A legitimate pharmacy and a convincing fake look almost identical on a phone screen. Both take a card, both show a padlock, both promise fast shipping. The difference sits in public records you can look up in about ten minutes: a pharmacy licence, a named pharmacist in charge, a real street address, and a rule that someone qualified reviewed your case before anything shipped.
Knowing how to tell if an online pharmacy is legitimate matters most when the medicine is expensive, injectable, or hard to get locally. That is exactly where bad actors cluster. GLP-1 weight loss drugs, insulin, ADHD stimulants and erectile dysfunction pills attract the most fake storefronts, because demand is high and buyers are price sensitive.
The National Association of Boards of Pharmacy has reported that roughly 95% of the websites it reviewed selling prescription drugs were operating out of compliance with US pharmacy laws and practice standards (NABP). That is not a reason to give up on mail order. It is a reason to vet one pharmacy carefully, then stay with it.
First decide which risk you are actually managing
Not every reader has the same worry, and the checks that matter change with the goal. Get honest about which of these you are trying to avoid, because it tells you which section below deserves your attention.
- Counterfeit or wrong-strength product: the medicine arrives, but it is not what the label claims. This is the risk that licence and sourcing checks solve.
- Losing money with nothing shipped: a pure payment scam. Payment method, domain history and contact details expose these fastest.
- Health data leaking: your diagnosis, weight and prescriptions sold on to advertisers. Read the privacy policy and look for the data-sharing language.
- No clinical safety net: a site that dispenses without any review, so nobody screens for interactions, kidney function or pregnancy.
- Continuity: a seller that vanishes mid-titration and leaves you rationing a pen.
Two of those are fraud problems and three are clinical problems. A site can be perfectly real and still be a poor choice for you, which is why verification and quality are separate questions.
Check the licence, not the logo
Trust seals are images. Anyone can copy one into a footer. The only version that counts is the record on the regulator’s own website, reached by typing the regulator’s address into your browser rather than clicking the badge.
For a pharmacy based in the United States, there are usually two licences to find. The pharmacy needs a licence from the state board of pharmacy where it physically operates, and most states also require a nonresident or out-of-state licence to ship into them. Both are searchable. Look up the pharmacy’s legal business name, not the marketing brand on the website, because a telehealth company and the pharmacy that fills its scripts are often two different legal entities.
Then layer the voluntary programmes on top:
- NABP accreditation and the .pharmacy Verified Websites Program: NABP runs a safe site search that flags accredited sites and also lists domains it considers not recommended. A web address ending in .pharmacy can only be issued after review.
- LegitScript certification: used by payment processors and ad networks. Confirm the certificate resolves to a live record on LegitScript’s own site.
- URAC or ACHC accreditation: common for mail order and specialty pharmacies, and a decent signal that dispensing processes get audited.
Why it matters: a real pharmacy will tell you its licence number and the state that issued it without hesitating, because it is public information anyway.
If the site is a telemedicine brand rather than a pharmacy, ask which pharmacy dispenses, where it sits, and whether it is a retail pharmacy or a compounding facility. A brand that names the dispensing pharmacy is being straight with you. A brand that dodges the question is telling you something too. When you want to weigh two services on trust rather than headline price, look at how they score on clinical process and transparency together.
Best on trust and safety
Certification, prescribing and transparency.
- Form Health8.6 / 10
- Levity8.5 / 10
- Willow8.2 / 10
- Allara Health8.2 / 10
- Noom Med8.2 / 10
Best on clinical care
The quality of the medical side.
- Form Health8.7 / 10
- 9amHealth8.5 / 10
- Marek Health8.4 / 10
- Teladoc Health8.3 / 10
- Defy Medical8.2 / 10
Ranked from our own scores, recomputed as data changes. Providers cannot pay for a place.
The prescription test is the fastest single filter
If a site will sell you a prescription medicine without a prescription, stop. There is no legal or clinical version of that offer in the US, and regulators name it as the leading warning sign of a rogue seller. The same applies to sites that offer to write a prescription based on nothing more than a checkout form and a card number.
What legitimate practice looks like varies, and that is where people get confused. Asynchronous telehealth is legal in much of the country: you complete a detailed intake, a clinician licensed in your state reviews it, and they may prescribe without a live call. What has to be true is the licence, the review and the record. Ask the question directly: is the prescriber licensed in my state, and can I see their name and credentials?
- A questionnaire that nobody reviews is not a clinical assessment.
- Controlled substances face tighter federal rules on telemedicine prescribing, so treat any site casually offering stimulants, benzodiazepines or opioids as a hard no.
- You should be able to reach a licensed pharmacist with a question about your medicine, by phone or secure message.
- Refills should require a check-in at sensible intervals, not an endless auto-ship.
The short version of how to tell if an online pharmacy is legitimate: a real prescription requirement, a verifiable licence, a reachable pharmacist, and a physical address. Miss any one of those and the rest stops mattering.
What the website itself gives away
Once licence and prescription checks pass, the site’s own housekeeping fills in the picture. Individually these are weak signals. Three or four together are a pattern.
- No street address, or an address that turns out to be a mail drop or a residential unit on a map search.
- Phone number nobody answers, or chat-only support with no named staff.
- Payment by wire transfer, cryptocurrency, gift card or peer-to-peer app. These are chosen because they are hard to reverse. A card payment gives you a dispute route.
- Spam origin: you found the site through an unsolicited email, a social media DM or a comment reply.
- Prices far below everyone else, paired with bulk quantities and countdown timers.
- Vague sourcing: no answer to where the drug is manufactured or which country it ships from until the order confirmation arrives.
- Sloppy medical copy: misspelled drug names, dosing that contradicts the label, or claims that a medicine cures something.
- A privacy policy that is missing, generic, or silent on selling data.
Quick tip: put the pharmacy’s legal name and the phrase warning letter into a search engine before you order. Regulator enforcement notices are public and easy to find.
Price sanity: when cheap becomes the warning
Price is a legitimate reason to shop around, and cash-pay prices for the same molecule vary widely between real, licensed services. That variation is also cover for fakes, so you need a sense of the honest range before you judge a quote. Across the services we track, cash prices for semaglutide sit between $99 to $499.
A quote that sits far under the bottom of that range is not a bargain to celebrate. It usually means one of three things: the product is not what it says, the strength is lower than labelled, or the seller never intends to ship. Judge the total rather than the sticker, because monthly figures hide membership fees, shipping, lab work and the cost of moving up to a higher dose.
What a year actually costs
Programmes quote a monthly headline. Add the medication, the labs and the renewal price and the real number is usually different.
Advertised prices change often and intro pricing rarely lasts. Ask what the renewal rate is before you commit to a plan.
Run the yearly number for two or three services and the picture changes fast. A service that looks pricey per month can win once you include supplies and consultations, and a cheap first month often resets at a higher rate after the introductory period.
No provider matches that filter. .
See every provider we track, with filters and sorting
Canadian and cross-border sites need a different lookup
Canadian sites are their own category, partly because so many fake sites claim to be Canadian. The word Canadian in a domain name proves nothing at all.
Health Canada’s guidance points buyers to a real check: if a site lists a Canadian street address, confirm the pharmacy with the provincial pharmacy regulatory authority for that province. Every province publishes a register of licensed pharmacies and pharmacists. The national association of those regulators also explains how to verify a Canadian internet pharmacy, and the .pharmacy programme covers Canadian sites too.
- An industry association membership badge is marketing, not regulation. A provincial college licence is regulation.
- Canadian pharmacies still require a valid prescription, and many require it from a Canadian-licensed prescriber or a co-signing process.
- Drug names, strengths and pack sizes differ between markets, so the product you receive may carry a different brand name for the same active ingredient.
- For US buyers, importing prescription drugs for personal use is generally not permitted under federal law, even from a genuinely licensed Canadian pharmacy. Enforcement discretion is not the same as permission, so understand what you are accepting.
None of that makes a licensed Canadian pharmacy a scam. It does mean you should know exactly which country your medicine ships from, and who is legally accountable if something is wrong with it.
Compounded medicines: verify the facility, not just the price
Compounded versions of popular injectables are a separate legitimacy question, because a compounding pharmacy can be fully licensed and the product still is not an approved drug. Compounded preparations are not reviewed or approved for safety, effectiveness or manufacturing quality the way brand and generic products are.
If a service offers a compounded medicine, ask three things and expect clear answers: which pharmacy compounds it, whether it is a state-licensed compounder or a federally registered outsourcing facility, and whether the active ingredient is the same base molecule named on the approved label. Regulators have specifically flagged salt forms sold as substitutes for approved active ingredients. Ask for a certificate of analysis and see whether one exists.
- Confirm the compounder’s licence with the state board where it operates.
- Ask whether a third-party lab tests potency and sterility, and how often.
- Ask what happens to your prescription if the compounded option stops being offered, since rules around compounding copies of approved drugs tighten once a shortage ends.
- Check the beyond-use date on arrival, which is shorter than a manufactured product’s expiry.
Insurance, mail order and specialty pharmacies
If you are using coverage rather than paying cash, legitimacy blends into network mechanics. Your plan’s own mail order pharmacy is licensed, but that does not mean it can fill everything, and a specialty drug is often restricted to one named specialty pharmacy.
Before you commit, get these details in plain language from the pharmacy or the plan:
- Whether the pharmacy is in network for your plan, and its NPI or NCPDP number if you want to confirm with the insurer.
- Whether the drug needs prior authorization, and who submits it.
- Whether step therapy applies, meaning you must try a cheaper drug first.
- Whether you are still in the deductible phase, which changes what you pay at the counter.
- Whether your share is a flat copay or a percentage coinsurance, because coinsurance on a high-cost injectable can be brutal.
- The formulary tier, and what the appeal route looks like if it is excluded.
No provider matches that filter. .
See every provider we track, with filters and sorting
Are marketplace and big-brand pharmacies safer?
Large retail and marketplace pharmacies are licensed pharmacies, and they require a prescription like anyone else. The confusion comes from marketplaces that host both a pharmacy and thousands of independent sellers. A prescription filled by the pharmacy operation is a regulated transaction. A supplement or an imported pack sold by a third-party seller on the same site is not, and it does not inherit the pharmacy’s licence.
The practical rule: look at who is dispensing, not whose website you are on. If the label that arrives names a licensed pharmacy, lists your name, the drug, the strength and a prescription number, you are inside the regulated system. If it arrives in a plain envelope with foreign packaging and no pharmacy label, you are not.
Generics deserve the same clarity. A US generic must be approved on its own application and shown to be bioequivalent to the brand, so a genuine generic from a licensed pharmacy is not a lesser product. What makes a generic risky is an unverifiable source, not the word generic. Check the imprint code, the manufacturer name and the pack details against a reputable pill identifier when a refill looks different from last time.
Check the delivery, not just the checkout
Verification does not end when you pay. The parcel is evidence, and this is where cold-chain products separate the careful pharmacies from the careless ones.
Delivery Inspection Checklist
- Pharmacy label shows your name, drug, strength, quantity, prescription number, and pharmacy address
- Refrigerated products arrive cold with intact coolant
- Tablet imprint, colour, and shape match your last fill
- Leaflet and lot number are present in the packaging
- Photograph and report anything suspicious to the drug regulator
- Dispute missing orders with your card issuer promptly
- Confirm the pharmacy label carries your name, the drug, the strength, the quantity, the prescription number and the pharmacy’s address and phone number.
- For refrigerated medicines such as insulin and GLP-1 pens, check the box arrives cold with intact coolant, and read the storage range on the carton before it goes in the fridge.
- Compare the imprint, colour and shape of tablets against your last fill, and query anything different with the pharmacist rather than assuming.
- Look for a leaflet and a lot number. No lot number is a serious problem.
- Keep the packaging if something looks wrong, photograph it, and report suspected counterfeit or substandard product to the drug regulator in your country.
- If the medicine never arrives or the seller stops responding, dispute the charge with your card issuer promptly.
Sanity-check one service in ten minutes
Do this once per service and you will not need to worry about it again.
10-Minute Sanity Check for Any Online Pharmacy
- Find the legal business name and street address in the footer, terms, or privacy policy
- Search that exact name in the state pharmacy register, then your state's nonresident register
- Run the domain through NABP's safe site search
- Confirm the site requires a valid prescription and explains clinician review
- Call the phone number and ask to speak to a pharmacist
- Ask what happens if a refrigerated shipment arrives warm
- Add up the real annual total: medicine, shipping, membership, labs, dose escalation
- Pay by credit card and keep your order confirmation
- Find the legal business name and street address in the footer, terms or privacy policy.
- Search that exact name in the state or provincial pharmacy register where the pharmacy operates, then in your own state’s nonresident register if you are in the US.
- Run the domain through NABP’s safe site search and note whether it appears as accredited or not recommended.
- Confirm the site requires a valid prescription and explains how clinician review works, including where the prescriber is licensed.
- Call the phone number. Ask to speak to a pharmacist, then ask which facility dispenses and which country it ships from.
- Ask what happens if a refrigerated shipment arrives warm, and whether replacement is at their cost.
- Add up the real annual total: medicine, shipping, membership, labs and dose escalation.
- Pay by credit card, and keep your order confirmation.
If a service fails step two or step four, nothing later in the list can rescue it. If it passes all eight, you have done more due diligence than most buyers ever do, and you can shift your attention to the thing that actually affects your results: whether the medicine and the support fit your situation.
Sources worth bookmarking
- FDA consumer guidance on buying medicines safely from an online pharmacy
- NABP safe site search and the .pharmacy Verified Websites Program
- Health Canada guidance on choosing a safe online pharmacy
- NAPRA instructions for verifying a Canadian internet pharmacy
- General Pharmaceutical Council register for pharmacies in Great Britain
The FDA warns that medicines bought from unsafe online sellers may be fake, expired, contaminated, the wrong strength, or otherwise unsafe to take (FDA). Ten minutes of record checking is a cheap way to stay out of that group.
This content is for general informational purposes only and is not a substitute for professional medical advice, diagnosis, or treatment. Always consult a qualified clinician or pharmacist about your situation, and seek urgent care or call your local emergency number for severe or worsening symptoms.