Verifying an online peptide pharmacy's license
The line between a legitimate compounding pharmacy and a grey-market peptide vendor isn't always obvious from a website. Both can have professional-looking storefronts, doctor names, and certifications you've never heard of. Four specific checks separate the two — and they take maybe 10 minutes to run.
The four checks
1. State pharmacy license
Every legitimate U.S. pharmacy is licensed in the state where it's physically located. If shipping to multiple states, it should be licensed in each receiving state too.
How to verify:
- Find the pharmacy's physical address and licensing claim on the website.
- Look up the state board of pharmacy for that state.
- Search the board's licensee database for the pharmacy name and address.
- Verify the license is active and not under disciplinary action.
What you're looking for: an active license, not suspended, not revoked, matching the claimed address. If the pharmacy claims to be in Arizona but the AZ board has no record, the claim is false.
2. DEA / controlled-substance license (if relevant)
If the pharmacy compounds or dispenses controlled substances, they need a DEA registration. For peptides like BPC-157 (not controlled) this doesn't apply. For some peptide combos that include controlled substances (rare), it does.
How to verify: the DEA maintains a verification system; many state boards also confirm DEA registration alongside state license.
3. Third-party accreditation
Several voluntary accreditation bodies vet pharmacies:
- LegitScript: verifies legitimate online pharmacies; their certification is the most commonly required for online presence and major-platform partnerships.
- NABP's VIPPS (Verified Internet Pharmacy Practice Sites): the older standard.
- PCAB (Pharmacy Compounding Accreditation Board): specifically for compounding pharmacies. Indicates they've met USP and pharmacy-practice standards.
Accreditation isn't mandatory by law, but reputable pharmacies almost always carry at least one. Lack of any accreditation is a yellow flag.
4. Regulatory framework
U.S. compounding falls under one of three legal categories:
| Category | Description | Allowed activity |
|---|---|---|
| 503A | Traditional state-licensed pharmacies | Compounding for specific patients with prescriptions |
| 503B | Outsourcing facilities, FDA-registered | Compounding in bulk without patient names; supplies to providers |
| Unlicensed | Non-pharmacy sellers | None legally; sells "research use only" |
A legitimate compounded peptide source operates as either 503A (your specific prescription) or 503B (your provider's clinic order). If the seller doesn't fit either category, they're unlicensed.
What a legitimate compounded peptide pipeline looks like
- You see a prescriber (telehealth or in person) who evaluates you and decides compounded peptide is medically appropriate.
- The prescriber writes a prescription with your name on it.
- The prescription goes to a 503A pharmacy licensed in your state.
- The pharmacy compounds for you specifically, with your name on the vial.
- The pharmacy ships to you using their licensed processes.
- The prescriber refills as needed based on continued care.
If any of these steps is missing — no real prescriber, no patient-specific prescription, no licensed pharmacy, no name on the vial — the pipeline is operating outside the legal framework.
Red flags
- "No prescription required." Compounded peptides legally require a prescription.
- "Research use only" or "not for human consumption" labels. See research-use-only disclaimer post.
- Cryptocurrency or anonymous payment only. Legitimate pharmacies accept credit cards and insurance.
- Telegram, Reddit DM, or social-media-only ordering.
- Prices dramatically below market. Legitimate compounded peptides are not cheap.
- International shipping with deceptive packaging. Importing unapproved drugs through customs avoidance is illegal.
- No physical address, no verifiable phone, no real customer service.
- Generic COA documents not tied to specific lots.
- Pharmacy claims to compound Schedule III peptides without DEA registration.
The telehealth model
Many users access compounded peptides through "telehealth + pharmacy" services. Some are legitimate; some are aggressive interpretations of the law:
Legitimate telehealth
- Licensed physician evaluation (video or detailed intake).
- Genuine medical assessment, with refusal in unsuitable cases.
- Patient-specific prescriptions.
- Licensed pharmacy fulfillment.
- Ongoing clinical relationship.
Concerning telehealth
- Form-based "evaluation" with no real provider review.
- Patient never declined.
- Prescriptions issued in patient's name but for compounded products at dose levels not justified by the intake.
- Pharmacy that's also part of the same business (vertically integrated, less independent).
The line isn't bright; many services sit somewhere on the spectrum. If you can't identify a real prescriber and a real pharmacy as separate entities with their own licenses, that's a signal.
What to do before placing an order
- Identify the pharmacy's name, address, and license claim.
- Look up the state board of pharmacy and verify the license.
- Look up LegitScript or NABP accreditation.
- Confirm the pharmacy operates as 503A (your prescription) or 503B (your clinic's order).
- Read the COA you'll receive — generic COAs not tied to lots are a yellow flag.
- Pay attention to shipping and product handling claims (cold chain, etc.).
FAQ
Does the FDA approve compounding pharmacies?
FDA registers 503B outsourcing facilities; states license 503A traditional pharmacies. The FDA does not "approve" compounded products themselves — that's separate from the licensing of the compounder.
Can I check if my pharmacy is operating legally without contacting a regulator?
Mostly yes. The state board of pharmacy lookup, the LegitScript verification, and the FDA's 503B registered facilities list are all online and public.
I've been buying from a service for a year without issue. Should I switch?
No issue ≠ legitimate. Many people have purchased from grey-market sources without incident. The question is risk exposure: counterfeit identification, dose accuracy, future regulatory action against the seller. If you can move to a verified source, you reduce future risk.
What about international pharmacies (Canadian, UK, Indian)?
Licensed foreign pharmacies operating under their own jurisdiction's law can be legitimate suppliers. The complication is U.S. import: technically, importing prescription drugs from foreign pharmacies is restricted, with discretionary FDA enforcement. Personal-use quantities are generally tolerated; bulk imports are not.
Related reading
Record source per vial
Peptide Protocol stores pharmacy name, license number, and accreditation status for every vial — a complete supply-chain record.
Get the iPhone app →Informational and educational only. Not medical advice. Consult a licensed clinician before starting, changing, or stopping any peptide protocol. Mentions of investigational, compounded, or research-use peptides are for informational purposes; many such substances are not FDA-approved for human use.