Shipping controlled substances under DEA rules
Pharmaceuticals
Pre-clinical Research
Key takeaways
Controlled substances can be shipped in the US when both the sender and the receiver are registered with DEA, or exempt, for that activity and location.
Common and contract carriers do not need DEA registration to carry controlled substances in the usual course of business, but the shipping registrant must pick carriers with adequate security.
Schedule I and II distributions generally need a DEA Form 222 or a CSOS electronic order and must ship only to the registered location on the order.
Shipping containers must not reveal that the contents are controlled substances, and thefts or significant losses must be reported to DEA within one business day of discovery.
Order forms, inventories and transfer records must generally be kept for at least two years and be available for DEA inspection.
Shipping controlled substances is legal in the United States when the sender and the receiver are both authorized by the Drug Enforcement Administration (DEA) for the activity, the transfer is documented correctly for the substance's schedule, and the shipment travels with security that guards against loss and diversion. The rules apply to finished medicines and to bulk materials alike, so a research lab sending a scheduled reference standard faces the same core obligations as a distributor sending finished product.
This guide explains who can ship, which DEA shipping requirements apply to Schedules I and II versus Schedules III through V, how DEA Form 222 and electronic orders work, what storage and carrier rules look like, and which records to keep. It is written for lab operations, pharmacy, quality and logistics teams in the United States. It does not replace legal advice, and state rules can add requirements on top of the federal ones described here.
Can controlled substances be shipped?
Yes. Controlled substances can be shipped between parties who are registered with DEA, or exempt from registration, for the activities involved, as long as the transfer follows the ordering, recordkeeping and security rules for that schedule. What cannot happen is a transfer to someone who is not authorized to receive the substance, or a shipment that skips the required records.
The schedules themselves are set out in 21 CFR part 1308, and the schedule drives most of what follows. Schedule I and II substances carry the strictest ordering and storage rules. Schedules III, IV and V use lighter ordering procedures but still require authorization, records and security.
So can controlled substances be shipped by mail? The U.S. Postal Service accepts them only under specific conditions. Section 453 of USPS Publication 52 says both the mailer and the addressee must be registered with DEA or exempt from registration, and the inner packaging must be marked and sealed under the Controlled Substances Act and placed inside a plain outer wrapper with no markings indicating the contents. Private carriers and couriers set their own acceptance terms, so confirm in writing that the specific service, account and route accept the shipment before you book it.
Bulk drug substance is controlled too
Shipping drug substance for research, formulation or manufacturing does not take it outside the rules. DEA's storage standards for non-practitioners expressly cover raw materials and bulk materials awaiting further processing as well as finished products. A scheduled active ingredient moving from a manufacturer to a contract developer is a distribution of a controlled substance and needs the same authorization checks, order records and security planning as finished product.
Who is allowed to ship controlled substances?
A person who manufactures, distributes, dispenses, imports or exports a controlled substance must hold a DEA registration for that activity unless an exemption applies, under 21 CFR 1301.11. In practice, the parties allowed to ship are registered manufacturers, distributors, researchers, analytical labs, importers, exporters and dispensers acting within their registration, plus agents and employees acting for them in the usual course of business.
Registration is specific in three ways. First, it covers defined groups of activities, and a person engaged in more than one independent activity generally needs a separate registration for each, except for the coincident activities DEA allows. Second, it is tied to a location. Under 21 CFR 1301.12, a separate registration is required for each principal place of business where controlled substances are manufactured, distributed, imported, exported or dispensed. Third, it covers specific schedules, and only persons registered to handle Schedule I or II substances may obtain DEA Form 222 or issue electronic orders for them.
DEA registration for shipping: what the carrier needs
A frequent misunderstanding is that every party touching the package must be registered. That is not the federal rule. Under 21 U.S.C. 822(c), a common or contract carrier or warehouseman, or its employee, does not need to register when its possession of the controlled substance is in the usual course of its business or employment. DEA registration for shipping therefore sits with the sender and the receiver, not with the courier.
That exemption does not make the carrier a distributor. A logistics provider that carries or stores a shipment for a registrant is not authorized to sell, transfer or redirect it on its own account. Responsibility for choosing a secure carrier also stays with the shipping registrant, as explained below.
Practitioners who distribute
Practitioners, such as hospitals and pharmacies, are registered to dispense. Under 21 CFR 1307.11, a registered practitioner may distribute a controlled substance to another practitioner registered to dispense it without registering as a distributor, if the transfer is recorded by both sides, an order form is used for Schedule I or II substances, and the practitioner's distributions in a calendar year stay within 5 percent of all the dosage units it distributes and dispenses. Above that threshold, a distributor registration is needed.
Verify the receiver before you ship
Before distributing to anyone the registrant does not know to be registered, a non-practitioner registrant must make a good faith inquiry with DEA or the state controlled substances agency to confirm the registration, under 21 CFR 1301.74(a). DEA offers a registrant validation toolset for this, and access is restricted to DEA registrants. Check that the registration is active, covers the schedule being shipped and matches the delivery address. DEA's registration page also notes that federal law prohibits handling controlled substances under an expired registration.
What are the DEA requirements for shipping controlled substances?
The DEA requirements for shipping controlled substances come down to six obligations: both parties must be authorized, Schedule I and II transfers need a DEA Form 222 or an electronic order, every transfer must be recorded, the shipping registrant must select carriers with adequate security, the packaging must not reveal the contents, and thefts or significant losses must be reported promptly. The table summarizes how these DEA shipping requirements differ by schedule for non-practitioner registrants.
Requirement | Schedules I and II | Schedules III, IV and V |
|---|---|---|
Ordering document | DEA Form 222 or a CSOS electronic order, with listed exceptions | No Form 222. Invoices or other transfer records document the distribution |
Delivery location | Only the purchaser's location printed on the form or tied to the CSOS certificate | A location covered by the receiver's registration |
Records | Kept separately from all other records | Kept separately or readily retrievable from business records |
Retention | At least 2 years | At least 2 years |
Non-practitioner storage | Safe, steel cabinet or vault meeting 21 CFR 1301.72(a) | Safe, vault or secured building meeting 21 CFR 1301.72(b) |
Import authorization | DEA permit for each shipment | Permit or declaration for each shipment, depending on the substance |
Theft or significant loss | Written notice within 1 business day, DEA Form 106 within 45 days | Same |
The table is a summary for planning, not a complete rule set. The exceptions and special cases in each regulation still need to be checked against the actual transaction.
DEA Form 222 and electronic orders for Schedules I and II
Under 21 CFR 1305.03, each distribution of a Schedule I or II controlled substance requires a DEA Form 222 or its electronic equivalent. The exceptions include distributions to persons exempt from registration, conforming exports and deliveries to a registered analytical laboratory or its DEA-approved agent, among others.
The current DEA Form 222 is a single sheet, not the older triplicate set. Under 21 CFR 1305.13, the purchaser makes a copy of the original for its records and sends the original to the supplier. The supplier records the number of containers furnished on each item and the date shipped, and keeps the original. Suppliers that do not report to DEA's ARCOS system, such as practitioners, must send a copy to DEA at the close of the month in which the order is filled. A partially filled order may be completed by later shipments within 60 days, and no form is valid more than 60 days after the purchaser executes it. The substances must be shipped only to the purchaser at the location DEA printed on the form. When the shipment arrives, the purchaser records on its copy the number of containers received and the date.
Electronic orders through DEA's Controlled Substance Ordering System (CSOS) replace the paper form. The purchaser signs with a DEA-issued digital certificate, and the supplier must validate the signature and certificate before filling the order. The supplier must ship to the registered location associated with that certificate, and the purchaser must create a linked electronic record of what was received and when.
Schedules III through V
Ordinary distributions of Schedule III, IV and V substances do not use DEA Form 222. They still require an authorized receiver and transfer records. DEA's recordkeeping rules describe documenting a distribution with invoices or order forms, and CSOS orders may include these schedules as well. A lower schedule reduces paperwork, not the obligation to account for every unit.
Carrier selection and packaging
The rule on DEA transport is short. Under 21 CFR 1301.74(e), a registrant shipping controlled substances is responsible for selecting common or contract carriers that provide adequate security to guard against in-transit losses, and must take precautions such as making sure shipping containers do not indicate that the contents are controlled substances. That means the outer box, labels and any visible paperwork should carry no substance names, schedule markings or other hints. It also means asking a carrier how it controls access, tracks handoffs and responds to a missing package before you hand over the first shipment.
Controlled substance classification and transport hazard classification are separate. A scheduled substance shipped on dry ice, or one that is also flammable or toxic, must also meet the dangerous goods rules for its mode of transport. Mercury's dry ice shipping instructions cover the refrigerant side of that planning.
Thefts and losses in transit
Under 21 CFR 1301.74(c), a registrant must notify its DEA Field Division Office in writing of any theft or significant loss within one business day of discovery, and file a complete DEA Form 106 within 45 calendar days. Outside import and export transactions, the supplier is responsible for reporting in-transit losses by its agent or by the carrier it selected. In an import, the importer takes that responsibility once customs releases the shipment, and in an export, the exporter is responsible until the shipment is released at the port of export. DEA's theft and loss reporting page explains the online Form 106 process. A late or missing delivery should therefore trigger an immediate investigation, not wait for a routine freight claim.
Imports and exports
Cross-border shipments need DEA authorization for each shipment. Under 21 CFR 1312.11, importing Schedule I or II substances, narcotic substances in Schedules III through V and certain designated non-narcotics requires an import permit, while other non-narcotic Schedule III through V substances require an import declaration. Exports follow a parallel permit or declaration structure under 21 CFR 1312.21. Customs entry, FDA admissibility and the destination country's own controls sit on top of these, so plan the DEA and customs steps together with a licensed broker such as Mercury's customs brokerage team.
How are controlled substances stored and distributed?
Controlled substances are stored in secured areas that meet DEA physical security standards for the registrant's type and the schedule, and they are distributed only to verified, authorized receivers with records at every step. Under 21 CFR 1301.71, every registrant must provide effective controls and procedures against theft and diversion, and DEA uses the standards in 21 CFR 1301.72 through 1301.76 to judge them.
For manufacturers, distributors and other non-practitioners, 21 CFR 1301.72 requires Schedule I and II materials to be kept in a safe or steel cabinet meeting stated resistance ratings, or in a qualifying vault. Schedule III through V materials may also be kept in a building with perimeter security, alarms and controlled access that meets the listed specifications. Practitioners must keep controlled substances in a securely locked, substantially constructed cabinet under 21 CFR 1301.75, although pharmacies and institutional practitioners may disperse Schedule II through V stock among noncontrolled products to obstruct theft.
Warehouses and third-party storage
Controlled drug substance storage and distribution often involve a third-party warehouse. A warehouse that stores controlled substances for a registrant is generally not treated as a separately registered location, unless it distributes directly to other registered locations or to certain unregistered persons. When using a public warehouse, the registrant is responsible for choosing a warehouseman with adequate security and, wherever possible, one that meets the 21 CFR 1301.72 standards. Stock held in a warehouse on the registrant's behalf still counts as on hand and belongs in the registrant's inventory.
Distribution controls
Distribution is more than shipping. Non-practitioner registrants must run a system that discloses suspicious orders, meaning orders of unusual size, frequency or pattern, and report them to DEA when discovered. Combined with the good faith registration inquiry and order-form rules, this is the core of controlled drug substances logistics. Each order is checked before it ships, shipped only to an authorized location, and reconciled on arrival. If the material also needs refrigeration or frozen storage, those conditions add to the security controls but do not replace them. Mercury's cold chain storage and warehousing page describes temperature-controlled storage options.
What documents are needed for controlled substance shipments?
The documents needed for controlled substance shipments depend on the schedule, the parties and whether the shipment crosses a border. A typical domestic file includes:
Proof of the receiver's active DEA registration for the schedule and delivery address, from the good faith inquiry.
For Schedules I and II, the executed DEA Form 222 or the CSOS electronic order, plus any power of attorney for the person who signed it.
For Schedules III through V, the invoice or other transfer record showing the substance, quantity, date and both parties.
Shipping records such as the packing list, air waybill or bill of lading and carrier tracking with proof of delivery.
The receiver's record of the quantity received and the date, linked to the order.
For imports or exports, the DEA permit or declaration for that shipment and the customs entry or export filing.
Dangerous goods documents if the package contains dry ice or another regulated hazard.
If something goes wrong, the written theft or loss notice and the DEA Form 106.
Under 21 CFR 1304.04, required inventories and records must be kept for at least two years and be available for DEA inspection. Records for Schedules I and II must be kept separately from other records, while Schedule III through V records may be kept separately or in a readily retrievable form. Executed Forms 222 must be kept separately for two years and, where a purchaser has several registered locations, at the location printed on the form. Financial and shipping records such as invoices and packing slips may be kept at a central location only after notifying DEA.
Building a controlled substance logistics process
Most compliance failures happen when controlled shipments run through the same workflow as ordinary reagents or parcels. A dedicated controlled substance logistics process keeps the checks in a fixed order:
Identify the exact substance, form, quantity and schedule, and whether the shipment is domestic or international.
Confirm the sender's registration covers the activity, schedule and shipping location.
Verify the receiver's registration, schedule coverage and registered address, and screen the order for anything suspicious.
Complete the order document for the schedule and confirm it is valid and signed by an authorized person.
Select a carrier with adequate security, confirm it accepts the material and service, and agree on tracking, custody and escalation contacts.
Pack in plain outer packaging, add any temperature control and dangerous goods marking, and record what left and when.
Confirm receipt, reconcile quantities against the order, and investigate any discrepancy at once.
File the records where the regulations require and keep them for at least two years.
Assign an owner for each step. In a research setting, the registrant of record is often a principal investigator or institutional official, while the shipping team handles the physical move. Both need to know who verifies the registration, who signs the order and who reports a loss.
Mistakes worth avoiding
Several errors come up repeatedly. Teams assume a Schedule III registration lets them receive a Schedule II product. They ship to a different building or campus address than the one on the registration or order form. They print the product name on the outer box. They treat a missed scan as a carrier service problem for days before checking whether a loss report is due. They also rely on older guidance describing a triplicate Form 222, which no longer matches the current single-sheet process. Each of these is avoidable with a written checklist that runs alongside, not inside, the standard shipping workflow.
Prescription drug shipments may also fall under FDA's product tracing rules, which are a separate obligation from DEA controls. Mercury's guide to DSCSA requirements for pharmaceutical shippers covers that side, and its chain of custody guide explains how to document each handoff.
Mercury supports clinical and commercial drug logistics for life science teams, including temperature-controlled moves and documented handoffs. The registrants on each end remain responsible for their DEA registrations, order forms and reports, so confirm those first and plan the transport around them.
