How to Tell If an Online Pharmacy Is Legitimate

Medication arrives by mail for millions of people, whether through a telehealth service, an insurer’s mail-order programme or a pharmacy’s own website. The convenience is real. So is the risk: the National Association of Boards of Pharmacy (NABP) has spent years documenting websites that sell prescription drugs illegally, including ones that look professional.

You do not need special knowledge to protect yourself. You need a few minutes and the checks below.

Red flags that should end the visit

• No prescription required for a prescription-only medicine.
• No physical address or a pharmacy located outside the country with no US licence.
• No pharmacist you can contact.
• Prices far below every other pharmacy.
• Spam emails or social media messages pushing the site.

Check one: the state licence

Every pharmacy that dispenses to you must be licensed in the state where you live, even if it ships from another state. State boards of pharmacy publish licence lookups online. Search the pharmacy’s legal name, which appears on your prescription label or its website.

You can also look up a pharmacy’s National Provider Identifier in the federal NPI Registry, which lists the organisation’s legal name, address and authorised official.

Check two: NABP accreditation

NABP, whose members are the state boards of pharmacy, runs a Digital Pharmacy Accreditation programme for pharmacies that serve patients online. According to NABP, applicants must hold active licences in every US jurisdiction where they operate, employ a licensed pharmacist in charge and maintain Healthcare Merchant Accreditation, including an active .pharmacy domain. Accreditation lasts three years, and NABP lists accredited pharmacies on its website.

Check three: LegitScript certification

LegitScript certifies healthcare merchants, including pharmacies, against standards that include proper licensing, dispensing only on a valid prescription, privacy protection and transparent disclosures. Google, Meta, Microsoft and major card networks recognise the certification, which means an uncertified pharmacy may be unable to advertise on those platforms.

Check four: the telehealth company’s pharmacy

If you get medication through a telehealth service, the pharmacy may be a separate company. Ask which pharmacy fills your prescription and check it the same way.

Precision Medicine, a pharmacy in Bellmore, New York, fills prescriptions for telehealth companies, sometimes under the telehealth brand’s own packaging. The company says it holds NABP accreditation and LegitScript certification, and its name, address and authorised official appear in the NPI Registry. That is the kind of trail a patient should be able to follow for any pharmacy.

If a medication is compounded

Compounded medications are not FDA-approved, and the FDA does not review them for safety, effectiveness or quality before they reach patients. If your medication is compounded, confirm the pharmacy is licensed in your state and ask what quality standards it follows.

The five-minute rule

Before you pay, spend five minutes: find the pharmacy’s legal name, check your state board’s licence lookup, and search NABP’s accredited list. A legitimate pharmacy passes all three easily. A rogue one usually fails the first.