Prescribers pay the DEA $888 to be vetted. 1.5 million renewals were approved without a human looking.

The finding, in one paragraph: to prescribe controlled substances in America you must hold a DEA registration, and the fee for it — $888 per practitioner every three years — funds the entire apparatus that is supposed to keep ineligible prescribers out.▸ The Justice Department's Inspector General audited that apparatus and found that the checking mostly is not checking: about seven of every ten applications in the audit window were approved by software with no human review under a feature nobody can produce a risk assessment for; the one training requirement Congress imposed after a million overdose deaths is enforced by a self-attested checkbox; and once registered, a practitioner faces no routine inspection of any kind — not because inspections fell short of the plan, but because the plan does not include practitioners.

Five documents, read directly.▸ The audit is the DOJ Office of the Inspector General's Audit of the Drug Enforcement Administration's Registration Process for Medical Practitioners (report 26-069, July 9, 2026), scope October 2021 through August 2025. Its lineage matters, so the cross-examination documents are a decade of the government's own paper: GAO's May 2016 registrant-eligibility review (GAO-16-310), which found 864 potentially ineligible or elevated-risk registrants and drew five corrective commitments from the DEA; the DEA's own "Dear Registrants" letter implementing the MATE Act training mandate; the statute the registration exists to enforce (21 U.S.C. § 823, quoted in the audit); and the OIG's report listing recording the DEA's concurrence with all five new recommendations.

The Diversion Control Program is one of the cleanest fee-for-oversight trades in government: registrants pay in — over $1.8 billion between January 2022 and December 2024, 94 percent of it from practitioners — and the program is obligated to spend it keeping the registry clean.▸ The fee was last reassessed in 2020 to ensure it covers "the full costs" of the program. What the ledger shows the money bought, on the intake side:

Approximately 1.5 million of the roughly 2.1 million applications received were renewal applications "auto-approved by the system without a secondary review by a Specialist or Diversion Investigator." When the auditors asked for the risk assessment behind that feature, DEA officials answered that the decision predated current leadership and "evidence of a documented risk assessment could not be located."▸ The audit's verdict on what remains: the DEA "is relying on the good faith and veracity of renewal applicants."

The money is not the constraint — the fee is sized by law to cover the program. The people are the constraint:

Eighty-one Registration Program Specialists process the applications of a registrant population growing by about 66,000 a year — a 19 percent vacancy against the DEA's own 100-position ceiling, after staffing fell by six during the 2025 hiring freeze.▸ As of July 2025 the DEA had a freeze-exemption request pending so a fee-funded program could hire the staff the fees already pay for. Downstream, fewer than 700 Diversion Investigators are responsible for more than 1.9 million practitioners — one per roughly 2,700 — and their scheduled-inspection workplan is where the audit found its sharpest tension.

Three places where an official document meets its own ledger:

The 100 percent plan. The DEA's stated goal is "to complete 100 percent of the scheduled workplan every year."▸ The OIG read the most recent workplan and found it does not specify a single scheduled investigation of a medical practitioner — the category that is "the vast majority of all registrants." The goal is met by construction: practitioners are investigated only when a patient, pharmacist, or employer complains.

The checkbox law. After the Consolidated Appropriations Act of 2023 imposed a one-time, 8-hour training requirement on every DEA-registered prescriber, the DEA's own letter to registrants explained compliance: "practitioners will be required to check a box on their online DEA registration form."▸ All 14 Specialists the OIG interviewed confirmed the DEA collects no documentation whatsoever. The audit's conclusion: "the DEA cannot verify an applicant's actual compliance with this federal law unless an investigation is initiated" — and, per the finding above, no such investigation is scheduled for any practitioner.

The decade-old warning. In 2016, GAO found 864 registrants who were potentially ineligible or elevated-risk — deceased, incarcerated, under active warrants, on sex-offender registries, or lacking state authority.▸ The DEA reported implementing most of GAO's fixes by 2021, including integrating state medical-board data. Nine years later, the OIG pulled a 300-practitioner sample and found three holding active DEA registrations on expired state licenses — the exact condition 21 U.S.C. § 823 makes disqualifying — and eight with arrests or medical-probation periods on their public state records, of whom only two were referred to a Diversion Investigator as DEA's own procedures require. One of the five new recommendations is, in effect, go look at the six you missed.

The DEA concurred with all five recommendations — standardized quality assurance for approvals, a risk assessment of the auto-approve feature, closing the Specialist staffing gap, reviewing the six flagged registrants, and resourcing scheduled investigations of practitioners.▸ All five are open as of the report's release; the OIG's closure analysis (Appendix 3) will track them. The structural facts that generated the findings — the hiring freeze, the auto-approval, the checkbox — remain in force as of the audit's August 2025 cutoff.

All figures are from the five documents cited in-line, each read directly. The 300-practitioner sample was judgmental, not random — its hit rates illustrate control gaps and do not project to the registry.