News explainer · Enforcement

FDA's enforcement wave against compounded GLP-1 marketing

Between September 2025 and June 2026, trade press reported three rounds of FDA warning letters — more than a hundred letters in total — aimed at how telehealth companies and online sellers market compounded GLP-1s, plus an announced move against the ingredients themselves. An unusual caveat leads this piece: most of it reaches us through trade reporting, not agency documents, and every such claim below is labeled.

The sourcing caveat, stated first

Our evidence ledger holds these enforcement claims from trade publications, not from the FDA's own warning-letter database — so each carries a third-party reported status rather than primary source linked. That is a real limitation: counts of letters and characterizations of their contents sometimes shift between trade reports. We publish the piece anyway because the pattern is material to anyone comparing providers, and because labeling the weakness honestly beats omitting the story or overstating the sourcing. Readers who need the letters themselves should search the FDA's warning-letter database directly.

The reported rounds

The shortage-law backdrop

Why marketing, and why now? The legal permission structure for mass compounded GLP-1s was built on the drugs' shortage status, and that foundation has been dissolving since late 2024. The FDA's shortage record shows tirzepatide injection determined resolved on October 2, 2024; that determination was remanded for reevaluation within weeks amid litigation, and in March 2025 a district court denied the compounders' preliminary injunction in Outsourcing Facilities Association v. FDA [5]. For semaglutide, the FDA set May 22, 2025 as the end of its enforcement-discretion window for outsourcing facilities [6]. With the shortage rationale gone, marketing claims — what companies say a compounded product is, and for whom — became the exposed surface, and the reported letters target exactly that. The pending 503B bulks-list decision would close a further channel.

The safety-signal context

Two reported data points sit behind the enforcement posture, both third-party sourced and labeled as such. As of early 2025, the FDA had reportedly received more than 455 adverse-event reports linked to compounded semaglutide and more than 320 linked to compounded tirzepatide [7]. And a 2026 study reportedly found that tirzepatide compounded with vitamin B12 can chemically bond into a molecule not present in the FDA-approved product [8] — notable because B12 co-formulation is a common compounded-market differentiator. Adverse-event report counts are not causation findings, and one study is one study; we cite both as signals the agency plausibly weighs, not as verdicts.

What this means for a consumer comparing providers

Every compounded row on our medication pages — the majority of priced offerings we track — sits downstream of this enforcement environment. Three practical consequences: marketing language on provider sites is the thing regulators are actively policing, so treat superlatives and equivalence claims ("same active ingredient") with added skepticism; supply continuity is a real risk to price into any prepaid commitment (seebefore you prepay); and the provider-level fact that matters most — which pharmacy or facility fills your prescription — remains undisclosed by every provider we cover, as our disclosure-gap analysis documents.

What remains unknown

Which companies received the reported letters (the trade reports we hold do not give usable recipient lists, and we will not guess); how many letters led to corrective action, litigation, or closure; the concrete mechanism and timeline of the announced API restriction [4]; and whether any provider in our dataset is among the recipients — we have no evidence either way, and absence of evidence here is genuinely not evidence of absence. If a covered provider discloses receipt of a letter, our right to respond process applies and the relevant pages will be updated.