A search for a compounding pharmacy near you returns storefronts, but for a peptide ordered online the closest pharmacy may not be the one that fills it. What protects you is not distance but a license in the state where you live, and that is something you can check yourself.
Many peptide sellers work through a telehealth visit and ship from a partner pharmacy, as how online peptide therapy works explains. The steps below apply whether the pharmacy is down the street or several states away.
Step one: find the license
FDA’s BeSafeRx program keeps a page linking to each state board of pharmacy’s license database[1]. Its advice is blunt: if the pharmacy is not listed, you should not use it[1].
If it is listed, FDA says to confirm three more things: that it requires a prescription, has a physical U.S. address and phone number, and has a licensed pharmacist to answer questions[1]. Those are the same safe signs FDA lists for any online pharmacy[2].
Step two: know which kind of compounder it is
Federal law sets out two routes. Under section 503A, a licensed pharmacist in a state-licensed pharmacy compounds for an identified patient on a valid prescription[3]. Under section 503B, a facility that compounds sterile drugs can elect to register with FDA as an outsourcing facility[4].
| 503A pharmacy | 503B outsourcing facility | |
|---|---|---|
| Who compounds | State-licensed pharmacy | FDA-registered facility |
| Patient prescription | Yes | Not always |
| Main overseer | State board | FDA |
| Public lookup | State license search | FDA facility list |
An outsourcing facility need not be a licensed pharmacy, and may or may not work from patient prescriptions[4]. It must register with FDA every year between October 1 and December 31[4]. State boards oversee ordinary pharmacies day to day, while FDA oversees outsourcing facilities and inspects them on a risk-based schedule[5].
The full comparison, including what each tier is allowed to make, is in 503A vs 503B. What each tier may still make of one drug is in is compounded tirzepatide legal.
Step three: check FDA’s outsourcing list
If the seller names an outsourcing facility, FDA publishes a table of registered facilities[7]. For each one it shows the last inspection, whether a Form 483 was issued, and whether a recall was conducted[7].
FDA notes that a facility drops off the list on January 1 if it does not re-register and pay its annual fee[7]. For state enforcement actions, FDA points readers back to the state board of pharmacy[7].
Step four: treat accreditation as a bonus, not a license
Some compounders hold PCAB accreditation from ACHC, which measures processes against USP compounding chapters such as <795> for nonsterile and <797> for sterile work[6]. It is a useful signal, but it is voluntary: neither section 503A nor section 503B mentions accreditation[3][4].
An online seller may also display a certification seal, which is a different thing again. What a LegitScript seal checks, and how to verify one, has its own guide.
The order to do it in
- Ask the seller which pharmacy compounds and ships your prescription.
- Search that pharmacy in your own state board’s license database.
- If it calls itself an outsourcing facility, find it on FDA’s list.
- Note its last inspection, any Form 483 and any recall.
- Treat an unlisted pharmacy as a reason not to buy.
FDA warns that people who buy compounded drugs online may not know who made them[5]. That is why the first step is a question to the seller, and why a seller that will not name its pharmacy has answered the question for you. A certificate of analysis is a separate check, covered in the peptide COA guide.