DEA and NPI Cross-Referencing: How to Match Prescriber Identifiers
By DEA Lookup.com, Inc. · Updated October 3, 2026
DEA number vs. NPI: how they differ
| DEA number | NPI | |
|---|---|---|
| Issued by | Drug Enforcement Administration | CMS, through NPPES |
| Purpose | Authorizes prescribing or handling controlled substances | Identifies the provider in claims and other health care transactions |
| Format | 2 letters + 7 digits, with a check digit | 10 digits, with a check digit |
| How many per provider | One per state where they handle controlled substances | One per individual provider, for life |
| Changes over time | Expires and renews, usually every three years; can be retired or revoked | Permanent; does not change with moves or specialty |
| Carries information | Registrant type and name initial | None; it is "intelligence-free" |
Why organizations need to cross-reference them
- Pharmacies validate the DEA registration on controlled substance prescriptions and use the NPI for claims. Linking the two confirms they belong to the same prescriber.
- Hospitals and clinics tie each provider's identifiers together during credentialing, so the DEA registration, state license, and NPI all point to the same person.
- Distributors keep customer records that combine DEA registrations with other identifiers.
- Software platforms and data teams build one clean provider record from several sources, and the DEA-to-NPI link is often the hardest join.
Why matching is harder than it looks
- No shared key. There is no official public crosswalk that links DEA registrations to NPIs.
- One-to-many relationships. A prescriber licensed in three states may hold three DEA registrations and one NPI.
- Name differences. Middle names, suffixes, maiden names, and credentials (MD, DO, NP) are recorded differently in each database.
- Address differences. A DEA registration lists a registered address in a specific state, while NPPES may show a different practice or mailing address.
- Changing data. DEA registrations expire, retire, and renew, and NPPES records are updated by providers over time. A match that was right last year may not be right today.
How to match DEA numbers to NPIs
- Validate both identifiers first. Run the DEA checksum and the NPI check digit to weed out typos before matching. (See below.)
- Start with the strongest fields. Match on last name, first name, and state, then confirm with credential and specialty.
- Normalize names and addresses. Standardize case, punctuation, suffixes, and abbreviations so small differences don't block a match.
- Allow for one-to-many. Expect several DEA registrations per NPI, one for each state.
- Review weak matches. Flag matches that depend on a single field, or where two providers share a common name in the same state.
- Refresh regularly. DEA registrant data changes daily, and CMS publishes NPI data as monthly full files with weekly updates. Rerun or update the match on a schedule.
How to validate an NPI
An NPI is 10 digits. The last digit is a check digit calculated with the Luhn formula, after adding the prefix 80840. The CMS method for the first 9 digits:
- Double the 1st, 3rd, 5th, 7th, and 9th digits. If a result is two digits, add those digits together.
- Add those results to the 2nd, 4th, 6th, and 8th digits.
- Add 24, which accounts for the
80840prefix. - Subtract the total from the next higher multiple of 10. The result must equal the 10th digit.
Worked example for 1234567893, the sample NPI CMS uses:
- Doubled digits: 1→2, 3→6, 5→10→1, 7→14→5, 9→18→9, totaling 23
- Other digits: 2 + 4 + 6 + 8 = 20
- 23 + 20 + 24 = 67. The next multiple of 10 is 70, and 70 − 67 = 3, which matches the last digit.
As with the DEA checksum, a valid check digit only proves the number is well formed. Look it up in NPPES to confirm it is active and belongs to the right provider. The DEA number has its own checksum, covered in How to Verify a DEA Number.
How DEA Lookup.com helps
For over 15 years, DEA Lookup.com has built primary source data tools for pharmacies, distributors, hospitals, and credentialing teams:
- DEA to NPI Data Engine: matches 95% of practicing prescriber DEA numbers to their NPIs, covering MDs, DOs, NPs, PAs, dentists, optometrists, podiatrists, and other prescribers. Output ranges from DEA and NPI alone to full records with expiration date, status, drug schedules, specialty, contact information, and state license numbers, delivered as delimited files with daily, weekly, or monthly updates.
- DEA to State License Cross Reference: links DEA numbers to state license numbers.
- NPI Data Automation Tool: automates scheduled NPI data downloads into your own systems.
- DEA License Lookup: manually search and verify individual DEA registrations with primary source data.
Related guides: What Is Primary Source Verification (PSV)? and How to Verify a State Medical License in All 50 States
Frequently asked questions
Is there an official crosswalk between DEA numbers and NPIs?
No. The DEA and CMS maintain separate databases, and there is no official public crosswalk that links DEA registrations to NPIs. Matching the two requires comparing names, addresses, credentials, and other details, or using a service that maintains the match for you.
Can one provider have more than one DEA number?
Yes. A DEA registration is issued for a specific state, so a prescriber who handles controlled substances in several states holds a registration in each one. An individual provider has only one NPI, so one NPI can match several DEA numbers.
Does a provider's NPI ever change?
No. An NPI is permanent. It stays with the provider when they move, change jobs, or change specialty. DEA registrations, by contrast, expire and renew, and a provider can gain or lose registrations as they move between states.
How do I check that an NPI is valid?
An NPI is 10 digits, and the last digit is a check digit calculated with the Luhn formula using the prefix 80840. A passing check digit only confirms the format. To confirm the NPI belongs to the right provider and is active, look it up in NPPES, the national NPI registry run by CMS.
Why do pharmacies and hospitals need both the DEA number and the NPI?
They serve different purposes. The NPI identifies the provider in claims and other standard health care transactions. The DEA registration authorizes the provider to prescribe or handle controlled substances. A controlled substance prescription needs a valid DEA registration, while billing and records use the NPI.
DEA Lookup.com is not affiliated with the Drug Enforcement Administration or CMS. This guide is general information, not legal or compliance advice.