Is Peptide Telehealth Legit? How to Tell Medicine From a Storefront

The rule that puts a physician in the middle of this at all is section 503(b) of the Federal Food, Drug, and Cosmetic Act, at 21 U.S.C. § 353(b). It defines a prescription drug as one that, because of its toxicity or other potentiality for harmful effect, or the method of its use, "is not safe for use except under the supervision of a practitioner licensed by law to administer such drug" — and says such a drug "shall be dispensed only" upon that practitioner's written or oral prescription, or an authorised refill.

The enforcement clause is worth reading twice: "the act of dispensing a drug contrary to the provisions of this paragraph shall be deemed to be an act which results in the drug being misbranded while held for sale." Dispensing an injectable peptide without a prescription is not a paperwork lapse. It makes the product misbranded as a matter of federal law, which is why a site advertising "no prescription needed" has already told you what it is.

The second statute is section 503A, at 21 U.S.C. § 353a, titled "Pharmacy compounding." It exempts a compounded drug from new-drug approval, from the adequate-directions-for-use labeling requirement, and from current good manufacturing practice — but only on conditions. The central one is that the drug is "compounded for an identified individual patient based on the receipt of a valid prescription order," by "a licensed pharmacist in a State licensed pharmacy or a Federal facility" or a licensed physician, on a prescription "made by a licensed physician or other licensed practitioner authorized by State law to prescribe drugs."

Read the two together and the architecture of legitimate peptide telehealth falls out of them: an identified individual patient, a valid prescription order, a licensed prescriber and a state-licensed pharmacy. Everything else is logistics wrapped around those four facts.

People often arrive here having read about federal restrictions on prescribing over the internet. Those are real, but written for controlled substances specifically. 21 U.S.C. § 829(e)(1) provides that "no controlled substance that is a prescription drug as determined under the Federal Food, Drug, and Cosmetic Act may be delivered, distributed, or dispensed by means of the Internet without a valid prescription," then defines a valid prescription in terms of an in-person medical evaluation, with defined telemedicine exceptions.

The threshold word is "controlled." A controlled substance is defined at 21 U.S.C. § 802(6) as "a drug or other substance, or immediate precursor, included in schedule I, II, III, IV, or V." Peptides such as BPC-157, tesamorelin, thymosin alpha-1, GHK-Cu, semaglutide and tirzepatide are not in those schedules, so the federal in-person-evaluation machinery is not the law governing your consultation. That cuts both ways: no federal in-person requirement stands between you and a prescription, and equally, the federal government has not set the floor for what your evaluation must contain.

What fills the space is state law: the medical practice act, the medical board's telemedicine rules, and the state board of pharmacy's rules on dispensing and shipping. These are genuinely state-specific and not uniform. States differ on how a physician-patient relationship may be established remotely, on whether an asynchronous questionnaire review suffices or live contact is required in some circumstances, and on what a prescriber must do before writing for particular categories of medication.

Listing states here would not help, because the rules move and because your situation, not just your address, determines which applies. The practical version: the relevant licensure covers where you are sitting during the consultation. A provider that cannot say which physician is licensed in your state cannot answer the only regulatory question that matters to you.

FDA is explicit. Its compounding question-and-answer page states that "compounded drugs are not FDA-approved" and that "FDA does not verify the safety, effectiveness or quality of compounded drugs before they are marketed." Both are true of every compounded medication in the United States, from a dermatology cream to a peptide.

What compounded medication has instead is a different chain of accountability: a licensed prescriber responsible for the clinical decision, and a state-licensed pharmacy under board oversight and applicable sterile-compounding standards. A provider that calls a compounded peptide FDA approved is either confused about its own supply chain or hoping you are.

Compounding under 503A is patient-specific by statute. FDA's summary of the law is that under 503A "the drugs must be compounded based on the receipt of valid patient-specific prescriptions." Your name is on the prescription and on the vial, and the strength and directions are yours. A generic vial pulled from a shelf and shipped against a list is a different legal creature. The prescriber behind it must be, in the statute's words, "licensed by law to administer such drug" — and which law, and where, is the state question, answered by where the patient is.

The standard is not "did you fill in a form" but "did the prescriber have enough to decide." For a repair peptide in a healthy adult with no relevant history, a thorough written intake may genuinely be enough. For a growth-hormone-axis medication, a metabolic medication, or anyone with cancer history, pregnancy, diabetes or significant interactions, it is not, and a competent reviewer asks for more or declines. The tell is not the format but whether anything you wrote could have changed the outcome.

The phrase comes from the controlled-substance side of the law, but it describes the standard every medical board applies. Prescribing is a clinical act with a clinical reason behind it, not a fulfilment step. A provider whose physicians approve everything, for everyone, in seconds is not meeting it, even though nothing in the checkout looks illegal.

The NPPES NPI Registry at npiregistry.cms.hhs.gov is the federal public directory of healthcare providers, free and unauthenticated. A search on a physician's name and state returns the NPI number, credential, primary practice address, enumeration date, and a taxonomy block giving the specialty together with the state licence number the provider has recorded.

A worked example: querying an internal medicine physician in Texas returns one entry with a ten-digit NPI, the credential "MD", a practice address, an active status flag, and a taxonomy of "Internal Medicine" carrying a Texas licence number.

The NPI registry confirms identity and specialty. It does not confirm a licence is current and it does not show disciplinary history — that is the medical board's job. Every state publishes a licensee lookup: search the name, confirm the status is active and the expiry is in the future, and read whatever the board publishes about actions. If the provider will not give you the physician's name and state of licensure, there is nothing to verify, and that is itself the finding.

Pharmacies are licensed by state boards of pharmacy, and one shipping into your state usually needs a non-resident licence there as well as one where it operates. FDA is explicit that state boards carry "primary responsibility for the day-to-day oversight" of 503A pharmacies.

FDA also runs a consumer campaign, BeSafeRx, to help people "recognize the signs of safe online pharmacies and the warning signs of websites that appear to be pharmacies but may be unsafe." Its criteria for a safe one: it "always requires a doctor's prescription," "is licensed with a state board of pharmacy," "provides a physical address and telephone number in the United States," and "has a licensed pharmacist on staff to answer your questions." Those four are a better checklist than anything a marketing page will give you, because a regulator with no product to sell wrote them.

Real physician, real credentials, wrong state — the most common technical failure in multi-state telehealth, and invisible unless you check. The NPI registry gives the licence state; the state board confirms it is current.

A licensed pharmacy that neither publishes nor provides per-lot testing is asking you to take potency and sterility on trust, and FDA does not verify these for compounded products before marketing.

The form asked about cancer history and medications; the approval came back in seconds anyway. This matters most for growth-hormone-axis products and for anyone with a complex medication list.

Everything is licensed, everything is tested, and the molecule still does not address what you described, because nobody asked enough to find out. A physician who redirects you to a different product, or says a peptide is not the right tool at all, is the system working.

Semaglutide was studied in STEP 1, published in the New England Journal of Medicine in 2021 in adults with overweight or obesity, and in SELECT in the same journal in 2023 in adults with obesity and cardiovascular disease without diabetes. Tirzepatide was studied in SURMOUNT-1 in the New England Journal of Medicine in 2022 and in SURMOUNT-OSA in obstructive sleep apnea with obesity in 2024. That evidence attaches to the branded products studied; compounded semaglutide and tirzepatide are not themselves FDA-approved finished products.

Tesamorelin has randomised human data too: the New England Journal of Medicine reported in 2007 on a growth-hormone-releasing factor in patients with HIV and abdominal fat accumulation, with further randomised work in JAMA in 2014 and Lancet HIV in 2019, so tesamorelin is prescribed off that base rather than on mechanism alone. Thymosin alpha-1 has a randomised literature as well — the TESTS trial in the BMJ in 2025 in sepsis, a randomised study in Hepatology in 1998 in chronic hepatitis B, and a Cochrane review in 2026 — though those are hospital populations, not the wellness contexts Thymosin Alpha-1 is usually discussed in.

BPC-157 is the clearest example of the other end. The tendon work — a 2006 paper in the Journal of Orthopaedic Research on Achilles detachment in rats, a 2014 paper in Molecules on growth hormone receptor expression in tendon fibroblasts — is animal and cell research, and there are no large randomised controlled trials of BPC-157 in humans. That does not make BPC-157 useless, since much prescribing rests on mechanism plus clinical experience, but the honest phrasing is "described in preclinical research and used clinically." MOTS-c is similar: the foundational work is a 2015 paper in Cell Metabolism describing effects on metabolic homeostasis in mice. MOTS-c has no randomised human efficacy trials.

GHK-Cu and SS-31 sit between. GHK-Cu has human work — collagen synthesis in cultured fibroblasts in FEBS Letters in 1988, topical studies on diabetic ulcers in Wound Repair and Regeneration in 1994 and on laser-resurfaced skin in Archives of Facial Plastic Surgery in 2006 — but that is topical and dermatological, not systemic injection, and GHK-Cu is prescribed with the distinction made explicit.

SS-31, as elamipretide, has randomised trials in rare disease: MMPOWER-3 in primary mitochondrial myopathy in Neurology in 2023, a phase 2/3 trial in Barth syndrome in Genetics in Medicine in 2021, and ReCLAIM-2 in age-related macular degeneration in 2024. SS-31 prescribed for general mitochondrial support extrapolates from those defined populations, and a provider that says so is being straight with you.