DEA number lookup by NPI
DEA number lookup by NPI: what you can and cannot verify
An NPI is not a DEA number, and you cannot derive one from the other in either direction. In a 2026-08-03 sample of 12,251 live CMS NPI Registry records, 3,459 (28.2%) published at least one additional identifier and none of them was a DEA registration number. Use the NPI to confirm identity, then verify any DEA registration through an official DEA channel.
NPI identifier
10 digits
CMS issues the NPI through NPPES as an intelligence-free 10-digit identifier for billing and identification.
DEA identifier
2 letters + 7 digits
The DEA issues registration numbers to authorize controlled-substance activity; they are not part of the public NPI lookup.
Review limit
Verify at source
SourceCheckHealth does not perform DEA verification, licensure verification, or final credentialing.
Definition-first source note
Can you look up a DEA number from an NPI?
As of 2026-08-03, there is no free official source that reverse-looks-up a provider's DEA registration number from their NPI. The NPI Registry and NPPES downloadable files are maintained by CMS for provider identity; the DEA registration number is issued and controlled separately by the U.S. Drug Enforcement Administration, and DEA registration data is restricted to authorized verification channels rather than open public search.
This is measurable rather than a matter of opinion. An NPI record can carry "other identifier" rows, and that field is where a DEA number would have to appear if it appeared anywhere. On 2026-08-03 we read 12,251 deduplicated live records straight from the CMS NPI Registry API and counted every issuer type in that field: 3,459 records (28.2%) carried at least one, and exactly two issuer types occurred at all.
| NPPES code | Issuer type | Rows in sample |
|---|---|---|
| 05 | MEDICAID | 3,348 |
| 01 | Other (non-Medicare) | 2,915 |
| — | Any DEA registration number | 0 |
The code-01 row is the loosest case: it carries a free-text issuer label a registrant can fill in however they like. Across all 2,915 of them the labels were payer and pharmacy identifiers — most often PK, BCBS, NCPDP provider identification number, Railroad Medicare— and not one named the DEA. So when a third-party tool shows you a "DEA" value beside an NPI, that value did not come from the public NPI Registry. For any compliance decision, confirm DEA registration through an official DEA verification path below, not through an NPI lookup.
The reverse direction
Can you find an NPI from a DEA number?
No. As of 2026-08-03, the public CMS NPI Registry cannot be searched by a DEA number, because it has no parameter that accepts one. The registry searches on NPI, provider name, organization name, taxonomy, and address — a DEA registration number matches none of those fields. Asking it for one is not a query that returns nothing; it is a query the API refuses to run:
| Search attempted | What the registry returned |
|---|---|
| identifier=FV6585383 | {"description":"No valid search criteria provided","field":"generic","number":"04"} |
| dea=FV6585383 | {"description":"No valid search criteria provided","field":"generic","number":"04"} |
| number=FV6585383 | {"description":"NPI must be 10 digits","field":"number","number":"06"} |
If you hold a DEA number and need the provider behind it, the identifier itself will not get you there. Work from a name or an address in an official DEA channel below. If you hold an NPI instead, the public record will confirm identity, taxonomy, and OIG LEIE screening context — it will simply never contain the DEA field.
Unique data dimension
How the DEA check-digit format works
A DEA registration number is two letters followed by seven digits. The first letter marks the registrant type and the second letter is usually the first letter of the registrant's last name (or 9 for a business address). The seventh digit is a check digit you can validate offline:
- 1. Add the 1st, 3rd, and 5th digits.
- 2. Add the 2nd, 4th, and 6th digits, then multiply that sum by 2.
- 3. Add the two results. The last digit of that total must equal the 7th (check) digit.
A passing checksum confirms the number is well-formed only. It does not confirm that the registration is active, unrevoked, or assigned to the provider you are reviewing.
Official verification path
Where to verify a DEA registration
- 1. DEA Diversion Validation Toolset. DEA registrants can validate a registration through the DEA Diversion Control Division Registration Validation Toolset.
- 2. NTIS DEA database. NTIS sells the authorized DEA Controlled Substance Act registrant database, which DEA accepts as proof of registration.
- 3. Confirm with the registrant. For a single provider, request the current registration certificate directly and check it against an official source.
NPI vs DEA at a glance
How the two identifiers differ
| Field | NPI | DEA registration number |
|---|---|---|
| Issuing agency | CMS / NPPES (HHS) | U.S. Drug Enforcement Administration (DOJ) |
| Format | 10 numeric digits (intelligence-free) | 2 letters + 7 digits with a check digit |
| Purpose | Identify a provider for billing and transactions | Authorize handling or prescribing of controlled substances |
| Public lookup | Free public CMS NPI Registry search | No free public reverse-lookup; verify via official DEA channels |
Continue review
Use the NPI you do have
Start from the public NPI record to confirm provider identity and OIG LEIE screening context, then take DEA verification to an official DEA source.
date_retrieved: 2026-08-03. This page is public-source guidance only. SourceCheckHealth does not provide DEA verification, legal advice, complete credentialing, licensure verification, or a final hiring or contracting decision.
Reviewed by SourceCheck Health
Last reviewed: 2026-08-03. date_retrieved: 2026-08-03.
The DEA-versus-NPI guidance and the CMS NPI Registry and DEA Diversion Control source references on this page are reviewed against the official sources named here before the public guidance is updated.
FAQ
Practical notes
Can you look up a DEA number by NPI?
Not from a free official source. The CMS NPI Registry publishes provider identity fields, but it is not a DEA registration database, and a DEA number is not a reliable public field in an NPI record. Use the NPI to confirm provider identity, then verify any DEA registration through an official DEA channel.
Can you find an NPI from a DEA number?
No. The public CMS NPI Registry has no parameter that accepts a DEA number, so the search cannot be run at all: passing one to the identifier or dea parameters returns error 04, "No valid search criteria provided", and passing it as an NPI returns error 06, "NPI must be 10 digits". The registry searches on NPI, provider name, organization name, taxonomy, and address only. To identify the registrant behind a DEA number, work from a name or address through an official DEA channel.
If I look up a specific NPI, will the record show that provider's DEA number?
No. In a sample of 12,251 deduplicated live NPI Registry records read on 2026-08-03, 3,459 (28.2%) published at least one "other identifier" row, and only two issuer types appeared anywhere: MEDICAID (code 05) and Other (non-Medicare) (code 01). Not one row was a DEA registration number, including across the 2,915 code-01 rows whose issuer label is free text. An NPI record confirms identity, taxonomy, and OIG LEIE screening context; the DEA field is simply not in it.
Is a DEA number the same as an NPI number?
No. The NPI is a 10-digit identifier issued by CMS through NPPES for billing and identification. The DEA registration number is issued by the U.S. Drug Enforcement Administration and authorizes a registrant to handle or prescribe controlled substances. They come from different agencies and serve different purposes.
Where can I officially verify a DEA registration number?
DEA registrants can use the DEA Diversion Control Division Registration Validation Toolset. NTIS sells the authorized DEA Controlled Substance Act registrant database that DEA accepts as proof of registration. You can also confirm a registration directly with the registrant. SourceCheckHealth does not perform DEA verification.
How do you check if a DEA number is valid?
A DEA number is two letters followed by seven digits. The first letter marks the registrant type and the second is usually the first letter of the registrant's last name. The seventh digit is a check digit: add the 1st, 3rd, and 5th digits, add twice the sum of the 2nd, 4th, and 6th digits, and the last digit of that total must equal the 7th digit. A passing checksum confirms format only, not active registration.