FDA Databases: How to Verify Medications and Avoid Counterfeit Drugs

FDA Databases: How to Verify Medications and Avoid Counterfeit Drugs
Lara Whitley

Every year, millions of people around the world take medicines they think are safe-only to find out later they were fake. Counterfeit drugs don’t just fail to work. They can make you sicker, cause allergic reactions, or even kill you. In 2022, the FDA reported an 18% jump in counterfeit drug incidents compared to the year before. And while most of these fake pills enter the U.S. through illegal online pharmacies, the real danger lies in the gaps between legitimate supply chains. That’s where the FDA databases come in-not just for regulators, but for anyone who wants to know if the medicine in their hand is real.

What the FDA Databases Actually Do

The FDA doesn’t just approve drugs. It tracks them-from the moment a company starts making them, all the way to the pharmacy shelf. Three main databases make this possible: the NDC Directory, the Drug Establishments Current Registration Site, and the Electronic Drug Registration and Listing System (eDRLS).

The NDC Directory is your first stop. Every FDA-approved drug in the U.S. gets a unique 10- or 11-digit number called the National Drug Code. It’s split into three parts: who made it (labeler code), what the drug is (product code), and how it’s packaged (package code). Think of it like a license plate for medicine. If a pill doesn’t have a matching NDC in the directory, it’s not legally approved. And since the directory updates every day, you’re always seeing the latest info.

The Drug Establishments Current Registration Site tells you who’s allowed to make or distribute drugs. Every factory, warehouse, or pharmacy that handles prescription meds must register with the FDA. If a company isn’t listed here, it’s not operating legally. This is especially important when buying online-check if the seller’s facility is registered before you click “buy.”

eDRLS is the backend system where companies submit their drug info. It’s not meant for public searching, but it’s what feeds the other two databases. Without accurate submissions here, the NDC Directory and registration site become useless. That’s why the FDA requires electronic submissions in a strict format called SPL (Structured Product Labeling). If a company messes up the formatting, their listing gets rejected-and their drugs can’t be sold.

How to Use the NDC Directory to Check a Medicine

You don’t need to be a pharmacist to use the NDC Directory. Here’s how to do it:

  1. Find the NDC on the medicine packaging. It’s usually printed near the barcode or on the box.
  2. Go to the FDA’s NDC Directory at fda.gov/drugs/drug-approvals-and-databases/national-drug-code-directory.
  3. Enter the full NDC number in the search box. Don’t guess-copy and paste it exactly.
  4. Check the results. If you see the drug name, manufacturer, and active ingredient listed, it’s verified.
  5. Look at the “Marketing Category” column. If it says “RX” or “OTC,” it’s approved. Anything else-like “UNAPPROVED” or blank-is a red flag.

Example: You find a bottle of metformin with NDC 0002-1000-01. Search it. The result shows: “Metformin Hydrochloride 500 mg tablets, manufactured by Apotex Corp., approved for type 2 diabetes.” That’s good. Now search a different NDC-say, 9999-9999-99. No results? That’s not a real FDA-assigned code. Don’t take it.

Pro tip: If the NDC is 12 digits long, it’s probably fake. The FDA is switching to 12-digit codes by 2026, but as of 2026, most still use 10 or 11 digits. Any 12-digit code before then should raise suspicion.

A pharmacist scans a medicine box while a holographic FDA registration screen confirms its legitimacy.

Spotting Fake Drugs in the Real World

Even with verified databases, counterfeits slip through. Here’s what to look for:

  • **Packaging differences**: Mismatched fonts, blurry logos, or spelling errors on the box or label.
  • **Unusual pills**: Different color, shape, or taste than what you’re used to. If your usual blue pill is now white and tastes bitter, question it.
  • **Too-cheap prices**: If a brand-name drug like Viagra or Ozempic is 70% cheaper than your pharmacy, it’s likely fake. Legitimate suppliers don’t discount that much.
  • **No prescription required**: If you can buy controlled substances like oxycodone or Adderall without a prescription online, it’s illegal-and almost always counterfeit.
  • **No lot number or expiration date**: Real drugs always have these. Fake ones often skip them to avoid being traced.

Real-world case: In 2021, a patient in Florida bought “Lisinopril” from a website offering $10 bottles. The pills looked right, but the NDC didn’t match the FDA database. Testing later revealed the pills were filled with chalk and sugar. The patient suffered a stroke because the real drug wasn’t there to control blood pressure.

Why This Matters for Everyday People

Most people think FDA databases are for big pharma and regulators. But they’re your personal safety tool. If you take insulin, blood thinners, or heart meds, your life depends on them working exactly as designed. Fake versions might contain too much or too little of the active ingredient-or worse, toxic chemicals like lead or rat poison.

And it’s not just about online scams. Even legitimate pharmacies can accidentally get counterfeit drugs from shady distributors. That’s why the DSCSA (Drug Supply Chain Security Act) was created. By 2023, every drug package in the U.S. supply chain had to carry a unique digital identifier. This lets pharmacies scan a barcode and instantly check if the drug is real. But not all pharmacies have upgraded yet. If your pharmacy doesn’t scan your prescription at pickup, ask why.

A supply chain of drugs collapses as counterfeit pills vanish, while one verified pill glows with safety.

What’s Changing in 2026 and Beyond

The FDA is upgrading its systems fast. By 2026, all NDC codes will be 12 digits, making them harder to fake. The agency is also adding product images to the NDC Directory so you can compare the real pill to what you’re holding. And pilot programs are testing blockchain tech to track drugs from factory to pharmacy-cutting counterfeit chances by over 99% in tests.

But here’s the catch: Only 35% of foreign manufacturers comply with U.S. rules. That means most fake drugs still come from overseas labs in China, India, or Turkey. The FDA inspects only a fraction of imported drugs. So even if the system works perfectly inside the U.S., the door is still wide open from abroad.

What You Can Do Right Now

You don’t need to be a tech expert to protect yourself. Here’s your action plan:

  1. Always check the NDC on your medicine using the FDA’s database.
  2. Buy only from licensed U.S. pharmacies. Look for the VIPPS seal (Verified Internet Pharmacy Practice Sites).
  3. Never buy prescription drugs from websites that don’t ask for a prescription.
  4. Report suspicious drugs to the FDA’s MedWatch program. Just one report can trigger an investigation.
  5. Ask your pharmacist: “Is this drug verified through the DSCSA system?” If they don’t know what you mean, it’s time to find a new pharmacy.

Counterfeit drugs aren’t a distant threat. They’re in your medicine cabinet right now-if you’re not checking. The FDA built these tools to save lives. You just have to use them.

How do I know if a drug is FDA-approved?

Check the National Drug Code (NDC) on the packaging against the FDA’s NDC Directory. If the drug appears with its correct name, manufacturer, and marketing category (RX or OTC), it’s approved. If it’s not listed, or if the NDC doesn’t match, it’s not FDA-approved.

Can I trust online pharmacies that offer cheap medicines?

Only if they’re VIPPS-certified. Most websites offering deeply discounted brand-name drugs are selling counterfeits. The FDA warns that 96% of online pharmacies operate illegally. If the price seems too good to be true, it is. Always verify the NDC and check the pharmacy’s physical address and license number.

What should I do if I think I took a fake drug?

Stop taking it immediately. Contact your doctor or pharmacist. Then report it to the FDA’s MedWatch program at fda.gov/medwatch. Include the drug name, NDC, lot number, and where you bought it. Even if you feel fine, fake drugs can cause delayed harm. Reporting helps the FDA track outbreaks and pull dangerous products from the market.

Do all prescription drugs have NDC codes?

Yes, all FDA-approved prescription and over-the-counter drugs must have an NDC code. But compounded drugs-made by pharmacies for individual patients-and some veterinary drugs don’t. These aren’t covered by the same verification system, so they’re more vulnerable to contamination or mislabeling. Always ask your pharmacist if a drug is FDA-approved or compounded.

Why does the NDC format keep changing?

The FDA is moving from 10- or 11-digit NDCs to a standardized 12-digit format by 2026 to reduce confusion and improve tracking. Older systems allowed inconsistent spacing and leading zeros, making it easy for errors to slip through. The new format will make it harder for counterfeiters to guess valid codes and will help automated systems verify drugs faster and more accurately.

Are generic drugs less likely to be counterfeit?

No. In fact, generics are more often targeted because they’re cheaper and in higher demand. A fake generic metformin or atorvastatin is just as dangerous as a fake brand-name drug. The NDC code is what matters-not the brand. Always verify the NDC, even for generics.