Drug tests work in two stages: a fast, inexpensive screening that flags samples containing substances above a set threshold, followed by a more precise confirmation test that identifies exactly what’s present. Most workplace and clinical drug tests use urine, though saliva, hair, and blood testing each detect drugs over different time windows. Here’s what actually happens at each step.
The Initial Screening: Antibodies vs. Metabolites
When your body processes a drug, it breaks it down into byproducts called metabolites. These metabolites circulate through your blood and eventually show up in urine, saliva, and hair. The initial screening test looks for these metabolites using a method called immunoassay, which relies on antibodies designed to latch onto specific chemical shapes.
The test works through competition. The testing kit contains antibodies pre-loaded with a known, labeled version of the drug metabolite. When your sample is added, any real metabolites in your urine compete with the labeled ones for a limited number of antibody binding spots. If your sample contains a high concentration of the real thing, it pushes aside more of the labeled version, and the measured signal drops. The lower the signal, the more of the substance is in your sample.
This screening is fast and cheap, but it’s also blunt. The antibodies recognize chemical shapes, not exact molecules. That means structurally similar compounds can bind to the same antibodies and trigger a positive result even when the target drug isn’t present. A positive screening result is called “presumptive positive” for this reason. It’s a flag, not a verdict.
Confirmation Testing: The Molecular Fingerprint
Any sample that screens positive goes through a second round of testing, typically using gas chromatography paired with mass spectrometry. This combination is considered the gold standard in forensic drug analysis because of its high specificity and sensitivity.
Gas chromatography separates the chemicals in your sample by heating them into a gas and pushing them through a long, narrow column. Different molecules travel through the column at different speeds, arriving at the detector at distinct times. Mass spectrometry then breaks each separated molecule into fragments and measures their weight. The resulting pattern of fragments is essentially a molecular fingerprint, which the lab compares against reference libraries of known substances.
This two-step process is why a drug test takes days rather than minutes. The initial screen can return results within hours, but confirmation testing requires specialized equipment and trained technicians. The confirmation step also uses a lower threshold than the initial screen for most substances, making it harder for a true positive to slip through while weeding out false alarms from the first round.
What the Cutoff Levels Actually Mean
Drug tests don’t simply detect “any trace” of a substance. They measure concentration in nanograms per milliliter and compare it against a predetermined cutoff. If your sample falls below that cutoff, the result is negative, even if a tiny amount of the substance is technically present.
Federal workplace testing panels set by the Department of Health and Human Services use these urine cutoffs for the initial screen:
- Marijuana metabolite: 50 ng/mL (confirmation at 15 ng/mL)
- Cocaine metabolite: 150 ng/mL (confirmation at 100 ng/mL)
- Amphetamines: 500 ng/mL (confirmation at 250 ng/mL)
- Opioids (codeine/morphine): 2,000 ng/mL
- Fentanyl: 1 ng/mL
- PCP: 25 ng/mL
Fentanyl was added to the federal testing panel in January 2025, and the Department of Transportation is in the process of adopting it for transportation workers as well. Its cutoff is dramatically lower than other substances because fentanyl is active at extremely small doses.
Common Causes of False Positives
Because the initial immunoassay screen recognizes chemical shapes rather than exact molecules, a surprising number of everyday medications can trigger false positives. This is one of the most important things to understand about drug testing: a positive screen does not necessarily mean the person used an illegal drug.
Some well-documented examples:
- Amphetamine false positives: pseudoephedrine (a common decongestant), bupropion (an antidepressant), phentermine (a weight-loss medication), and methylphenidate (used for ADHD)
- Marijuana false positives: ibuprofen, naproxen, and certain baby wash products
- Opioid false positives: dextromethorphan (found in cough syrups), diphenhydramine (an antihistamine), poppy seeds, and the antibiotic rifampin
- PCP false positives: dextromethorphan, diphenhydramine, venlafaxine (an antidepressant), ibuprofen, ketamine, and tramadol
- Benzodiazepine false positives: sertraline (an antidepressant) and certain anti-inflammatory drugs
This is exactly why confirmation testing exists. The molecular fingerprinting process can distinguish ibuprofen from marijuana and cough syrup from PCP. If you take any of these medications, disclosing them before the test (or to the medical review officer afterward) can help contextualize your results.
How Labs Catch Tampered Samples
Before your sample is even screened for drugs, the lab checks whether the specimen itself is legitimate. These validity tests look at three things in urine: pH, specific gravity, and creatinine concentration.
Normal urine pH falls between 4.5 and 8.0. Specific gravity, a measure of how concentrated the sample is, should range from 1.003 to 1.040. Creatinine, a natural waste product from muscle activity, typically measures around 150 mg/dL. A specimen reading below 20 mg/dL is flagged as potentially diluted or adulterated. Drinking excessive water before a test can push creatinine below this threshold, which usually means the test is reported as “dilute” and you’ll need to retest.
The collection process itself is tightly controlled. Collectors check specimen temperature within four minutes of receiving it (to confirm it came from your body). The donor watches the collector pour the specimen into bottles, seal them, and apply tamper-evident labels. The donor then initials those seals. A documented chain of custody tracks every person who handles the specimen from collection to lab to reporting.
Urine vs. Saliva vs. Hair
Each specimen type captures a different window of drug use, which is why some employers combine methods.
Urine is the most common workplace test. A single dose of most drugs is detectable for 1.5 to 4 days. Chronic users can test positive for roughly a week after their last use, and heavy marijuana or cocaine users sometimes test positive even longer. Urine is good at catching patterns of use but can miss very recent consumption. In the case of cannabis, urine testing may not detect use within the previous four hours in someone who doesn’t use regularly.
Oral fluid (saliva) testing detects drugs for a much shorter window, typically 12 to 48 hours, though methamphetamine has been detected at 72 hours and cocaine up to 9 days in chronic users. The tradeoff is that saliva is a better indicator of recent use and possible impairment. A positive saliva result more closely corresponds to the timeframe when someone might actually be affected by a substance, which is why it’s increasingly used in workplace safety settings. The federal oral fluid cutoffs are considerably lower than urine cutoffs. Marijuana, for instance, is screened at just 4 ng/mL in saliva compared to 50 ng/mL in urine.
Hair testing provides the longest detection window. Drugs are incorporated into the growing hair shaft, and since head hair grows about 1 centimeter per month, a 3-centimeter segment can represent roughly three months of use. Labs cut the hair close to the scalp, divide it into segments, then dissolve or extract the drug compounds using chemical baths and ultrasonic processing. Hair testing is best at identifying sustained or repeated use over time but generally cannot detect a single, isolated instance of drug use. Damaged or chemically treated hair can also affect results, as porous hair may release or absorb substances differently.
Blood testing has the shortest detection window of all. Most drugs are detectable in blood for only one to two days, making it useful mainly in emergency rooms, accident investigations, or law enforcement situations where very recent use matters.
What Happens After a Positive Result
In regulated federal and DOT testing programs, a positive confirmation result doesn’t go straight to your employer. It first goes to a Medical Review Officer, a licensed physician trained in substance abuse testing. The MRO reviews the lab results, contacts you, and asks whether you have a legitimate medical explanation, such as a valid prescription for the detected substance. Only after that review does the MRO report a final positive or negative result to the employer.
Non-regulated employers (most private companies) may or may not use an MRO, depending on their testing policy and state laws. The protections vary significantly, which is why understanding both the science and the process behind your specific test matters.