To check a DEA number, run the seven-digit check digit calculation as a quick sanity test, then confirm the registration through the DEA’s Registrant Validation Toolset if you hold your own DEA registration, or through the publicly downloadable NTIS registration dataset if you don’t. The DEA’s online tool is the authoritative source, but access is limited to other registrants, which catches most people off guard. Pharmacies, hospitals, and credentialing offices use it daily. Everyone else has to work around that restriction.
Run the Check Digit Math First
Every DEA number has a built-in arithmetic check in its final digit. You can run it in about 30 seconds and catch typos and lazy forgeries before you touch a database.
- Add the first, third, and fifth digits of the seven-digit sequence.
- Add the second, fourth, and sixth digits, then multiply that sum by two.
- Add those two results together. The last digit of the total should match the seventh digit of the DEA number.
Take AB1234563 as an example. First, third, and fifth digits: 1 + 3 + 5 = 9. Second, fourth, and sixth: 2 + 4 + 6 = 12, doubled to 24. Add: 9 + 24 = 33. The last digit of 33 is 3, which matches the seventh digit of the DEA number. It passes.1Microsoft Learn. Drug Enforcement Agency (DEA) Number Entity Definition
A number that fails this test is either mistyped or fake. A number that passes still might be fake, because anyone with basic math can construct a string that satisfies the formula. Treat the check digit as a first filter, not proof.
Check That the Letters Make Sense
The format itself gives you another quick tell. A DEA number is two letters followed by seven digits. The first letter identifies the registrant type: A or B for physicians and standard dispensers, M for mid-level practitioners like nurse practitioners and physician assistants, and F, P, or R for manufacturers and distributors. The second letter is the first letter of the registrant’s last name, or the digit 9 in certain cases.1Microsoft Learn. Drug Enforcement Agency (DEA) Number Entity Definition
If a nurse practitioner hands you a number starting with B, or the second letter doesn’t match the person’s last name, something is off. That doesn’t confirm fraud on its own, but it’s a reason to keep looking.
Use the DEA’s Registrant Validation Toolset if You Have Access
The Registrant Validation Toolset on the DEA Diversion Control Division website is the definitive way to confirm whether a DEA number is currently active. Using it requires holding your own DEA registration and logging in with multi-factor authentication.2Drug Enforcement Administration. Registration Program Overview and Updates
If you qualify, log in to the Diversion Control Division site, open the Registration Validation Toolset, and enter the DEA number (the last name is sometimes required as well).3Drug Enforcement Administration. Registration – Diversion Control Division For access problems, the DEA directs registrants to DEA.Registration.Help@dea.gov or 1-800-882-9539.
How to Verify When You Don’t Have a DEA Registration
Most people asking this question aren’t DEA registrants. You still have real options.
The National Technical Information Service publishes a monthly downloadable dataset of DEA registration records through its National Technical Reports Library. It covers active registrations along with retired registrant numbers, including physicians, dentists, veterinarians, researchers, and distributors, with the associated DEA numbers and drug codes.4National Technical Information Service. Drug Enforcement Administration (DEA) Monthly Downloadable Data Because it’s updated monthly, it won’t reflect changes made in the last few weeks.
You can also call the DEA Registration Support line at 1-800-882-9539 and ask for verification. State medical boards and pharmacy boards keep their own licensing records, which often include DEA registration status. If you’re a patient trying to confirm your doctor is authorized, the state medical board is usually the fastest starting point.
What the Result Actually Tells You
An active result confirms the person or entity currently holds a valid federal registration to handle controlled substances, and it shows which schedules they’re authorized for. Schedules run from II (high abuse potential with accepted medical use, such as oxycodone) down to V (lowest abuse potential).5Office of the Law Revision Counsel. 21 USC 812 – Schedules of Controlled Substances
An active registration is not blanket prescribing authority. The DEA registration is tied to a state license, so it only authorizes controlled substance activity in the state that issued that license, and the schedules a mid-level practitioner may prescribe depend on what the state license allows.6Diversion Control Division. Registration Q and A A DEA number authorized for Schedules III through V cannot legally support a Schedule II prescription.
If the Number Comes Back Invalid or Expired
An invalid, expired, or not-found result can mean the registration lapsed and wasn’t renewed, was revoked or suspended, was never issued, or was mistyped. Retype it, rerun the check digit calculation, and if it still fails, ask the practitioner directly.
Watch the specific status wording. A registration marked “surrendered for cause” is a red flag: it’s treated similarly to a revocation or denial and indicates the DEA took adverse action. A plain “retired” status usually means the registration simply expired without renewal.
Why This Is Worth Doing
Federal law requires every person who dispenses or proposes to dispense a controlled substance to register with the DEA first.7Office of the Law Revision Counsel. 21 USC 822 – Persons Required to Register Using a DEA number that is fictitious, revoked, suspended, expired, or issued to someone else while manufacturing, distributing, or dispensing controlled substances is a federal crime. A first offense carries up to four years in prison; a subsequent conviction raises the maximum to eight years.8Office of the Law Revision Counsel. 21 US Code 843 – Prohibited Acts C
When a fraudulent DEA number is part of a broader health care fraud scheme, the penalties climb. Knowingly executing a scheme to defraud a health care benefit program can bring up to ten years in prison and fines up to $250,000. Illegally buying, selling, or distributing medical provider identifiers, including DEA numbers, carries up to ten years in prison and fines up to $500,000 for individuals or $1,000,000 for corporations.
Run the check digit math on any DEA number that lands in front of you. If you’re a registrant, confirm it in the DEA’s validation tool. If you’re not, pull the NTIS dataset or call the registration line. Skipping the check is what fraud counts on.