What Is LegitScript Certification? A Clear 2026 Guide
The seal that tells Google, Meta, Visa, and Mastercard an online health provider is legal, licensed, and monitored.
LegitScript certification is an independent seal that shows an online pharmacy or telehealth provider is legal, licensed, and transparent. LegitScript, a private verification company, reviews each business against nine standards, then keeps monitoring it. Google, Meta, Microsoft, Visa, and Mastercard all require it before a health brand can advertise or take card payments. For patients, a LegitScript seal is a fast, reliable signal that a site plays by the rules. Checking for it before you order is a smart, proactive habit worth building.
What is LegitScript certification?
LegitScript certification is an independent verification that an online healthcare business is legal, licensed, and truthful about what it sells. LegitScript is a private company that reviews pharmacies, telehealth providers, and other health sellers against a fixed set of standards, then keeps watching them after they pass. If a business meets the bar, it can display the "LegitScript Certified" seal.
The point is trust at scale. There are thousands of health websites, and most people can't tell a licensed provider from a grey-market storefront. LegitScript does that vetting once, in a standardized way, so that big platforms and patients don't each have to figure it out alone.
Bottom lineA LegitScript seal means a neutral third party checked that the business is licensed, follows the law, and requires a real prescription. It is a strong green flag, and its absence on a health site that sells prescription products is a reason to slow down.
What does LegitScript actually verify?
LegitScript's healthcare certification reviews a business against nine standards covering licensing, the law, prescriptions, privacy, and truthful marketing. A provider has to pass all of them, not just most. The table below lists what each standard checks.
| Standard | What LegitScript checks |
|---|---|
| Licensure & registration | The business holds valid licenses for the services it offers in each place it serves |
| Legal compliance | It follows applicable federal and state laws and regulations |
| Prior discipline & history | Past criminal, civil, or regulatory problems (about the last 10 years) are disclosed |
| Affiliates & partners | Business partners and affiliates are also legitimate and compliant |
| Patient services | The provider is clear about where it can and cannot serve patients |
| Privacy | Data practices meet privacy law, including HIPAA in the U.S. |
| Validity of prescription | A real, valid prescription and proper telemedicine practice stand behind every order |
| Transparency | Marketing and business claims are accurate and not misleading |
| Advertising | Ads across every platform follow the rules |
Notice how much of this is about process, not marketing polish. A slick website can't pass. A licensed provider that requires a genuine prescription and tells the truth can.
Who requires LegitScript certification?
The biggest ad platforms and card networks require LegitScript certification before a health brand can advertise or take payments. That's why the seal carries real weight: a business usually can't run a modern online health operation without it.
- Advertising: Google, Meta (Facebook and Instagram), Microsoft (Bing), TikTok, and LinkedIn use LegitScript to vet health and pharmacy advertisers.
- Payments: Visa and Mastercard recognize it for card-not-present transactions in drug and pharmacy categories.
- Monitoring: LegitScript is a registered Mastercard Merchant Monitoring Program provider, so the vetting is ongoing, not a one-time check.
Because certification is tied to advertising and payments, keeping it is a business necessity, not a nice-to-have. That gives certified providers a real reason to stay compliant year after year.
What is a LegitScript certified pharmacy?
A LegitScript certified pharmacy is an online pharmacy that passed LegitScript's review and is monitored to stay compliant. For prescription products, this is one of the clearest signals that a pharmacy is licensed, dispenses against valid prescriptions, and operates legally in the states it serves.
This matters for compounded medicines. A legitimate compounding pharmacy, such as a 503A pharmacy that fills individual prescriptions, can be LegitScript certified even though the compounded medicine itself is not FDA-approved. The certification is about the pharmacy's conduct and licensing, not about whether a specific product carries FDA approval.
Two different questions"Is the pharmacy legitimate?" and "Is this specific drug FDA-approved?" are separate questions. LegitScript answers the first. It does not turn a compounded medicine into an FDA-approved one.
How does LegitScript relate to peptides?
For peptides, LegitScript is one of the sharpest lines between the legitimate path and the grey market. Prescribed, pharmacy-made peptides come from a licensed provider and a real pharmacy, the kind of operation LegitScript certifies. "Research-grade" vials sold online do not, because there's no prescriber, no licensed pharmacy, and no verified identity behind them.
That grey-market lane is the actual risk in this category, not compounding itself. A vial labeled "not for human use" skips every check LegitScript exists to enforce: licensing, a valid prescription, privacy, and truthful claims. You can read more in our guide to research-grade vs pharmacy-grade peptides.
| Question | Certified telehealth + pharmacy | "Research-grade" vial online |
|---|---|---|
| Licensed provider? | Yes, a physician reviews and prescribes | No prescriber involved |
| Real pharmacy fills it? | Yes, a licensed pharmacy | No, it ships direct from a seller |
| Can it be LegitScript certified? | Yes | No, it fails the core standards |
| Identity, purity, sterility verified? | Yes, with testing and a Certificate of Analysis | Unverified |
How do you verify a site is LegitScript certified?
You verify a site by looking for the LegitScript seal and confirming it in LegitScript's own directory. A real seal links to the provider's certification record; a fake seal is just an image that goes nowhere. Take two minutes to check before you order.
- Look for the "LegitScript Certified" or "LegitScript Monitored" seal, usually in the site footer.
- Click the seal. A genuine one opens the provider's verification page on LegitScript's site.
- Search the business name in LegitScript's public directory to confirm the record matches.
- Confirm the site requires a prescription and a licensed provider before it will sell prescription products.
For a fuller checklist that goes beyond the seal, see how to verify a peptide source and how to spot fake peptides.
What LegitScript certification is not
LegitScript certification is not FDA approval, and it does not make any product FDA-approved. It verifies the business, not the molecule. A certified pharmacy can legally compound prescribed medicines that are not themselves FDA-approved, which is normal and expected for compounded medicines.
- It is not permanent. Certification can be suspended if a business stops meeting the standards, which is why ongoing monitoring exists.
Think of it as a floor, not a ceiling: it confirms a provider clears the legal and licensing bar, then a good provider builds trust on top of that with testing, transparent pricing, and real clinical review.
How does this fit with FDA rules on peptides in 2026?
LegitScript certification sits alongside FDA rules, not in place of them. The FDA governs which substances pharmacies may compound; LegitScript governs whether the online business is legitimate. Both matter, and 2026 is an active year for the FDA side.
On April 15, 2026, the FDA removed 12 peptides from the 503A Category 2 list. Removal is not approval and does not place a peptide on the authorized 503A list; it moves those substances out of the "significant safety risk" bucket to await review. On July 23-24, 2026, the Pharmacy Compounding Advisory Committee (PCAC) reviews 7 of them: BPC-157, TB-500, KPV, MOTS-C, DSIP, Semax, and Epitalon.
Keep the facts straightCategory 2 removal is not FDA approval and not yet a spot on the authorized 503A list. It's a procedural step toward formal review. Our guides to FDA peptide regulations in 2026 and PCAC explained walk through what each step means.
How pru fits in
pru is built on the legitimate path that LegitScript exists to certify. Licensed physicians review each patient and prescribe; FDA-regulated 503A pharmacies compound and fill; every order ships with a Certificate of Analysis; and you can see peptide pricing itemized at cost, with no markup.
You select the peptide, guided by our education, and a physician confirms whether it fits you. Membership is about $50 a month, and the peptides themselves are billed at cost. Compare that to a research-grade vial with no prescriber and no pharmacy behind it, and the difference is the whole point of this guide.
Choosing a verified provider is one of the most proactive steps you can take for your health, and pru exists to make that smart choice the accessible one. Explore the catalog or see how membership works when you are ready. To go deeper on safety, read are compounded peptides safe and telehealth peptide safety.
Related reading
Keep learning how the legitimate path works and how to check a provider before you order.
- What is a 503A pharmacy?
- Research-grade vs pharmacy-grade peptides
- How to verify a peptide source
- Are compounded peptides safe?
- FDA peptide regulations in 2026
- Browse the pru catalog
Common questions
Sources & further reading
- https://www.legitscript.com/certification/healthcare-certification/
- https://www.legitscript.com/certification/healthcare-certification/faq/
- https://www.fda.gov/drugs/human-drug-compounding/regulatory-policy-information-503a-compounding
- https://www.fda.gov/advisory-committees/human-drug-advisory-committees/pharmacy-compounding-advisory-committee
- joinpru.com/blog