What positive identification is actually for

The standard pitch for identity verification in medication dispensing goes: diversion is a major problem, a lot of it involves people obtaining medication under false pretenses, therefore verify identity. We went looking for the evidence behind the middle clause, and it is not there.

What we could not find

There is no US epidemiological estimate of the share of diversion attributable to prescription forgery or false-identity dispensing. It is not separated out in the National Survey on Drug Use and Health. In the pooled peer-reviewed analysis of that survey it is bundled with theft, internet purchase and “some other way” into a single residual. The Government Accountability Office’s review of DEA diversion control names forgery as a mechanism and assigns it no magnitude.

This is a verified absence rather than a failed search, and it means any percentage you are quoted here was invented.

What the measured data actually says

From the 2024 survey, asked how they obtained the most recent prescription pain reliever they misused: 40.5% had a prescription from one doctor. 31.3% were given it free by a friend or relative. 7.6% bought from a dealer. 6.9% bought from a friend or relative. 4.0% took it from a friend or relative without asking. 2.0% had prescriptions from more than one doctor. 1.3% stole from a doctor’s office, clinic, hospital or pharmacy.

The routes identity verification directly interdicts are the last two. They add to 3.3%.

The case that survives

It is a patient-protection and data-integrity case, and it does not need a diversion percentage:

1. A misattributed result harms an innocent person. If a specimen or a dispensing event attaches to the wrong identity, someone who did nothing carries a positive toxicology result or a flag in a monitoring record. Given how consequential those are, and given how often results are misread anyway, identity resolution is a protection before it is a control.
2. Everything downstream inherits the identity. Dose calculations, monitoring records and outlier analyses are only as good as the identity underneath them. A record attached to the wrong person corrupts every inference drawn from it — and those inferences get used to make decisions about people.
3. It closes the informal-courier gap. When a patient cannot collect their own medication, someone else does, and nobody records that handoff. Verified delivery closes it without anyone being accused of anything.
4. It gives a clinician a defensible answer. Demonstrating that medication reached the person it was written for is a materially different position from assuming it.

Why publish this

Because an agency’s analyst will find the same absence we did, and it is better that they find it on our site than in a hearing. The honest case is strong enough. Attaching an invented number to it would make the true parts look like marketing.

More: diversion and the identification gap · biometric cross-validation.