Is a Compounding Pharmacy Legit? 7-Point Checklist

Quick Answer: You can do a meaningful amount of vetting yourself before trusting any compounding pharmacy: confirm its state license, look for PCAB accreditation, ask for a batch-specific Certificate of Analysis (COA), and find out where the active ingredient comes from. Important context first: compounded semaglutide is not FDA-approved and is not an equivalent or interchangeable version of Ozempic or Wegovy. A state license or PCAB accreditation tells you about the facility’s oversight; neither means the medication itself is FDA-approved. Verifying a pharmacy reduces risk, but it does not eliminate it. This article is educational and is not medical advice.

Quick Facts: Vetting a Compounding Pharmacy

Boxed Warning — Thyroid C-Cell Tumors. Ozempic’s label and Zepbound’s label describe thyroid C-cell tumors in rodents; whether these drugs cause these tumors in humans is unknown. Both products are contraindicated — must not be used — in people with a personal or family history of medullary thyroid carcinoma (MTC) or Multiple Endocrine Neoplasia syndrome type 2 (MEN 2). These are product-label warnings, not evidence that a compounded preparation has the same safety profile. Tell your prescriber about your medical and family history; compounding does not remove ingredient-related risks. This is not a complete list of warnings or contraindications.

• 🔍 You can verify a lot yourself: State board of pharmacy lookups are public and free to search, and NABP provides additional online pharmacy verification resources.
• 📋 Compounding framework: Ask whether the compounder operates under section 503A or is registered with FDA under section 503B; a state license alone does not establish compliance with either framework.
• 🏅 PCAB accreditation: A voluntary, third-party quality credential. Useful signal; not FDA approval.
• 🧪 Certificate of Analysis (COA): Check the material, lot, actual tests, results and limits; do not assume it covers the finished vial or every quality attribute.
• 🌍 API sourcing: Where the active pharmaceutical ingredient comes from matters; “research use only” material is a red flag.
• ⚖️ Not FDA-approved: FDA does not review compounded semaglutide for safety, effectiveness and quality before marketing; it is not an FDA-approved generic.
• 🩺 A clinical decision: Whether a compounded option is appropriate for you is decided with a licensed prescriber, not by a checklist alone.

Why This Matters More Now

FDA announced resolution of the semaglutide injection shortage on February 21, 2025. Its April 1, 2026 policy update explains restrictions on essentially copying commercially available drugs under section 503A, including the documented prescriber determination of a significant difference for an identified patient. It separately describes the bulk-substance restrictions under section 503B. A prescription or customized label alone does not establish that all compounding conditions are met. Ask the prescriber and pharmacist which conditions apply to the proposed preparation; this dated history is not a live shortage-status check.

The words “compounded semaglutide” do not establish who made a product, what it contains, or whether it meets applicable requirements. Check the actual pharmacy and ingredient records using the steps below.

One point up front, because it is the most common misunderstanding: compounded semaglutide is not FDA-approved, and it is not interchangeable with Ozempic or Wegovy. A state license or PCAB accreditation confirms that a facility is subject to certain oversight; neither is FDA approval of the medication itself. For more on that distinction, see our guide to whether compounded semaglutide is FDA-approved. Vetting a pharmacy reduces certain risks. It does not eliminate them.

1. State Licensure: How to Verify It Yourself

Every legitimate pharmacy in the United States holds a license from a state board of pharmacy. This is the most basic credential, and it is one you can check yourself in a few minutes, for free.

How to Look It Up

1. Get the pharmacy’s legal name and state. Ask your telehealth provider which pharmacy dispenses or compounds your medication, and in which state it is located. A provider that will not tell you is itself a warning sign.
2. Find that state’s board of pharmacy. Use the NABP directory of state boards of pharmacy to find the board’s official website and license lookup. Most state boards publish a searchable online license verification tool.
3. Search by pharmacy name or license number. Confirm the license is active and in good standing, and that the name and address match what your provider told you.
4. Check non-resident licensing. A pharmacy that ships to you across state lines generally also needs a non-resident license in your state. You can often verify this with your own state’s board.
5. Use the NABP as a backstop. The National Association of Boards of Pharmacy (NABP) runs verification resources, including its .pharmacy Verified and Safe Pharmacy programs, that can help you confirm whether an online pharmacy is legitimate.

A current, in-good-standing license confirms the pharmacy is a real, regulated entity subject to its state board. That is necessary, but it is not the whole picture: licensure does not, by itself, tell you how a specific compounded preparation was tested, where the active ingredient came from, or whether the FDA has reviewed the medication (it has not).

2. 503A Compounding Pharmacies: What Oversight Applies

Section 503A is a federal compounding framework, not a separate FDA pharmacy license. It covers qualifying compounding by pharmacists in state-licensed pharmacies or federal facilities, and by licensed physicians. A patient-specific prescription is required; limited preparation in anticipation of prescriptions is allowed under specified conditions. See FDA’s comparison of sections 503A and 503B.

Factor	503A (Traditional Compounding)
Primary pharmacy oversight	State board; FDA also has inspection and enforcement authority
Prescription basis	Identified patient, with limited anticipatory compounding under applicable conditions
Quality requirements	Qualifying preparations are exempt from federal current good manufacturing practice requirements; other applicable requirements remain
Verification path	Check the state license and ask the board about applicable compounding requirements; the license alone does not prove 503A compliance

FDA’s compounding Q&A explains these oversight distinctions. Federal prohibitions on insanitary conditions still apply. Ask the state board which compounding standards and inspection requirements apply to the pharmacy and preparation.

A different framework, section 503B, covers registered outsourcing facilities. They are subject to current good manufacturing practice requirements and FDA inspections. They can compound without obtaining patient-specific prescriptions, subject to other conditions; this does not authorize prescription-free retail sales to patients. Check FDA’s outsourcing-facility register, including its inspection and action information. Registration does not establish that a particular drug can legally be compounded or that it is FDA-approved.

Neither framework makes a compounded preparation FDA-approved. Discuss the particular medication and clinical need with your prescriber and pharmacist.

3. PCAB Accreditation

PCAB (the Pharmacy Compounding Accreditation Board, part of ACHC) is a voluntary, third-party accreditation program for compounding pharmacies. To earn it, a pharmacy submits to an external review of its compounding practices, facilities, documentation, and quality systems against established standards, and to periodic reaccreditation.

Why it is a useful signal: accreditation is voluntary and adds an independent layer of scrutiny beyond the minimum a pharmacy needs to hold its license. A pharmacy that has chosen to pursue and maintain PCAB accreditation has invited an outside body to inspect how it works. Use ACHC’s organization directory to check the pharmacy’s claimed accreditation, and match the location and compounding service to the certificate. Ask ACHC to clarify any mismatch.

What it does not mean: PCAB accreditation is a quality credential for the facility and its processes. It is not FDA approval of any medication the pharmacy compounds, and it does not make compounded semaglutide equivalent to an FDA-approved product. Treat it as one positive data point among several, not as a guarantee.

4. Certificate of Analysis (COA) and Third-Party Batch Testing

A COA reports results for identified material or a batch. It may describe a raw ingredient rather than the finished medication. Ask the pharmacy which it covers and how it relates to your prescription. FDA’s API guidance, section 11.4 describes ingredient certificates; it is not a checklist of tests every compounded vial must have.

What to Check on a COA

• Material and lot: Is this the ingredient or finished preparation? Ask the pharmacy to explain traceability.
• Tests and limits: Which tests were performed, using which methods and acceptance limits?
• Actual results: Does each result meet its stated limit? Do not assume that a certificate reports passing results.
• Issuer and date: Who performed the analysis, who authorized the report, and when?

Ask whether potency, impurities, sterility and endotoxin were evaluated for the finished injectable, and which documentation addresses each. A purity result does not establish that a sterility test occurred. An outside laboratory’s name alone does not establish suitable methods or reliable results.

Testing is part of quality assurance. FDA’s component-control discussion emphasizes prevention and manufacturing controls rather than final testing alone. A COA does not confer FDA approval, establish clinical effectiveness, or guarantee the safety of your vial.

5. Where the API Is Sourced

The active pharmaceutical ingredient (API) supplies the drug’s intended pharmacologic activity. Ingredient identity, manufacturing controls and traceability matter; country of origin alone does not establish quality or legality.

What to Ask and Look For

• Ingredient identity: Ask which form of semaglutide is used. FDA warns that semaglutide sodium and acetate differ from the ingredient in approved drugs and should not be used in compounding. See FDA’s GLP-1 safety concerns.
• Manufacturer and documentation: Ask the pharmacy to identify the API manufacturer and explain its sourcing records and ingredient COA. FDA’s statutory comparison describes registered-manufacturer, COA and substance-eligibility conditions; registration is only one requirement.
• Registration limits: FDA explains that establishment registration and drug listing do not mean a product is approved or that the submitted information has been verified. An NDC listing is not an approval certificate.
• Imported ingredients: FDA’s API import requirements address foreign manufacturers, registration, listing, labeling and compounding conditions. A compliant imported ingredient is different from medication bought directly from an unverified overseas seller.
• Research-only products: Do not buy products marketed for self-treatment while labeled for research or not for human use. FDA warns that such GLP-1 products may be harmful.

Ask the pharmacist how the ingredient lot connects to the finished preparation. A supplier’s location, registration number or purity claim alone cannot answer that question. For more background, see how semaglutide works and is sourced. Discuss the specific preparation and FDA-approved alternatives with your prescriber.

6. Red Flags (In Our Judgment)

The signals below are, in our opinion, reasons to slow down and ask more questions. They are judgment calls, not a scientific safety test, and the absence of these flags does not guarantee a product is safe, effective, or appropriate for you. Use them as prompts for caution, not as a green light.

What you see	Why we’d treat it as a warning sign
A price that seems too good to be true	In our judgment, a price far below what a licensed pharmacy could plausibly charge can signal gray-market or “research-only” sourcing. Price alone does not confirm quality or legality, but a suspiciously low number warrants questions about the source.
No way to reach a pharmacist	Legitimate pharmacies provide pharmacist access for questions. No phone, no named pharmacy, no one to ask, in our view, is a reason for concern.
Testing documentation cannot be explained	Ask what evidence covers the finished preparation. A missing consumer-facing COA does not establish that no testing occurred; an unexplained document also does not establish quality.
”Research use only” or “not for human use” labeling	FDA warns against GLP-1 products sold to consumers for self-treatment under these labels. Do not treat research labeling as evidence of pharmaceutical quality.
Unverified seller or supply chain	Ask who made and dispensed the medication. Foreign manufacture alone does not establish illegality; an unverifiable seller or ingredient source warrants concern.
No prescription required	Semaglutide is a prescription medication. Selling it without a prescription is unlawful and removes clinical oversight.
Claims of being “FDA-approved” or “the same as Ozempic”	Compounded semaglutide is not FDA-approved and is not interchangeable with the brand. A seller that claims otherwise is, in our view, either uninformed or misleading you.

If a source raises these concerns, you can report it to the FDA through its MedWatch program or to the relevant state board of pharmacy.

7. Questions to Ask Before You Buy

If you and your clinician are considering a compounded option, these are reasonable questions to put to any provider or pharmacy. A legitimate operation should answer them readily.

1. Which pharmacy will dispense or compound my medication, and in what state? You need a name and location to verify anything.
2. Who compounds the medication, and under which framework? Ask whether it is section 503A or a registered 503B outsourcing facility; verify the relevant license or registration and discuss your prescription with the dispensing pharmacist.
3. Is the pharmacy licensed in good standing, including in my state? You can confirm this independently on the state board lookup.
4. Is the pharmacy PCAB-accredited? If so, can you share the current certificate?
5. What testing documentation covers the finished preparation, and can you explain its scope, results and lot traceability?
6. Where does the active ingredient come from, and is it pharmaceutical-grade (not “research use only”)?
7. Who is the prescribing clinician, and what medical review happens before prescribing?

Notice what is not on this list: questions about how to dose the medication yourself. Dosing and titration are decisions for your prescriber, made with knowledge of your medical history; they are not something to figure out from a vendor or a blog. For pricing, ask the provider directly or see the product page rather than relying on a quoted “deal.”

The 7-Point Verification Checklist

A printable summary you can work through before trusting any compounding pharmacy. Completing every item reduces risk; it does not eliminate risk, and it does not make compounded semaglutide FDA-approved.

#	Check	How to verify
1	State license active and in good standing	State board of pharmacy license lookup (free, public)
2	Compounder and framework identified	Check the state license or FDA outsourcing-facility registration as applicable; neither alone proves compliance for a particular preparation
3	PCAB accreditation (if claimed)	Match the location and compounding service in ACHC’s directory and the current certificate
4	Testing documentation explained	Identify ingredient versus finished-product testing, actual results and traceability to the dispensed lot
5	API meets applicable regulatory requirements and is documented	Ask about sourcing; reject “research use only” material
6	No red flags present	Pharmacist access, prescription required, no “FDA-approved”/equivalence claims, no suspicious pricing
7	Licensed prescriber oversight	Confirm a clinician reviews your history and issues a prescription

How Boca Health Vets Its Partner Pharmacies

Boca Health works with WellSync and other state-licensed 503A compounding pharmacies in the WellSync network. Medications are compounded patient-specifically pursuant to a valid prescription, prescribing is overseen by licensed clinicians, and you can request batch testing documentation from the dispensing pharmacy.

• ✅ State-licensed 503A compounding pharmacies: WellSync and other state-licensed 503A pharmacies in the WellSync network, compounding patient-specifically pursuant to valid prescriptions.
• ✅ Prescriber oversight: A licensed clinician reviews your medical history before any prescription is issued.
• ✅ Batch testing documentation: You can request Certificate of Analysis information for the medication you receive from the dispensing pharmacy.
• ✅ Transparent sourcing: We can speak to which pharmacies are used and how the medication is handled.

We want to be clear about what this does and does not mean. Sourcing from licensed pharmacies with prescriber oversight and batch testing reduces certain risks compared with unverified sellers. It does not eliminate risk, and it does not make compounded semaglutide FDA-approved or interchangeable with Ozempic or Wegovy. Whether a compounded option is appropriate for you is a clinical decision you make with a licensed clinician.

See Boca Health’s sourcing and pricing →

FAQ

How do I know if a compounding pharmacy is legitimate?

Start with its state license: search your state board of pharmacy’s license lookup and confirm the pharmacy is active and in good standing, including a non-resident license in your state if it ships to you. Then look for PCAB accreditation, ask for a batch-specific Certificate of Analysis, and confirm there is licensed prescriber oversight. Each step adds confidence. None of them makes compounded semaglutide FDA-approved, and vetting reduces but does not eliminate risk.

What is a Certificate of Analysis (COA) and should I ask for one?

Ask for the available testing documentation and have the pharmacist explain it. Check whether it concerns the ingredient or finished preparation, what tests and limits it lists, and how the lot relates to your medication. A certificate is not a safety guarantee.

What are red flags of a fake or shady compounded semaglutide supplier?

In our judgment, warning signs include a price that seems too good to be true, no way to reach a pharmacist, unexplained testing documentation, products labeled “research use only” or “not for human use,” an unverified seller or supply chain, no prescription required, and claims that the product is “FDA-approved” or “the same as Ozempic” (it is neither). These are judgment calls meant to prompt caution and questions, not a safety guarantee; their absence does not prove a product is safe.

Is PCAB accreditation important?

It is a useful, positive signal. PCAB accreditation means a pharmacy voluntarily submitted its compounding practices and quality systems to independent, third-party review. It adds a layer of scrutiny beyond the minimum required to hold a license. That said, it is a credential for the facility and its processes, not FDA approval of any medication, so treat it as one data point among several rather than a guarantee.

How can I avoid counterfeit semaglutide?

Buy only through a licensed pathway: a licensed clinician who issues a prescription and a licensed U.S. pharmacy that can document its sourcing and batch testing. Verify the pharmacy’s state license yourself, ask which testing documentation covers the finished preparation and how its lot is traced to your medication, and avoid unverified sellers, prescription-free offers and research-only products marketed for self-treatment. FDA has found fraudulent labels naming real pharmacies that did not make the product; contact the named pharmacy through independently verified details if the source is uncertain. These steps lower your risk of receiving a counterfeit or substandard product, but no consumer step can fully guarantee a compounded medication’s quality, and compounded semaglutide remains not FDA-approved.

Considering a Compounded Option?

If you and a licensed clinician decide a compounded option is appropriate for you, Boca Health works with vetted, licensed U.S. pharmacies through WellSync, includes prescriber oversight, and lets you request batch testing documentation from the dispensing pharmacy. Compounded semaglutide is not FDA-approved; whether it is right for you is a clinical decision.

See Boca Health’s sourcing and pricing →

✓ Licensed U.S. pharmacies | ✓ COA available on request | ✓ Licensed prescriber oversight

Related Articles

• Compounded Semaglutide Safety: What to Know
• Is Compounded Semaglutide FDA-Approved?
• Complete Guide to Semaglutide
• Microdosing Semaglutide: What to Know

---

Medical Disclaimer: This article is for educational purposes only and does not constitute medical or legal advice. Compounded medications are not FDA-approved and should only be used under the supervision of a licensed healthcare provider. Individual safety and effectiveness may vary, and reports of patient experience are anecdotal. Always verify the quality and source of any compounded medication, and discuss FDA-approved options with your clinician before starting treatment.

Regulatory Disclaimer: Compounded semaglutide and tirzepatide are not FDA-approved. FDA distinguishes compounded drugs from approved generics, which must meet approval requirements including therapeutic equivalence. Lack of approval does not establish that no testing has ever occurred; a testing claim also does not establish FDA-reviewed equivalence. A pharmacy license or facility registration does not approve the medication. Consult the linked regulatory sources and the prescribing and dispensing professionals for requirements applicable to a particular preparation.