How to Verify a Compounding Pharmacy Is Legitimate: A Practical Checklist

Deciding whether compounded medication is safe in principle is one question. Actually checking whether the specific pharmacy behind your specific prescription is legitimate is a different, more concrete task — and one that starts with finding its name and licensing record. This is a step-by-step checklist, not a debate about compounding in general (for that, see is cheap compounded GLP-1 safe? how to vet a low price).

The provider review should help you find the next question to ask. Our Eden review lists the pharmacy names the company discloses, while the CoreAge Rx review explains that its public FAQ does not identify the dispensing pharmacy. Neither a list of partners nor a telehealth brand name tells you which pharmacy will prepare your particular prescription; get that name before checking its license.

Step 1: Get the pharmacy's actual name

Before anything else, find the name of the specific pharmacy that will fill your prescription — not the telehealth brand, the pharmacy. If the program does not identify the pharmacy publicly, ask which one would fill your prescription and when that assignment is made. You cannot check a particular pharmacy's license until you have its name.

This step ends more shortlists than any other. One seller of six-month non-cancelable GLP-1 contracts refers only to "our pharmacy partner" and never names it, so there is nothing to run through steps 2 through 6 below — and the certification badge on its own site links to a keyword search rather than to a certificate. Every check that follows depends on getting a name first.

The opposite end of that scale is worth seeing, so you know what a complete answer looks like: Pallas Health names all six of the pharmacies that may fill its prescriptions — Belmar, Strive, Epiq Scripts, Casa Pharma Rx, The Pharmacy Hub and Foothills — and explains the 503A/503B split described in step 4 rather than leaving you to work out which applies. It also publishes the NPI numbers of two prescribing physicians with a link to the federal registry, which is the same idea applied to step 3. Naming six suppliers also means naming one that has a regulatory history: Belmar was issued an FDA warning letter in March 2023 over compounding practices, and the FDA closed that letter out in October 2023. That is what a real answer to step 1 buys you — something checkable, including the parts a seller would rather you didn't check.

Step 2: Check LegitScript certification

LegitScript certifies online pharmacies and telehealth businesses against a defined set of standards, including proper licensure in every jurisdiction where the business operates, a valid-prescription requirement before dispensing, and disclosure of any prior regulatory or civil violations from the past decade¹. LegitScript also requires that certified businesses' pharmacy partners hold LegitScript certification or an equivalent accreditation¹. If a business claims certification, confirm the business name and current status with the certifier. Certification can add information about a business's practices; it does not replace a state license check or mean that a compounded drug is FDA-approved.

Step 3: Confirm state board licensing directly

Use the FDA's state-board lookup links to check the pharmacy's license with your state board of pharmacy⁴. Match its name and address, confirm the current license status, and read any restrictions or disciplinary orders. An enforcement record needs context; its existence alone does not mean a license is fictitious or inactive. If the record is unclear, ask the board whether the pharmacy may dispense to patients in your state.

Step 3b: Check the prescription requirement and access to a pharmacist

FDA's online-pharmacy guidance also calls for a valid prescription, a physical address and telephone number in the United States, and a licensed pharmacist who can answer your questions⁴. Confirm those details with the pharmacy that will dispense the medication. A telehealth business's certification does not answer every question about a different business filling the prescription.

Step 4: Ask whether it's a 503A or 503B facility — and confirm

Sections 503A and 503B of federal law set different conditions for certain exemptions from requirements that otherwise apply to drugs. State-licensed pharmacies generally operate under 503A for patient-specific prescriptions; registered 503B outsourcing facilities are subject to current good manufacturing practice requirements and FDA inspection⁵. Ask which category the pharmacy says applies and verify a 503B registration claim against FDA's current outsourcing-facility list. Registration is not FDA approval of the compounded product, and neither category alone settles whether your particular prescription qualifies under the law.

Step 5: Ask about USP <797> for injectable preparations

GLP-1 injections are sterile preparations, which puts them under USP General Chapter <797> — the standard covering compounding for injectable, intravenous, and other routes where contamination risk is high². USP <797> compliance is meant to prevent medications from being sub-potent, super-potent, or contaminated through defined environmental and process controls². (USP <795> covers non-sterile compounding and isn't the relevant standard for an injectable product.) A legitimate sterile-compounding pharmacy should be able to speak to <797> compliance specifically, not compounding standards in general terms.

Step 6: Confirm the shortage-based legal basis, if that's the claim

If a program's justification for compounding a copy of an FDA-approved drug rests on an active drug shortage, that basis has to actually be current — the tirzepatide and semaglutide injection shortages were formally declared resolved by the FDA in December 2024 and February 2025, respectively³. See GLP-1 shortage status: what the FDA actually declared and when for the specific dates and what changed. A program still citing "shortage" as its legal basis today is either misinformed or compounding under a different justification it isn't disclosing — either way, ask directly.

Putting the checklist together

These checks give you records and specific answers to review, rather than relying on price or website polish. They cannot guarantee the quality of a particular batch. None of this replaces medical judgment about whether compounded medication is right for you — see compounded vs brand-name GLP-1: which actually saves you money for that trade-off. It's specifically about confirming the source is who it claims to be.

How to use our reviews alongside pharmacy checks

Our provider reviews describe pharmacy disclosures where we have documented them. The Value Score methodology explains the six commercial factors behind our scores; a Value Score is not a pharmacy inspection or a finding that a medication is safe. Use the semaglutide and tirzepatide price comparisons alongside your pharmacy checks and a clinician's advice.

This piece sits in our research index alongside every other sourced explainer we publish — the trials, the compounding rules and the pricing mechanics, grouped by the question each one answers.

A license does not settle whether a particular prescription qualifies under current federal rules. Read whether compounded GLP-1 is still legal alongside these pharmacy checks.