Somewhere between "my insurance denied it" and "a site on Instagram will ship it for $150 a month," a lot of people end up asking the same quiet question: where is it actually safe to get this medication? The honest answer changed substantially between 2024 and 2026 — the brand shortages that made compounded versions widely available are officially over, the FDA has been steadily tightening the rules, and counterfeits have shown up inside the legitimate U.S. supply chain more than once. Here's a plain-language map of the sourcing landscape: what's fully legitimate, what compounding actually is and where it stands legally, and the red flags that separate a licensed pharmacy from a product you should never inject.
The channels at a glance
The same drug can reach you through half a dozen different channels, and they aren't interchangeable — they differ enormously in cost, hassle, and, above all, safety. Here's the full spectrum, ordered roughly from most-established to most-risky; the sections that follow go deeper on the legitimate routes, on compounding, and on the danger zone.
- Retail or community pharmacy. A chain like CVS or Walgreens, a grocery-store counter, or a local independent fills a brand-name prescription (Ozempic, Wegovy, Mounjaro, Zepbound) with the FDA-approved pen. Cost tracks your insurance; list prices without coverage run high.
- Mail-order or specialty pharmacy through your plan. Many insurers steer maintenance medications to a mail-order or specialty pharmacy run by their pharmacy benefit manager (PBM), often in 90-day supplies — sometimes optional, sometimes required for coverage. Same FDA-approved product, delivered to your door, usually with the lowest copay once you're stable on a dose.
- Manufacturer-direct self-pay. LillyDirect and NovoCare Pharmacy sell certain FDA-approved, brand-name products — including lower-priced single-dose vial options for some — straight to cash-paying patients at a set price.
- Compounding pharmacies (503A). Traditional pharmacies that custom-make a drug against a per-patient prescription. Now that the shortages have ended this is legal only in a narrow, individualized lane; the products are not FDA-approved and vary in quality between pharmacies.
- 503B outsourcing facilities. Larger-scale compounders under stricter FDA oversight than a 503A pharmacy; whether they may make GLP-1s from bulk is actively in flux.
- Telehealth platforms. A front end that connects you to a prescriber and fills through a partner pharmacy — what matters is which pharmacy fills it and whether the product is FDA-approved or compounded.
- Grey market, "research chemicals," and overseas sellers. Unregulated sites shipping without a valid prescription — no verified identity, purity, dose, or sterility, and no recourse if something goes wrong. The one category to rule out entirely.
The fully legitimate routes
There are three well-lit paths to a GLP-1 medication, and they all share one feature: a prescription from a licensed clinician, filled by a state-licensed pharmacy.
Retail pharmacy plus insurance. The traditional route — your prescriber sends the brand-name prescription to your local or mail-order pharmacy, and your plan (hopefully) covers it. Coverage is its own maze of formularies, prior authorization, and step therapy; our guide to understanding insurance coverage walks through how to build your case.
Manufacturer direct-to-consumer programs. Both manufacturers now sell certain products directly to self-pay patients — Lilly through LillyDirect and Novo Nordisk through NovoCare — with the prescription still written by a licensed clinician. For people whose plans exclude coverage entirely, these programs have become the main legitimate self-pay route, because the product ships from the manufacturer's own authorized channel.
Licensed telehealth prescribing FDA-approved products. Telehealth itself is not a red flag. A legitimate telehealth service requires a real screening and prescription from a licensed clinician, dispenses through a state-licensed pharmacy, and has a clinician available for questions afterward. The problems start when a platform skips any of those steps.
What compounding actually is — and where it stands now
Compounding is a licensed pharmacy preparing a customized drug for a patient whose needs can't be met by an FDA-approved product. Federal law recognizes two lanes: traditional pharmacies compounding per-patient prescriptions under section 503A, and larger "outsourcing facilities" under section 503B. Compounded drugs are legal in those lanes, but they are not FDA-approved — no one reviews them for safety, effectiveness, or quality before sale.
During the 2022–2024 brand shortages, compounders could legally produce copies of semaglutide and tirzepatide because both were on FDA's drug shortage list. That window has closed. FDA declared the tirzepatide shortage resolved on December 19, 2024, and the semaglutide shortage resolved on February 21, 2025. The grace periods that followed ended in spring 2025 — April 22, 2025 for 503A pharmacies compounding semaglutide and May 22, 2025 for 503B facilities — and courts declined to pause those deadlines. Since then, compounders generally may not produce what FDA calls "essentially a copy" of the approved products, and FDA has said tacking on an ingredient like vitamin B12 doesn't change that.
A narrow lane remains for genuinely individualized prescriptions, which is why some compounded products are still marketed. But FDA has flagged specific concerns even inside that lane: semaglutide salt forms (semaglutide sodium or acetate) are different chemicals than the approved drug with no lawful basis for use in compounding, and newer peptides like retatrutide and cagrilintide cannot legally be compounded at all. If you're weighing a compounded product you already have, our guide to compounded dosing with vials versus pens covers the measurement side.
What the safety data shows
This isn't hypothetical caution. As of May 31, 2026, FDA had received 990 adverse-event reports associated with compounded semaglutide and more than 730 for compounded tirzepatide — likely undercounts, since most compounding pharmacies aren't required to report. Many reports involve dosing errors: patients drawing up the wrong amount from a vial, or being prescribed doses and titration schedules beyond the approved label. A 2025 pharmacovigilance study of FDA's adverse-event database found compounded GLP-1 reports had roughly twice the odds of hospitalization compared with non-compounded reports, along with sharply higher odds of contamination and preparation errors.
Grey-market and counterfeit red flags
Below the compounding lane sits territory with no legitimate version at all.
Counterfeit brand pens. FDA has seized counterfeit Ozempic from inside the legitimate U.S. supply chain three times — thousands of units in December 2023 (lot NAR0074), several hundred in April 2025 (lot PAR0362), and dozens more in December 2025 (lot PAR1229). In the 2023 case, even the needles were counterfeit, with sterility that couldn't be confirmed. It's worth checking your pen's lot number against FDA's current alerts.
"Research use only" peptides. Websites selling semaglutide or tirzepatide powder labeled "for research purposes" or "not for human consumption" — while shipping it to consumers with dosing instructions — are selling an unapproved drug of unknown quality. FDA has issued warning letters over exactly this.
No-prescription online sellers. A 2024 study published in JAMA Network Open test-purchased semaglutide from online vendors that required no prescription: half the orders never arrived (the sellers demanded fake "customs fees" instead), and the products that did arrive contained semaglutide at 7–14% purity, exceeded their labeled content by 29–39%, and in one case showed possible endotoxin contamination.
Cold-chain failures. Injectable GLP-1s require refrigeration. FDA has received complaints about compounded products arriving warm — a warm package is a reason not to inject, full stop.
How to vet a source
- Confirm the pharmacy is state-licensed; FDA's BeSafeRx campaign has a lookup tool and guidance for buying medicine online safely, and you can also verify a pharmacy with your state board of pharmacy or the NABP.
- Require a real prescription. Any seller that doesn't is, by definition, operating illegally.
- Treat "same as the brand," deep discounts, missing use instructions, label misspellings, or a pharmacy name you can't verify as disqualifying — these are drawn directly from FDA's own telehealth red-flag list.
- Check packaging, lot numbers, and temperature on arrival, and compare against anything you've received from a retail pharmacy before.
Questions for your pharmacist
- "Is this the FDA-approved product, or a compounded version?"
- "Which state licenses this pharmacy, and can I verify that?"
- "How was this shipped and stored?"
- "Who do I call if something about the pen or vial looks off?"
Sourcing decisions sit right at the intersection of cost, access, and safety, and the trade-offs are real. Treat this as a framework for the right questions, not a verdict on your situation. This is peer information, not medical or legal advice — for decisions about your specific treatment, talk with your care team.