Well, if you feel that it is really a dangerous, out of control situation, you can start with both the docs, and pharmacies, you can remain anonymous if you wish, but they will check, and if they find it true, they will flag the person in the doc's files, and the pharmacy computers.
You could also contact your local police, they may take a report, or advise of how to contact the DEA to report it.