CMS Payment Suspensions and DEA Immediate Suspension Orders: The Administrative Side of the 2026 Health Care Fraud Takedown

Federal Enforcement Update · June 2026

The 2026 takedown froze first and charged second. Alongside 455 criminal defendants, the June 23 National Health Care Fraud Takedown announced 1,079 CMS payment suspensions, 1,403 billing privilege revocations, and a record 928 DEA administrative actions against controlled substance registrants, including 53 Immediate Suspension Orders and 205 Orders to Show Cause. These administrative actions arrive with short deadlines, few appeal rights, and a parallel criminal investigation that most providers cannot see.

THE ADMINISTRATIVE TAKEDOWN · JUNE 23, 2026 1,079 CMS Payment Suspensions 1,403 Billing Privileges Revoked 42 C.F.R. § 405.371 928 DEA Administrative Actions Record Total Since Oct. 1, 2025 205 OTSCs · 642 Surrenders 53 Immediate Suspension Orders Effective on Service · No Prior Hearing 21 U.S.C. § 824(d) Sources: DOJ 2026 National Health Care Fraud Takedown · DEA Administrator Cole Remarks, June 23, 2026
Administrative enforcement announced with the 2026 National Health Care Fraud Takedown: CMS payment suspensions and revocations, and DEA registrant actions broken down by Administrator Terry Cole.

The Takedown’s Other Half: Enforcement Without an Indictment

Key Takeaways

The 2026 National Health Care Fraud Takedown charged 455 defendants. The larger numbers were administrative: 1,079 CMS payment suspensions, 1,403 revocations, and a record 928 DEA registrant actions. The government freezes revenue and prescribing authority first. Charges, if any, come later.

A CMS suspension rests on a credible allegation of fraud, a standard that includes a data analytics flag, and carries no hearing and no appeal. A DEA Immediate Suspension Order stops all controlled substance activity on service, before any hearing, on a finding of imminent danger under 21 U.S.C. § 824(d).

Both regimes run on short clocks. The CMS rebuttal is due in 15 days. The DEA hearing request is due in 30. Statements made in either proceeding are available to criminal prosecutors. In the DEA’s enforcement year, 642 registrants surrendered without a fight. Most CMS-suspended providers never responded at all.

The June 23 takedown drew headlines for its criminal numbers: 455 defendants, 90 licensed professionals, $6.5 billion in alleged false claims, $182 million seized. The administrative numbers were bigger. They show where enforcement is heading.

In the same announcement, DOJ reported that CMS suspended 1,079 providers and revoked billing privileges for 1,403. HHS-OIG pursued more than $10 billion for the Medicare Trust Fund from payments CMS caught and suspended before they were paid. And DEA announced a record 928 administrative actions against controlled substance registrants since October 1, 2025.

The strategy behind the numbers is explicit. The Government Accountability Office reported in March 2026 that CMS prevented an estimated $11.9 billion in potentially fraudulent Medicare payments across fiscal years 2022 through 2024 through prepayment reviews, payment suspensions, and enrollment revocations. The pay-and-chase era is over. The government now cuts off the money, the billing number, or the registration first, on an administrative record the target has not seen, and sorts out the rest afterward.

For a provider, this changes what the first day of a case looks like. The opening event is no longer a subpoena. It is a remittance that fails to arrive, or a DEA investigator at the front desk with an order that took effect when it was handed over. This analysis covers the two administrative regimes doing that work: CMS payment suspensions under 42 C.F.R. § 405.371, and DEA Orders to Show Cause and Immediate Suspension Orders under 21 U.S.C. § 824. It closes with the procedural rules that govern the DEA proceedings and the defense decisions those rules force.

Pillar One: CMS Payment Suspensions at Unprecedented Scale

A Low Standard, Met by an Algorithm

CMS may suspend Medicare payments, in whole or in part, on a credible allegation of fraud. The authority comes from the Affordable Care Act, codified at 42 U.S.C. § 1395y(o), and implemented at 42 C.F.R. § 405.371. The defined term is broad. Under § 405.370, a credible allegation is an allegation from any source with indicia of reliability, and the regulation lists claims data mining as a qualifying source on its face. A billing profile that diverges from peer benchmarks can be the entire allegation. No witness. No patient complaint. No charge.

The analytic engine behind that standard grew in 2026. DOJ’s Fraud Division obtained cloud computing access inside CMS’s Integrated Data Repository to run its algorithms and AI tools directly against claims data, and CMS signed data-sharing agreements with the Department of Homeland Security and the Federal Trade Commission.

No Notice, No Hearing, No Appeal

Fraud-based suspensions usually arrive without warning. Under 42 C.F.R. § 405.372, CMS decides, in consultation with HHS-OIG and, as appropriate, DOJ, whether to suspend and whether the provider gets any advance notice. The provider’s sole remedy is a written rebuttal due within 15 days. There is no hearing. The determination on the rebuttal is not an initial determination and is not appealable. Suspended funds sit in escrow and are applied first to any overpayment CMS later finds.

The freeze can run 18 months, and longer. The ordinary time limits do not apply to fraud-based suspensions. CMS must reevaluate every 180 days, and good cause to end the suspension is deemed to exist at 18 months, unless the case has been referred to OIG for administrative action or DOJ submits a written request to continue based on an anticipated or pending criminal or civil case. For a hospice or home health agency that draws most of its census from Medicare, the freeze decides the case by attrition long before 18 months run.

The 2026 Campaign

The scale is new. On May 13, 2026, CMS imposed a six-month nationwide moratorium on new hospice and home health enrollment, coordinated with the Task Force to Eliminate Fraud. It had already suspended payments to approximately 800 hospices and home health agencies in Los Angeles alone, providers that billed $1.4 billion to Medicare the prior year, and the task force reports nearly $1.4 billion withheld from the sector nationwide. Administration officials say roughly 90 percent of suspended providers never contacted CMS after the money stopped. The government reads the silence as proof the operations were shells. For the legitimate minority, the silence of the others makes an early, careful, well-documented response the only way to stand apart. We covered the first wave of these suspensions in our Operation Never Say Die analysis.

One trap deserves its own paragraph. A fraud-based suspension exists only because CMS consulted OIG and, as appropriate, DOJ before imposing it. Criminal investigators may already be working the case when the notice arrives. The rebuttal is not privileged. Every statement in it, and every document attached to it, is available to prosecutors. A provider drafting a rebuttal is also drafting a grand jury exhibit.

Pillar Two: DEA’s Record Year Against Registrants

The takedown’s second administrative front ran through the DEA. Administrator Terry Cole used the June 23 press conference to announce numbers his agency had never posted before. Since October 1, 2025, DEA issued a record 928 administrative actions against controlled substance registrants: 205 Orders to Show Cause, 53 Immediate Suspension Orders, and 642 surrenders for cause. DEA also developed 18 criminal and civil cases with U.S. Attorneys’ Offices for the takedown itself.

“If you choose personal greed over professional responsibility, DEA will hold you accountable.”

— DEA Administrator Terry Cole, 2026 National Health Care Fraud Takedown, June 23, 2026

Cole’s examples showed the range. One physician’s case involved $36 million in Medicaid fraud and produced the seizure of $15 million and six aircraft. A pair of pill mill clinics issued prescriptions totaling more than 2 million oxycodone pills and over 900,000 hydrocodone pills. In the takedown’s criminal cases, 36 defendants, including 28 licensed professionals, were charged with diverting opioids and other controlled substances, one of them through a voicemail refill line for Schedule II drugs linked to overdose deaths.

The framing was as important as the figures. Cole described registrants who fuel addiction as no different from any other drug trafficker, and he said DEA uses every authority it has, criminal, civil, and administrative, when it finds registrants abusing positions of trust. Read those two ideas together. DEA treats the registration action and the criminal case as one campaign against the same target. Providers should too.

Look at the composition of the 928. Surrenders for cause outnumbered contested actions by more than two to one. Six hundred forty-two registrants signed away their registrations, most in the presence of investigators, without a hearing and without testing DEA’s evidence. That statistic mirrors the CMS side, where 90 percent of suspended providers never responded. In both regimes, the government’s most effective weapon is the target’s own capitulation in the first meeting.

What the Administrator’s Statement Gives the Defense

Enforcement speeches are written for deterrence. Read closely, this one also marks the boundaries of the target class, and the defense can hold the government to them. Cole told the country that the vast majority of healthcare professionals honor the registrant’s promise. He defined that promise as medical decisions based on clinical judgment rather than financial gain. And he reserved the trafficker comparison for providers who fuel addiction, endanger lives, and profit from the pain they cause. On DEA’s own framing, the ordinary prescriber exercising documented clinical judgment sits outside the campaign. A registrant whose case rests on charting gaps, coding disputes, or a disagreement between experts about the standard of care can open the defense with the government’s words.

The intent language cuts the same way, but only on the criminal side. Cole aimed his warning at providers who choose personal greed over professional responsibility. Choice is the operative word in a prosecution. In criminal prescribing cases, the Supreme Court held in Ruan v. United States, 597 U.S. 450 (2022), that once a prescriber produces evidence the prescribing was authorized, the government must prove beyond a reasonable doubt that the defendant knowingly or intentionally acted in an unauthorized manner. A prescriber who honestly exercised clinical judgment lacks the intent the statute requires.

Ruan does not follow the registrant into the administrative case. In Ashraf, the court rejected a registrant’s argument that DEA must satisfy Ruan’s mens rea standard in a revocation proceeding. Section 824 contains no knowing-or-intentional element for public interest determinations, and DEA precedent has long held that unintentional or even innocent misconduct can support revocation where continued registration is inconsistent with the public interest. The statute itself makes suspension and revocation proceedings independent of, and not in lieu of, criminal prosecutions. Good faith can defeat the criminal charge and still leave the registration exposed. The clinical record still serves both proceedings, but it does different work in each. In the criminal case it negates intent. Before the ALJ it answers the public interest factors and supports remediation.

The numbers help too. Fifty-three ISOs against 205 Orders to Show Cause means DEA itself treats immediate suspension as the exception, not the default. Cole described the administrative actions as tools to prevent future harm. Both points feed the imminent danger fight. A registrant served with an ISO can argue that the agency’s own practice reserves the remedy for the rare case of an ongoing, immediate threat, and that conduct which has stopped, changed, or aged does not support a prophylactic order.

Pillar Three: The Legal Regime for Orders to Show Cause and Immediate Suspension Orders

The Statutory Grounds

DEA registration actions run under 21 U.S.C. § 824. Subsection (a) lists the grounds for suspending or revoking a registration. They include material falsification of the application, a felony conviction relating to controlled substances, loss of the state license that authorizes the practitioner to handle controlled substances, exclusion from Medicare or Medicaid, and the commission of acts that render the registration inconsistent with the public interest. The DEA Diversion Control Division refers to Orders to Show Cause and Immediate Suspension Orders together as administrative actions. The two are procedurally different, and the difference decides how much of the registrant’s business survives the first day.

The Order to Show Cause

The Order to Show Cause is the charging document. Under § 824(c), DEA must serve an order stating the legal basis for the proposed denial, suspension, or revocation, and must give the registrant an opportunity for a hearing. The registration remains active while the case proceeds. The registrant keeps prescribing or dispensing until a final order issues.

Congress added a second track in 2016. A registrant served with an Order to Show Cause may submit a corrective action plan on or before the hearing date. DEA must then determine whether the proceeding should be discontinued, or deferred while the plan is modified, amended, or clarified. A credible plan, built on documented compliance fixes, can end a case without a hearing. The right has one large exception. It does not apply when DEA issues an Immediate Suspension Order.

The Immediate Suspension Order

The ISO is the DEA’s version of the payment suspension, and it is faster. Under § 824(d), DEA may suspend a registration simultaneously with the institution of proceedings when it finds an imminent danger to the public health or safety. The suspension takes effect on service. No prior hearing. No corrective action plan. Service triggers immediate obligations. Under 21 C.F.R. § 1301.36, the registrant must promptly deliver its Certificate of Registration, order forms, and permits to DEA, and must either deliver all controlled substances in its possession to DEA or place them under seal, as § 824(f) provides. A pharmacy served with an ISO stops dispensing controlled substances that day. A prescriber loses controlled substance authority that hour. And the freeze has staying power. The suspension remains in effect through the administrative case and any judicial review, unless the Administrator withdraws it or a court of competent jurisdiction dissolves it. Winning the hearing months later does not return the months.

Congress disciplined the standard in 2016. Section 824(d)(2) defines imminent danger: because of the registrant’s failure to maintain effective controls against diversion or otherwise comply with the Controlled Substances Act, there must be a substantial likelihood of an immediate threat that death, serious bodily harm, or abuse of a controlled substance will occur without an immediate suspension. Every element is litigable: the substantial likelihood, the immediacy of the threat, and the causal tie to the registrant’s own compliance failures. An ISO built on stale conduct, or on prescribing that has already stopped, is vulnerable on the immediacy element. The statutory definition exists because Congress concluded DEA had been suspending first and justifying later. The definition is the defense’s starting point.

Defending the DEA Proceeding

Thirty Days, an Answer, or Default

The registrant’s hearing right lives or dies in the first month. Under 21 C.F.R. § 1301.43, a request for hearing must be filed within 30 days of receiving the order. The request is not enough by itself. Under 21 C.F.R. § 1301.37, the registrant must also file an answer within the same window, responding to every factual allegation in the order by admitting it, denying it, or stating a lack of knowledge, which operates as a denial. Any allegation not denied is deemed admitted. The answer is a pleading with consequences. A rushed answer that skips an allegation concedes it. A careless admission becomes evidence in the administrative case and material for the criminal one. A late filing waives the hearing and supports a default, and DEA then issues a final order on its own record. Two hundred five registrants received Orders to Show Cause in the enforcement year. The ones who missed the window handed DEA an uncontested win.

The Expedited Hearing: The ISO Registrant’s First Lever

An ISO registrant holds one procedural right the ordinary respondent does not. Under 21 C.F.R. § 1301.36, a registrant whose registration has been suspended may request an expedited hearing on the suspension. The Administrator must grant the request and fix a hearing date as early as reasonably possible. Because the suspension runs through the entire case, and through judicial review after it, every week of delay is a week of zero controlled substance revenue. The expedited hearing compresses that timeline. It also forces the government to prove its imminent danger record early, before the file matures. Demanding the expedited date is usually the first strategic decision in an ISO defense, and the answer filed with it frames every issue the ALJ will hear.

The Hearing and the Public Interest Factors

A contested case is tried before an administrative law judge in DEA’s Office of Administrative Law Judges. The hearing runs under the Administrative Procedure Act. Under 5 U.S.C. § 556, the ALJ administers oaths, rules on offers of proof, and regulates the course of the hearing. The evidence rules are loose. Any oral or documentary evidence may come in, subject only to the ALJ’s duty to exclude what is irrelevant, immaterial, or unduly repetitious. Hearsay is admissible, and it can carry the government’s case. In Hoxie v. DEA, 419 F.3d 477 (6th Cir. 2005), police arrest records were held to constitute substantial evidence of a registrant’s failure to comply with drug laws. A defense built on Federal Rules of Evidence instincts will misjudge this forum.

The burden framework comes from the case law. The government bears the initial burden of proving that the registration is inconsistent with the public interest. Once it makes a prima facie case, the burden shifts to the registrant to demonstrate why the registrant can be trusted with a registration. Ashraf v. United States DEA, 153 F.4th 1161 (2025). In practitioner cases, the public interest analysis runs through the factors in 21 U.S.C. § 823(g)(1): the recommendation of the state licensing board, the registrant’s experience in dispensing controlled substances, any conviction record, compliance with controlled substance laws, and other conduct that may threaten public health and safety. Prescribing cases also turn on the corresponding responsibility rule of 21 C.F.R. § 1306.04, which requires that every prescription serve a legitimate medical purpose in the usual course of professional practice. The government builds its case on prescribing data, expert review of patient files, and red flags the registrant allegedly ignored. The defense answers with the clinical record, the standard of care, and the state board’s view of the same conduct.

The ALJ issues a recommended decision and certifies the record, including the transcript, exhibits, and filed papers, to the Administrator. The Administrator issues and publishes a final order with findings of fact and conclusions of law under 21 C.F.R. § 1316.67, and is not bound by the recommendation. Review of the final order lies in a federal court of appeals, on a petition filed within 30 days under 21 U.S.C. § 877. For ISOs, registrants have sought emergency relief in district court while the administrative case proceeds. Courts have divided on whether § 877 makes the court of appeals the exclusive forum, and emergency relief is rare. The realistic battlefield is the administrative hearing itself, and the record built there controls the appeal.

Judicial Review: Substantial Evidence, Reasoned Decisionmaking, and PDK Labs

Two standards govern the court of appeals. Under § 877, the agency’s findings of fact are conclusive if supported by substantial evidence. Under the Administrative Procedure Act, 5 U.S.C. § 706, the court must set aside agency action that is arbitrary, capricious, an abuse of discretion, or otherwise not in accordance with law. The factual deference is heavy. The reasoned-decisionmaking requirement is where DEA orders get vacated.

PDK Labs Inc. v. United States DEA, 362 F.3d 786 (D.C. Cir. 2004), shows how. DEA suspended shipments of a registrant’s List I chemicals, and the Deputy Administrator sustained the suspension orders on a totality of the circumstances that leaned heavily on four alleged export notification violations. The problem was DEA’s own case law. A prior agency decision, Alfred Khalily, Inc., had held that a company selling List I chemicals to a foreign buyer but delivering them inside the United States had no export filing obligation. The Deputy Administrator never addressed it. The D.C. Circuit vacated. An agency may change its position over time, but it acts arbitrarily when it departs from its own precedent without giving a good reason.

The court also rejected DEA’s fallback that the error was harmless. Section 706 directs courts to take due account of the rule of prejudicial error, so a mistake that did not affect the outcome will not sink an order. Here it did. The Deputy Administrator said the totality of the circumstances drove the decision, the flawed violations were prominent in that totality, and the court could not tell what weight they carried. Vacated and remanded.

PDK Labs supplies a working playbook for ISO and revocation challenges. The Administrator’s published decisions are a body of precedent, and DEA is bound to follow them or explain the departure. A registrant hit with an ISO on facts that DEA treated more leniently in a prior published decision has a reasoned-decisionmaking argument, and the argument starts in the administrative hearing, where the precedent gets placed in the record. The harmless error rule sets the second task. The defense must show the flawed factor carried real weight in the outcome, because an error the court deems immaterial leaves the order standing. In these cases, precedent research is the vacatur theory.

The Acceptance Problem

DEA precedent adds a trap for anyone under parallel criminal investigation. The agency weighs the registrant’s candor, cooperation, and acceptance of responsibility heavily, and the courts have sustained that approach. In Hoxie, the Sixth Circuit upheld the agency’s reliance on a registrant’s dishonesty during the investigation and failure to admit fault as affirmative evidence that the registration was inconsistent with the public interest. The reverse also holds. Evidence that a registrant readily admitted fault and cooperated supports keeping or restoring the registration. Ashraf applies the same framework: once the government makes its case, the registrant must show it can be trusted, and trust runs through admissions. Acceptance means admissions, on the record, under oath. A registrant facing a grand jury cannot make those admissions safely, and invoking the Fifth Amendment in the administrative hearing carries its own cost, because the ALJ may draw an adverse inference in a civil proceeding. The sequencing decision, whether to fight the registration case now or seek to hold it while the criminal exposure resolves, is the hardest call in these cases. It cannot be made well without visibility into how prosecutors evaluate the same file.

The Surrender Decision

Then there is the path 642 registrants took. A voluntary surrender for cause, executed on DEA Form 104, terminates the registration immediately and permanently, with no hearing and no reconsideration. Investigators often present the form during an unannounced visit, in the registrant’s own office, with the suggestion that signing will simplify things. It does, for the government. The surrender does not end the investigation. It is reported to the state board, acted on by hospitals and payors in credentialing, and disclosed on every future application. Some surrenders are the right outcome. A hallway, under time pressure, is the wrong place to decide one. The 642 number says that is where most of these decisions were made.

One Investigation, Four Proceedings

The takedown’s design puts a single provider inside several proceedings at once: a CMS suspension with a 15-day rebuttal, a DEA order with a 30-day hearing demand, an OIG exclusion or civil monetary penalty track, and a criminal investigation running underneath all of them. Each proceeding has its own record. Statements travel between them in one direction only, toward the prosecutors. The defense has to be built once, across all four, with every submission drafted in light of the criminal case, because that is how the government builds its side.

Armstrong & Bradylyons PLLC: Payment Suspension, DEA Registration, and Health Care Fraud Defense

Armstrong & Bradylyons PLLC defends providers, pharmacies, physicians, and executives in CMS payment suspension proceedings, DEA registration actions, and the federal health care fraud investigations that run alongside them, nationwide. The firm’s controlled substances diversion defense practice covers Immediate Suspension Orders, Orders to Show Cause, and the criminal prescribing investigations that run with them.

Scott Armstrong directed DOJ’s Appalachian Regional Prescription Opioid Strike Force (ARPO), the Department’s dedicated strike force for investigating and prosecuting medical professionals involved in the illegal prescribing, distribution, and diversion of opioids and other controlled substances. Under ARPO, DOJ charged more than 120 defendants collectively responsible for prescribing over 115 million controlled substance pills across 10 federal districts in six states. Scott led the prosecutors and data analysts who identified targets from prescribing data and built those cases, and he tried prescription drug diversion cases as lead trial counsel. The registrants who receive ISOs and Orders to Show Cause today are the same population ARPO investigated, identified through the same prescribing data. Scott also served as an Assistant Chief in the Fraud Section’s Market Integrity and Major Frauds Unit and as a leading trial attorney in its Healthcare Fraud Unit, trying sixteen federal jury trials, including nine healthcare fraud trials, with lead-counsel responsibility for cases totaling over $600 million in false claims to federal programs.

Drew Bradylyons served as an Assistant Chief in the Health Care Fraud Unit, where he supervised the Miami Strike Force, and as Chief of the Financial Crimes and Public Corruption Unit at the U.S. Attorney’s Office for the Eastern District of Virginia, where he supervised parallel civil, criminal, and administrative fraud proceedings involving more than $1 billion in claims, including opioid diversion prosecutions. They know how an administrative record becomes a criminal exhibit because they built cases that way. The sequencing judgments these proceedings demand are judgments they made from the government side for years.

The firm’s attorneys have over 25 years of combined DOJ experience and 25 federal jury trials, including 17 in healthcare fraud cases involving over $2.8 billion in alleged false claims. The firm is based in Washington, D.C. and handles matters in every federal district.

Frequently Asked Questions

CMS Payment Suspensions
What is a credible allegation of fraud under 42 C.F.R. § 405.370?

A credible allegation of fraud is an allegation from any source, including fraud hotline complaints, claims data mining, and patterns identified through provider audits, civil False Claims Act cases, and law enforcement investigations. An allegation qualifies when it carries indicia of reliability. The definition appears in 42 C.F.R. § 405.370 and sets a low threshold. CMS does not need proof of fraud, a completed investigation, or a charging decision. A statistical billing anomaly flagged by a data analytics system can qualify by itself. The suspension decision is made by CMS in consultation with the HHS Office of Inspector General and, as appropriate, the Department of Justice, under § 405.371(a)(2).

How long can a fraud-based Medicare payment suspension last?

A fraud-based suspension can last 18 months, and longer if the government extends it. The 180-day limit and single 180-day extension that govern overpayment suspensions do not apply; 42 C.F.R. § 405.372(d)(3) removes those time limits when the suspension rests on credible allegations of fraud. CMS must evaluate every 180 days whether good cause exists not to continue. Under § 405.371(b)(3), good cause not to continue is deemed to exist once a suspension has run 18 months without resolution of the investigation, but CMS may extend beyond 18 months if the case has been referred to and is being considered by OIG for administrative action, or if DOJ submits a written request based on an ongoing investigation and an anticipated or pending criminal or civil action. A full suspension can outlast the working capital of most providers.

Can a provider appeal a Medicare payment suspension?

No formal appeal exists. The provider’s remedy is a written rebuttal statement, due within 15 days of the suspension notice under 42 C.F.R. § 405.374. CMS or the contractor must issue a determination within 15 days of receiving the rebuttal under § 405.375, and the regulations provide that the determination is not an initial determination and is not appealable. There is no hearing, no administrative law judge, and no Departmental Appeals Board review of the suspension itself. Judicial review is sharply limited because the Medicare Act channels most disputes through an administrative process that does not exist for suspensions. Some providers have raised constitutional due process challenges in federal court, with mixed results.

Does submitting a rebuttal to CMS create risk in a criminal investigation?

It can. A fraud-based suspension under 42 C.F.R. § 405.371(a)(2) is imposed only after CMS consults with the HHS Office of Inspector General and, as appropriate, the Department of Justice. That consultation means criminal investigators may already be engaged before the provider receives the notice. A rebuttal statement is not privileged. Factual assertions, document productions, and explanations submitted to CMS are available to prosecutors and can be used in a later criminal case, including as false statement or obstruction evidence if any assertion proves inaccurate. The 15-day rebuttal deadline forces this decision quickly. Providers who treat the rebuttal as a routine billing dispute, without evaluating the parallel criminal exposure, can convert an administrative problem into a criminal one.

DEA ISOs & Orders to Show Cause
What is a DEA Immediate Suspension Order?

An Immediate Suspension Order, or ISO, suspends a DEA registration the moment it is served, before any hearing. Under 21 U.S.C. § 824(d), DEA may suspend a registration simultaneously with the institution of revocation proceedings when it finds an imminent danger to the public health or safety. The suspension takes effect immediately and remains in effect through the administrative proceedings and any judicial review, unless the Administrator withdraws it or a court dissolves it. DEA may also place the registrant’s controlled substances under seal under § 824(f). For a pharmacy, an ISO stops all controlled substance dispensing that day. For a practitioner, it ends all controlled substance prescribing. DEA issued 53 ISOs in the enforcement year running up to the June 2026 takedown, part of the record 928 administrative actions announced by Administrator Terry Cole.

What is the imminent danger standard under 21 U.S.C. § 824(d)?

Imminent danger exists when, because of a registrant’s failure to maintain effective controls against diversion or otherwise comply with the Controlled Substances Act, there is a substantial likelihood of an immediate threat that death, serious bodily harm, or abuse of a controlled substance will occur without an immediate suspension. Congress enacted that definition in 2016 and codified it at 21 U.S.C. § 824(d)(2). The definition requires a substantial likelihood, an immediate threat, and a causal link to the registrant’s own compliance failures. Each element is a litigable point. The statutory definition was enacted to discipline what had been a largely unreviewed agency judgment, and it gives a suspended registrant concrete grounds to challenge whether the record DEA assembled actually meets the standard, particularly where the conduct is stale or has already stopped.

What is a DEA Order to Show Cause, and can a registrant submit a corrective action plan?

An Order to Show Cause is the charging document in a DEA registration case, and most registrants served with one may submit a corrective action plan. Under 21 U.S.C. § 824(c), DEA must serve an order stating the legal basis for denying, suspending, or revoking a registration and must give the registrant an opportunity for a hearing before a DEA administrative law judge. The registration stays active while the case proceeds. Since 2016, the statute also gives the registrant the right to submit a corrective action plan on or before the hearing date, and DEA must determine whether the proceeding should be discontinued or deferred while the plan is modified or clarified. The corrective action plan right does not apply when DEA issues an Immediate Suspension Order. DEA issued 205 Orders to Show Cause in the enforcement year announced with the 2026 takedown.

What happens if a registrant does not request a hearing within 30 days?

The hearing right is lost. Under 21 C.F.R. § 1301.43, a registrant served with an Order to Show Cause must file a request for hearing within 30 days of receipt, and under 21 C.F.R. § 1301.37 the registrant must also file an answer within the same 30 days. The answer must admit, deny, or state a lack of knowledge as to every factual allegation in the order, and a statement of lack of knowledge operates as a denial. Any allegation not denied is deemed admitted. Failure to file a timely request constitutes a waiver of the right to a hearing and grounds for default, and DEA may then issue a final order revoking or suspending the registration on the record it assembled, without any adversarial testing. The 30-day window is the single most important deadline in a DEA registration case. It is also the period in which the registrant must weigh the corrective action plan option, the posture of any parallel criminal investigation, and whether admissions in the answer will surface in a grand jury.

Can a registrant get an expedited hearing after a DEA Immediate Suspension Order?

Yes. Under 21 C.F.R. § 1301.36, a registrant whose registration has been suspended by an Immediate Suspension Order may request an expedited hearing on the suspension, and the Administrator must grant the request and fix a hearing date as early as reasonably possible. The suspension remains in effect through the administrative proceedings and any judicial review unless it is withdrawn or dissolved. On service of an ISO, the registrant must also promptly deliver its Certificate of Registration, order forms, and permits to DEA, and must deliver its controlled substances to DEA or place them under seal. Every week before the hearing is a week of zero controlled substance activity. The expedited hearing compresses that timeline and forces the government to prove its imminent danger record early, before the file matures. The demand is typically paired with the answer required by 21 C.F.R. § 1301.37, which frames the issues the administrative law judge will hear.

How is a DEA registration case decided, and can a suspension order be overturned in court?

The case is tried before an administrative law judge in DEA’s Office of Administrative Law Judges, who issues a recommended decision and certifies the record to the Administrator. The hearing runs under the Administrative Procedure Act, so hearsay is admissible and can constitute substantial evidence; the Sixth Circuit upheld reliance on police arrest records in Hoxie v. DEA, 419 F.3d 477 (6th Cir. 2005). The government bears the initial burden of proving the registration is inconsistent with the public interest, and once it makes a prima facie case, the burden shifts to the registrant to show it can be trusted with a registration. Ashraf v. United States DEA, 153 F.4th 1161 (2025). The DEA Administrator issues the final order and is not bound by the ALJ’s recommendation. A registrant may petition for review in a federal court of appeals within 30 days under 21 U.S.C. § 877. On review, findings of fact are conclusive if supported by substantial evidence, and under 5 U.S.C. § 706 the court must set aside action that is arbitrary, capricious, an abuse of discretion, or otherwise not in accordance with law. Suspension orders have been overturned on that basis. In PDK Labs Inc. v. United States DEA, 362 F.3d 786 (D.C. Cir. 2004), the D.C. Circuit vacated DEA suspension orders because the agency departed from its own published precedent without addressing it, and the error was not harmless. An Immediate Suspension Order remains in effect throughout administrative and judicial review unless the Administrator withdraws it or a court dissolves it.

What are the consequences of voluntarily surrendering a DEA registration?

A voluntary surrender is immediate and complete. The registrant signs DEA Form 104, often during an unannounced visit from investigators, and the registration terminates on execution with no hearing and no right to reconsideration. Surrender does not end the underlying investigation. It does trigger collateral consequences: state licensing boards learn of it, payors and hospitals act on it in credentialing, and any future application is treated as a new application on which the surrender must be disclosed and explained. DEA reported 642 surrenders for cause in the enforcement year announced with the 2026 takedown, more than the Orders to Show Cause and Immediate Suspension Orders combined. Most registrants give up the registration without ever testing DEA’s evidence. A surrender decision made under the pressure of an office visit is difficult to undo.

What intent must the government prove in a criminal prescribing case after Ruan v. United States?

The government must prove the prescriber knowingly or intentionally acted in an unauthorized manner. In Ruan v. United States, 597 U.S. 450 (2022), the Supreme Court held that the knowingly-or-intentionally mens rea in 21 U.S.C. § 841 applies to the statute’s authorization exception, so once a prescriber produces evidence that the prescriptions were authorized, the government bears that burden beyond a reasonable doubt. An honest exercise of clinical judgment, even a mistaken one, does not satisfy the standard. That holding governs criminal prosecutions only. In Ashraf v. United States DEA, 153 F.4th 1161 (2025), the court held that Ruan’s mens rea standard does not apply to DEA registration proceedings under 21 U.S.C. § 824. The registration statute contains no knowing-or-intentional element for public interest determinations, DEA precedent sustains revocation even for unintentional or innocent misconduct, and the Controlled Substances Act makes suspension and revocation proceedings independent of, and not in lieu of, criminal prosecutions. A registrant can lose a registration on conduct that would not support a conviction. The clinical record serves both proceedings, but it does different work in each: negating intent in the criminal case, and answering the public interest factors and supporting remediation before the administrative law judge.

Where does Armstrong & Bradylyons PLLC defend payment suspensions, DEA registration actions, and health care fraud investigations?

Armstrong & Bradylyons PLLC defends providers, pharmacies, physicians, and executives in CMS payment suspension proceedings, DEA registration actions through its controlled substances diversion defense practice, and the federal health care fraud investigations that run alongside them, nationwide.

Scott Armstrong directed DOJ’s Appalachian Regional Prescription Opioid Strike Force (ARPO), which charged more than 120 defendants collectively responsible for prescribing over 115 million controlled substance pills across 10 federal districts in six states, and he tried prescription drug diversion cases as lead trial counsel. He also served as a leading trial attorney in DOJ Fraud Section’s Healthcare Fraud Unit and as an Assistant Chief in its Market Integrity and Major Frauds Unit, trying sixteen federal jury trials, including nine healthcare fraud trials, with lead-counsel responsibility for cases totaling over $600 million in false claims. Drew Bradylyons served as an Assistant Chief in the Health Care Fraud Unit, where he supervised the Miami Strike Force, and as Chief of the Financial Crimes and Public Corruption Unit at the U.S. Attorney’s Office for the Eastern District of Virginia, where he supervised parallel civil, criminal, and administrative fraud proceedings involving more than $1 billion in claims, including opioid diversion prosecutions. Special Counsel Andrea Savdie served for four years as a Trial Attorney in the Healthcare Fraud Unit at the Miami Strike Force. That experience includes direct knowledge of how administrative records feed criminal cases and how prosecutors read rebuttals, hearing testimony, and corrective action plans.

The firm’s attorneys have over 25 years of combined DOJ experience and 25 federal jury trials, including 17 in healthcare fraud cases involving over $2.8 billion in alleged false claims. The firm is based in Washington, D.C. and handles matters in every federal district.

Next
Next

The FBI Most Wanted Fraudsters List: Fugitive Status, Failure to Appear, and Extradition in Health Care and Crypto Fraud Cases