Somewhere between "my insurance denied it" and "a site on Instagram will ship it for $150 a month," a lot of people end up asking the same quiet question: where is it actually safe to get this medication? The answer changed a lot between 2024 and 2026. The brand shortages that made compounded versions widely available are officially over, the FDA has tightened the rules, and counterfeits have shown up inside the legitimate U.S. supply chain more than once. This guide maps where GLP-1s come from: what's fully legitimate, what compounding is and where it stands legally, and the red flags that separate a licensed pharmacy from a product you should never inject.
The channels at a glance
The same drug can reach you through half a dozen channels, and they aren't interchangeable. They differ in cost and hassle, and most of all in safety. Here's the full range, ordered roughly from most established to most risky; the sections that follow go deeper on the legitimate routes, on compounding, and on the danger zone.
- Retail or community pharmacy. A chain like CVS or Walgreens, a grocery-store counter, or a local independent fills a brand-name prescription (Ozempic, Wegovy, Mounjaro, Zepbound) with the FDA-approved product. Cost tracks your insurance; list prices without coverage run high.
- Mail-order or specialty pharmacy through your plan. Many insurers steer maintenance medications to a mail-order or specialty pharmacy run by their pharmacy benefit manager (PBM), often in 90-day supplies. Sometimes that's optional and sometimes it's required for coverage. It's the same FDA-approved product, delivered to your door, usually with the lowest copay once you're stable on a dose.
- Manufacturer-direct self-pay. LillyDirect and NovoCare Pharmacy sell certain FDA-approved, brand-name products, including lower-priced single-dose vial options for some, straight to cash-paying patients at a set price.
- Compounding pharmacies (503A). Traditional pharmacies that custom-make a drug against a per-patient prescription. Now that the shortages have ended, this is legal only in a narrow, individualized lane. The products are not FDA-approved and vary in quality between pharmacies.
- 503B outsourcing facilities. Larger-scale compounders under stricter FDA oversight than a 503A pharmacy; whether they may make GLP-1s from bulk is actively in flux.
- Telehealth platforms. A front end that connects you to a prescriber and fills through a partner pharmacy. What matters is which pharmacy fills it and whether the product is FDA-approved or compounded.
- Grey market, "research chemicals," and overseas sellers. Unregulated sites shipping without a valid prescription, with no verified identity, purity, dose, or sterility, and no recourse if something goes wrong. This is the one category to rule out entirely.
The fully legitimate routes
There are three well-lit paths to a GLP-1 medication. All of them start with a prescription from a licensed clinician, filled by a state-licensed pharmacy.
The first is a retail pharmacy plus insurance. Your prescriber sends the brand-name prescription to your local or mail-order pharmacy, and your plan (hopefully) covers it. Coverage is its own maze of formularies, prior authorization, and step therapy; our guide to understanding insurance coverage walks through how to build your case.
The second is a manufacturer direct-to-consumer program. Both manufacturers now sell certain products directly to self-pay patients, Lilly through LillyDirect and Novo Nordisk through NovoCare, with the prescription still written by a licensed clinician. For people whose plans exclude coverage entirely, these programs have become the main legitimate self-pay route, because the product ships from the manufacturer's own authorized channel. Our LillyDirect vs. NovoCare comparison covers current pricing and how the two programs differ.
The third is licensed telehealth that prescribes FDA-approved products. Telehealth itself is not a red flag. A legitimate service requires a real screening and prescription from a licensed clinician, dispenses through a state-licensed pharmacy, and has a clinician available for questions afterward. The problems start when a platform skips any of those steps.
What compounding is and where it stands now
Compounding is a licensed pharmacy preparing a customized drug for a patient whose needs can't be met by an FDA-approved product. Federal law recognizes two lanes: traditional pharmacies compounding per-patient prescriptions under section 503A, and larger "outsourcing facilities" under section 503B. Compounded drugs are legal in those lanes, but they are not FDA-approved, so no one reviews them for safety, effectiveness, or quality before sale. For a step-by-step look at where the ingredients come from and how a compounded vial is prepared, see how compounded GLP-1 medications are made.
During the brand shortages that began in 2022, compounders could legally produce copies of semaglutide and tirzepatide because both were on FDA's drug shortage list. That window has closed. FDA first declared the tirzepatide shortage resolved on October 2, 2024 and reaffirmed that on December 19, 2024. It declared the semaglutide shortage resolved on February 21, 2025. The grace periods that followed ended in spring 2025 (for semaglutide, April 22, 2025 for 503A pharmacies and May 22, 2025 for 503B facilities), and courts declined to pause those deadlines. Since then, compounders generally may not produce what FDA calls "essentially a copy" of the approved products, and FDA has said adding an ingredient like vitamin B12 doesn't change that.
A narrow lane remains for genuinely individualized prescriptions, which is why some compounded products are still marketed. FDA has flagged specific concerns even inside that lane. Semaglutide salt forms (semaglutide sodium or acetate) are different chemicals than the approved drug, with no lawful basis for use in compounding, and newer peptides like retatrutide and cagrilintide cannot legally be compounded at all. If you're weighing a compounded product you already have, our guide to compounded dosing with vials versus pens covers the measurement side.
What the safety data shows
As of May 31, 2026, FDA had received 990 adverse-event reports associated with compounded semaglutide and more than 730 for compounded tirzepatide. Those are likely undercounts, since most compounding pharmacies aren't required to report. Many reports involve dosing errors: patients drawing up the wrong amount from a vial, or being prescribed doses and titration schedules beyond the approved label. A 2025 study of FDA's adverse-event database found compounded GLP-1 reports had about 2.35 times the odds of hospitalization compared with non-compounded reports, along with sharply higher odds of contamination and preparation errors.
Grey-market and counterfeit red flags
Below the compounding lane sits territory with no legitimate version at all.
Counterfeit brand pens are the first risk. FDA has found counterfeit Ozempic inside the legitimate U.S. supply chain three times: thousands of units in December 2023 (lot NAR0074), several hundred in April 2025 (lot PAR0362), and dozens more in December 2025 (lot PAR1229). In the 2023 case even the needles were counterfeit, and their sterility couldn't be confirmed. Check your pen's lot number against FDA's current alerts.
"Research use only" peptides are the second. Websites selling semaglutide or tirzepatide powder labeled "for research purposes" or "not for human consumption," while shipping it to consumers with dosing instructions, are selling an unapproved drug of unknown quality. FDA has issued warning letters over exactly this.
No-prescription online sellers are the third. A 2024 study published in JAMA Network Open test-purchased semaglutide from online vendors that required no prescription. Half the orders never arrived (the sellers demanded fake "customs fees" instead). The products that did arrive contained semaglutide at 7–14% purity, exceeded their labeled content by 28.56%–38.69%, and all tested positive for endotoxin (bacterial contamination), one at an elevated level.
Cold-chain failures are the last. Injectable GLP-1s require refrigeration, and FDA advises against using a product that arrives warm.
How to vet a source
- Confirm the pharmacy is state-licensed. FDA's BeSafeRx campaign has a lookup tool and guidance for buying medicine online safely, and you can also verify a pharmacy with your state board of pharmacy or the NABP. Our step-by-step guide to verifying a pharmacy with BeSafeRx and NABP walks through the lookups.
- Require a real prescription. Any seller that doesn't is, by definition, operating illegally.
- Treat claims of "same as the brand," deep discounts, missing use instructions, or a pharmacy name you can't verify as disqualifying. These come from FDA's own telehealth red-flag list.
- Check packaging, lot numbers, and temperature on arrival, and compare against anything you've received from a retail pharmacy before.
Questions for your pharmacist
- "Is this the FDA-approved product, or a compounded version?"
- "Which state licenses this pharmacy, and can I verify that?"
- "How was this shipped and stored?"
- "Who do I call if something about the pen or vial looks off?"
This is general information, not medical or legal advice. For decisions about your specific treatment, talk with your care team.