HCPCS and ICD-10 Codes
The billing code for a medical wig is HCPCS A9282, described as “wig, any type, each.” It applies to both synthetic and human hair prostheses, though some carriers require the invoice to specify the material. For a human hair wig, certain insurers require documentation of a synthetic allergy before approving coverage at the human-hair rate.
Medical necessity is established through ICD-10 diagnosis codes from the patient’s physician. Common codes include L63.9 for alopecia areata, L65.0 for telogen effluvium, and L65.1 for anagen effluvium, which covers chemotherapy-induced hair loss. Claims for cancer patients often include a secondary code such as Z92.21 for personal history of chemotherapy. The referring physician’s records need to accompany these codes to verify the diagnosis and ongoing treatment.
The CMS-1500 Form
Claims are submitted on the CMS-1500 form, the standard used across the healthcare industry.11Centers for Medicare & Medicaid Services. Professional Paper Claim Form CMS-1500 Every field matters: your NPI, the patient’s policy number, the HCPCS code, the ICD-10 codes, the date of service, and the total charge. When billing for a new cranial prosthesis, add modifier NU to indicate purchased new equipment. Missing or incorrect modifiers are a frequent reason for bounced claims.
You can mail paper claims directly to the insurer, but most providers use an electronic clearinghouse, which checks the claim for errors before it’s transmitted. Clearinghouse fees typically run $0.50 to $2.00 per claim or a flat monthly rate. The setup pays for itself quickly in fewer rejections and faster payments.
Prior Authorization
Many insurance plans require prior authorization before they’ll cover a cranial prosthesis, meaning the insurer’s approval must be secured before you provide the wig. The request typically requires the physician’s prescription, the diagnosis codes, and sometimes clinical photos or treatment records. Skipping this step is where new providers lose money: you deliver the prosthesis, submit the claim, and receive a denial because no authorization was on file. Verify each patient’s specific plan requirements before fitting.
A Note on Sales Tax
Most states exempt prescribed medical prostheses from sales tax, but the exemption almost always hinges on having a physician’s prescription on file. Without the prescription, the same wig that qualifies as a tax-exempt medical device gets taxed as a retail product. A handful of states apply their full sales tax rate regardless of prescription status, and some only exempt devices billed through Medicaid or Medicare. Check with your state department of revenue for the specific rules, and keep every prescription on file in case of an audit. Collecting sales tax when you shouldn’t, or failing to collect when you should, creates problems in both directions.