How to Verify Your Compounding Pharmacy in 2026: The Complete Checklist

The compounding pharmacy landscape in 2026 is more complex than ever. The FDA issued 30+ warning letters to telehealth firms making claims about compounded GLP-1s. The 503B exclusion proposal is pending. And the difference between a legitimate pharmacy and a risky one can be difficult to spot.

This checklist gives you the tools to verify your pharmacy — or find a better one.

The 7-Point Verification Checklist

1. State Pharmacy License (Non-Negotiable)

Every legitimate compounding pharmacy holds a license from their state's Board of Pharmacy. This is the absolute minimum. You can verify this on the state board's website — search by pharmacy name.

2. LegitScript Certification

LegitScript is the third-party standard for verifying online pharmacy legitimacy. Google, Facebook, and major ad platforms require LegitScript certification for healthcare advertisers. If a pharmacy or telehealth provider is LegitScript-certified, they've passed a rigorous compliance review.

How to check: Visit legitscript.com/verify and search the pharmacy or provider name.

3. PCAB Accreditation (Gold Standard)

The Pharmacy Compounding Accreditation Board (PCAB) is a voluntary accreditation specific to compounding pharmacies. It's the gold standard — pharmacies must meet strict quality, safety, and operational standards. Not every good pharmacy has PCAB (it's expensive), but having it is a strong trust signal.

4. Certificate of Analysis (CoA) Availability

Reputable pharmacies conduct third-party potency and sterility testing on their compounded products. A Certificate of Analysis documents these results. You should be able to request a CoA for your specific lot number. A pharmacy that refuses or can't provide one is a concern.

5. Prescription Requirement

This sounds obvious, but some online operations ship compounded GLP-1s without a legitimate prescription process. A real provider requires a medical intake, reviews your health history, and has a licensed prescriber (MD, DO, or NP) approve your treatment before the pharmacy compounds anything.

6. Clear 503A/503B Identification

Your pharmacy should be able to tell you clearly whether they operate under 503A (patient-specific, state-licensed) or 503B (outsourcing facility, FDA-registered). If they can't answer this question, or give a vague response, that's a red flag.

7. Contact Information and Support

Can you reach a human? Is there a phone number, email, and physical address? Operations that hide behind chatbots and contact forms with no real support channel are harder to hold accountable if something goes wrong.

Verified Providers