Guide · Verification

How to verify the pharmacy behind a GLP-1 prescription

Every check in this guide is public, free, and takes minutes — once you have a pharmacy's name. That 'once' is the catch: no provider we track currently names one. So this guide does double duty: the verification path for when you have a name, and the script for extracting one.

Step 0: get the name

Three places to look before asking. Your medication packaging: dispensed prescriptions carry the dispensing pharmacy's name and address on the label. Theshipping label and pharmacy paperwork in the package. Your payment records, where the dispenser sometimes appears as a separate line. If you haven't ordered yet, ask support directly: "Which pharmacy or outsourcing facility will fill my prescription, and in which state is it licensed?" A provider that won't answer before you pay is answering a different question — our disclosure board tracks exactly this behavior across the market.

Step 1: state licensure

Every U.S. pharmacy is licensed by at least one state board of pharmacy, and every board runs a public license lookup. Search the pharmacy's name and state; confirm the license is active and the pharmacy type matches what you were told. If the pharmacy ships into your state from another, many states also require a nonresident-pharmacy registration in your state — check your own board too. Our state pages link each state's board directory, and the state checker gets you to the right page fast.

Step 2: FDA registers (for 503B claims)

If the provider claims a 503B outsourcing facility fills its prescriptions, that claim is directly checkable: the FDA maintains a public register of outsourcing facilities and a searchable product-report database [2]. Two honest limits. Registration means the agency received the required information — the FDA states it is not an endorsement or a quality finding [1]. And a facility's presence on the register says nothing about whether your prescription actually routes through it — which is why the name on your own packaging (step 0) anchors everything else.

Step 3: enforcement history

Search the pharmacy's exact name in the FDA's warning-letter database and recall listings, and the state board's disciplinary actions where the board publishes them. Absence of hits is weak evidence (small compounders are inspected rarely); presence of hits is strong evidence, and recent hits about sterility or potency are disqualifying for something you inject. This step is the entire reason names matter: none of these databases can be searched with "a U.S.-licensed pharmacy."

Step 4: product-level checks

For branded product, check the pen against current FDA counterfeit alerts — counterfeit Ozempic has twice entered the legitimate supply chain and reached patients through licensed retail pharmacies [4], with identifiers (lot and serial combinations) published in the alerts [3]. Our explainerlists the identifiers from the two known incidents. For compounded product there is no equivalent alert system — which is itself worth knowing: the checks available to you are the facility-level ones above, and they end at the facility's door.

Step 5: accreditation claims

Providers and pharmacies sometimes advertise accreditations — PCAB, LegitScript, URAC, state designations. Treat each as a checkable claim, not a credential: every legitimate accreditor maintains a public directory of who it has actually accredited, so search the issuing body's own site for the pharmacy's name rather than trusting a logo on a checkout page. An accreditation that can't be found in its issuer's directory is worse than no accreditation — it's a misrepresentation, and worth reporting to the accreditor and to us via thecorrections process if we cover the provider.

If you can't get a name

Then you cannot verify anything on this page, and the honest framing is: you are being asked to accept an unauditable supply chain on trust. That is a risk decision only you can make, but make it as a decision, not a default — and weigh it against the fact thatfederal compounding policy is actively in motion, so an opaque supply chain is also one whose regulatory exposure you can't assess. Theinteractive checklist version of this guide tracks each step, including the extraction script, so nothing gets skipped in the moment.