What "legitimate" means, in checkable terms
Legitimacy is not a vibe and not a star rating. For a GLP-1 telehealth provider it is six facts, each of which can be checked before paying:
- A prescription is required, written by a clinician licensed in your state after reviewing your history. Tirzepatide and semaglutide are prescription-only; no exception exists.
- The dispensing pharmacy is named and is a state-licensed 503A pharmacy or an FDA-registered 503B outsourcing facility holding your state's nonresident permit.
- The price is published before sign-up, with the membership, consultation and shipping fees disclosed, and with the price at higher doses stated.
- The product's regulatory status is stated plainly: compounded medication is not FDA-approved, and the provider says so.
- A clinician is reachable for side effects and dose questions after the sale, with a stated response time.
- Cancellation and refund terms are published, including the notice period and what happens to a prepaid term.
Every provider page on this site has an "Is it legit?" section that records which of these signals we could confirm for that provider and which remain questions to ask. The providers that disclose their pharmacy and the evidence ledgers are the underlying data.
The red flags that end the conversation
No prescription required. Illegal, full stop. "For research purposes only" or "not for human consumption." The FDA has warned sellers using exactly this labeling with human dosing instructions. Retatrutide, or any unapproved peptide. Not part of any approved drug; cannot lawfully be compounded. Semaglutide sodium or acetate. The FDA has said it is not aware of a lawful basis for compounding with these salt forms; ask which form the pharmacy uses. Claims that a compounded product is FDA-approved, or "generic Zepbound." There is no generic. A pharmacy that will not be named. A price shown only after a medical intake. Pressure to prepay six or twelve months before you know your tolerability. A dosing sheet that says "draw to 25 units" without stating the vial concentration, which is how the FDA's reported five- to twenty-fold overdoses happened.
Signals that help but do not decide
LegitScript certification checks licensing and advertising practices; it is a meaningful screen and says nothing about pricing fairness or pharmacy quality. Trustpilot and BBB ratings measure first-week satisfaction more than year-one outcomes; complaint patterns matter more than averages, which is what our reputation index is built to measure. A named medical director is good; a verifiable license number is better. Press coverage and funding measure marketing, not care.
How to verify the pharmacy in five minutes
Ask the provider for the pharmacy's name and state. Search the NABP's licensure lookup and your own state board's nonresident-pharmacy list. For a 503B facility, check the FDA's registered outsourcing facility list. For accreditation, search the ACHC directory for PCAB Sterile Compounding. Search the FDA warning-letter database for the pharmacy's name. Ask for a certificate of analysis for your batch. The pharmacy guide and pharmacy directory show which pharmacies fill which providers.
How the providers in our database score
All 46 published providers require a prescription and use licensed clinicians; that is the entry condition for the database. They separate on disclosure: about a third name their pharmacy, most publish a price, fewer publish the price at higher doses, and cancellation terms are the least published fact of all. The best overall ranking weights transparency at 20 of 100 points for exactly this reason, and the per-provider "Is it legit?" sections carry the details. A provider that answers every question in writing before you pay is a legitimate provider behaving like one; a provider that will not is telling you something.
Frequently asked questions
How do I know if a GLP-1 telehealth provider is legitimate?
It requires a prescription from a clinician licensed in your state, names the licensed pharmacy that fills it, publishes its price and fee structure before sign-up, states plainly that compounded medication is not FDA-approved, and has a working way to reach a clinician. A seller missing any of the first three is not legitimate.
What are the red flags for a GLP-1 scam?
No prescription required; product labeled for research use or not for human consumption; retatrutide or other unapproved peptides; refusal to name the pharmacy; a price shown only after intake; pressure to prepay; no licensed clinician identified; claims of FDA approval for a compounded product.
Does LegitScript certification mean a provider is safe?
It means the provider passed a third-party check of licensing and advertising practices, which is a meaningful signal; it does not verify the pharmacy's product quality or the fairness of the pricing. Treat it as necessary, not sufficient.
Which GLP-1 providers are legitimate?
Every provider in our database requires a prescription and uses licensed clinicians; they differ on whether they name their pharmacy, publish their price and disclose fees, and each provider page has an 'Is it legit' section scoring those signals.