2.4 Prescribing Controlled Substances, DEA Verification & Red Flags

Key Takeaways

  • A prescription for a controlled substance must be issued for a legitimate medical purpose by a registered practitioner acting in the usual course of their professional practice.
  • Pharmacists share a corresponding responsibility to ensure prescriptions are valid and legitimate.
  • All controlled substance prescriptions must contain specific elements, including the patient's name and address, prescriber's name, address, and DEA number, and drug details.
  • The DEA number follows a specific formula (check digit) that pharmacists can use to quickly verify its structural validity.
  • Pharmacists must be vigilant in identifying "red flags" that may indicate a prescription is forged, altered, or not issued for a legitimate purpose.
Last updated: July 2026

Prescribing and Dispensing Controlled Substances

The DEA relies heavily on pharmacists to act as the final checkpoint before controlled substances reach the public. This role is formalized in the concept of "corresponding responsibility."

Corresponding Responsibility

Under federal regulations (21 CFR 1306.04), a prescription for a controlled substance must be issued for a legitimate medical purpose by an individual practitioner acting in the usual course of their professional practice.

Crucially, the law states that the responsibility for the proper prescribing and dispensing of controlled substances rests upon the prescribing practitioner, but a corresponding responsibility rests with the pharmacist who fills the prescription.

An order purporting to be a prescription issued not in the usual course of professional treatment is not a valid prescription. A pharmacist who deliberately ignores questionable prescriptions, or who has reason to know the prescription is invalid but fills it anyway, is subject to criminal prosecution and loss of their license and DEA registration. You cannot simply claim, "The doctor wrote it, so I filled it."

Required Elements of a CS Prescription

To be valid under federal law, a controlled substance prescription must contain the following information at the time it is issued:

  1. Date of issue (Prescriptions cannot be post-dated).
  2. Full name and address of the patient.
  3. Drug name, strength, and dosage form.
  4. Quantity prescribed (must be written numerically and alphabetically in some states, though federal law just requires the quantity).
  5. Directions for use.
  6. Name, address, and DEA registration number of the prescribing practitioner.
  7. Manual signature of the prescriber (if a paper prescription). Electronic prescriptions must use a DEA-compliant two-factor authentication digital signature.

What a Pharmacist Can Change or Add

If a prescription for a Schedule III, IV, or V substance is missing information or needs modification, a pharmacist can generally add or change certain elements (like the patient's address, dosage form, strength, quantity, or directions) after consulting with the prescriber and documenting the consultation on the prescription.

For Schedule II prescriptions, the DEA's policy has historically been very strict. The DEA advises that a pharmacist may not change the patient's name, the drug prescribed (except for generic substitution permitted by state law), or the prescriber's signature. For other elements (strength, quantity, directions), the pharmacist must adhere to state law regarding what can be modified after verbal consultation.

Verifying a DEA Number (The Check Digit)

A standard DEA registration number consists of two letters followed by seven numbers. Pharmacists must know how to verify the structural validity of this number using a mathematical check.

The First Letter

The first letter typically identifies the type of registrant:

  • A, B, F, or G: Hospital, Clinic, Practitioner, Teaching Institution, Pharmacy. (G is newer, used as A, B, and F were exhausted).
  • M: Mid-Level Practitioner (Nurse Practitioner, Physician Assistant, Optometrist).
  • P, R: Manufacturer, Distributor, Researcher, Analytical Lab, Importer, Exporter, Reverse Distributor, Narcotic Treatment Program.
  • X: Historically used to designate a prescriber authorized to prescribe buprenorphine for opioid use disorder (DATA 2000 waiver). Note: The MAT Act eliminated the X-waiver requirement in 2023, but you should still know its historical context.

The Second Letter

The second letter is almost always the first letter of the registrant's last name (or business name). If Dr. John Smith registers, his DEA will likely start with "BS" or "FS". If he changes his last name, the DEA number might retain the old letter, so discrepancies require verification but aren't immediate proof of fraud.

The Math Check Digit Formula

The seven numbers follow a specific mathematical formula to ensure they weren't randomly fabricated. The seventh number is the "check digit."

Here is how to calculate it using an example DEA number: AB1234563

  1. Step 1: Add the 1st, 3rd, and 5th numbers.
    • (1 + 3 + 5 = 9)
  2. Step 2: Add the 2nd, 4th, and 6th numbers, and multiply that sum by 2.
    • (2 + 4 + 6 = 12)
    • (12 x 2 = 24)
  3. Step 3: Add the results from Step 1 and Step 2.
    • (9 + 24 = 33)
  4. Step 4: Look at the rightmost digit (the ones place) of the final sum. This digit must match the 7th digit of the DEA number.
    • The rightmost digit of 33 is 3.
    • The 7th digit of the DEA number is 3.
    • The number is structurally valid.

Important caveat: A structurally valid DEA number does not guarantee the number actually belongs to the person presenting it, nor does it mean their registration is active. It only proves the math works. If suspicious, the pharmacist must check the DEA's database.

Recognizing Red Flags

Because of corresponding responsibility, pharmacists must be alert for "red flags"—circumstances surrounding a prescription that indicate it may not be for a legitimate medical purpose. The presence of one red flag requires further scrutiny; multiple red flags strongly suggest the prescription should be refused.

Common red flags include:

  • Pattern Prescribing: A prescriber writes the exact same drug, quantity, and directions for numerous patients.
  • The "Holy Trinity": Prescriptions for an opioid, a benzodiazepine, and a muscle relaxant (e.g., oxycodone, alprazolam, and carisoprodol) simultaneously. This is a highly abused cocktail with severe respiratory depression risks.
  • Geographic Anomalies: The patient travels a long distance to see the doctor, or travels a long distance past other pharmacies to fill the prescription at your pharmacy.
  • Cash Payments: The patient insists on paying cash for expensive controlled substances despite having active insurance coverage.
  • Altered Prescriptions: Visible erasures, different colored inks, or unusual quantities (e.g., writing "120" when the standard is "30").
  • Inappropriate Specialist: A dentist prescribing strong opioids for chronic back pain, or a podiatrist prescribing stimulants for ADHD. (Must be in the usual course of professional practice).
Test Your Knowledge

Which of the following best describes the legal concept of 'corresponding responsibility' under the Controlled Substances Act?

A
B
C
D
Test Your Knowledge

A prescription for a Schedule II controlled substance is missing the patient's name. According to DEA guidance, can the pharmacist write in the patient's name after calling the prescriber?

A
B
C
D
Test Your Knowledge

A nurse practitioner presents a DEA number starting with the letter M. Is this appropriate?

A
B
C
D
Test Your Knowledge

A prescriber's DEA number is purported to be AC4136259. Using the math check digit formula, determine if this DEA number is structurally valid.

A
B
C
D