How to Verify Your GLP-1 Provider Is Legitimate

The GLP-1 market has exploded, and with it, the number of providers offering these medications online. Some are excellent medical practices that happen to operate digitally. Others are pop-up operations that will take your money, send you a vial of questionable origin, and disappear when something goes wrong.

The difference between the two isn't always obvious from a website. Slick design and confident marketing copy don't equal clinical legitimacy. Here's how to actually verify that a provider is operating above board — and the warning signs that suggest they aren't.

The Verification Checklist

Work through these five checks before giving any GLP-1 telehealth provider your payment information. Each one takes a few minutes, and together they filter out the vast majority of risky operators.

LegitScript Certification

What it is: LegitScript is a third-party certification organization that verifies healthcare merchants comply with laws, regulations, and payment processor requirements. Major payment processors (Visa, Mastercard) and advertising platforms (Google, Meta) require LegitScript certification for online pharmacies and telehealth providers.

How to check: Scroll to the footer of the provider's website. Look for the LegitScript seal — it's typically a small badge. Click the seal to verify it links to a valid, active profile on LegitScript.com. A seal that doesn't link anywhere, or that links to a page saying the provider isn't certified, is worse than no seal at all.

What it means if missing: A provider without LegitScript certification is operating outside the standard that major payment processors require. This doesn't automatically mean they're unsafe, but it means they haven't passed the basic third-party vetting that the industry uses as a minimum bar.

State Medical Licensing

What it is: Telehealth providers must be licensed in the state where the patient is located at the time of the consultation. The prescribing clinician — the actual MD, DO, NP, or PA signing off on your prescription — must hold an active, unrestricted license in your state.

How to check: Every state has a medical board website where you can look up a practitioner's license status. Search "[your state] medical board license lookup." Enter the provider's name. Verify the license is active (not expired, suspended, or restricted). You can find the prescriber's name on your prescription or by asking the telehealth platform.

What to look for: An active license with no disciplinary actions. If the license has restrictions, conditions, or a disciplinary history, read the details. Some are minor administrative issues; others are serious clinical violations.

DEA Registration (If Applicable)

What it is: While GLP-1 medications themselves are not controlled substances, the DEA registration of a medical practice or pharmacy is a general indicator of legitimacy. Providers who also prescribe controlled substances (which many weight management practices do) must have current DEA registration.

How to check: The DEA maintains a registration database. While direct public lookup is limited, you can verify DEA registration through your state's pharmacy board or by asking the provider directly. A legitimate provider will have no issue confirming their registration status.

Compounding Pharmacy Accreditation (PCAB)

What it is: If the provider uses a compounding pharmacy, the pharmacy's quality standards matter as much as the provider's credentials. The Pharmacy Compounding Accreditation Board (PCAB) is a voluntary accreditation that indicates the pharmacy meets rigorous quality and safety standards beyond minimum state requirements.

The 503A vs. 503B distinction: Compounding pharmacies fall into two categories. 503A pharmacies are regulated by state pharmacy boards and prepare medications on a per-patient basis. 503B outsourcing facilities are registered with and inspected by the FDA, follow current Good Manufacturing Practices (cGMP), and must test every batch for sterility, potency, and endotoxins. 503B facilities generally provide a higher standard of quality assurance.

How to check: Ask the provider directly: "Does your pharmacy partner operate as a 503A or 503B facility? Are they PCAB-accredited?" A provider who can't answer this question — or who doesn't know what you're asking — is a concern.

Business Registration and Contact Information

What it is: A legitimate medical practice has a registered business entity, a physical address (even if they operate virtually), and a way to reach a human being — not just a chatbot.

How to check: Look for a physical address, phone number, and email on the website. Search the business name in your state's Secretary of State business registry. Check the Better Business Bureau for any complaints or alerts. A provider with no contactable address, no phone number, and no BBB presence is operating in the shadows.

12 Red Flags That Signal an Unsafe Provider

Beyond the verification steps above, certain behaviors should immediately raise your guard. Any one of these is a yellow flag. Two or more together should send you elsewhere.

No medical consultation required. They'll prescribe without asking any health questions. This isn't convenience — it's negligence.

Guaranteed approval. No legitimate medical practice guarantees you'll be prescribed a medication before evaluating your health.

No follow-up care offered. Prescribe-and-disappear is the hallmark of a one-off transaction, not a healthcare relationship.

Prices that seem impossibly low. Compounded semaglutide from a legitimate source costs at minimum $100–$150/month. If someone's offering it for $50, the product quality is suspect.

Uses brand names like "Ozempic" or "Wegovy" for compounded products. These are trademarked names for FDA-approved formulations. A compounding pharmacy cannot legally use them to describe their products.

Claims their compounded product is "FDA-approved." Compounded medications are, by definition, not FDA-approved. Claiming otherwise is false advertising.

No pharmacy information disclosed. You should know which pharmacy is compounding your medication. If the provider won't tell you, there's a reason.

Hidden subscription or auto-billing. You sign up for a "one-time consultation" and discover monthly charges. Read the terms before entering payment.

Payment only via cryptocurrency or wire transfer. Legitimate medical businesses accept standard credit card payments through recognized processors.

10.

Guaranteed weight loss claims. No medication works identically for every person. Guarantees of specific weight loss amounts violate FTC advertising guidelines and are a hallmark of predatory marketing.

11.

No refrigeration or storage instructions. GLP-1 medications are temperature-sensitive peptides. A provider who ships without cold-chain packaging or doesn't provide storage guidance is cutting a critical safety corner.

12.

Pressure tactics or urgency marketing. "Only 3 spots left!" or "Price increases tomorrow!" are sales tactics, not medical practices. Your health decisions shouldn't be rushed by artificial scarcity.

A Quick Verification Script

Before you sign up with any provider, send their customer service this message (or ask during your consultation). Their response — or lack of one — tells you a lot:

"Hi — before I sign up, I'd like to know: (1) Are you LegitScript certified? (2) Which pharmacy compounds your medications, and are they a 503A or 503B facility? (3) Is the prescribing clinician licensed in [my state]? (4) What does your follow-up care process look like?"

A legitimate provider will answer all four without hesitation. If you get evasion, deflection, or no response, you have your answer.

Vetted Providers You Can Verify

We've reviewed these providers for clinical standards, licensing, and pharmacy quality.

Compare Verified Providers →

Independent recommendations. We earn commission from some links.

The Bottom Line

Verification takes 15 minutes. A bad provider can cost you hundreds of dollars and put your health at risk. In a market flooded with new telehealth companies launching every week, the burden of due diligence falls on you — and the tools to do it are freely available. Check the certifications. Ask the questions. If anything feels off, trust that instinct and keep looking.