This story is invented. It is a composite of how ordering-side diversion in a community pharmacy is typically discovered, and of the one call that often starts it.

The setting

An independent community pharmacy with two pharmacists, one of whom is the owner and pharmacist in charge, and five technicians. One senior technician has handled ordering for years. She places the daily order through the wholesaler's portal, signs Schedule II orders electronically under a power of attorney the owner executed when the pharmacy moved to electronic ordering, checks in the delivery each morning, and posts the receipts into the pharmacy system. The owner trusts her completely, and with reason: she is the most reliable person in the building.

The first signal

The signal came from outside. The wholesaler's compliance department emailed the owner: the pharmacy's purchases of one strength of oxycodone tablets had risen over the past two quarters in a way that departed from its history and from similar pharmacies, and the wholesaler was requesting a dispensing report for that product for the period before it would release the current order. The email cited the distributor's obligation to monitor for suspicious orders. The owner's first reaction was irritation; the pharmacy had picked up a pain management practice's patients and he assumed that explained it.

The look

To answer the wholesaler he ran the dispensing report himself. Dispensing of the product had risen, modestly, with the new practice. Purchases had risen much more. He did what he had never done before: a purchase-to-dispense reconciliation for that one product over six months. Opening quantity on hand from the last state-required perpetual reconciliation, plus purchases from the wholesaler's invoices, minus dispensing from the pharmacy system, minus the handful of returns and the one expired bottle sent to the reverse distributor, should have equaled the shelf count. It did not. The gap was several hundred tablets.

He then did the reconciliation a second way, using the pharmacy system's receiving entries instead of the wholesaler's invoices. That version balanced almost perfectly. The difference between the two was the finding: the wholesaler had shipped, and invoiced, more than the pharmacy system said had been received. Someone was ordering product, receiving it, and not posting it.

The confirmation

The owner pulled the electronic order records for the period. Every order for the product had been signed with the senior technician's credential, as expected. What he had not noticed before was the shape of them: in the last two quarters, a number of small orders for that one product had been placed on days the pharmacy did not normally order, and each was for a quantity that, on its own, looked unremarkable. The received-quantity record that the rules require for each electronic order had been completed for every one, in her hand, and matched the invoices. The pharmacy system, however, showed receipts posted for only some of them. The bottles that were never posted were never on the perpetual, so the perpetual never showed them missing.

The morning delivery camera, which the owner had installed for robbery deterrence and rarely reviewed, showed the technician checking in the tote alone, as she always had, and on several of the relevant mornings placing one bottle in her bag rather than on the shelf. The owner had the footage preserved and did not confront her.

What the pharmacy did

The owner called his state board's compliance line and an attorney the same day, and treated that day as the date of discovery. He made the written notification to the local DEA office within one business day and filed the Form 106 within the 45-day window with the quantity from the reconciliation. The technician was placed on leave and her ordering credential and power of attorney were revoked that afternoon; the revocation was executed with two witnesses as the power of attorney had been. He answered the wholesaler with the dispensing report and the reconciliation, and told them a loss had been reported. Law enforcement was notified in accordance with the board's guidance. The interview with the technician was conducted with counsel present, after the records were complete.

What would have surfaced it sooner

  • Separating ordering from receiving. One person placed the order, signed for the tote, and posted the receipt. No second person ever saw the bottle. A different technician checking in the controlled substance tote each morning would have found the gap on the first short posting.
  • Reconciling to the wholesaler's invoices, not to the pharmacy system. The internal reconciliation balanced because the same person controlled both sides of it. The external record was the one that did not lie.
  • A quarterly purchase-to-dispense review. The owner ran it once, under pressure, and found the problem in an hour. Run quarterly, it would have shown the gap two quarters earlier.
  • Watching the pattern of orders, not just the total. Small off-cycle orders for a single high-risk product are the shape distributors are required to watch for. The pharmacy could have watched for it too.
  • Reviewing who holds a power of attorney and why. The power of attorney was legitimate; the problem was that it came with no second set of eyes. The ordering red flags guide covers the full list.

The wholesaler's call is often how this kind of diversion is found, and it is the worst way to find it: late, from outside, with an outside party already holding the numbers. The reconciliation that answered the call took an afternoon. It could have been routine.

This narrative is an illustrative composite. No real person, pharmacy, distributor or event is described.