DEA Number Lookup: How to Verify a Prescriber's DEA Registration
There is no free, publicly accessible DEA number lookup tool. DEA registration records are private and not disclosed in any public database. If you need to verify a prescriber's DEA registration, the official route is to contact the DEA Diversion Division at 1-800-882-9539, use your state's Prescription Drug Monitoring Program (PDMP), or if you are a pharmacist, use the DEA's Controlled Substance Ordering System (CSOS). This page explains why, and what each verification path covers.
Every week, pharmacies, credentialing staff, and healthcare administrators search for a free online tool to look up a prescriber's DEA number. The honest answer is that no such tool exists, and understanding why helps avoid wasted time and identify the correct path for your specific verification need. This page covers the DEA number from the ground up, then walks through every legitimate verification option.
What a DEA Number Is
A DEA number is a registration number issued by the U.S. Drug Enforcement Administration to any practitioner, pharmacy, hospital, or other entity that is authorized to handle controlled substances under the Controlled Substances Act (CSA). The DEA manages registration through its Diversion Control Division, which oversees the prevention of controlled substance abuse and diversion into illegal channels.
The DEA number was designed as an internal law enforcement tool, not as a public health identifier. It identifies registrants specifically for the purpose of controlled substance accountability, tracking, and enforcement. This is fundamentally different from the NPI, which was designed as a universal, publicly accessible administrative identifier for all healthcare billing.[1]
A DEA number is Private. It is not included in any public dataset, not searchable through any government website open to the general public, and not part of the NPPES public data release.
DEA Number Format Explained
A DEA registration number consists of nine characters: two letters followed by seven digits. The format is not random. Each position encodes specific information about the registrant.
type code
of last name
with check digit at position 9
First letter: registrant type
The first letter indicates the category of registrant. The most common codes practitioners encounter are:
| Code | Registrant type |
|---|---|
| A | Deprecated activity (older registrations; no longer issued) |
| B | Hospital, clinic, pharmacy, teaching institution, or practitioner |
| C | Practitioner (continued from B when B numbers were exhausted) |
| D | Teaching institution |
| E | Manufacturer |
| F | Distributor |
| G | Researcher |
| M | Mid-level practitioner (nurse practitioners, physician assistants) |
| P | Narcotic treatment program |
Second letter: last name initial
The second letter is the first letter of the registrant's last name for individual practitioners, or the first letter of the business name for organizations. For example, a physician named Dr. Johnson whose registrant type is B would have a DEA number beginning with BJ. This provides a basic cross-check when verifying a DEA number against a specific prescriber's name.
Seven digits: sequential with check digit
The final seven digits include a sequential identifier and a check digit in the last position. The check digit can be validated arithmetically: add digits 1, 3, and 5; add digits 2, 4, and 6 then double the sum; add both totals together. The last digit of that result should equal the check digit. This allows a pharmacist to quickly identify a structurally invalid DEA number before processing a prescription, though a mathematically valid number is not proof that the registration is active.
Checking whether a DEA number passes the check digit formula only tells you the number is structurally plausible. It does not confirm that the registration is current, that it covers the scheduled substances being prescribed, or that the number belongs to the specific prescriber on a prescription. Active status verification requires contacting the DEA or using a PDMP.
Who Needs a DEA Number
DEA registration is required for any practitioner who prescribes, dispenses, or administers controlled substances classified under Schedule I through V of the Controlled Substances Act. This includes:
- Physicians (MD and DO)
- Nurse practitioners (NP) and clinical nurse specialists
- Physician assistants (PA)
- Dentists and oral surgeons
- Podiatrists
- Optometrists (for Schedule IIItoV substances in states that permit it)
- Veterinarians
- Pharmacies (separate registration from individual pharmacists)
- Hospitals and clinics that administer controlled substances
Providers who do not prescribe or dispense any Schedule I through V controlled substances have no obligation to obtain a DEA registration. Many healthcare providers, including those in purely administrative, laboratory, or non-prescribing clinical roles, never need one.
Controlled Substance Schedules
The Controlled Substances Act classifies drugs into five schedules based on their accepted medical use and potential for abuse or dependence. A DEA registration typically specifies which schedules the registrant is authorized to handle:
Most clinical practitioners hold a registration covering Schedules II through V. Research-only registrations may cover only Schedule I. A pharmacist verifying a controlled substance prescription must confirm that the prescriber's DEA registration covers the schedule of the substance being dispensed.
Why There Is No Public DEA Lookup
The DEA has deliberately kept its registration database private for two reasons that are both operational and legal.
First, a publicly searchable DEA number registry would be a tool for prescription fraud. Fraudulent prescriptions frequently use real DEA numbers copied from legitimate prescribers' prescription pads. Publishing a database where anyone could look up a valid DEA number for any physician in a given state would make that fraud trivially easier. The DEA's enforcement strategy depends in part on making it difficult to verify DEA numbers from outside the pharmacy-prescriber channel.
Second, the DEA number was never designed as a public identifier. When CMS was developing the NPI in the late 1990s and early 2000s, it explicitly considered and rejected the DEA number as a candidate for the national provider identifier precisely because the DEA number "does not fit the scope for which the DEA number was established" and "is not available to all health care providers."[1] The NPI became the public, universal identifier; the DEA number remained scoped to controlled substance oversight only.
Official Verification Channels
Legitimate DEA number verification is limited to parties with a professional need to know and occurs through three official channels:
Call 1-800-882-9539 to verify an active DEA registration. DEA staff can confirm whether a specific registration number is valid and active for a named registrant. This is the most direct channel and is available to pharmacists, hospitals, and other registrants with a legitimate professional need.
Available to licensed professionals; not a consumer-facing service.Prescription Drug Monitoring Programs operate in all 50 states and allow authorized users (pharmacists, prescribers, law enforcement) to cross-reference DEA numbers with dispensing records. PDMPs can confirm whether a prescriber has an active record within the state's controlled substance dispensing history.
Access varies by state; typically requires a professional license.The Controlled Substance Ordering System (CSOS) allows DEA registrants to electronically order Schedule I and II controlled substances. Registered pharmacies have access to real-time DEA registration status verification as part of the ordering process.
DEA registrants only; requires CSOS digital certificate.Healthcare organizations credentialing practitioners routinely verify DEA registration as part of primary source verification. Contact the DEA at 1-800-882-9539 with the practitioner's name and DEA number to confirm the registration is active and covers the appropriate schedules. Many credentialing software platforms also integrate DEA verification through licensed data feeds from the DEA's Diversion Control Division.
DEA Number vs. NPI
The DEA number and the NPI are frequently confused because both are provider identifiers used in pharmacy and prescribing workflows. They are not interchangeable and serve entirely different purposes.
| Feature | NPI | DEA Number |
|---|---|---|
| Issued by | NPPES / CMS (HHS) | DEA Diversion Control Division (DOJ) |
| Required for | All healthcare billing under HIPAA | Prescribing, dispensing, or storing controlled substances only |
| Required for all providers | Yes (HIPAA-covered providers) | No (only those handling controlled substances) |
| Publicly searchable | Yes, via NPPES and NPI Profile | No public lookup available |
| Appears on claims | Yes, required on all HIPAA claims | On controlled substance-related claims and prescriptions |
| Expires / renewed | Never expires | Must be renewed every 3 years; $888 fee per renewal (2024) |
| NPI Final Rule consideration | Selected as national standard | Explicitly considered and rejected as national identifier[1] |
DEA Numbers and NPPES
When CMS was designing the NPPES system, commenters specifically requested that DEA numbers be collected from providers who have one. CMS agreed to accommodate DEA numbers as an optional "Other Provider Identifier" in the NPPES application, with the identifier type code set to flag it as a DEA number. This allows DEA-to-NPI mapping for pharmacy systems.[1]
However, DEA numbers entered in NPPES are masked in the public data release. They are protected from disclosure under FOIA because they constitute sensitive law enforcement-related information. As a result:
- NPI Profile does not display DEA numbers on provider profiles, even when they are on file with NPPES.
- The NPPES public download file shows the identifier type code for a DEA entry but replaces the actual number with a masked placeholder.
- The NPI-to-DEA mapping exists internally within NPPES for pharmacy system use but is not accessible through any public API or download.
Frequently Asked Questions
DEA number questionsNo. There is no free, publicly accessible DEA number lookup tool. DEA registration records are private. Sites that claim to offer a "free DEA lookup" are either showing limited NPPES data (which masks DEA numbers), generating plausible-looking but unverified results, or attempting to collect your information.
The official path is to call the DEA Diversion Division at 1-800-882-9539 or, for pharmacists and other registrants, to use the CSOS system or your state PDMP.
No. They are completely different identifiers issued by different federal agencies for different purposes. An NPI is a 10-digit public identifier issued by CMS under HIPAA for all healthcare billing. A DEA number is a 9-character private identifier issued by the DEA specifically for controlled substance authorization. Having an NPI says nothing about whether a provider has DEA registration authority, and vice versa. When CMS developed the NPI, it explicitly reviewed and rejected the DEA number as the national provider identifier because it was not available to all providers and was too narrowly scoped.
Pharmacists can perform two checks. First, validate the check digit: add digits 1, 3, and 5; add digits 2, 4, and 6 and double the result; sum both totals. The last digit of that sum should match the check digit (position 9 of the DEA number). Second, confirm the second letter matches the first letter of the prescriber's last name. A number that fails either check is likely fraudulent.
For full active-status verification, call the DEA Diversion Division at 1-800-882-9539 or use your state PDMP to confirm the registration is currently active for the schedule of the substance being dispensed.
No. DEA numbers entered as Other Provider Identifiers in NPPES are masked in the public data release and do not appear on NPI Profile provider profiles. This masking is applied by CMS before the data is published, not by NPI Profile. NPI Profile cannot display data that CMS has protected from public disclosure. To verify a DEA registration, use the DEA Diversion Division or your state PDMP.
DEA registration is required for any practitioner who prescribes, dispenses, or administers Schedule I through V controlled substances. This includes physicians, nurse practitioners, physician assistants, dentists, veterinarians, pharmacies, and hospitals that administer controlled substances. Providers who do not handle controlled substances in any capacity have no obligation to register with the DEA and will not have a DEA number.
DEA registrations must be renewed every three years. Unlike an NPI, which never expires, an expired DEA registration means the practitioner is no longer authorized to prescribe controlled substances, even if they had been registered previously. Prescribing with an expired DEA registration is a federal violation. Pharmacists should check the expiration date on a DEA number (found in position data returned by the DEA or PDMP) when verifying prescriptions for controlled substances.
Verify a provider's NPI and public PECOS enrollment status.NPI Profile shows public NPI data, Medicare enrollment, and ordering and referring eligibility for all enrolled providers.
Search the NPI RegistrySources
This guide is based on the following official government publications. NPI Profile summarizes official documentation for convenience; the source documents remain the authoritative reference.
- Department of Health and Human Services. HIPAA Administrative Simplification: Standard Unique Health Identifier for Health Care Providers; Final Rule. 69 Fed. Reg. 3434, January 23, 2004 (NPIfinalrule.pdf). CMS consideration and rejection of the DEA number as a national provider identifier; DEA number as "Other Provider Identifier" in NPPES with type code; pharmacy industry identifier background.
- Drug Enforcement Administration, U.S. Department of Justice. Practitioner's Manual: An Informational Outline of the Controlled Substances Act. DEA Diversion Control Division. Registrant type codes, schedule definitions, registration and renewal requirements.
- Centers for Medicare & Medicaid Services. NPI Final Rule preamble. 69 Fed. Reg. 3455. Response to comment requesting DEA number collection in NPPES: "The DEA number is an example of an 'Other provider identifier'... we will collect the DEA number in the 'Other provider identifier' field if it is reported... and will carry the fact that it is a DEA number by setting the 'Other provider identifier type code' to indicate that."
