Healthcare runs on three ID numbers that get mixed up constantly. The NPI identifies who provided the care. The TIN identifies who gets paid and taxed. The DEA number authorizes prescribing controlled substances. Different issuers, different jobs, and only one of them is public.
The NPI: care identity
The National Provider Identifier is a 10-digit number from CMS's NPPES system. It is free, permanent, and public: anyone can look one up and see the provider's name, specialty, and practice address. It appears on every electronic claim, prescription, and referral. It says nothing about taxes or controlled substances.
The TIN: money identity
A Taxpayer Identification Number comes from the IRS, not from anywhere in healthcare. For a practice it is usually an EIN; an unincorporated sole proprietor may use their SSN. On a claim, the TIN tells the payer which legal entity receives payment and gets the 1099. One practice TIN typically stands behind many clinician NPIs, and when a provider moves practices, the NPI stays the same while the TIN behind their claims changes. TINs are not shown in the public NPI registry, which is one reason credentialing paperwork always asks for them separately.
The DEA number: controlled substance authority
A DEA registration comes from the Drug Enforcement Administration and covers one thing: prescribing, dispensing, or administering controlled substances. It is two letters plus seven digits, it must be renewed every three years, it carries a fee, and a provider practicing in multiple states may need more than one. Unlike an NPI it is not openly public. And a routine, non-controlled prescription does not legally require one, though pharmacies and payers often ask for it out of habit. CMS's guidance for ordinary claims is to identify providers by NPI, not DEA.
How the three travel together
- A claim: rendering NPI + billing NPI + the billing entity's TIN.
- A controlled prescription: prescriber NPI + DEA number.
- A credentialing packet: all three, plus the state license, which is a fourth, separate credential.
The common mix-ups
Assuming one number implies another is the classic error. A valid NPI does not mean an active DEA registration. An active DEA number does not mean Medicare enrollment. And none of them proves licensure. Each identifier answers exactly one question, so verify the one your task actually depends on.
Check any provider right now. The free NPivot NPI lookup searches the registry by name or number, no login required. A free account adds Medicare enrollment, prescribing, procedure volumes, and revalidation dates on one page.