What triggers a DEA investigation of a pharmacy or healthcare facility?

DEA investigations of registrants are initiated by several types of triggers: a tip or complaint from a patient, employee, or other source; a significant discrepancy identified during a routine DEA administrative inspection; a DEA Form 106 report of theft or significant loss that flags an unusual pattern; referral from a state board of pharmacy or law enforcement partner; or analysis of ARCOS (Automation of Reports and Consolidated Orders System) data that shows unusual ordering patterns for a registrant. Most investigations begin with administrative rather than criminal investigative techniques, with the approach escalating based on what the preliminary inquiry reveals.

Do I need an attorney when a DEA investigator contacts my facility?

Legal counsel is strongly advisable whenever a DEA Diversion Investigator or agent makes contact regarding an investigation — as distinct from a routine inspection where the investigator identifies themselves as conducting an administrative inspection under the routine inspection authority. If the nature of the contact suggests that your facility or registration is under investigation (as opposed to a routine administrative check), you should involve compliance counsel before providing records beyond what is legally required and before scheduling interviews of staff. The distinction between a routine inspection and an investigation is not always immediately clear from the initial contact.

Can a pharmacy lose its DEA registration as a result of an investigation?

Yes. The DEA has authority to revoke or suspend a registrant's DEA registration if it finds that continued registration is inconsistent with the public interest. Grounds for revocation include: maintaining records in a manner that fails to account for controlled substances, failing to prevent drug diversion, and other significant violations of the Controlled Substances Act. An order to show cause is typically issued before revocation, giving the registrant an opportunity to respond. Immediate suspension is possible in cases where the DEA determines that an imminent hazard to public health exists.

How Long Does a DEA Investigation Take? Timeline &…

Q: What is the difference between a DEA inspection and a DEA investigation?

A DEA administrative inspection is a scheduled or unannounced review of a registrant's controlled substance records and physical inventory conducted under the DEA's broad administrative inspection authority. Inspections are routine for all registrants and do not imply wrongdoing — they are a compliance verification tool. A DEA investigation, by contrast, is initiated when the DEA has specific reason to believe that violations of the Controlled Substances Act have occurred or are occurring. Investigations may use a wider range of techniques, including subpoenas, surveillance, and cooperation with federal prosecutors. The same DEA Diversion Investigator may initiate both, and an inspection can escalate to an investigation if significant discrepancies are found.

One of the most anxiety-provoking aspects of a DEA diversion investigation is not knowing what to expect or how long it will last. The honest answer is that DEA investigation timelines vary significantly based on the complexity of the case, the number of individuals involved, and whether the matter proceeds as an administrative action or is referred for criminal prosecution. What follows is a realistic walkthrough of the phases and what registrants and their compliance teams should be doing at each stage.

What Triggers a DEA Investigation

DEA investigations of registrants are initiated by several types of triggers:

Tip or complaint: A patient, employee, former employee, or member of the public reports suspected diversion or controlled substance violations to the DEA's Diversion Control Division tip line or directly to a local Diversion Investigator.
Routine inspection finding: A DEA administrative inspection uncovers discrepancies, recordkeeping deficiencies, or other irregularities that merit further inquiry beyond the scope of the initial inspection.
DEA Form 106 filing: A registrant's own report of theft or significant loss triggers a DEA follow-up inquiry, particularly if the loss is large, recurring, or involves an unusual pattern.
State board referral: A state board of pharmacy investigation that surfaces controlled substance violations may result in a referral to the DEA for federal enforcement consideration.
ARCOS data analysis: The DEA's Automation of Reports and Consolidated Orders System tracks Schedule I and II controlled substance ordering by registrant. Ordering patterns that deviate significantly from peer norms — in volume, frequency, or substance type — can trigger DEA inquiry.

Phase 1: Initial Inquiry

The initial inquiry phase typically involves the DEA Diversion Control Division conducting preliminary analysis of the registrant's records and ordering history without the registrant's knowledge. Investigators may request records from distributors, review CSOS order data, and evaluate any prior inspection findings or Form 106 filings before making contact with the registrant. This phase can last from a few weeks to several months depending on the complexity of what the available data suggests.

During this phase, the registrant has no obligation to take any action because they are typically unaware an inquiry is underway. However, this is precisely why maintaining complete, up-to-date controlled substance records at all times is essential — because any records that existed during the initial inquiry period may be requested at a later stage.

Phase 2: Records Review

When the DEA makes formal contact — whether through a scheduled inspection visit, a document request, or an in-person meeting — the records review phase begins. DEA Diversion Investigators will typically request:

Biennial inventory records
Receiving records (Form 222 copies, CSOS records, distributor invoices)
Dispensing records and medication administration records
Waste and destruction records (Form 41)
Power of Attorney documents
Any prior DEA correspondence, inspection reports, or Form 106 filings

Investigators will reconcile these records against each other to identify gaps, discrepancies, and patterns that cannot be explained by the documented transaction history. This reconciliation work is time-intensive for complex facilities with large controlled substance volumes, and the records review phase alone can extend over several months for a major health system.

Phase 3: Interviews

As the records review narrows the investigative focus, DEA investigators may request interviews with individuals who have knowledge of the transactions or systems under review. These interviews may include pharmacy directors, compliance officers, dispensing pharmacists, nursing managers, and in some cases individual staff members identified by the records as having anomalous transaction patterns.

Registrants and their employees are not required to answer questions that may incriminate them — the right against self-incrimination applies. Whether to participate in voluntary interviews with the DEA — and in what form — is a decision that should be made in consultation with legal counsel. A facility's compliance officer has different obligations and considerations than an individual staff member who may be a subject of the investigation.

Phase 4: Forensic Testing

In cases where tampering is suspected — particularly where a patient received a substitute substance instead of the labeled controlled substance — the DEA may conduct forensic analysis of drug samples. This phase may involve collection of vials, syringes, or other pharmaceutical items from the registered location for laboratory analysis. Positive forensic findings (e.g., a fentanyl vial that contains only water, or a morphine syringe contaminated with a diverter's blood) significantly escalate the investigative trajectory toward criminal referral.

Phase 5: Referral — Administrative Action vs. Criminal Prosecution

At the conclusion of the investigative phases, the DEA makes a determination about disposition:

Administrative action: The DEA may pursue administrative remedies against the registrant — including a letter of admonition, consent agreement, or formal order to show cause why the registrant's DEA registration should not be revoked or suspended. Administrative actions address the registrant's ongoing compliance obligations and the fitness of the registration to continue, but they do not result in criminal conviction.
Criminal referral: If the investigation has developed evidence of criminal conduct — willful diversion, fraud, conspiracy — the DEA may refer the matter to the U.S. Attorney's office for federal prosecution, or to state authorities for state-law criminal charges. Criminal proceedings run on a separate timeline from DEA administrative action and may occur simultaneously or sequentially.
No action: If the investigation does not develop sufficient evidence to support administrative or criminal action, it may be closed without formal disposition. The registrant typically receives no formal notice that the matter has been closed; investigations may simply cease to proceed.

How Long Does the Process Take?

DEA investigations do not operate on a fixed timeline. Simple matters involving a single registrant with a contained discrepancy may resolve in a few months. Complex investigations involving multiple individuals, large discrepancy volumes, potential criminal conduct, or forensic analysis can extend for a year or more before the DEA takes formal action. Criminal proceedings, if initiated, add additional time beyond the initial investigation.

This uncertainty is one reason why maintaining complete, accurate, and readily retrievable controlled substance records at all times is the most effective preparation for any investigation. A registrant who can produce complete records quickly, explain discrepancies with documented investigations, and demonstrate that their diversion prevention program is genuinely functional is in a far stronger position than one scrambling to reconstruct records at the time of inquiry.

Registrant Obligations During an Investigation

When a registrant becomes aware that a DEA investigation is underway:

Preserve all records. Any records that may be relevant to the investigation must be preserved immediately and not destroyed, even if their normal retention period has elapsed. Document preservation obligations arise as soon as you have reason to believe records may be relevant to a legal proceeding or government investigation.
Involve compliance counsel. Legal counsel should be notified immediately. Decisions about what to provide voluntarily, how to respond to requests, and how to manage staff communications should be made with legal guidance.
Cooperate with lawful requests. Registrants are generally required to make records available to DEA Diversion Investigators during an inspection under the administrative inspection authority. Refusing to comply with a lawful administrative inspection can itself constitute a violation.
Do not coach staff witnesses. Instructing employees on what to say (or not say) to DEA investigators is obstruction. Internal communications during an active investigation should be managed carefully and with counsel's guidance.

Administrative Inspection vs. Criminal Investigation: The Distinction

Every DEA investigation starts with the DEA's broad administrative authority under the Controlled Substances Act to inspect registrants' records, premises, and inventories. An administrative inspection does not require the showing of probable cause that a criminal investigation requires — the DEA's inspection authority is essentially a condition of DEA registration. An investigation becomes criminal in character when the DEA is gathering evidence with the intent to support prosecution. The same DEA Diversion Investigator may conduct both administrative and criminal-parallel inquiries, and the transition from one to the other is not always signaled to the registrant.

For registrants navigating the difference, the practical guidance is this: treat every interaction with DEA investigators as if it may be relevant to a criminal proceeding, maintain records as if they will be reviewed in court, and make no statements to investigators without legal counsel present when the matter has escalated beyond a routine inspection.

Frequently Asked Questions

What triggers a DEA investigation?

Tips, significant inspection findings, Form 106 filings with unusual patterns, state board referrals, and ARCOS ordering data anomalies are the most common triggers. Most investigations begin administratively before any criminal determination is made.

Do I need an attorney?

Yes — legal counsel is strongly advisable whenever contact from the DEA suggests your facility or registration is under investigation rather than routine inspection. Involve compliance counsel before providing voluntary materials or scheduling staff interviews.

Can a pharmacy lose its DEA registration?

Yes. The DEA can revoke or suspend a registration if continued registration is inconsistent with the public interest. An order to show cause is typically issued first, giving the registrant an opportunity to respond. Immediate suspension is available in cases of imminent public health hazard.

What is the difference between a DEA inspection and a DEA investigation?

An administrative inspection is a routine compliance verification that all registrants may be subject to — it does not imply wrongdoing. An investigation is triggered by specific reason to believe violations have occurred. The same investigator may conduct both, and an inspection can escalate into an investigation if significant irregularities are found.

How Long Does a DEA Investigation Take? Timeline & What Happens