Two of our guides end on the same sentence: before you inject anything, verify the pharmacy with your state board, the NABP, or FDA's BeSafeRx. It's good advice that quietly assumes you already know how. Most people don't. The tools exist, they're free, and they take about five minutes total, but they're scattered across three different agencies and none of them walks you through the others. This is the walkthrough, in the order worth doing it. The pharmacy-sources guide covers which channels are legitimate; this one covers how to confirm that a specific seller is who it claims to be.
Start with FDA's BeSafeRx
BeSafeRx is FDA's consumer campaign for buying prescription medicine online safely, and its most useful page is a plain list of safe signs versus warning signs. An online pharmacy is likely safe, FDA says, if it always requires a prescription, lists a physical U.S. address and phone number, has a licensed pharmacist on staff to answer questions, and is licensed with a state board of pharmacy.
The warning signs are the inverse, and they map exactly onto the sellers people get burned by:
- No prescription required. This is the single clearest tell.
- Not licensed in the U.S. and by your state board of pharmacy.
- No licensed pharmacist available to answer questions.
- Medicine that looks different than your local pharmacy's, or packaging that's broken, in a foreign language, or missing an expiration date.
- Deep discounts or prices that seem too good to be true.
- Charges for products you never ordered, or no clear protection for your personal and financial information.
BeSafeRx also hosts a "Locate a State-Licensed Online Pharmacy" tool, which hands you off to the NABP lookup below. Treat any single warning sign as disqualifying; legitimate pharmacies don't hit these.
Check the .pharmacy domain and NABP's Safe Site Search
The National Association of Boards of Pharmacy (NABP) runs the accreditation layer FDA points at. Two things it offers are worth knowing.
First, the .pharmacy domain. In 2014 NABP launched it as a top-level domain granted only to sites that follow pharmacy law in every jurisdiction they operate in. A logo can be copied off a real pharmacy's site in seconds; a web address ending in .pharmacy cannot be faked or forged, because NABP controls who gets one. So a URL ending in .pharmacy tells you something real.
Second, NABP's Safe Site Search Tool at safe.pharmacy: paste in a pharmacy's web address and it tells you whether the site is verified or flagged. The scale of the problem is why it exists: NABP has identified more than 40,000 non-compliant pharmacy websites, and estimates that nearly 95% of sites selling prescription-only drugs online operate illegally. A seller that isn't in NABP's verified set isn't automatically illegal, but it's a reason to keep checking rather than to relax.
Look the license up with your state board
Every real pharmacy, storefront or mail-order, holds a license from a state board of pharmacy, and those records are public. This is the step that confirms a name is attached to an actual, current license rather than a convincing website.
Each state board runs its own lookup. California's is a good model: its Department of Consumer Affairs license search lets you pick "Board of Pharmacy," search by business name or license number, and see whether the license is current, expired, or has been hit with discipline like suspension or revocation. Your own state's board has an equivalent tool, and NABP keeps a directory of every U.S. board if you're not sure where to start. What you want to confirm is simple: the pharmacy is licensed in a real state, the license is current, and there's no unresolved disciplinary action against it.
Check the pen itself against FDA's counterfeit alerts
Verifying the seller isn't quite the end, because counterfeits have slipped into the legitimate supply chain. FDA has seized counterfeit Ozempic three separate times: lot NAR0074 in December 2023 (where even the needles were fake and sterility couldn't be confirmed), lot PAR0362 in April 2025, and lot PAR1229 in December 2025. In the December 2025 case, FDA says the counterfeit carried a lot number that is also an authentic Novo Nordisk lot number, so the lot number alone won't tell you. Check the serial number and the physical tells too.
Do this check when your pen arrives. Find the lot number printed on the pen and carton, then pull up FDA's counterfeit-Ozempic alert page and check it against the listed lots and the physical tells FDA describes. For the December 2025 lot, the giveaway is where the "EXP/LOT" text sits: on the counterfeit it's to the left of the expiration date and lot number; on an authentic pen it sits above them. If your pen matches a described counterfeit, or anything looks off, don't use it, and call the manufacturer. This is the same reflex the research-peptides guide argues for at the far, unregulated end of the market: confirm the physical product, not just the promise.
The five-minute checklist
- Run the seller against FDA's BeSafeRx safe-signs list: prescription required, U.S. address and phone, a reachable pharmacist, a state license.
- Look for a .pharmacy web address, and run the URL through NABP's Safe Site Search.
- Pull the pharmacy's license record from its state board of pharmacy; confirm it's current and undisciplined.
- When the product arrives, check the lot number and packaging against FDA's current counterfeit alerts.
- Walk away at any single red flag: no prescription, an unverifiable license, a price that's too good, or packaging that's off.
None of these tools costs anything, and running all four takes about as long as reading this. This is general information, not medical or legal advice. For decisions about your specific treatment, talk with your care team and pharmacist.