Drug diversion in pharmacy refers to the unlawful channeling of regulated medications from legal sources into the illegal marketplace, or to people they were not prescribed for. It covers everything from a healthcare worker pocketing painkillers at a hospital to a patient visiting multiple doctors to stockpile opioids. Diversion is a persistent problem in healthcare, and by most accounts it is significantly underreported.
How Diversion Works
Diversion can come from inside or outside a healthcare facility, and the methods look very different depending on who is involved.
Inside hospitals and pharmacies, employees with direct access to medication are the primary concern. Common tactics include falsifying waste records (documenting that a partial dose was discarded when it was actually kept), swapping a patient’s medication with saline or another substitute, and charting that a patient received a drug they never actually got. That last method creates a paper trail of fraud: the patient’s chart shows a medication was administered, insurance gets billed for it, and the drug ends up in someone else’s hands. Automated dispensing cabinets, the locked machines that store and track medications on hospital floors, generate transaction logs that can reveal unusual patterns, but a determined employee can exploit gaps between what’s dispensed and what’s documented.
Outside the clinical setting, the most well-known method is “doctor shopping,” where a person visits multiple prescribers to obtain overlapping prescriptions for the same controlled substance. Prescription forgery, theft from pharmacy shelves, and purchasing medications from someone else’s prescription are also common routes. Survey data from about 100 treatment centers found that more than 60% of people who misused prescription opioids reported dealers as their primary source, with doctors and theft accounting for most of the rest.
Which Medications Are Targeted
Opioid painkillers are by far the most commonly diverted prescription drugs. Stimulants like amphetamine and methylphenidate (used for ADHD) are the next most frequent targets. Benzodiazepines, sleep medications, and certain muscle relaxants round out the list. These all fall under federal controlled substance schedules, meaning they carry legal restrictions on prescribing, dispensing, and record-keeping precisely because of their potential for misuse.
Risks to Patients
Diversion is not a victimless problem. When a healthcare worker substitutes saline for a patient’s pain medication, that patient suffers needlessly. The CDC identifies three core dangers: patients being denied essential pain relief or therapy, impaired healthcare workers delivering substandard care, and the spread of infections when injectable drugs are tampered with. Outbreaks of hepatitis B, hepatitis C, and bacterial infections have been traced back to healthcare workers who reused syringes or contaminated vials while diverting drugs for personal use.
There’s also a downstream effect on trust. When diversion is discovered at a facility, every patient who might have been affected has to be notified and potentially tested for bloodborne infections, a process that can involve thousands of people.
Legal Consequences
Federal penalties for drug diversion are severe. For Schedule I and II substances (which include most opioids and amphetamines), a first offense carries up to 20 years in prison and fines up to $1 million for an individual. If the diversion results in death or serious injury, the minimum jumps to 20 years, with a possible life sentence. A second offense raises the ceiling to 30 years, or life imprisonment if someone died. After two or more prior felony drug convictions, the mandatory sentence is life without release.
Beyond criminal prosecution, healthcare professionals face loss of their license to practice, loss of their DEA registration (which is required to handle controlled substances), termination, and civil liability. A pharmacist or nurse convicted of diversion will almost certainly never work in healthcare again.
How Pharmacies Are Required to Track Controlled Substances
The DEA requires every registered pharmacy to maintain a complete and accurate record of all controlled substances on hand. A full inventory must be taken when a pharmacy first begins dispensing controlled substances, and then at least every two years after that (known as a biennial inventory). These records must be kept in written, typed, or printed form at the pharmacy location. The DEA’s Automation of Reports and Consolidated Orders System (ARCOS) tracks the distribution chain for all Schedule I and II drugs, Schedule III narcotics, and selected Schedule III and IV medications from manufacturer to pharmacy, creating a paper trail that can flag unusual ordering patterns.
State boards of pharmacy often layer additional requirements on top of federal rules, such as more frequent physical counts of high-risk medications, perpetual inventory systems that update in real time with every transaction, and mandatory reporting of discrepancies within a set number of hours.
Prescription Drug Monitoring Programs
Every U.S. state now operates a Prescription Drug Monitoring Program, or PDMP. These are electronic databases that track every controlled substance prescription filled in the state, including the patient’s name, the prescriber, the drug, and the date. Before writing a new prescription for an opioid or other controlled substance, clinicians are expected (and in many states required) to check the PDMP to see whether the patient is already receiving similar medications from another provider.
PDMPs are particularly useful for catching doctor shopping. If a patient has filled opioid prescriptions from four different prescribers in the past month, that pattern is immediately visible. The 2022 CDC Clinical Practice Guideline for Prescribing Opioids specifically recommends reviewing a patient’s PDMP history before starting opioid therapy. PDMPs can also reveal dangerous combinations, such as a patient simultaneously filling prescriptions for opioids and benzodiazepines, a pairing that significantly increases overdose risk.
Technology for Detecting Internal Diversion
Most hospitals have historically relied on monthly reports from automated dispensing cabinets, flagging things like unusual withdrawal patterns or unresolved waste discrepancies. The problem is that monthly reviews mean weeks can pass before anyone notices a pattern. A healthcare worker diverting small amounts regularly can operate undetected for months.
Newer systems consolidate data from multiple sources (dispensing cabinets, electronic health records, billing systems, and pharmacy inventory) and apply machine learning to flag suspicious behavior in near real time. One study published in the American Journal of Health-System Pharmacy tested this approach across 10 hospitals and found that supervised machine learning detected known diversion cases faster than existing methods. The software generates heatmaps showing which transactions and which clinicians pose the highest risk, letting investigators prioritize cases instead of manually sifting through thousands of records. Hospitals using these systems now receive daily alerts of suspected diversion rather than waiting for monthly reports.
These tools don’t replace human judgment. They narrow the field so that pharmacy compliance teams can focus investigations on genuinely suspicious activity rather than chasing every minor discrepancy. For large hospital systems dispensing millions of controlled substance doses per year, that filtering capacity is essential.