What Is Drug Diversion in Healthcare?

Drug diversion is the theft or misuse of controlled substances by healthcare workers. A nurse who administers a partial dose and keeps the rest. A pharmacist who dispenses against a discharged patient. A staff member who replaces fentanyl with saline and lets the patient absorb the difference. Each is a diversion event, and each happens far more often than most health systems realize.

The scale of the problem

Three numbers define the diversion crisis:

• 95% of diversion cases are never investigated
• 80-93% of diversion incidents go completely undetected
• $70 billion is lost to drug diversion in healthcare every year

The gap between "suspected" and "proven" explains most of that first number. Investigations get dropped because suspicions cannot be confirmed with hard evidence, and without the right tooling, pharmacy managers and compliance officers are left working from fragmented, incomplete data.

Who diverts, and how

Diversion is not limited to one role. Anyone who touches the medication chain can exploit gaps in monitoring: nursing staff at the automated dispensing cabinet (ADC), pharmacy staff during reconciliation, and anyone with dispensing privileges during a shift.

Experienced diverters understand exactly where oversight is weakest. They know which transactions are unlikely to be reviewed, when spot checks happen, and where the blind spots are. Common patterns include:

• Dispensing without administration. Medication leaves the cabinet but never reaches a documented patient.
• Administration without a documented dispense. The reverse gap, equally telling.
• Reconciliation failures. Doses administered plus wasted plus returned do not equal the amount dispensed.
• Whole dose waste. An entire dose "wasted," often without a proper witness.
• Off-shift and off-location activity. Medication activity by someone who is not on shift, or in a different unit than the patient.
• Activity on discharged or expired patients. Dispensing against a patient who left the building hours ago.

Why it matters beyond the loss

Patients are harmed first. Diverted pain medication means inadequate pain management, contaminated substitutes, and elevated infection and error risk for the patient in the bed.

Regulators follow. Health systems that fail to detect diversion face scrutiny from the DEA, the Joint Commission, and state boards of pharmacy. When an offender is finally caught, often by chance, the institution faces fines, lawsuits, and reputational damage that can take years to repair.

Staff carry the risk too. A colleague with an untreated substance use disorder is a danger to themselves, their coworkers, and every patient on the unit. Detection is also a route to intervention.

Why traditional monitoring misses it

Most diversion programs still run on EHR reports, ADC logs, and periodic manual audits. That approach has structural weaknesses no amount of effort fixes:

1. The data never meets. EHR, ADC, and timekeeping data each tell part of the story. A nurse dispensing off-shift is only visible when all three are correlated.
2. Spotchecking is not surveillance. Manual audits review a fraction of transactions, and the gaps between reviews give diverters room to operate.
3. Monthly cadence is too slow. When data is pulled once a month, diversion that begins in week one may not surface until week five.

Renown Health, a northern Nevada system serving over one million people, could monitor only five diversion risk factors under its manual program. After moving to continuous, AI-driven monitoring with DetectRx, that number rose to 24, and monthly manual reviews became 24/7 automated review.

What good detection looks like now

Modern drug diversion monitoring software correlates EMR, ADC, and timekeeping data continuously, applies machine learning plus expert-written rules to every medication event, and scores each flagged event so the most serious risks surface first. Peterson Health used this approach to move from spotchecking to reviewing every outlier transaction automatically.

As Annie Raymond, Director of Pharmacy at Peterson Health, put it: "DetectRx has made it possible to review every transaction that may appear as an outlier, as opposed to what we were doing before, which was spotchecking."

If your program still depends on monthly report pulls, start with the gap analysis: which of the risk patterns above could your current process actually catch, and how long after the event?

Statistics and examples in this article come from the DetectRx whitepaper and its published customer results.