Two things are happening at once in 2026: the COVID-era telemedicine flexibilities for prescribing controlled substances are set to expire on December 31, 2026, and DEA is actively dismantling illegal online pharmacies. For hospital outpatient pharmacies, PICs, and diversion teams, that combination means the prescriptions arriving at the counter deserve a harder look — not a softer one.

The Regulatory Clock

During the public health emergency, DEA and HHS temporarily waived the in-person examination requirement for prescribing controlled substances via telemedicine. That flexibility has been extended four times. The fourth temporary extension, published December 31, 2025, keeps the flexibilities in place through December 31, 2026.

What happens next is not settled. DEA's proposed rule to create a Special Registration for Telemedicine — which would let practitioners prescribe controlled substances via telemedicine without an in-person exam under defined conditions — was published as an NPRM on January 17, 2025 (docket DEA-407) and was still pending as of late 2026. Until a final rule lands, the default answer to "can this prescriber prescribe controlled substances without seeing the patient?" is: only while the temporary extension is in effect, and only if the prescriber meets every other CSA requirement.

Operation Meltdown: The Enforcement Side

On February 4, 2026, DEA announced Operation Meltdown — the seizure of more than 200 website domains tied to an India-based organization accused of operating illegal online pharmacies responsible for at least six fatal and four non-fatal overdoses. Beginning January 27, 2026, DEA field offices made four arrests and issued five Immediate Suspension Orders (ISOs) and one Order to Show Cause against DEA registrants. DEA also sent more than 20,000 letters to people who purchased from these sites.

The enforcement theory matters to legitimate pharmacies: the operators were filling hundreds of thousands of orders of diverted pharmaceuticals and counterfeit pills without valid prescriptions. Under the Controlled Substances Act, a pharmacy may only dispense controlled substances on a valid prescription issued for a legitimate medical purpose by a practitioner acting in the usual course of professional practice. When that chain breaks — because the "prescriber" never examined anyone, or the "patient" is really a customer of a website — the pharmacist holding the prescription is the last checkpoint.

Why Diversion Teams Should Care

  • The volume of telehealth orders is not shrinking. Outpatient and mail-order pharmacies, plus hospital-owned outpatient pharmacies filling discharge or clinic e-prescriptions, routinely see orders from practitioners they have never met.
  • The rules changed multiple times and may change again. A prescriber who was legal under the temporary extension in March 2026 may not be legal in January 2027 if the extension lapses and no special registration exists. Pharmacies that keep filling without checking are exposed to exactly the kind of enforcement Operation Meltdown demonstrates.
  • Forged and fraudulent e-prescriptions remain a live DEA priority. This is the sister problem to the e-script fraud DEA warned about — fake prescriptions using stolen clinician credentials. Both converge on the same control: verifying the prescriber, the prescription, and the patient.

Red Flags When Verifying Telehealth Prescriptions

  • No documented patient-prescriber relationship. Ask whether the prescription originated from a platform that connects patients to prescribers nationwide with no state-specific license verification.
  • Out-of-state prescribers with no corresponding state license or whose DEA registration doesn't match the state where the pharmacy dispenses.
  • High-risk schedules and quantities — stimulants, benzodiazepines, and opioids in combinations or amounts inconsistent with legitimate practice.
  • Payment patterns — cash-only, prepaid cards, or "coupons" that bypass insurance entirely.
  • Platforms that route around the exam requirement or advertise controlled substances directly to consumers.

How to Prepare

  • Know the date. Put December 31, 2026 on the compliance calendar and track DEA's special registration rulemaking — the rule will change what "valid" means for telehealth controlled-substance orders.
  • Document your corresponding-responsibility review. A written verification workflow — prescriber DEA registration check, state license check, suspicious-order evaluation — is what protects the pharmacist and the pharmacy.
  • Train the counter. Pharmacists and technicians should know the telehealth red flags above and who to escalate to when an order looks off.
  • Report promptly. Suspicious orders should be evaluated under your suspicious-order monitoring process, and known fraud reported to DEA and your state board.

Related Reading