How to tell if an online pharmacy is legit (and safe to use)

A five-minute license check separates a real online pharmacy from a website that only looks like one. Here is how to run it, what the law allows, and where the risky corners are: Canadian sites, telehealth prescriptions and compounded weight-loss shots.

17 min readUpdated November 7, 2026By the LegitInformant editorial team

Yes, buying medicine online can be safe, as long as the seller is a licensed pharmacy that wants a real prescription and lets you talk to a pharmacist. The trouble is that the websites most people stumble onto are not those pharmacies. Maybe the counter price for your inhaler or weight-loss pen just made you wince. Maybe an email promised the same pills for a fifth of the cost, shipped discreetly, no doctor needed. That second offer is the one to run from.

Quick answer

An online pharmacy is legit if it passes three checks: it requires a valid prescription for prescription drugs, it holds a license you can confirm with your state board of pharmacy (or your country's regulator), and it has a licensed pharmacist you can reach. Fail any one of them and don't order, whatever the price.

Is it safe to buy medicine online?

From a licensed pharmacy, it's about as safe as walking into your local drugstore. Many mail-order pharmacies are run by insurers, big retail chains or hospital systems, and they buy from the same wholesalers as the shop down the street. The risk comes from everything else that shows up in search results, ads and spam.

The numbers are lopsided. FDA's BeSafeRx program says roughly 35,000 online pharmacies are active at any given time, and, citing the National Association of Boards of Pharmacy (NABP), that only about 5% of them comply with US pharmacy laws and practice standards. That FAQ dates from 2020, and NABP reports have found similar shares for more than a decade. Interpol's Operation Pangea XVII, which ran from December 2024 to May 2025 across 90 countries, seized 50.4 million doses of illicit medicines and led to 769 arrests, according to Global News and the Partnership for Safe Medicines.

Online pharmacies active at any timeabout 35,000FDA BeSafeRx FAQ, citing NABP (2020)
Share that meet US law and practice standardsabout 5%FDA BeSafeRx FAQ, citing NABP (2020)
Websites, social pages, channels and bots shut downabout 13,000Interpol Operation Pangea XVII (2025)
Doses of illicit medicine seized50.4 millionOperation Pangea XVII, 90 countries (2025)

Source: FDA, BeSafeRx frequently asked questions (2020); Partnership for Safe Medicines and Global News reporting of Interpol's Operation Pangea XVII results (2025).

Fake pills are only part of it. Rogue sellers also ship badly stored, expired or foreign versions, and they skip the pharmacist who would notice your new prescription clashes with your blood thinner.

How to check if an online pharmacy is licensed

You need the pharmacy's legal name, its street address and a few minutes with free official lookups. Do it before you upload a prescription or type a card number.

  1. Find the legal name and street address. Check the footer, About page and terms. A legitimate US pharmacy lists a physical US address and phone number; a contact form and a Gmail address are not enough.
  2. Search your state board of pharmacy. FDA keeps a page that links to every state's license database, plus DC, Guam, Puerto Rico and the Virgin Islands. Search the name in your own state, because a pharmacy that ships to you generally needs a license where you live, not only where it is based. FDA's instruction is blunt: if the pharmacy isn't listed, don't use it.
  3. Match the details. The license should be active, and the name and address on the board record should match the website. A real license number pasted onto a site with a different address is a common trick, so compare the details, not just the number.
  4. Check NABP and the web address. NABP runs the .pharmacy domain. Only organizations that pass its accreditation can register one, they must reapply every year, and NABP publishes the accredited sites in a list that banks, ad platforms and patients use. A .com is not a red flag on its own, but then the state board check carries all the weight.
  5. Confirm it wants a prescription. Add a prescription drug to the cart. A legitimate pharmacy asks for your prescriber's details or offers a real consultation first. A checkout with no prescription step ends the test.

For a second opinion on the website itself, paste the address into the LegitInformant website checker to see its age and any scam reports, and look up the drug in the medicine checker so you know the genuine manufacturer and strengths before anything arrives.

Advertisement

Red flags of a rogue online pharmacy

FDA's warning signs are short: no prescription required, prices too good to be true, spam offering cheap medicine, shipping from a foreign country, a location outside the US, and no US state license. Rogue sites rarely show just one. They come as a bundle.

  • "No prescription needed" or "free online consultation" that is really a three-question form for a prescription-only drug.
  • Brand-name drugs at a small fraction of the price at every licensed pharmacy you compare.
  • Payment only by crypto, Zelle, wire transfer or gift card, or the card payment "fails" and you are asked to pay another way.
  • No US street address or phone, or a claimed address that doesn't match the license record.
  • Offers of opioids, benzodiazepines, ADHD stimulants or sleeping pills with no visit at all.
  • Promotion through spam email, WhatsApp, Telegram or social media direct messages.
  • Pharmacy seals, badges or "verified" logos that don't click through to the issuing body's own site.

The product mix tells you who these sellers are targeting. When Health Canada screened parcels during Operation Pangea XVII, sexual enhancement drugs dominated what it intercepted. Embarrassing purchases suit rogue sellers: buyers who skip the doctor rarely complain.

What Canada intercepted in the mailShare of illicit health products by type, Health Canada, Operation Pangea XVII (Dec 2024 to May 2025)
Sexual enhancement medications69 %
Supplements (herbal and dietary)10 %
Veterinary and antiparasitic drugs4 %
Hormones2 %
Antibiotics2 %
Weight-loss drugs1 %
Show as table
ItemValue (%)
Sexual enhancement medications69
Supplements (herbal and dietary)10
Veterinary and antiparasitic drugs4
Hormones2
Antibiotics2
Weight-loss drugs1

Source: Health Canada results reported by Global News (June 2025). Health Canada inspected 19,193 packages and stopped 7,096. Shares are as reported and don't sum to 100.

Buying from a licensed US pharmacy with a valid prescription is entirely legal, and millions of people do it every month through mail-order plans. The legal trouble starts with two things: no prescription, and drugs coming in from abroad.

On imports, FDA's own wording is that it is illegal for individuals to import drugs for personal use, because those products often aren't FDA-approved. The agency's personal importation policy lets staff use discretion in narrow cases: the drug treats a serious condition with no effective treatment available in the US, it isn't promoted to US residents, it doesn't present an unreasonable risk, the quantity is generally no more than a three-month supply, you affirm in writing that it's for personal use, and you can name the US-licensed doctor treating you. A cheaper copy of a drug you could fill at home doesn't fit.

Controlled substances follow tighter rules. FDA says DEA generally makes the call on personal imports of those drugs, and the federal Ryan Haight Act, by default, requires at least one in-person medical evaluation before a controlled drug is prescribed over the internet (the telehealth exception is covered below). State laws stack on top of the federal ones. None of this is legal advice; if you're unsure about a specific drug, ask a pharmacist or a lawyer in your state.

Are Canadian online pharmacies legit, and is it illegal to order from Canada?

Two different things hide behind the words "Canadian pharmacy." One is a real Canadian pharmacy, licensed by a provincial regulator such as the Ontario College of Pharmacists or the College of Pharmacists of British Columbia. The other is a website with a maple leaf on it and no connection to Canada at all. FDA warns that some unsafe sites use fake storefronts to suggest their medicine comes from countries with equivalent safety standards.

Even a genuine Canadian pharmacy shipping to the US falls under FDA's personal importation rules described above, so a routine order is technically an illegal import that FDA has discretion to stop. People still do it, mostly for brand-name drugs where the price gap is large. If you weigh that choice, at least make sure the pharmacy is real.

  • Find the pharmacy's license with the regulator in the province where it says it is located. NAPRA, the national association, lists all 13 provincial and territorial regulators.
  • If the site claims membership of the Canadian International Pharmacy Association (CIPA), check the exact web address in CIPA's own member directory. CIPA states that a logo or membership claim on a website does not establish current certification, because logos get copied.
  • Expect to send a prescription from your own doctor, and note where the parcel ships from. A "Canadian" order that arrives from a third country answers the question.

What about state importation programs? FDA authorized Florida's program under Section 804 of the federal drug law in January 2024, with extension letters through May 2026, and Colorado's in June 2026. These let a state import certain drugs in bulk. They don't let individuals order from Canadian websites.

Advertisement

Can online doctors prescribe medication? What legitimate telehealth looks like

A lot of "online pharmacies" now sell a bundle: a quick telehealth visit, a prescription, and delivery. Done properly, that's legitimate care. Done badly, it's a vending machine with a doctor's name on it.

A real telehealth service uses a clinician licensed in the state where you are sitting, takes a medical history, asks about the other medicines you take, and is willing to say no. For many drugs that means a video or phone visit, not a form. Be suspicious of approval rates that sound like a marketing promise, a clinician you can never message again, and any service that won't name who prescribed your medicine.

Controlled medicines: the rule as of November 2026

A fourth temporary rule from DEA and HHS lets DEA-registered practitioners prescribe Schedule II to V controlled medicines by telemedicine without a prior in-person exam, from January 1 through December 31, 2026. The prescription must be for a legitimate medical purpose and come from a real interactive telehealth visit. The permanent special registration rule proposed in January 2025 is not final. Dates like these can change, so ask your prescriber what applies to you.

The practical point is simple: a site that offers Adderall, Xanax or oxycodone after a checkbox questionnaire isn't using these flexibilities. It's ignoring them.

Compounded semaglutide and tirzepatide: what to know before you order

No category of online drug sales changed faster than GLP-1 weight-loss medicines. While semaglutide (Ozempic, Wegovy) and tirzepatide (Mounjaro, Zepbound) were in shortage, compounding pharmacies could legally make copies. That window has closed, and the grace periods for compounders ran out in 2025.

Dec 19, 2024FDA declares the tirzepatide shortage resolved
Feb 21, 2025FDA declares the semaglutide shortage resolved
May 22, 2025last day of FDA's grace period for 503B outsourcing facilities making semaglutide

Compounding hasn't been banned outright. A 503A pharmacy can still compound for an individual patient when the prescriber documents a significant clinical difference, such as an allergy to an inactive ingredient. But regularly making "essentially a copy" of an approved drug is restricted, and FDA repeated those limits in April 2026. A seller offering compounded semaglutide to anyone with a credit card is describing something the rules don't allow.

FDA's page on unapproved GLP-1 drugs, updated in October 2026, lists the problems it keeps seeing. Some sellers use salt forms such as semaglutide sodium or semaglutide acetate, which FDA calls different active ingredients from the approved drug, with no lawful basis for compounding. Others label vials "for research purposes" or "not for human consumption" and then sell them to consumers with dosing instructions, including for unapproved molecules like retatrutide. FDA has received reports, some involving hospitalization, of patients injecting the wrong dose, and has even found products labeled with pharmacies that don't exist.

Adverse event reports FDA has receivedReports linked to compounded GLP-1 drugs, as of May 31, 2026 (tirzepatide figure is "more than 730")
Compounded semaglutide990 reports
Compounded tirzepatide730 reports
Show as table
ItemValue ( reports)
Compounded semaglutide990
Compounded tirzepatide730

Source: FDA, FDA's concerns with unapproved GLP-1 drugs used for weight loss (content current as of October 2026). FDA notes these events are likely underreported.

If you and your prescriber decide compounding is appropriate, ask which pharmacy will make it, confirm that pharmacy's license with the state board, and make sure the product is semaglutide or tirzepatide base, not a salt. Ask exactly how many units or milliliters equal your dose. Branded pens sold cheaply online are a separate danger, and our guide on how to tell if medicine is fake shows what to look for on the pen and box.

Buying medicine online in the UK, EU, Canada, Australia and Nigeria

The principle is the same everywhere: find the national register and look the seller up yourself rather than trusting a logo on the seller's page. The details differ.

CountryWho licenses the pharmacyWhat to check
United KingdomGeneral Pharmaceutical Council (GPhC); MHRA for medicines and online sellersThe GPhC registration number on the site, then the GPhC online register. If an online prescriber is involved, it should be registered with its own regulator, such as the CQC in England.
EU, Norway, Iceland, LiechtensteinNational medicines authoritiesThe EU common logo, which must click through to that pharmacy's entry on the national list. A logo showing the EU flag instead of a national flag is not authentic.
CanadaProvincial and territorial pharmacy regulatorsThe pharmacy's license with the regulator in its province; Health Canada advises contacting that regulator before ordering.
AustraliaPharmacy boards and state health departments; TGA for medicinesAn Australian pharmacy and pharmacist; overseas orders fall under the TGA personal importation scheme.
NigeriaPharmacists Council of Nigeria (PCN); NAFDAC for product registrationA PCN electronic pharmacy license and a named superintendent pharmacist.

United Kingdom. Since January 1, 2021, sellers in Great Britain no longer have to display the EU common logo (the UK's Distance Selling Logo), though Northern Ireland still requires it. In England, Scotland and Wales, the GPhC register is your main check.

European Union. The common logo has applied since July 1, 2015. Click it, and you should land on the national authority's list with that exact pharmacy on it. The European Medicines Agency's advice is plain: if the retailer isn't on the list, don't continue with the purchase. Some countries also restrict online sales of prescription medicines.

Australia. The TGA personal importation scheme generally allows up to three months' supply for yourself or immediate family, and prescription-only medicine needs a valid Australian prescription. Orders outside the rules can be seized.

Nigeria. PCN's Electronic Pharmacy Regulations 2026 require online sellers and aggregator apps to register and appoint a superintendent pharmacist, limit prescription-only sales to what the prescription authorizes, and keep controlled medicines out of online sales.

Pet medications online: are pet pharmacies safe?

Pet meds follow the same logic, with your vet as prescriber. FDA states that no pharmacy or website can sell you a prescription veterinary medicine without a valid prescription from a licensed veterinarian, so a real pet pharmacy asks for it or verifies it with your clinic.

FDA's A.W.A.R.E. checklist for pet owners is a good habit: ask your vet first, watch for red flags, always check where the pharmacy is licensed through your state board, report problems, and educate yourself. Its red flags include no pharmacist to answer questions, no US address or phone, prices far below your vet's, and medicine that looks different from your pet's usual. FDA warns that suspiciously cheap pet medicine may be an unapproved knock-off, a foreign product or expired. With monthly flea, tick and heartworm preventives, a dud can mean a sick animal months later.

How to pay an online pharmacy and protect your health data

Pay with a credit card, or an HSA or FSA card, at a pharmacy you've verified. A credit card gives you a dispute right if the order never arrives or isn't what you paid for. Our guide to spotting fake online stores walks through how chargebacks work and the time limits. Wire transfers, Zelle, crypto and gift cards give you almost nothing back, which is exactly why rogue pharmacies prefer them; FDA lists "Bitcoin or money transfers only" as a red flag.

Think about your data too. A US pharmacy that bills insurance is generally covered by HIPAA, which limits how it shares your health information. An offshore website is not, and it now holds your name, address, diagnosis and card number: a ready-made profile for the next scam, such as a fake "customs" call about your parcel.

If price is the reason you're shopping online, use safer levers. Ask your pharmacist for the cash price with a discount card, ask your prescriber about a generic or a 90-day mail-order supply, and check whether the drugmaker sells the brand directly through a cash-pay program that still requires a prescription.

The cheapest pill is the one that is actually the drug your doctor prescribed.

After you order: what to check when the medicine arrives

Open the parcel before you need the first dose. The label should show your name, the drug and strength your prescriber chose, the directions, the prescriber, and the pharmacy's name and phone number. If anything seems off, such as a foreign-language box, a different pill color, a broken seal or a pen that arrived warm, don't take it. Call the pharmacist, or ask your local pharmacy for a second look.

For the full inspection, with pill imprints, lot numbers and verification codes, use our guide on how to tell if medicine is fake. If your medicine turns out to be part of a recall, the medicine recall search shows the affected lots. And if you paid a fake pharmacy by bank transfer or a payment app, follow the steps in what to do after sending money on Zelle or Cash App today, because the first hours matter most.

Frequently asked questions

Can I get in trouble for buying medicine online without a prescription?

Prosecutors rarely go after individual buyers of ordinary prescription drugs, but the risk is not zero. Customs can seize and destroy the parcel, and you lose the money. Controlled substances are different: ordering opioids, benzodiazepines or stimulants without a valid prescription can be a crime under federal and state law. The bigger danger is medical. A site that skips the prescription also skips the safety checks. A lawyer can advise on your specific case.

Is Amazon Pharmacy legit?

Amazon Pharmacy works like a conventional US mail-order pharmacy: it fills prescriptions sent by a licensed prescriber, and it does not sell prescription drugs without one. You can confirm its license for your state with the same state board lookup you would use for any other pharmacy. The bigger risk on Amazon is third-party marketplace listings for supplements and over-the-counter products, which are not the pharmacy service.

Are online pharmacies cheaper than my local pharmacy?

Sometimes. Licensed mail-order pharmacies, cash-price discount programs and drugmakers' own direct-sale programs can undercut a retail counter, especially for 90-day supplies of generics. What is not real is the price that sits far below every licensed competitor for a brand-name drug. Legitimate pharmacies buy from the same wholesalers, so a price that is a fraction of everyone else's usually means the product did not come from that supply chain.

What is a .pharmacy website?

A .pharmacy address is a web domain run by the National Association of Boards of Pharmacy (NABP). An organization can register one only after passing NABP accreditation, and it must reapply every year to keep it. That makes the ending a useful positive signal for US buyers. It is not the only sign of a legal pharmacy, though: many licensed pharmacies use a .com address, so check the state board license either way.

Can customs seize medicine I ordered online?

Yes. In the US, FDA and Customs can refuse and destroy drug shipments that are unapproved, look commercial, or appear to present a health risk, and the seller rarely refunds you. Other countries are stricter. In Australia, for example, prescription-only medicine imported without a valid Australian prescription can be seized at the border with no compensation. Assume any overseas order of a prescription drug may never arrive.

Is it safe to buy Viagra or Cialis online?

It can be, through a licensed US pharmacy or a telehealth service where a clinician reviews your history and blood pressure medicines before prescribing. Sexual enhancement products are also the most common target of illegal sellers. In Canada's share of Operation Pangea XVII, about 69% of intercepted products were sexual enhancement medications. Skip any site that sells them with no prescription or no pharmacist to call.

Is it legal to order medicine from India?

Not as a general rule. FDA says it is illegal for individuals to import drugs for personal use, because foreign versions are usually not FDA-approved. FDA may use discretion for a three-month personal supply of a drug for a serious condition with no US treatment, but routine orders of cheaper generics do not fit that policy and can be refused at the border. India makes many legitimate generics; the problem is the unregulated route to your door.

Do online pharmacies accept insurance?

Licensed US online pharmacies usually do, including mail-order pharmacies run by insurers and pharmacy benefit managers. Ask for the price both with your insurance and as a cash price with a discount card, since the cash price is sometimes lower. A site that refuses insurance, takes only cash-style payments and also ships without a prescription is not a pharmacy your plan would ever recognize.

What should I do if an online pharmacy sends the wrong medicine?

Do not take it. Call the pharmacy and ask to speak to the pharmacist on duty; a licensed pharmacy must have one. Keep the package and label, and ask your prescriber or a local pharmacist to compare it with what you were prescribed. If a licensed pharmacy made a dispensing error, you can also file a complaint with that state's board of pharmacy. If the seller is unlicensed, report the website to FDA.

Can online doctors prescribe antibiotics or sleeping pills?

Antibiotics and most everyday prescriptions are not controlled substances, so a licensed clinician can prescribe them after a proper telehealth visit, subject to state rules. Many sleeping pills, anxiety medicines and ADHD drugs are controlled. Those fall under the DEA's temporary telemedicine rule, which runs through December 31, 2026. Expect more questions, a video visit and closer follow-up for controlled drugs, and be wary of any service that skips them.

How do I report a fake online pharmacy?

In the US, use FDA's form for reporting unlawful sales of medical products on the internet, and tell your state board of pharmacy. NABP also takes reports through its Report a Site form. In the UK, report sellers to the MHRA. If you were charged, call your card issuer the same day. If you took a product and felt unwell, tell your doctor and report the side effect through FDA MedWatch or your country's scheme.

Sources

  1. FDA: BeSafeRx frequently asked questions (2020)
  2. FDA: Locate a state-licensed online pharmacy (2024)
  3. FDA: Personal importation (2025)
  4. FDA: Section 804 importation program policies and authorizations (2026)
  5. DEA and HHS: Fourth temporary extension of COVID-19 telemedicine flexibilities for prescription of controlled medications, Federal Register (2025)
  6. FDA: FDA's concerns with unapproved GLP-1 drugs used for weight loss (2026)
  7. FDA: FDA clarifies policies for compounders as national GLP-1 supply begins to stabilize (2026 update)
  8. NABP: .Pharmacy registry (2026)
  9. Partnership for Safe Medicines: Operation Pangea XVII nets $65 million in unapproved and counterfeit medicines (2025)
  10. Global News: Health Canada advisory on online health products after Operation Pangea XVII (2025)
  11. CIPA: Websites not certified or authorized by CIPA (2026)
  12. GOV.UK (MHRA): Register for the EU common logo (2025)
  13. European Medicines Agency: Buying medicines online
  14. FDA: Need pet meds? Protect yourself and your pet, be website A.W.A.R.E. (2024)

Figures are the latest available from each source at the time of writing. We review guides when official data or rules change. Spotted an error? Tell us.