We want to ensure our clients are aware of an ongoing scam where fraudsters impersonate the Drug Enforcement Administration (DEA) to target physicians, pharmacists, and other DEA registrants. The DEA has issued repeated public warnings about this scheme, and it continues to evolve. Here’s what to watch out for and what to do if you’re contacted.
What’s happening
Scammers are contacting healthcare providers by phone and by letter, sometimes even on official-looking Department of Justice letterhead. These letters and messages falsely claim that the recipient is under investigation, typically for unlawful prescribing or distribution of controlled substances. Both DEA-registered and non-registered physicians have been targeted.
The goal of the fraudsters is to obtain personal or financial information, or to extort a payment. These callers attempt to sound credible by:
- Using the real names of well-known DEA officials, retired agents, or local police officers
- Providing a fake badge number, often recited immediately at the start of the call
- Referencing your National Provider Identifier (NPI) number or state license number, information that is publicly available, not proof the caller is legitimate
- Claiming patients have made accusations against you, or that your DEA registration or medical license is under investigation
- Using an urgent, aggressive tone and threatening arrest, prosecution, imprisonment, or revocation of your DEA registration or medical license
Eventually, callers ask for sensitive information such as a Social Security number, date of birth, bank account details. They may even demand payment to resolve the supposed “investigation.”
What the DEA actually does and doesn’t do
The DEA has confirmed the following, which should help you recognize a scam call or letter immediately:
- The DEA does not call registrants about investigations. Legitimate DEA personnel will only notify someone of an investigation or legal action in person or by official letter.
- The DEA will never demand money, gift cards, wire transfers, or any other form of payment over the phone.
- The DEA will never ask for your Social Security number, date of birth, or other sensitive personal information by phone.
- The DEA does not investigate or revoke medical licenses. That authority belongs to state medical boards. A caller who threatens to “revoke your medical license” is not from the DEA.
- DEA personnel are titled Special Agents or Diversion Investigators, not “officers.” A caller who identifies themselves as an “Officer” with the “DEA Drug Enforcement Administration” (a redundant phrase a real agent would not use) is a red flag on its own.
What to do if you receive one of these calls or letters
- Do not engage. Do not confirm your identity, provide any personal or professional information (including your DEA registration number, NPI, Social Security number, date of birth, or banking details), or make any payment.
- Do not call back any number the caller provides. If you want to verify a communication, look up the DEA’s number independently rather than using contact information supplied in the suspicious call or letter.
- Hang up or set the letter aside and contact our office if you’re unsure if the communication is legitimate. We’re glad to help you evaluate it before you respond.
- Report the incident. You can report scam calls to the FBI’s Internet Crime Complaint Center at ic3.gov, to the Federal Trade Commission at reportfraud.ftc.gov, and to the DEA’s Diversion Control hotline at 1-877-792-2873.
If you’ve already shared information or made a payment
If you provided a Social Security number, bank account information, or other sensitive data, or sent a payment, act quickly:
- Contact your bank or credit card issuer immediately to flag the account and, if you shared a card number, treat it as lost or stolen.
- Consider placing a temporary credit freeze with the three major credit bureaus to prevent new accounts being opened in your name.
- Visit identitytheft.gov for a personalized recovery plan.
- Let our office know. Depending on what was disclosed, there may be additional steps worth taking to protect your DEA registration, NPI, and professional standing.
Related risks to consider
Treat your DEA registration number and NPI as sensitive credentials, not public reference numbers, even though both can be looked up online. If you ever notice prescribing activity you don’t recognize under your name or registration, contact us right away, this could implicate your DEA registration and requires prompt attention.
Some physicians have also reported a related scam involving callers who claim to be with the Centers for Medicare & Medicaid Services (CMS), demanding medical records or payment of an alleged Medicare debt. The same rule applies: legitimate government agencies do not demand immediate payment or sensitive information over the phone.
We’re here to help
If you receive a call or letter like this, or if you’re ever contacted about a genuine DEA inquiry or are contacted by your state medical board, please reach out to our office before you engage. Early guidance can prevent a costly mistake, whether the communication turns out to be a scam or a legitimate matter that needs an attorney’s involvement.
Call us at 630-912-6146 or reach out through our contact form. We’re here to help.
This alert is provided for general informational purposes and does not constitute legal advice. Reading this alert or contacting the firm does not, by itself, create an attorney-client relationship.