Healthcare Credentialing
How to Verify a Medical Degree
Physician credential fraud is rarer than nursing fraud but far more consequential. A doctor who fabricated medical school, skipped residency, or let a license lapse can cause catastrophic patient harm before anyone notices. Here is the complete verification workflow for hospitals, practices, and staffing firms.
Key takeaway
Verifying a physician requires five independent checks: (1) state medical board licensure via FSMB or the board directly, (2) medical education via the school's registrar or ECFMG for international graduates, (3) residency training via ACGME or the program directly, (4) board certification via ABMS Certification Matters or AOA, and (5) adverse actions and malpractice history via NPDB (required for hospitals by federal law). A valid license does not confirm any of the others.
Why physician credential verification is different
Physician credentialing is more complex than most professional verification tasks because a physician's career spans multiple credentialing layers — each issued by a different body, in a different state, at a different point in time. A physician can hold:
- A medical degree from a US or foreign institution
- Postgraduate training (residency, fellowship) at one or more programs
- Board certification in one or more specialties
- Active medical licenses in one or more states
- DEA registration for prescribing controlled substances
- Hospital privileges at one or more facilities
- A history of disciplinary actions, malpractice payments, or privilege restrictions — in any jurisdiction
Each layer must be verified independently. A physician with a valid state license may have had hospital privileges revoked elsewhere, hold a lapsed board certification, or trained at a program that lost ACGME accreditation. No single database covers all of it.
Step 1: Verify state medical licensure
State licensure is the legal authorization to practice medicine. It is the most foundational check — but it only confirms the physician is currently licensed in one state, not that their underlying credentials are legitimate or that they have no adverse history in other jurisdictions.
FSMB DocInfo (recommended first stop)
The Federation of State Medical Boards (FSMB) maintains DocInfo (docinfo.fsmb.org), a centralized database covering physician licensure and disciplinary history across all US states and territories. For a small fee ($9.95 per search), it returns the physician's license status in each state, disciplinary actions, and board certifications as self-reported to FSMB.
DocInfo is a useful screening tool but is not a substitute for primary source verification with each state board. Disciplinary data may lag, and not all states report to FSMB with equal completeness.
State medical board (primary source)
Every US state and territory has a medical licensing board with a public license verification portal. For formal credentialing decisions — hospital privileges, employment, payer enrollment — always verify directly with the state board in each jurisdiction where the physician is licensed or intends to practice.
State board records are considered primary source verification under Joint Commission, NCQA, and CMS standards. Look up the specific board for the relevant state and use their official public lookup tool. Document the date, source URL, and result.
NPI Registry (supplemental check)
The National Provider Identifier (NPI) Registry (nppes.cms.hhs.gov) is a free federal database of all US healthcare providers who bill Medicare or Medicaid. It does not verify license status but confirms the physician's taxonomy code (specialty), practice address, and NPI number — useful for cross-referencing against claimed credentials and detecting identity discrepancies.
Step 2: Verify medical education
A state medical board issues a license based on submitted credentials — but the board typically relies on what the applicant provides, not on independent education verification. Credentialing organizations must verify the underlying degree separately.
US medical schools (MD and DO)
Contact the registrar of the medical school directly using contact information you obtained independently — not from the physician's CV or documents. Request confirmation of enrollment dates, degree awarded, and graduation date.
Confirm the school is accredited by the Liaison Committee on Medical Education (LCME) for MD programs or the American Osteopathic Association Commission on Osteopathic College Accreditation (COCA) for DO programs. Both maintain searchable lists of accredited schools on their respective websites.
The AMA Physician Professional Data (formerly the Physician Masterfile) covers 820,000+ physicians and includes medical school, year of graduation, and residency training. Credentialing organizations can license access — it is one of the fastest ways to cross-check a physician's training history.
International medical graduates (IMGs)
International medical graduates require an additional layer of verification. The Educational Commission for Foreign Medical Graduates (ECFMG) certifies IMGs who have met its requirements for US residency programs. An ECFMG certificate confirms that the IMG's medical credentials have been verified and that they have passed required examinations.
Verify ECFMG certification status at ecfmg.org using the physician's name and ECFMG ID. An IMG without ECFMG certification has not had their foreign medical school credentials independently verified — this is a significant risk indicator for any organization credentialing them.
For the foreign medical school itself, cross-reference against the World Directory of Medical Schools (wdoms.org), maintained by FAIMER. Schools listed in WDOMS are recognized by their country's medical authority. Degrees from schools not listed, or listed with a "closed" status, warrant immediate scrutiny.
Step 3: Verify residency and fellowship training
Medical school grants the MD or DO degree. Residency training is what qualifies a physician to practice in a specialty. A family medicine physician who never completed residency is not qualified to function as one, regardless of what their CV claims.
ACGME program verification
The Accreditation Council for Graduate Medical Education (ACGME) accredits residency and fellowship programs in the US. The ACGME program directory (apps.acgme.org) allows you to verify that the program the physician claims to have trained in exists and holds (or held) accreditation.
For individual training verification — dates, completion, specialty — contact the program director or the teaching hospital's GME office directly. Most hospitals maintain completion records for their GME programs indefinitely.
AMA Physician Professional Data
The AMA Masterfile includes residency training data for physicians who entered ACGME programs — including program name, specialty, and completion year. It is particularly useful for verifying the training history of physicians who trained decades ago, when direct program contact may be difficult.
Step 4: Verify board certification
Board certification is not legally required to practice medicine, but it is a standard credentialing requirement at most hospitals and a common payer enrollment requirement. A physician who claims board certification in a specialty they never passed, or whose certification has lapsed, is misrepresenting their qualifications.
ABMS Certification Matters
The American Board of Medical Specialties (ABMS) certifies physicians in 24 specialties through its member boards. ABMS Certification Matters (certificationmatters.org) provides free public verification of board certification status for any physician. Enter the physician's name and specialty to confirm current certification and expiration date.
Note that ABMS only covers allopathic (MD) specialties. DO physicians are board-certified through American Osteopathic Association (AOA) specialty boards. Verify DO board certification at osteopathic.org.
Subspecialty and fellowship certifications
Some subspecialties have their own certifying boards outside of ABMS — for example, the American Board of Wound Management or the National Board of Physicians and Surgeons. These are not equivalent to ABMS certifications. Verify directly with the issuing board and confirm it is a recognized member of ABMS or a legitimate independent certifier. Claims of obscure certifications from non-standard bodies should be treated with skepticism.
Step 5: Query the National Practitioner Data Bank (NPDB)
The NPDB is a federal database maintained by the Health Resources and Services Administration (HRSA). It collects reports of malpractice payments, adverse clinical privileges actions, state license sanctions, exclusions from federal programs, and other significant adverse actions against healthcare practitioners.
Who must query and when
Hospitals are required by federal law to query the NPDB when granting initial medical staff privileges and every two years thereafter for all physicians on their medical staff. This is not optional — failure to query creates legal liability for the hospital and is presumed awareness of NPDB data.
Other healthcare entities (medical groups, outpatient clinics, staffing firms) are permitted but not required to query. For employment decisions involving patient-facing physicians, querying the NPDB is strongly recommended as standard due diligence regardless of legal mandate.
What the NPDB does and does not cover
The NPDB includes malpractice payments, license revocations or restrictions, clinical privilege restrictions or surrenders under investigation, and exclusions from Medicare and Medicaid. It covers physicians, dentists, and other licensed healthcare practitioners.
Critically: the NPDB is not publicly accessible for named practitioner lookups. Only authorized entities (hospitals, health plans, state licensing boards, law enforcement) can query it. Physicians can self-query. If you are an authorized entity, query via npdb.hrsa.gov. If not, work with a credentialing verification organization (CVO) that has NPDB access.
OIG List of Excluded Individuals/Entities (LEIE)
Separately from the NPDB, the Office of Inspector General (OIG) maintains the List of Excluded Individuals/Entities (LEIE) — a public database of practitioners excluded from participation in Medicare and Medicaid. Any organization billing federal programs that employs an excluded provider faces significant penalties. Search the LEIE monthly at oig.hhs.gov/exclusions. This search is free and publicly accessible.
Step 6: Verify DEA registration (for prescribing roles)
Any physician who prescribes controlled substances must hold an active DEA registration. The DEA maintains a public registration verification tool at deadiversion.usdoj.gov. Verify the physician's DEA number, confirm the registration is active and not expired, and check that the registration state matches the jurisdiction where they will prescribe.
A DEA registration can be revoked or restricted independently of a state license. A physician may have an active state license but a surrendered or revoked DEA registration due to prescribing misconduct. Verify both separately.
Red flags in physician credentials
Medical school not accredited by LCME, COCA, or recognized by ECFMG/WDOMS
A degree from an unaccredited school has no recognized standing. Most state boards require graduation from an LCME- or COCA-accredited school (for domestic graduates) or ECFMG certification (for IMGs). If you cannot find the school in LCME or WDOMS, treat the degree as unverified until further investigation.
Claims board certification but does not appear in ABMS or AOA databases
ABMS Certification Matters is comprehensive for allopathic specialties. If a physician claims to be board-certified in internal medicine, emergency medicine, surgery, or any other ABMS specialty but does not appear in the database — that is an immediate red flag. Search by both name and specialty to rule out data entry errors before escalating.
Cannot verify residency program through ACGME
If the residency program the physician names does not appear in the ACGME program directory, or the program records cannot confirm the physician's participation dates, the claimed specialty training is unverified. This is a significant risk for any clinical role requiring specialty competency.
Discrepancy between claimed specialty and NPI taxonomy
The NPI Registry shows the taxonomy code the physician registered with CMS. A surgeon with an NPI taxonomy of 'family medicine' has not established themselves as a surgeon with federal payers. This type of mismatch warrants direct explanation from the candidate and further investigation.
Multiple states of licensure with disciplinary history in any one state
Physicians who have faced disciplinary action in one state sometimes obtain licenses in other states before the action is fully reported. FSMB DocInfo can surface this pattern. Always verify with each state board individually — not just the state where the physician is currently practicing.
NPDB query returns a malpractice payment or adverse action report
A single malpractice payment is not disqualifying on its own — context matters. But multiple payments, adverse privilege actions, or license restrictions require careful review and peer consultation. Do not simply ignore NPDB hits; document your review and the outcome.
IMG without ECFMG certification or with certification under review
ECFMG certification confirms that a foreign medical school's credentials have been verified and that the IMG passed required exams. An IMG without ECFMG certification has bypassed the standard verification process for foreign-trained physicians. Verify directly at ecfmg.org.
Reference: verification resources by credential type
| Credential | Primary verification source | Cost |
|---|---|---|
| State medical license (MD/DO) | State medical board or FSMB DocInfo (docinfo.fsmb.org) | Free (state board) / $9.95 (FSMB) |
| US medical school degree (MD) | LCME-accredited school registrar; LCME list at lcme.org | Free |
| US medical school degree (DO) | COCA-accredited school registrar; COCA list at osteopathic.org | Free |
| International medical graduate (IMG) | ECFMG (ecfmg.org); World Directory of Medical Schools (wdoms.org) | Free |
| Residency / fellowship training | ACGME program directory (apps.acgme.org); program GME office | Free |
| Board certification (MD specialty) | ABMS Certification Matters (certificationmatters.org) | Free |
| Board certification (DO specialty) | AOA (osteopathic.org/specialty-colleges) | Free |
| Adverse actions / malpractice payments | NPDB (npdb.hrsa.gov) — authorized entities only | Variable (entity subscription) |
| Medicare/Medicaid exclusion | OIG LEIE (oig.hhs.gov/exclusions) | Free |
| DEA registration / prescribing authority | DEA registration portal (deadiversion.usdoj.gov) | Free |
| NPI / taxonomy cross-check | NPPES NPI Registry (nppes.cms.hhs.gov) | Free |
| Comprehensive training history | AMA Physician Professional Data (licensed from AMA) | Licensed fee |
Physician credential verification checklist
- Verify active state medical license directly with the state medical board in each jurisdiction
- Run FSMB DocInfo to surface disciplinary history across all states
- Confirm medical school accreditation (LCME for MD, COCA for DO) and verify enrollment with the registrar
- For international medical graduates: confirm ECFMG certification and verify school in WDOMS
- Verify residency program in ACGME directory and confirm training dates with the GME office
- Check ABMS Certification Matters for board certification status and expiration (use AOA for DO specialties)
- Query the NPDB for adverse actions and malpractice payments — mandatory for hospitals, recommended for others
- Search the OIG LEIE for Medicare/Medicaid exclusion
- Verify DEA registration status if the role involves prescribing controlled substances
- Cross-check NPI Registry taxonomy code against claimed specialty
- Document all verification steps, sources, dates, and outcomes in the credentialing file
Verify medical school accreditation at scale
VerifyED's API covers 912,000+ institutions worldwide and flags diploma mills in real time. Add school legitimacy checks to your credentialing workflow without manual lookups.
Explore the API