DEA Reporting Requirements for Controlled Substances

DEA reporting requirements for controlled substances apply to every person or entity that holds a DEA registration, and they run on fixed clocks: theft or significant loss must be reported in writing within one business day and then documented on DEA Form 106 within 45 days; ARCOS transaction data is due quarterly by the 15th of the following month and annually by January 15; suspicious orders must be filed through the Suspicious Orders Report System (SORS); and the records behind all of it must be kept for at least two years. Failing to meet these obligations carries civil penalties reaching $82,950 per violation for most regulatory offenses in 2026, and far higher amounts for opioid-related suspicious order failures.¹

Who the Reporting Rules Cover

The reporting duties attach to the registration. Manufacturers, distributors, pharmacies, practitioners, researchers, importers, exporters, and reverse distributors all fall in. Each registration is tied to a specific physical location and a specific activity, so a hospital pharmacy and a research lab operating in the same building each carry their own reporting obligations.²

Some reporting duties apply to every registrant. Others, particularly ARCOS transaction reporting, apply only to registrants handling specific schedules. The scope matters, because filing the wrong report, or failing to file one that was required, both count as violations.

Reporting Theft or Significant Loss

When a registrant discovers a controlled substance has been stolen or lost in a significant quantity, two steps happen in sequence. First, notify the DEA Field Division Office in writing within one business day of discovering the loss. Second, file a complete DEA Form 106 through the DEA’s secure online system within 45 days of discovery.³

Every theft gets reported, regardless of quantity. Non-theft losses only require Form 106 if they qualify as “significant.” The DEA does not set a bright-line threshold. Registrants evaluate several factors: the quantity lost relative to business volume, the schedule and type of substance, whether the loss traces to specific individuals or activities, and whether a pattern of losses has developed over time.³

This is where registrants often trip up. The temptation is to treat small discrepancies as rounding errors and skip the paperwork. But the DEA views a pattern of minor, unreported losses as a red flag during inspections. The penalty for failing to report a loss that should have been reported is far steeper than the inconvenience of a Form 106 that turns out to be unnecessary.

ARCOS Transaction Reports

Manufacturers, distributors, importers, exporters, and reverse distributors that handle Schedule I and II controlled substances, narcotic substances in Schedule III, and gamma-hydroxybutyric acid products in Schedule III must report transaction data to the Automation of Reports and Consolidated Orders System (ARCOS).⁴

The deadlines are fixed:

Quarterly acquisition and distribution reports: due by the 15th of the month following the end of each quarter.
Annual inventory report covering stock on hand as of December 31: due by January 15 of the following year.
Annual manufacturing transaction reports: due by January 15.

ARCOS data lets the DEA track the movement of the most commonly diverted substances through the supply chain, from raw manufacturing to the point of dispensing. Even when a registrant has no transactions during a reporting period, the obligation to file does not disappear. Reports still need to cover each acquisition and each reduction from inventory for the period.

Suspicious Orders and SORS

Separate from ARCOS, every registrant that distributes controlled substances must maintain a system to identify suspicious orders and report them to the DEA. The SUPPORT Act codified this requirement and defined a suspicious order as one of unusual size, one that deviates substantially from a normal purchasing pattern, or one that occurs with unusual frequency.⁵

The DEA launched SORS Online in 2019 as a centralized database for these reports. Filing through SORS satisfies the statutory obligation to notify both the DEA Administrator and the Special Agent in Charge in the registrant’s area. Reporting a suspicious order does not automatically require the distributor to refuse it, but many distributors build threshold systems that flag and hold orders for review before shipment.⁶

Biennial Inventory

Every registrant must conduct a complete physical inventory of all controlled substances at each registered location. The first inventory happens on the day the registrant begins handling controlled substances. After that, a new inventory must be taken at least once every two years. The biennial inventory can fall on any date within two years of the previous one, and the registrant must note whether the count was taken at the opening or close of business that day.⁷

The counting method depends on the drug’s schedule. Schedule I and II substances require an exact count of every unit. For Schedule III, IV, and V substances, an estimated count is acceptable, unless an opened container holds more than 1,000 tablets or capsules, which triggers the exact-count requirement. Inventory records must be maintained in written, typed, or printed form at the registered location.⁷

Controlled substances are considered on hand if they are in the registrant’s possession or under its control. That includes drugs returned by a customer, drugs ordered but not yet invoiced, substances stored in an off-site warehouse on the registrant’s behalf, and samples held by employees for distribution. If substances are stored at an unregistered location, they must be included in the inventory of the registered location responsible for them.⁷

Newly Scheduled Substances

When the DEA adds a previously uncontrolled substance to any schedule, every registrant who possesses that substance must take an inventory of all stock on hand as of the effective date of the scheduling rule. From that point on, the substance is folded into every biennial inventory going forward.⁷

Records Behind the Reports

Every inventory, order form, prescription record, invoice, disposal record, and distribution log involving controlled substances must be kept for at least two years from the date it was created. Records must be stored at the registered location and available for DEA inspection on demand.⁸

How records are organized matters. Schedule I and II records must be maintained separately from all other business records. Schedule III, IV, and V records can be kept alongside ordinary business files, but they must be readily retrievable, meaning a DEA inspector who arrives unannounced can pull them quickly without sifting through unrelated paperwork. Financial and shipping records like invoices may be stored at a central location rather than the registered site, as long as the registrant has notified the DEA of the central recordkeeping arrangement.⁸

Reporting Disposal and Destruction

A registrant that wants to destroy expired, damaged, or otherwise unwanted controlled substances has two paths. The first is to submit a DEA Form 41 to the Special Agent in Charge listing the substances to be destroyed. The SAC then directs the registrant to destroy the substances in the presence of a DEA agent or other authorized person. Registrants that routinely dispose of controlled substances may receive standing authorization from the SAC to do so without applying each time, as long as they keep records of each disposal and file periodic summary reports.⁹

The second path is to transfer the substances to a registered reverse distributor. The registrant then records the date of transfer, the reverse distributor’s address and DEA registration number, and the quantity and type of each substance transferred. These records follow the same two-year retention rule.¹⁰

Civil Penalties for Reporting Failures

The Controlled Substances Act authorizes civil penalties for regulatory violations, and the base amounts are adjusted for inflation each year. For violations assessed after July 3, 2025 (for conduct occurring after November 2, 2015), the maximums include:¹

General regulatory violations under 21 USC 842(a): up to $82,950 per violation, covering recordkeeping failures, labeling violations, and unauthorized distribution.
Reporting and registration violations under 21 USC 842(a)(5), (10), and (17): up to $19,246 per violation.
Suspicious order failures by opioid manufacturers or distributors: up to $624,123 per violation for failing to maintain effective controls against diversion or failing to report suspicious opioid orders.
Maintaining drug-involved premises: up to $459,687 per violation.

The DEA can also revoke or suspend a registration for cause, which shuts down the registrant’s ability to handle controlled substances at all.¹¹

State PDMPs Are a Separate Track

Nearly all states operate Prescription Drug Monitoring Programs (PDMPs) that require dispensers to report each controlled substance prescription to a state database. PDMP reporting is a state obligation, not a federal DEA requirement, so it does not replace anything discussed above. Reporting deadlines vary by state, ranging from real-time submission to within several days of dispensing. Failure to report to a state PDMP can jeopardize a dispenser’s state license independently of any DEA consequences.

1
eCFR. 28 CFR Part 85 – Civil Monetary Penalties Inflation Adjustment
2
Office of the Law Revision Counsel. 21 USC 822 – Persons Required to Register
3
eCFR. 21 CFR 1301.76 – Other Security Controls for Practitioners
4
eCFR. 21 CFR 1304.33 – Reports to Automation of Reports and Consolidated Orders System (ARCOS)
5
Drug Enforcement Administration. Suspicious Orders Report System (SORS)
6
Drug Enforcement Administration. Suspicious Orders (SORS) Q and A
7
eCFR. 21 CFR 1304.11 – Inventory Requirements
8
eCFR. 21 CFR 1304.04 – Maintenance of Records and Inventories
9
eCFR. 21 CFR Part 1317 Subpart A – Disposal of Controlled Substances by Registrants
10
eCFR. 21 CFR 1304.22 – Records for Manufacturers, Distributors, Dispensers, Researchers, Importers, Exporters, Registrants That Reverse Distribute, and Collectors
11
Office of the Law Revision Counsel. 21 USC 842 – Prohibited Acts B