Pharmacies that handle controlled substances take on a legal obligation that goes beyond dispensing accurately — they’re also expected to actively watch for signs of diversion and, in certain circumstances, report suspicious activity to the DEA. This obligation applies at both the corporate/registrant level and, in practice, to the pharmacists making day-to-day dispensing decisions. Here’s a general overview of how diversion reporting requirements work.
Suspicious order monitoring is a registrant obligation
Under the Controlled Substances Act, DEA registrants — which includes pharmacies as dispensers — generally have a duty to design and maintain a system to detect suspicious orders of controlled substances and report them to the DEA. This obligation is distinct from, but related to, the pharmacist’s individual corresponding responsibility when filling controlled substance prescriptions, covered separately from a prescription-validity standpoint in our guide to controlled substance prescription transfer rules.
For pharmacies, “orders” in this context typically refers to purchases made from wholesale distributors, not prescriptions dispensed to patients — though the underlying diversion-detection logic (unusual patterns, red flags) shows up in both contexts.
What counts as a “suspicious order”
DEA guidance and case law have generally identified suspicious orders as those with one or more of these characteristics:
- Unusual size relative to the pharmacy’s typical ordering pattern
- Unusual frequency of ordering
- Orders deviating from a normal pattern without a reasonable explanation
There’s no single bright-line threshold that applies uniformly — what counts as “unusual” depends on the pharmacy’s size, patient population, specialty focus, and historical ordering data. This is part of why pharmacies are expected to build monitoring systems calibrated to their own operations rather than relying on generic thresholds.
Red flags at the dispensing level
Separate from wholesale order monitoring, pharmacists filling prescriptions are expected to watch for red flags suggesting a prescription may not have been issued for a legitimate medical purpose. Commonly cited red flags include:
Identifying a red flag doesn’t automatically mean a prescription must be refused — it means additional judgment and, often, documentation of the pharmacist’s resolution process is generally expected before dispensing.
DEA Form 106 and theft/loss reporting
Separate from suspicious order monitoring, DEA Form 106 is used to report theft or significant loss of controlled substances from pharmacy inventory. This is a different obligation from suspicious order monitoring — it applies when controlled substances go missing from the pharmacy’s own stock, whether through employee theft, robbery, or unexplained shortages identified during inventory reconciliation. We cover this process in more detail in our guide to controlled substance theft and loss reporting.
How reporting obligations typically work
When a suspicious order or diversion concern is identified, the general expectation is that it gets reported to the DEA field office with jurisdiction over the registrant, though the exact mechanics (which office, which form, what documentation) can depend on the nature of the concern and current DEA guidance. Pharmacies are also generally expected to:
- Maintain internal documentation of how red flags were evaluated and resolved
- Train pharmacy staff on recognizing and escalating potential red flags
- Periodically review and update suspicious order monitoring systems as ordering patterns or DEA guidance evolves
The stakes of getting this wrong
DEA enforcement actions against pharmacies for inadequate suspicious order monitoring have resulted in significant penalties in high-profile cases, and individual pharmacists can face state board discipline for repeatedly dispensing without adequately resolving red flags. This is one of the areas where federal and state enforcement can overlap — a DEA action doesn’t preclude a parallel state board complaint or disciplinary proceeding.
Maintaining a defensible, documented process is generally viewed more favorably by regulators than an absence of any process at all, even if individual dispensing decisions are later questioned.
This is a general framework, not case-specific guidance
Diversion and suspicious order monitoring requirements involve fact-specific judgment calls that vary by prescription, patient, and pharmacy. This article describes the general regulatory framework — it isn’t guidance on how to handle any specific prescription or order. For situation-specific questions, consult your pharmacy’s policies, DEA guidance, and qualified legal counsel.
Track compliance obligations across your practice
RxByState helps pharmacists track licensing, registration, and regulatory requirements across every state they practice in. Start your free trial →