How to Tell If a GLP-1 Telehealth Provider Is Legitimate

A legitimate GLP-1 provider and a dangerous one can look almost identical from the homepage. Both show a clean design, a smiling before-and-after, a low headline price and the words "doctor-prescribed." The difference lives one or two clicks deeper — in whether a real clinician evaluates you, whether a named and accredited pharmacy fills the prescription, and whether the marketing survives a fact-check. The good news: most of that is verifiable by you, in about fifteen minutes, before you ever enter a payment card. This is the audit the Desk runs on every operator, translated into steps you can run yourself.

This is a different question from *which* provider fits you best — that is a matter of price, molecule and state access, covered in how to choose a GLP-1 provider. Legitimacy comes first. A provider can be a perfect fit on paper and still be one you should never send money to.

Red flag #1: instant approval with no real medical evaluation

GLP-1 medications are prescription drugs for a reason. A legitimate telehealth provider requires a genuine clinical evaluation — a medical and medication history, contraindication screening, and a licensed prescriber who can decline you — before anything ships. The single loudest warning sign is the opposite: a site that "approves" you in seconds, sells without any prescriber involvement, or ships on the strength of a checkbox.

This is not a hypothetical risk. A 2024 analysis in *JAMA Network Open* that ordered semaglutide from no-prescription online sellers found products that arrived without any legitimate clinical gatekeeping, alongside problems with what was actually delivered¹. If a provider skips the evaluation, it is not saving you a hassle — it is removing the safety check that catches the pancreatitis history, the thyroid-cancer contraindication, or the interacting medication that should have stopped the order.

**What legitimate looks like:** an intake that asks real medical questions, a named licensed clinician, and a clear path to reach that clinician after you start. **What to walk away from:** "no consultation required," "guaranteed approval," or a checkout that never once asks about your health.

Red flag #2: an anonymous or unverifiable pharmacy

Every real prescription is filled by a real, licensed pharmacy. A provider that will not tell you which pharmacy dispenses your medication has failed the most basic test of legitimacy. Anonymity here is the pattern behind counterfeit and substandard product: a 2026 pharmacovigilance analysis of European safety data documented adverse events tied to *counterfeit* semaglutide reaching patients outside the regulated supply chain². You cannot inspect a pharmacy yourself, so you verify it two ways.

First, understand the sourcing. Brand-name Wegovy and Zepbound come from the manufacturer's regulated supply. Compounded GLP-1 comes from a compounding pharmacy — legal, but **not** FDA-approved, meaning the FDA does not verify the individual product's safety, effectiveness or quality before it reaches you³. Federal law splits compounders into 503A pharmacies (filling individual prescriptions, overseen mainly by state boards) and 503B outsourcing facilities (FDA-registered, held to Current Good Manufacturing Practice with FDA inspection)⁴. All else equal, a named 503B facility carries more manufacturing assurance than an unnamed source. Our is compounded GLP-1 legit and safe guide goes deeper, and compounded vs brand-name GLP-1 lays out the trade-off.

Second, check the pharmacy's credentials. The National Association of Boards of Pharmacy (NABP) accredits legitimate digital pharmacies and runs the `.pharmacy` verified-domain program; its consumer resource lets you confirm a site is a recommended, not a "not recommended," operator⁵. NABP's Digital Pharmacy accreditation is a further mark that a mail-order pharmacy has passed independent review⁶. Independent certifications such as LegitScript — the verification the major ad platforms require of telehealth advertisers — play the same role: an outside party has checked that the seller is who it claims to be. On our board, providers noted as third-party verified, such as Ondra Health, have cleared that kind of review.

Verify the prescriber's license yourself

A legitimate provider practices through clinicians licensed in *your* state. You do not have to take that on faith. Every U.S. state medical board publishes a public license-lookup, and the Federation of State Medical Boards runs a free national search that confirms whether a named physician holds an active, unrestricted license⁷. If a provider names its medical director or prescribing clinicians, run the name. If it names *no* clinician anywhere — no medical director, no way to learn who is responsible for your prescription — treat that absence as the answer.

Verify the pharmacy the same way

The FDA's BeSafeRx program spells out the same consumer checks for online pharmacies: a valid prescription should be required, a licensed pharmacist should be reachable, and the site should list a physical U.S. address and be licensed by a state board⁸. A site that offers prescription drugs with none of these — no prescription, no pharmacist, no address — is exactly the profile the FDA warns against. The FDA also maintains active alerts about counterfeit and unapproved semaglutide products circulating outside the legitimate supply chain, which is worth reading before you buy from any unfamiliar seller⁹.

Red flag #3: pricing and marketing that fail a fact-check

Scam operators lean on the fact that the underlying drugs genuinely work. Semaglutide produced roughly 15% mean body-weight reduction over 68 weeks in its pivotal obesity trial¹¹, and tirzepatide reached up to about 21% over 72 weeks in its own¹². Those real results are the bait that makes exaggerated claims believable. Hold the marketing to a standard:

- **"Guaranteed" results or "FDA-approved" compounded product.** No provider can guarantee an outcome, and compounded GLP-1 is not FDA-approved — a seller that says otherwise is either careless or deceptive. Advertisers are legally required to have competent, reliable evidence for health claims before making them¹⁰. - **A price far below the field with no pharmacy named.** A number well under every verified competitor, attached to an anonymous source, is the classic counterfeit setup rather than a bargain. - **Teaser pricing that steps up.** A low headline that balloons at the first refill is a transparency failure even when the operator is otherwise real. Legitimacy and honesty on price are separate tests; a provider should pass both.

Your 15-minute legitimacy checklist

Before you pay, confirm every one of these:

1. **A real evaluation.** The intake asks genuine medical questions and a licensed clinician can decline you — no "instant approval." 2. **A named prescriber.** You can find who is responsible for the prescription, and their license verifies on a state board or the FSMB search. 3. **A named pharmacy.** You know which pharmacy dispenses, its sourcing tier (prefer 503B or a clearly identified licensed 503A), and it holds NABP/`.pharmacy` or comparable accreditation. 4. **Reachable support.** A pharmacist or clinician is contactable after you start, not just a ticket queue. 5. **Marketing that survives scrutiny.** No "guaranteed" outcomes, no "FDA-approved" compounded claims, a transparent all-in price with no named-pharmacy blank.

If a provider misses even one of the first three, stop. The other two are quality signals; the first three are the line between legitimate and dangerous.

The bottom line

Legitimacy is not a vibe you get from a homepage — it is a short list of facts you can verify, and a legitimate operator makes them easy to find. When a provider hides the clinician, hides the pharmacy, or promises what no one can promise, it is telling you what it is. Run the checklist, cross-check the methodology the Desk uses to grade licensing and trust on every review, and compare only the operators that pass on our comparison desk. The provider that currently tops our board on that trust axis, CoreAge Rx, is worth reading precisely because it survives this audit — but the point of the checklist is that you never have to take our word, or anyone's, on faith.