Most diversion guidance looks at the back end: the cabinet, the waste bin, the syringe. The front end gets less attention, which is odd, because ordering is where the largest quantities move with the fewest witnesses. A technician with ordering rights and a wholesaler login can bring a bottle of a hundred tablets into the building that no patient ever needed, and if receiving and ordering are the same person, no one else will know it arrived. This guide covers the ordering patterns that signal a problem, what the law requires and of whom, and how to see your own orders the way your wholesaler sees them.

The suspicious order rule, and who it binds

Distributors must “design and operate a system to disclose to the registrant suspicious orders of controlled substances” and report them to the local DEA Field Division Office when discovered. The rule gives three markers: “orders of unusual size, orders deviating substantially from a normal pattern, and orders of unusual frequency” (21 CFR 1301.74(b)). Congress put a matching definition into the statute: a suspicious order “may include, but is not limited to” an order of unusual size, one deviating substantially from a normal pattern, and orders of unusual frequency (21 U.S.C. 802(57)).

Two things follow for a pharmacy. First, the rule is addressed to non-practitioners; a pharmacy ordering for its own dispensing is not required by it to run a suspicious order system. Second, a pharmacy that distributes controlled substances to another registrant, even occasionally, must comply with the non-practitioner rules on verifying the recipient's registration, suspicious orders and carrier security (21 CFR 1301.76(c)). A hospital pharmacy that supplies affiliated clinics should read that paragraph closely.

The practical consequence is that your wholesaler is watching your orders against your own history and against pharmacies like yours. When an order trips its system, the wholesaler may hold it, cut it, ask questions, or report it. The questions arrive as a request for a dispensing report, prescriber list or explanation. The pharmacy that already runs the review below answers in an afternoon. The one that does not learns, from an outside party, that its own purchases do not make sense.

Red flags on the pharmacy's side of the order

These are patterns that suggest someone inside the pharmacy is using the ordering process itself to divert. None is proof; each is a reason to pull the records.

  1. Purchases outrun dispensing for one product. Over a quarter, the quantity bought of a specific strength should roughly equal what was dispensed plus what was wasted, returned or still on the shelf. When purchases of a high-risk product grow and dispensing does not, something is leaving another way. This single comparison, run product by product, is the most powerful ordering control a pharmacy has.
  2. Orders for a strength or form you rarely dispense. A high-strength tablet, a concentrated oral solution or an injectable that your prescriber base does not use, appearing on orders at a steady cadence.
  3. One person's orders look different. Orders placed by one individual at unusual times, outside the normal ordering day, in smaller and more frequent quantities, or just under a quantity that would prompt a question.
  4. Orders signed without a power of attorney. Anyone who signs a Schedule II order on the registrant's behalf, on paper or electronically, must hold a power of attorney executed by the registrant, the grantee and two witnesses, kept with the order records (21 CFR 1305.05(a) and (d)). A name on an order with no power of attorney behind it is a finding, and an order placed under someone else's electronic credential is worse.
  5. Ordering and receiving by the same person. The purchaser must record what was received and when on its copy of the Form 222 or in the linked electronic record (21 CFR 1305.13(e); 21 CFR 1305.22(g)). If the person who ordered also signs for the tote and posts the receipt, a short shipment or a missing bottle has no independent witness.
  6. Deliveries to the wrong place. Schedule II orders must ship only to the purchaser at the registered location printed on the form or tied to the digital certificate (21 CFR 1305.13(c); 21 CFR 1305.22(f)). Requests to reroute, to hold at a depot, or to deliver to a side door are red flags on their face.
  7. Open orders that never close. A Form 222 or electronic order may be filled in part with the balance supplied within 60 days, after which it is no longer valid (21 CFR 1305.13(b); 21 CFR 1305.22(e)). Orders that stay open, back-ordered items that quietly arrive weeks later, and partial receipts that are never completed are places where product can arrive without being expected.
  8. Unexplained credits and returns. A return to the wholesaler reduces your purchases on paper. If the credit memo is not matched to a physical shipment back, with a quantity someone else verified, the return can be a way of making over-purchasing disappear.
  9. Multiple accounts and secondary suppliers. A second wholesaler account, a specialty distributor or a buying group account opened for a reason nobody remembers splits the pattern so that no single supplier sees the whole.
  10. Sample requests. Distributors may not provide Schedule II through V complimentary samples without a prior written request from the customer naming the drug and quantity, kept with distribution records (21 CFR 1301.74(d)). Samples arriving without such a request on your side are product with no order behind them.

Red flags your wholesaler sees

The distributor's view is of your orders in context. The patterns that tend to draw its attention mirror the three statutory markers: a jump in volume of one product relative to your own history; a mix of orders that departs from pharmacies of similar size and type, such as a high share of the highest-strength opioids or of a particular combination of drugs; and ordering frequency that changes shape, such as frequent small orders replacing the usual weekly one. A new pharmacy, a change of ownership, or a change in the person placing orders resets the baseline and invites scrutiny. None of this is published as a rule; it is how the duty in 21 CFR 1301.74(b) is operationalized, and it is why a pharmacy should be able to explain its own ordering before anyone asks.

Build the purchase-to-dispense review

A quarterly review for each controlled product, or at minimum for the Schedule II products and the benzodiazepines and stimulants that move most, needs five numbers: opening quantity on hand, quantity purchased, quantity dispensed, quantity disposed of by waste, return or destruction, and closing quantity on hand. Opening plus purchased minus dispensed minus disposed should equal closing. The gap, if any, is the number to investigate. Pull purchases from wholesaler invoices and Form 222 or electronic order records, not from the pharmacy system's receiving entries, so that the receiving step is itself being tested.

Alongside the numbers, review the process:

  • List everyone with ordering credentials and everyone with a power of attorney. The lists should match, and each person should still work for you.
  • Confirm ordering and receiving are different people, and that receiving is posted the day the product arrives.
  • Match every credit memo to a return shipment someone other than the orderer verified.
  • Confirm every Schedule II order record shows a received quantity and date, and that none is open past 60 days.
  • Check for second accounts in your pharmacy's name.

Keep the review. Form 222 records must be kept separately and be available for two years (21 CFR 1305.17(c)), and the review that reconciles them is the document that shows they were used.

When the wholesaler calls

Respond with data, promptly, and in writing. Provide the dispensing report for the product and period in question, the reconciliation above, and any legitimate explanation for a change in pattern, such as a new prescriber, a new contract or a hospice account. If the reconciliation shows a gap you cannot explain, you have discovered a possible loss, and the theft and significant loss rule applies on discovery: written notice to DEA within one business day and Form 106 within 45 days if the loss is significant under the factors in the rule (21 CFR 1301.76(b)). The Form 106 guide covers the filing. Do not resolve the wholesaler's question by finding an explanation that fits; resolve it by finding the one that is true.

Frequently asked questions

Does a pharmacy have to run a suspicious order monitoring system?
Not for its own purchases; 21 CFR 1301.74(b) is addressed to non-practitioners. A pharmacy that distributes to other registrants must comply with it for those distributions (21 CFR 1301.76(c)). Every pharmacy benefits from reviewing its own ordering as if it did.

Our wholesaler cut our order. What now?
Ask what information the wholesaler needs, provide it, and run the purchase-to-dispense reconciliation for the product in question before you respond. If the pattern is legitimate, the data will show it. If it is not, you would rather learn that from your own review than from an investigator.

Can a technician place Schedule II orders?
Federal rules let a registrant authorize any individual to sign Schedule II orders by executing a power of attorney (21 CFR 1305.05(a)); they do not restrict the role. State rules may. Whoever holds the power of attorney should not also be the only person who receives and posts the product.

Sources