How to Verify a California Rehab Is Legitimate — Step-by-Step

By SoCal Addiction Centers Editorial Team | Last reviewed: | 18 min read Clinically Reviewed

Key Takeaways

  • Four independent public sources verify a California SUD facility’s legitimacy: CA DHCS Licensing and Certification, CARF provider search, Joint Commission QualityCheck (where available), and the SAMHSA National Directory.
  • DHCS license status is the minimum floor. No valid DHCS license = not legally operating as an SUD facility in California.
  • CARF and Joint Commission accreditation are voluntary signals of clinical quality. A facility can be DHCS-licensed and legitimate without CARF accreditation; many are. But CARF adds an independent third-party check.
  • LegitScript certification is relevant primarily for facilities advertising on Google or social platforms. Absence of LegitScript certification is not a legitimacy failure; presence is a positive signal.
  • The failure modes: DHCS lookup sometimes shows active status for facilities whose license has lapsed in practice. DBA drift (a facility operating under a different name than its license record). Enforcement actions are not always linked to license records. This page documents how to check for each.

Verifying a California addiction treatment facility — the workflow

California has 2,166 DHCS-licensed substance-use-disorder facilities across the state, per the latest DHCS Recovery Treatment Facilities public dataset. Of those, roughly one in five holds independent CARF accreditation for an SUD-specific program. Verifying that a specific facility is operating legitimately — and at the clinical quality level its marketing claims — requires checking four public sources and understanding the failure modes in each. This page documents the workflow step by step. It is written for patients and families about to write a check or admit a loved one, and for anyone else who wants to sanity-check a treatment facility before engagement.

The SERP for “how to verify rehab California” is dominated by government authority pages (DHCS itself, CA Courts) that rank on institutional authority but don’t walk through the verification tool in practice, and by aggregator directory pages that recommend their own listings without substantiation. This guide is the operational walkthrough — with the failure modes named — that we haven’t found elsewhere.

Step 1 — Check DHCS license status

Tool: CA DHCS Licensing and Certification Division lookup

What to do:

  1. Open the DHCS Substance Use Disorder facility search page
  2. Search by facility name, city, or county
  3. Review the returned record for license number, type of application (Licensed or Certified), program code, and expiration date

What to look for in the result:

  • Active license with a future expiration date
  • Facility name and address match the facility you’re evaluating (exact match preferred; minor variations like “Inc.” vs “LLC” are fine)
  • Program codes (RES, RES-DETOX, NON, DSS, DPH-DETOX, etc.) that match the services the facility claims to provide. A facility advertising residential treatment but licensed only for NON (non-residential outpatient) is misrepresenting its services.

Failure modes the DHCS tool doesn’t warn about:

  • License lapsed. A facility whose license expired recently may still appear in the search results with the most-recent expiration date shown. If the expiration date has passed — even by days — verify with the facility whether renewal is in process before admission. Our directory’s facilities_excluded.json currently identifies 155 SoCal facilities whose licenses expired more than 30 days before review.
  • DBA drift. A facility operating under a marketing name different from its legal entity license record. Example: “Malibu Serenity Recovery” on the website might correspond to a legal entity licensed as “Coastal Wellness LLC” or similar. Search by address as well as by name; addresses are more stable than marketing names.
  • Multiple licenses at same facility. A single physical facility may hold multiple DHCS licenses for different levels of care (e.g., one for residential, one for outpatient). Not a red flag — it’s normal. But make sure the license covering the service you’re purchasing is active.
  • Recently acquired or rebranded facilities. After an acquisition, the license record may still show the prior operator’s legal entity. Confirm with the facility that the license has been properly transferred.

What to do if DHCS shows an issue: Call the DHCS Licensing and Certification Division at (916) 322-2911. They can confirm current status beyond what the public search shows.

A step-by-step with screenshots is at our How to Verify a California DHCS License exploit page.

Step 2 — Check CARF accreditation

Tool: CARF Provider Search

What to do:

  1. Open the CARF provider search page
  2. Enter a location (city, state, or ZIP) — CARF searches by geographic radius
  3. The search returns accredited providers within the radius along with their program list — the specific CARF-accredited programs at each facility
  4. Match the facility you’re evaluating against the returned results. Confirm the facility name, address, and (most importantly) the specific program for which CARF accreditation is held.

What to look for in the result:

  • Facility is in the CARF results for the city or ZIP (if it’s not, it’s not CARF-accredited in that location)
  • Program list includes SUD-specific accreditation: Residential Treatment (BH), Intensive Outpatient Treatment (BH), Outpatient Treatment (BH), Outpatient Treatment (OTP), Detoxification/Withdrawal Management, Inpatient Treatment (BH), Opioid Treatment Program (OTP), Therapeutic Community (BH), or ASAM Level of Care designations

Failure modes the CARF search doesn’t warn about:

  • “Administrative Location Only (BH)” accreditation. A facility with only this CARF program accreditation is CARF-accredited for the administrative location, not for clinical SUD treatment. “Administrative Location Only” specifically means the physical address has CARF administrative accreditation but not clinical program accreditation. This is a subtle distinction and a meaningful one for verification purposes.
  • “Governance Standards Applied” or “Community Employment Services”. These are non-SUD CARF programs. A facility whose only CARF accreditation is Governance or Community Employment is not CARF-accredited for addiction treatment. Our directory filters these out of the flagship tier.
  • Outdated accreditation. CARF accreditation cycles run 1–3 years. A facility with recently-expired CARF may still appear in the public search for a period. Confirm current accreditation with the facility, which will have a certificate number.

The clinical distinction to hold: A facility CARF-accredited specifically for the ASAM level of care it provides (e.g., CARF Residential Treatment (BH) accreditation for a residential facility) is clinically verified. A facility CARF-accredited only for Administrative Location Only or Community Employment is not.

Step 3 — Check the SAMHSA National Directory

Tool: SAMHSA National Directory of Drug and Alcohol Abuse Treatment Facilities

What to do:

  1. Open the SAMHSA directory page
  2. Download the Excel directory for the most recent year (currently 2025)
  3. Filter to California, then by city or facility name

What it confirms:

  • The facility is listed in the federal SAMHSA contact directory
  • Facility identity (name, address, phone) matches claimed operations

What it does not confirm:

  • Accreditation or quality (SAMHSA’s contact directory lists facilities but does not verify their clinical quality)
  • Current DHCS licensure (there’s no automated reconciliation between SAMHSA and DHCS)

The SAMHSA directory is a useful cross-reference check. A facility that claims to be well-established but doesn’t appear in SAMHSA’s 2025 directory may simply not have registered with SAMHSA (many small CA facilities don’t), or may be recently-opened, or may have other issues worth investigating.

Step 4 — Check LegitScript certification (if relevant)

Tool: LegitScript website certification status

Note: LegitScript’s public tool primarily verifies websites, not facility-name searches. It’s most useful for confirming whether a specific domain is LegitScript-certified for ATC (Addiction Treatment Certification) advertising.

What to do:

  1. Enter the facility’s website domain into the LegitScript verification tool
  2. The tool returns the website’s current certification status

What it confirms:

  • Whether the facility’s website is certified for advertising on Google, Facebook, and similar platforms that require LegitScript verification before accepting SUD-related ads
  • By implication, the facility has passed LegitScript’s ATC background check (criminal records, licensure, complaint history)

What it does not confirm:

  • Clinical quality of treatment at the facility
  • Current DHCS license status (checked separately)

LegitScript certification is a positive signal but its absence is not a legitimacy failure. Many CARF-accredited, DHCS-licensed, reputable SoCal facilities are not LegitScript-certified because they don’t advertise on platforms requiring certification.

Worked example — verifying Passages Malibu end-to-end

Abstract process descriptions are less useful than seeing a verification run on a real facility. Here is the full four-tool verification workflow applied to Passages Malibu — a recognizable Malibu luxury residential operator — using the actual records returned by each public tool as of our most recent verification review (April 2026).

Passages Malibu: the starting picture

Passages is a Malibu-area concierge residential program that markets itself broadly in the California luxury-rehab space. A family evaluating it is looking at a facility website, operator marketing, possibly a testimonial from a referrer. The verification workflow converts that starting picture into independently-confirmed operational status.

Step 1 applied — DHCS license lookup

Search: “Passages” + Malibu at the DHCS Recovery Treatment Facilities public dataset.

What returns: Multiple license records. The operator runs under a primary LLC structure (Grasshopper House LLC) plus affiliated LLCs for additional sites. The core record:

  • Facility name: PASSAGES
  • Legal entity: GRASSHOPPER HOUSE LLC
  • Address: 6428 Meadows Court, Malibu, CA 90265
  • Phone: (310) 589-2880
  • Application number: 190283AP
  • Type of application: Licensed AND Certified (dual status — the strongest DHCS designation)
  • Program code: RES-DETOX (residential treatment with detox)
  • Expiration date: 7/31/2027 (well into the future, not lapsed)
  • Treatment capacity: 6 beds
  • Target population: 1.1 (co-ed, adult)
  • Incident Medical Services: Yes
  • Latitude/Longitude: 34.0273, -118.7679 (confirms Malibu location)

Additional affiliated records: A second Passages site at 6447 Sycamore Meadows Drive (application 190283FP, expires 5/31/2027), plus Passages 8 at 6390 Meadows Court under a separate LLC (6390 Meadows Court LLC, application 190650AP, expires 9/30/2026), and Passages 9 at 6390-B Meadows Court (application 190652AP, expires 9/30/2026, 5-bed capacity). Each site is a separate DHCS license for a separate physical location, all operated under the Passages brand with the same phone number.

Reading the record:

  • All sites show active, future-dated licenses — not lapsed
  • All sites are Licensed and Certified at the RES-DETOX program code — clinically appropriate for Malibu concierge detox + residential
  • 6-bed capacity per site is standard for small-cap luxury concierge (fits the segment’s boutique model)
  • No enforcement-action flags appear in the public dataset for these application numbers

Verdict from Step 1: DHCS licensure is clean, current, and matches claimed operational scope.

Step 2 applied — CARF accreditation check

Search: Malibu, CA on the CARF Provider Search within a 25-mile radius.

What returns: Passages appears in the CARF results with multiple linked records (one per licensed site) under CARF company numbers 329384 (primary site), 329378 (Passages 8), 329380 (Passages 9). Each record has its own CARF provider page:

Program accreditations at each site (identical across sites):

  • Detoxification/Withdrawal Management – Inpatient (BH)
  • Detoxification/Withdrawal Management – Residential (BH)
  • Residential Treatment (BH)

Reading the record:

  • All CARF-accredited programs are SUD-specific — not “Administrative Location Only” or “Governance Standards.” These are clinical program accreditations for exactly the services Passages markets.
  • The accreditation covers both the detox phase (Detox/WM Residential and Inpatient) and the residential treatment phase (Residential Treatment BH). Comprehensive for the ASAM levels this facility operates.
  • Multiple sites under the same brand, all individually CARF-accredited. Consistent with a single operator running multiple boutique residential sites rather than a single larger facility.

Verdict from Step 2: CARF accreditation is clean, current, SUD-specific, and matches the facility’s claimed clinical scope.

Step 3 applied — SAMHSA National Directory cross-reference

Search: The 2025 SAMHSA National Directory Excel file, filtered to CA, then to Malibu.

What returns: Passages appears in the SAMHSA 2025 directory under:

  • name1: Grasshopper House LLC (matches the DHCS legal entity record exactly)
  • name2: Passages (matches the DHCS facility name)
  • Address: 6428 Meadows Court, Malibu, CA 90265 (matches the primary DHCS record)
  • Phone: 310-589-2880 (matches DHCS)

Reading the record:

  • Legal entity name matches between SAMHSA and DHCS exactly
  • Address and phone match exactly
  • No DBA drift between the marketing name and the licensed name
  • SAMHSA’s 2025 publication confirms the facility was registered with SAMHSA as of the 2025 directory cutoff

Verdict from Step 3: SAMHSA cross-reference confirms consistent identity across federal and state records. No anomalies.

Step 4 applied — Enforcement and court records

Search process (methodology, not live query): A thorough verification at this step involves checking:

  • DHCS Enforcement Actions page — dhcs.ca.gov/services/licensing for published enforcement actions against the legal entity or specific license numbers
  • California Department of Justice enforcement — oag.ca.gov for civil or criminal enforcement against the facility or operator
  • California court search — Courts.ca.gov case search for civil suits, disciplinary actions, or judgments
  • Federal PACER — pacer.uscourts.gov for federal civil or criminal cases
  • News and investigative reporting — targeted search for published reporting involving the facility or its operators

Editorial note: We describe the methodology here rather than showing live query results, because live court-record searches require paid database access (PACER) or case-specific knowledge that evolves. For any specific facility verification, a family or researcher would run these searches themselves.

For Passages Malibu as of our April 2026 review: we are not aware of published DHCS enforcement actions against Grasshopper House LLC or the affiliated LLCs. This does not guarantee the absence of enforcement — it reflects the scope of publicly-searchable records at the review date.

What the verification tells a family

Passages Malibu clears all four verification checks: current DHCS licensure at the appropriate program code, current CARF accreditation for SUD-specific programs matching claimed services, SAMHSA directory cross-reference with consistent entity names, and no identified published enforcement actions.

A family using this worked example on their own target facility should expect to spend about 30 minutes running all four checks. A facility that clears all four is not guaranteed to be clinically the right fit for the patient — clinical-fit questions (staff ratios, treatment modalities, MAT compatibility, aftercare planning) are separate. But it has cleared the independent-verification floor.

When verification turns up a problem

The opposite outcome matters too. Some fraction of verification workflows turn up problems: license expirations, accreditation mismatches, enforcement actions, DBA drift without apparent explanation, or facilities that simply don’t appear in sources they should. Here’s what to do in each case.

License expired or lapsed

If DHCS shows an expired license (past expiration date, no recent renewal), or the facility doesn’t appear in the DHCS lookup at all:

  1. Call the facility and ask directly whether the license is in renewal. DHCS renewal can take weeks; a license briefly lapsed while renewal processes is a minor issue. A facility operating without any DHCS license is operating illegally in California.
  2. Call DHCS Licensing and Certification Division at (916) 322-2911 to confirm whether a renewal is pending.
  3. If the license is truly lapsed with no renewal in progress: do not admit a patient. File a complaint with DHCS via the complaint form.

Enforcement action appears

If DHCS enforcement page or other searches turn up a published action against the facility or operator:

  1. Read the enforcement action carefully — substance matters. A minor deficiency citation that has been resolved is different from a license suspension or revocation.
  2. Cross-reference with news reporting — serious enforcement actions are often covered by local press (LA Times, OC Register, San Diego Union-Tribune). Context from published reporting helps evaluate severity.
  3. Consider the operator, not just the facility — enforcement actions against the operator’s other facilities or against the operator personally are material even if the specific facility has clean records.
  4. When uncertain, walk away — there are many DHCS-licensed SUD facilities in California without enforcement histories. The opportunity cost of choosing an enforcement-flagged facility is low.

CARF accreditation is “Administrative Location Only” or absent

If CARF shows the facility but only with “Administrative Location Only” or “Governance Standards” accreditation — not a SUD-specific program:

  • The facility is CARF-registered but not CARF-accredited for SUD clinical programs
  • This is not a deal-breaker (many reputable DHCS-licensed facilities don’t hold CARF SUD program accreditation), but the CARF logo on the facility’s website is misleading if used to imply SUD accreditation
  • Ask the facility directly: “For what specific CARF program are you accredited?”

Facility missing from SAMHSA directory

If the facility is DHCS-licensed and CARF-accredited but doesn’t appear in SAMHSA’s 2025 National Directory:

  • Most likely explanation: the facility did not register with SAMHSA (SAMHSA directory is opt-in). Many small California facilities don’t.
  • Less common but possible: the facility is newly opened (post-2025 directory cutoff) or recently rebranded.
  • Ask the facility when they registered with SAMHSA and whether registration is pending.

DBA drift — marketing name doesn’t match legal entity

If the facility markets itself as one name but the DHCS license is under a different legal entity with no obvious connection:

  • This is common and not inherently a problem. Legal entity LLCs often differ from marketing names.
  • Ask the facility to clarify the relationship: who owns the marketing brand, who holds the DHCS license, when was the current ownership established?
  • If the answers are unclear or the ownership history is confusing, this is worth pausing on. Legitimate operators have no reason to obscure their ownership structure.

When to file a formal complaint

If verification turns up an apparent violation — unlicensed operation, false accreditation claims, misrepresentation of clinical scope — the DHCS Licensing and Certification Division accepts public complaints at their complaint form. Complaints are investigated; documented violations can result in enforcement actions that protect future families from the same problem.

DHCS complaint investigation is slow (weeks to months) and does not help a family with an immediate admission decision. But in the longer term, family-reported complaints are one of the main channels through which regulatory enforcement operates on the California SUD treatment market.

Is there a way to check if someone is in rehab?

No public tool allows checking whether a specific person is in a specific treatment facility. This is protected under federal healthcare privacy law — specifically, 42 CFR Part 2, which imposes stricter confidentiality protections on SUD treatment records than standard HIPAA rules. Unauthorized disclosure of a person’s SUD treatment participation is a federal violation.

For family members and friends wanting to contact someone who may be in treatment:

  • Call the specific facility directly and leave a message. Facility staff cannot confirm or deny admission without the patient’s explicit written consent, but they can relay a message.
  • If the patient has signed a 42 CFR Part 2 release of information naming you, the facility can confirm admission and disclose treatment details per the release.
  • For missing or unaccounted-for loved ones, contact law enforcement for a welfare check. Police can confirm a person’s safety without disclosing treatment-facility details.
  • For legal purposes (custody, probate), an attorney can sometimes obtain limited disclosure through subpoena, but 42 CFR Part 2 protections are robust.

This privacy framework is protective of patient recovery — but can feel frustrating for families. The workaround is usually an advance conversation with the patient about signing a release of information to a designated family contact at intake.

How to tell if a complaint is verified in California?

Complaints about California SUD treatment facilities are filed with the DHCS Licensing and Certification Division. DHCS investigates complaints, issues deficiency citations, and in serious cases revokes licenses.

Public information on complaints:

  • DHCS publishes enforcement actions — license revocations, suspensions, and substantive deficiencies — on its Licensing and Certification page. This is a short list covering only the most serious actions.
  • Individual inspection reports and complaint history are not routinely published online. Requesting a facility’s inspection report requires a California Public Records Act request to DHCS.
  • LegitScript maintains internal complaint records on facilities it has certified or evaluated, but these are not generally public.

Our editorial approach: Our directory cross-references DHCS published enforcement actions and identifies facilities with published sanctions. Facilities with published enforcement actions are moved to the excluded tier and, where the pattern is clear, covered editorially on our California Rehab Fraud Enforcement History page.

What a verified complaint looks like:

  • Published DHCS enforcement action with license revocation, suspension, or citation
  • Federal prosecution or civil enforcement action (e.g., Department of Justice, state Attorney General)
  • Civil court judgment involving the facility (malpractice, wrongful death, or fraud)

Verifiable complaints have paper trails. Unverified accusations — personal reviews, online allegations without specifics — can be real but are harder to weigh editorially.

The short version

Before you pay:

  1. Check DHCS license status — current expiration date, program code matches claimed services
  2. Check CARF accreditation — specific SUD program, not just Administrative Location
  3. Cross-check in SAMHSA’s 2025 directory — facility is listed with matching details
  4. If the facility advertises on Google — verify LegitScript certification of their domain

If any of these checks fails, pause. If all four pass, the facility has cleared the independent-verification floor and you can focus on clinical-fit questions.

Verifying a specific facility?

Our editorial team can walk through the verification workflow for any specific SoCal facility you’re evaluating, flag any published enforcement actions, and explain the verification gaps the public tools don’t show. We accept no referral fees. Calls are informational.

Contact our editorial team →

Need help now? Call (310) 596-1751 for editorial guidance. For formal complaints about a facility, the DHCS Licensing and Certification Division at (916) 322-2911 is the official complaint channel.

Last reviewed: 2026-04-23. Verification tool URLs and procedures current at review date. DHCS, CARF, and SAMHSA tools may change their interfaces without notice; check tool-specific help pages if the interface differs from this walkthrough. This page is editorial content, not legal advice.

Looking for treatment options in your area? We can help point you in the right direction. (310) 596-1751 — or request a callback.