6.4 Detecting Fraudulent, Forged & Altered Prescriptions
Key Takeaways
- Under 21 CFR § 1306.04(a), a corresponding responsibility rests with the pharmacist who fills a prescription; a purported order not issued in the usual course of professional treatment is not a prescription and the person knowingly filling it is subject to the CSA's penalties.
- DEA's six forged-prescription indicators are: the prescription looks too good and the handwriting is too legible; quantities, directions, or dosages differ from usual medical usage; it does not use accepted standard abbreviations or reads like a textbook presentation; it appears photocopied; directions are written out in full with no abbreviations; and it uses different ink colors or different handwriting.
- Never verify using the callback number printed on the prescription — a common forgery method is a pad printed with a real prescriber's name and an accomplice's phone number.
- The DEA number checksum and the registrant-type prefix letter are a first-pass screen, but a mathematically valid number proves only that the digits are internally consistent, not that the prescriber wrote the order.
- If a pharmacist believes a prescription is forged or altered, DEA's guidance is do not dispense it and call the local police; patterns of abuse are reported to the state board of pharmacy or the local DEA Diversion Field Office.
6.4 Detecting Fraudulent, Forged & Altered Prescriptions
Quick Answer: External diversion most often enters the pharmacy as a piece of paper or an electronic order that looks legitimate. Federal law makes this the pharmacy's problem: under 21 CFR § 1306.04(a), the responsibility for proper prescribing rests with the prescriber, but a corresponding responsibility rests with the pharmacist who fills the prescription, and an order not issued in the usual course of professional treatment is not a prescription at all. DEA publishes two distinct indicator lists — one for forged prescriptions (document features) and one for prescriptions not issued for a legitimate medical purpose (prescribing and patient patterns) — and the exam tests both.
Corresponding Responsibility (21 CFR § 1306.04(a))
The regulation states that a prescription for a controlled substance must be issued for a legitimate medical purpose by an individual practitioner acting in the usual course of professional practice. It then assigns shared liability: the responsibility for the proper prescribing and dispensing rests with the prescribing practitioner, but a corresponding responsibility rests with the pharmacist who fills the prescription. A purported prescription issued outside the usual course of professional treatment is not a prescription within the meaning of the law, and the person knowingly filling it — as well as the person issuing it — is subject to the penalties of the Controlled Substances Act.
For a pharmacy technician, corresponding responsibility translates into a concrete duty: surface the concern. A technician cannot resolve a legitimacy question, but a technician is usually the first person to touch the prescription, run the claim, and see the patient. Escalating rather than processing is the technician's role.
How Fraudulent Prescriptions Are Manufactured
DEA describes a recurring set of methods:
| Method | Mechanism | Tell |
|---|---|---|
| Alteration of a legitimate prescription | The patient changes the quantity or refill count on a real order | Different ink or pen pressure, cramped digit, quantity written numerically but not spelled out, erasure or overwrite |
| Stolen prescription pads | Pads taken from an office or hospital and written for fictitious patients | Real prescriber, unknown patient, unusual drug for that specialty, prescriber outside the local area |
| Counterfeit pads with a fake callback number | Pads printed using a legitimate prescriber's name but a different phone number answered by an accomplice | The printed number does not match the number in an independent directory |
| Self-called-in prescriptions | The individual phones in their own order and gives their own number for call-back confirmation | Verbal order for a controlled substance from an unfamiliar number; no chart or prior relationship |
| Computer-generated prescriptions | Prescriptions created for non-existent prescribers, or clean copies of a real prescriber's format | Perfect typography, generic address, DEA number that fails the checksum or the prefix logic |
| Photocopies of a real prescription | The same order presented repeatedly at different pharmacies | Flat, uniform ink; no pen indentation; identical "signature" every time |
| Emergency-department shopping | Presenting with pain complaints to obtain an order that is then altered or copied | Repeat visits, out-of-area facility, prescription presented days after the visit |
DEA's Indicator Lists
Indicators that a prescription may be forged
- The prescription looks "too good" — the prescriber's handwriting is too legible.
- Quantities, directions, or dosages differ from usual medical usage.
- The prescription does not comply with acceptable standard abbreviations, or appears to be a textbook presentation.
- The prescription appears to be photocopied.
- Directions are written in full with no abbreviations.
- The prescription is written in different color inks or in different handwriting.
Indicators that a prescription may not have been issued for a legitimate medical purpose
- The prescriber writes significantly more prescriptions, or in larger quantities, than other practitioners in the same specialty in the area.
- The patient returns too frequently — an order that should last a month is refilled biweekly, weekly, or daily.
- The prescriber writes for antagonistic drugs, such as depressants and stimulants, at the same time.
- The patient presents prescriptions written in the names of other people.
- A number of people appear simultaneously, or within a short time, all bearing similar prescriptions from the same physician.
- People who are not regular patrons or residents of the community appear with prescriptions from the same physician.
Nuance DEA states explicitly: quantity prescribed and refill frequency are not by themselves indications of fraud or improper prescribing, particularly for a patient legitimately treated with opioids for pain, because tolerance and physical dependence develop with sustained therapeutic use. Exam items that offer "high dose, therefore forged" as an answer are testing this exact point.
Reading the Document: Required Elements and Alteration Signs
A controlled substance prescription must be dated as of and signed on the day issued and must bear the patient's full name and address; the drug name, strength, dosage form, quantity prescribed, and directions for use; and the name, address, and DEA registration number of the practitioner (21 CFR § 1306.05). A Schedule II paper prescription requires the practitioner's manual signature.
Missing or inconsistent elements are the mechanical tells:
| What to inspect | Forgery/alteration signal |
|---|---|
| Quantity field | Numeral altered (1 → 10, 3 → 8), no written-word confirmation, digits added in a different pen |
| Date of issue | Presented long after issue; altered date; date does not match the clinic encounter |
| Directions | Fully spelled out with no abbreviations; textbook phrasing; sig that does not match the quantity |
| Patient identifiers | Address missing or generic; name inconsistent with the ID presented |
| Prescriber block | Address is a residence or mail drop; specialty inconsistent with the drug; pre-printed number not in an independent directory |
| DEA number | Fails the checksum; prefix letter inconsistent with the prescriber type (for example an M mid-level prefix on a prescription outside that practitioner's state-authorized scope) |
| Signature | Identical placement and stroke on multiple prescriptions (photocopy); different from the signature on file |
| Paper | No pen indentation on the reverse; missing security features such as void pantograph, thermochromic ink, or microprinting on tamper-resistant stock |
The DEA-number checksum taught in Section 5.2 is a screen, not proof. A forger who understands the algorithm can generate a mathematically valid number, and a stolen legitimate number will always validate. The checksum is useful for catching invented numbers quickly.
The Verification Workflow
┌──────────────────────────────────────────────────────────────────────────────┐
│ FRAUDULENT PRESCRIPTION VERIFICATION PATHWAY │
│ │
│ 1. INSPECT the document against the forged-prescription indicators │
│ 2. VALIDATE the DEA number: format, prefix logic, checksum │
│ 3. IDENTIFY the presenter — require identification when in doubt │
│ 4. QUERY the PDMP for the patient's controlled substance history │
│ 5. VERIFY with the prescriber using an INDEPENDENTLY SOURCED number — │
│ never the number printed on the prescription │
│ 6. DOCUMENT: what was checked, who was contacted, what was said, outcome │
│ 7. DECIDE: │
│ • Verified legitimate ──► dispense and document │
│ • Unresolved doubt ──► do not dispense; return prescription? NO — │
│ retain it and follow policy │
│ • Believed forged ──► DO NOT dispense; call local police │
│ 8. REPORT patterns to the state board of pharmacy or the local DEA │
│ Diversion Field Office │
└──────────────────────────────────────────────────────────────────────────────┘
DEA's prevention techniques are deliberately low-technology and remain the highest-yield answers: know the prescriber and the prescriber's signature; know the prescriber's DEA registration number; know the prescriber's authorized agents and obtain a copy of any written agreement between the prescriber and the agent; know the patient; and check the date to determine whether the prescription is being presented within a reasonable time since issue. When any aspect of the order is in question, contact the prescriber for verification or clarification.
What to Do When a Prescription Is Believed Forged
- Do not dispense it. Filling a prescription known or suspected to be invalid exposes the pharmacist to CSA liability under corresponding responsibility.
- Call the local police. This is DEA's stated instruction for a prescription believed to be forged or altered.
- Do not attempt a physical detention and do not escalate a confrontation at the counter; staff safety governs, exactly as in a robbery.
- Retain the document and preserve it — it is evidence, and handling should be minimized.
- Report patterns — repeated forgeries, a suspicious prescriber, or coordinated groups — to the state board of pharmacy or the local DEA Diversion Field Office.
- Document everything contemporaneously: the indicators observed, verification attempts, who was contacted, and the disposition.
Electronic Prescribing Does Not Eliminate the Risk
EPCS under 21 CFR Part 1311 removes the paper attack surface — there is no pad to steal and no quantity to overwrite. It relocates the risk to credential compromise: a shared password, a hardware token left plugged into a shared workstation, or an identity-proofing failure lets an attacker sign genuine, cryptographically valid prescriptions under a real practitioner's DEA number. The detection signal changes accordingly, from document inspection to pattern and audit-log analysis — prescriptions signed outside clinic hours, from an unexpected IP address, for patients with no encounter, or in a specialty-inconsistent drug (see Section 4.2). PDMP review remains the shared control across both paper and electronic pathways.
A prescription for alprazolam is presented on a pad bearing a local physician's name and a printed phone number. The technician calls the printed number and a person confirms the prescription. What is the flaw in this verification?
Which of the following is one of DEA's stated indicators that a prescription may be forged?
A pharmacist concludes that a presented Schedule II prescription has been altered: the quantity appears overwritten in a different ink. What does DEA's guidance direct the pharmacist to do?