Verifying eScript Tokens for Accuracy

Key Takeaways

• eScript tokens serve as secure access points, not prescriptions themselves.
• Both patients and pharmacists share responsibility for verifying the accuracy and validity of the tokens.
• Tokens are deactivated after use to prevent misuse.
• If tokens are missing or expired, patients must use official channels to request a reissue.

The introduction of the eScript token in Australia's digital health system provides a more efficient way to access medications, enhancing convenience and security. Remember, the eScript token acts as a secure access point that allows pharmacists to retrieve your authorised medical records from the National Prescription Delivery Service (NPDS). Both the patient and the pharmacist share responsibility for verifying the accuracy of the token to ensure the right medicine goes to the right person at the right time.

This guide outlines the steps to verify that your eScript and Prescription Access tokens remain valid and trusted within the healthcare system.

The Kind of Data an eScript Token Holds

Usually, an eScript token sent via SMS, email, or a compliant app retains only the necessary identification metadata, thereby maintaining privacy while remaining effective.

Data Visible to Patients on the Token

• Patient Initials: To protect your identity, the token link displays only your initials unless otherwise required for verification.
• Medication Name (Partial): The link may display the drug name to facilitate token recognition if you have multiple medications.
• Repeat Count: Shows the number of authorised supplies (e.g., 'Repeat 2 of 5').
• Expiry Date: Clearly states the date after which the token becomes invalid.
• QR Code: The unique barcode that pharmacies use to verify prescriptions.
• Unique Script ID (SCID): A backup code used if the scanner fails; it appears as an alphanumeric string at the bottom of the QR code.

Additionally, it is not the token's practice to display a patient's full name, date of birth, address, or clinical diagnosis. This information will be displayed only after a pharmacist has conducted a Pharmacy Identification Check.

Pharmacy Scanning and Prescription Verification

The moment you enter the pharmacy, what started as mere 'clicking' on the verification link will have turned into the much-needed thorough clinical check. Indeed, the most crucial element of the eScript life cycle is the 'point-of-dispensing' verification.

Step-by-Step Verification

• Scanning the Token: Using compliant software, the pharmacist scans the QR code. At this point, the clinical record is 'fetched' directly from the secure cloud.
• Identity Match: To match the electronic record to the person presenting the token, the pharmacist must verify the match. As a result, you will be asked for your full name and date of birth, even if you come to the pharmacy regularly.
• Prescriber Authentication: The system verifies the prescribing practitioner's credentials through AHPRA registration and HPI-I checks.
• Validity Check: The software automatically checks and raises flags if the prescription has already been filled, the doctor has cancelled it, or the script's expiration date has passed.

Read here for more about the professional standard: How Pharmacies Confirm eScripts.

How to make sure Repeat Tokens match the right User

One of the major hurdles patients on multiple medications face, from an administrative perspective, is the proper use of repeat tokens. The system manages this through an automated deactivation.

Ways to avoid mismatch mistakes

• Deactivation of Used Tokens: After a token is used for dispensing, it is automatically deactivated. If attempted again, the system will return an 'Already Dispensed' error.
• Sequential Tokens: Upon a repeat request, the pharmacy will send you a new token via SMS or email. To preserve accuracy, remove the 'spent' SMS immediately after leaving the pharmacy, so you'll only have your active tokens in your inbox.
• Check the Issue Date: It is a good habit to check which message in your 'eScript' contact is the latest before you respond.

Having multiple tokens may seem complicated, so you may prefer to Update Your Pharmacy Preferences and get an Active Script List (ASL), which means you will no longer need individual tokens.

What to do if the eScript Token is Missing or Expired?

If your token fails to scan or you have misplaced it, the system's security features will prevent it from being 'hacked' or smuggled through. You are therefore required to obtain the reissue only through official channels.

Reissue and Token Recovery

• No Token in Hand: If you got rid of your token by mistake, you can plead with Prime Medic. Our GPs can re-identify you before eScript, so you can instantly reissue your token on your phone.
• Expiry: If the token is used after its 6- or 12-month expiry, the system returns an 'Expired' error. In this case, the pharmacist cannot dispense the medication. You should do a telehealth repeat prescription request for a new clinical review.
• Malfunction: If the QR code is unreadable, the pharmacist can manually enter the SCID (Script ID) at the bottom of your token link to access the record safely.

Check our Lost eScript Recovery section to understand these cases better.