Compounded medications are not FDA approved. FDA does not review compounded medications for safety, effectiveness, or quality before they are marketed.
Compounded GLP-1 Guidepricing database · evidence ledger

How to verify a compounding pharmacy, step by step

Before paying for compounded semaglutide or tirzepatide, get the dispensing pharmacy's exact legal name and home state from the provider, confirm its license on the home-state board of pharmacy website, confirm it holds a nonresident license for your state, check FDA's outsourcing-facility list if 503B status is claimed, and search FDA's warning-letter and recall databases for the pharmacy's name. The whole check takes about fifteen minutes and uses only free government sources.

The workflow

Terminology that should end the conversation: any seller calling its pharmacy "FDA approved," "FDA licensed," or its compounded product a "generic" version of Wegovy, Ozempic, Zepbound, Mounjaro, or Rybelsus is describing something that does not exist.

Understanding what a license does and doesn't prove

A state pharmacy license means a pharmacy has met its state board's requirements to operate and dispense. It is meaningful — an unlicensed operation is a hard stop — but it proves less than sellers imply. A license does not certify any individual product's quality, does not equal FDA approval, and does not by itself tell you whether the pharmacy compounds sterile injectables to standard. That's why license verification is the floor of due diligence, not the ceiling: you confirm the license exists and is active and current, then layer the 503B, enforcement, and label checks on top.

Checking a state pharmacy license in detail

Every U.S. state board of pharmacy publishes an online license-lookup tool, though the interfaces vary. Search the pharmacy's exact legal name — not its consumer brand, which often differs — and confirm three things: the license is active (not expired, suspended, or surrendered), the license type covers what the pharmacy is doing (retail, sterile compounding, nonresident), and the expiration date hasn't passed. Note the license number for your records. If the pharmacy operates a doing-business-as name, verify both. A pharmacy shipping to you from out of state raises the second required check below, which patients most often miss.

The nonresident-license check most people skip

When a pharmacy in one state ships medication to a patient in another, most states require it to hold a nonresident (out-of-state) pharmacy license in the patient's state. This is the single most-overlooked verification step, and it matters because a pharmacy shipping into a state where it isn't licensed may be operating outside that state's oversight entirely. Search your own state board's lookup for the dispensing pharmacy's legal name. If it isn't there, ask the provider directly how the pharmacy is authorized to ship to your state — a legitimate operation will have an answer.

503A and 503B, and the limits of FDA registration

A 503A pharmacy compounds patient-specific prescriptions under state-board oversight; a 503B outsourcing facility registers with FDA, may compound larger batches under cGMP, and is subject to FDA inspection. The 503B pathway carries more federal oversight, which is a genuine quality signal — but "FDA-registered" is precisely where marketing misleads. Registration is a facility status that says FDA knows the facility exists and can inspect it; it is not FDA review or approval of any product the facility makes. No compounded product, from either pathway, is FDA approved. If a provider claims 503B, confirm the facility on FDA's registered-outsourcing-facilities list; if it claims 503A, the state-board license is your primary check.

Inspection and enforcement records

Beyond licensing, a pharmacy's compliance history is public in several places worth searching. FDA's warning-letter database records formal notices of significant violations. FDA's recall listings show products withdrawn for quality or safety problems. For 503B facilities, FDA inspection observations (Form 483s) are sometimes publicly available and document what inspectors found. Your state board's disciplinary-action records show license suspensions, fines, and consent orders. Search the pharmacy's legal and DBA names across all of these. An absence of findings isn't a guarantee of quality — enforcement is reactive and incomplete — but a present finding is a concrete reason to ask hard questions or choose differently.

Verifying the provider-pharmacy relationship

The provider you pay and the pharmacy that dispenses are usually different companies, and the link between them is where transparency most often breaks down. A provider that names one dispensing pharmacy per order is easiest to verify. A provider that names a conditional list of possible partners — as several do — means you can't know in advance which pharmacy's quality history applies to you, so ask which one will fill your specific order before paying. A provider that names no pharmacy at all cannot be verified on this dimension, which is itself a finding. Whatever the provider claims about its pharmacy, confirm it against the pharmacy's own records rather than taking the provider's marketing at face value.

Reading warning letters and recalls in context

When you find an enforcement record, interpreting it correctly matters as much as finding it. An FDA warning letter is a formal notice that the agency believes it found significant violations; it's serious, but it's an allegation-and-notice stage, not a final adjudication, and a responsible pharmacy may have corrected the issues since. A recall indicates a specific product was withdrawn — read what was recalled and why, because a recall of an unrelated product line carries different weight than one involving the medication you'd receive. A Form 483 lists an inspector's observations at the end of a facility inspection; it flags concerns but isn't itself a finding of wrongdoing. State-board disciplinary actions range from minor administrative issues to serious misconduct. The point isn't that any enforcement record automatically disqualifies a pharmacy — it's that a present record is a concrete reason to read the details, ask the provider directly, and weigh whether the issue touches your product. Conversely, a clean record reflects the absence of caught problems, not proof of quality, because enforcement is reactive and databases lag.

Consumer checklist

Before paying: get the dispensing pharmacy's exact legal name and state. Confirm an active home-state license and note the number. Confirm a nonresident license for your state, or get the provider's explanation. Confirm 503B claims on FDA's list. Search FDA warning letters, recalls, and your state board's discipline for the name. Ask which ingredient form and concentration the product uses. On delivery: match the label — ingredient, strength, concentration, quantity, beyond-use date, storage, and pharmacy name — to your prescription and to what you verified. Keep the packaging until you've confirmed everything.

Common misleading claims and what they actually mean

"FDA-registered pharmacy" means the facility is on an FDA list and inspectable — not that any product is approved. "FDA-approved facility" is not a real status for a compounder; approval applies to products, not facilities, and no compounded product is approved. "Pharmaceutical-grade" and "third-party tested" are unregulated marketing terms unless backed by documentation you can inspect. "Same as Ozempic/Wegovy" or "generic semaglutide" is false — compounded products are neither approved nor generic. "LegitScript certified" is a real and positive certification, but confirm it in LegitScript's own registry rather than trusting the provider's badge. Learning to translate these phrases is most of what protects a consumer here.

Limitations of self-verification

These checks reduce risk; they don't eliminate it. Public databases lag real events, so a recent problem may not yet appear. Enforcement is reactive and under-resourced, so a clean record reflects the absence of caught problems, not proven quality. License lookups confirm status, not the quality of any specific batch you receive. And none of this addresses whether a compounded product is clinically appropriate for you, which only a licensed prescriber who knows your history can judge. Self-verification is necessary and empowering, but it is a floor beneath a clinical decision, not a substitute for one. Use these checks to rule out the clearly untrustworthy, then bring anything that passes to your prescriber for the judgment only they can make.

Frequently asked questions

Where do I find my state's pharmacy license lookup?

Search for your state's "board of pharmacy license verification" — every state board runs one, usually free and public. You'll typically search by pharmacy name or license number. For a pharmacy shipping to you from another state, you need to check both its home-state board and your own state's board for a nonresident license.

Is an FDA-registered outsourcing facility safer than a 503A pharmacy?

A 503B outsourcing facility operates under cGMP and FDA inspection, which is more federal oversight than a 503A pharmacy has. That's a genuine quality signal, but it isn't a guarantee — 503B facilities have received warning letters and issued recalls — and registration is never product approval. A well-run 503A pharmacy is also a legitimate, lawful source for patient-specific compounding. Verify the specific facility either way rather than relying on the category label.

What if the provider won't tell me which pharmacy fills my order?

Treat that as a meaningful red flag. You can't verify a pharmacy you can't name, and the dispensing pharmacy determines your product's formulation, concentration, and quality history. A legitimate provider will tell you which pharmacy will fill your specific order. If it won't, or gives only a vague list of possibilities without confirming yours, consider a provider that's more transparent.

Does a state license mean the product is safe?

No. A license confirms the pharmacy is authorized to operate; it doesn't certify any individual product's quality or equal FDA approval. Licensing is the necessary floor of verification, not proof of a safe product. Layer the 503B, enforcement, and label checks on top, and keep a licensed prescriber involved.

How often should I re-verify?

Check before your first order, and again if the provider switches your dispensing pharmacy or if you learn of an enforcement action. Licenses and compliance status change over time, so a verification isn't permanent. Our pharmacy database tracks disclosed facilities on a monthly recheck cadence, but your own order's pharmacy is the one that matters most to confirm.

A pharmacy has a warning letter — should I avoid it entirely?

Not necessarily, but read the details before deciding. A warning letter is an allegation-and-notice stage, not a final judgment, and a responsible pharmacy may have corrected the issues. What matters is what the letter concerns, how serious it is, whether it touches the product you'd receive, and how the pharmacy responded. A present record is a strong reason to ask hard questions and possibly choose differently; it isn't automatically disqualifying, and its absence isn't proof of quality.

Can I verify the pharmacy myself, or should I trust the provider's certification?

Verify it yourself. A provider's badge — LegitScript certified, "accredited," "FDA registered" — should be confirmed in the certifier's or regulator's own registry, not taken at face value, because badges can be stale, misapplied, or misstated. Self-verification through state boards and FDA lists takes about fifteen minutes and tells you what's true now rather than what a marketing page claims. Trust, but confirm at the source.

Tracked pharmacy records live in the pharmacy database. Background on 503A vs 503B is in the safety guide and the 503A-vs-503B guide.