Anyone Can Print a Lab Report. Only a Pharmacy Can Hold a License.
Author
Date Published
- Twitter
- Facebook
- LinkedIn
- Instagram
- Copy Link
The $95 peptide vial sold at a Brooklyn corner store had a brand name, a storefront and a certificate of analysis naming a real testing laboratory. A careful shopper would have been reassured by all of it. It took one email to that laboratory to find out it had never issued the certificate. The signals people use to judge a product are cheap to produce. A license is the one thing you can check without asking the seller.
Who This Helps
This is for you if you're interested in peptides and want a way to tell a real source from a convincing one. We covered whether that particular product was legal in our piece on the retatrutide grey market.
Everything about it looked like a product
A careful shopper would have seen a lot to reassure them. A physical store, which feels more accountable than a website. A brand name. A price that undercut the legitimate options without being low enough to announce itself. And a certificate of analysis published online, naming a real laboratory, complete with a graph.
That last one is what a cautious buyer looks for. CBS News contacted the laboratory. Its operations manager, Tori Johnson, replied by email: "We did not issue these [certificates], we do not have a client called INDR Labs." CBS also reported that the graph on the certificate appeared to identify the sample as tirzepatide, a different medicine entirely (CBS News).
Nothing visible in that store would have told a shopper any of this.
Why a license is different from a lab report
The obvious objection first: a dishonest seller could just as easily say they're licensed. True. The difference is where the answer lives.
A certificate can only be checked by contacting the laboratory named on it, which means asking a third party the seller chose. A license can be checked against a government register the seller has no control over. One of those is a phone call you probably won't make. The other is a search box.
Find a provider in your state
Answer a few questions and see live pricing from the providers that ship where you live.
What a licensed pharmacy is actually held to
Licensing sounds like a formality. Four things come with it.
- Someone inspects them. The FDA says state boards of pharmacy "have primary responsibility for the day-to-day oversight of state-licensed pharmacies," and that the FDA itself "does conduct surveillance and for-cause inspections" (FDA). Nobody inspects a shelf behind a counter.
- Sterile work follows a published standard. USP Chapter 797 governs anything injectable, and most states have adopted it. USP reports that at least 87% of pharmacy boards either require full compliance or write it into their regulations, from a 2016 survey of pharmacy law (USP). That standard is what stands between an injection and an infection.
- The expiry date can't be stretched. A compounded sterile preparation carries a beyond-use date, which USP defines as the point after which it "may not be stored or transported," set to limit "physical or chemical degradation, microbial contamination and proliferation." The current chapters contain no provision for extending those dates, because extension would require testing that has to be in place first, including sterility and endotoxin release testing, container-closure integrity and stability assays (USP). Endotoxins are bacterial residue that can cause fever and worse. So a licensed pharmacy cannot quietly give a vial a longer life to move stock.
- There's a prescription with your name on it. Federal law only exempts a compounded product from the usual approval rules when it's made "for an identified individual patient based on the receipt of a valid prescription order" (21 U.S.C. 353a). Somebody licensed decided you should have it.
None of that is visible on a vial. All of it is checkable.
A stricter tier sits above this. A 503B outsourcing facility registers with the FDA, "shall be subject to inspection" on a risk-based schedule, and "shall submit adverse event reports" to the agency (21 U.S.C. 353b). The FDA is blunt about the gap: outsourcing facility products "are subject to current good manufacturing practice (CGMP) requirements," while 503A pharmacy compounding is not (FDA). Our guide to how 503A and 503B pharmacies differ covers which does what. It’s unlikely peptides purchased from un-trustworthy sources are jumping those hurdles.
A lab report answers a narrower question than people think
Certificates of analysis are real documents with a real job, and federal law requires them for the bulk drug substances a pharmacy compounds with (21 U.S.C. 353a). The trouble is the gap between that job and what buyers assume.
Three limits, based on how these documents work rather than on any single rule:
- Identity and strength, usually. Sterility and endotoxin testing are separate assays. Unless the report lists them for that lot, they weren't run.
- An ingredient lot, not your vial. A certificate travels with a batch of raw material. The finished, filled, labeled vial in your hand is a later step.
- A test the seller arranged. Whoever sells the product generally commissions the testing and decides which results to publish.
One detail in the federal rules is telling. A licensed manufacturer receiving a shipment can't accept the supplier's certificate as proof of what arrived, and must run at least one test of its own to verify the identity of each component (21 CFR 211.84). If a regulated facility with its own laboratory won't take a certificate's word for what's in the container, a shopper reading a PDF has less to go on, not more.
Licensure is the signal that holds up
This one is easy to get backwards. Compounded medications are frequently cheaper than brand-name ones, and that is not a red flag. Lower cost is one of the reasons compounding exists.
The FDA's consumer guidance doesn't mention price anywhere. It says buyers of medicine bought online "may not know the identity of the compounder that produced the drug, including whether the drug was produced by a compounder whose drugs meet appropriate quality standards and that is appropriately licensed and regulated," and warns that "Purchasing any medicine online from unregulated, unlicensed sources can expose patients to potentially poor-quality products" (FDA). The agency's concern is not knowing who made it.
The price in the Brooklyn story was never going to give it away, set low enough to appeal and high enough not to alarm. Screen for the pharmacy instead: ask which one is filling your prescription, then look them up.
Start with the one check that matters
Find your state board in the National Association of Boards of Pharmacy directory, then run the pharmacy's name through that board's own lookup (NABP). Once you have the name, it takes a couple of minutes. Our walkthrough on checking whether a pharmacy is licensed in your state has the detail.
If you want to go further, four more checks, none of them urgent:
- Whether a facility is FDA-registered. The FDA publishes the list of 503B outsourcing facilities (FDA).
- The prescriber. DocInfo for physicians (DocInfo). For physician assistants, NCCPA confirms board certification rather than a state license (NCCPA), so check the state board as well. Nurse practitioners go through Nursys or the state nursing board (Nursys).
- Accreditation, as a bonus signal. NABP runs a Digital Pharmacy Accreditation for pharmacies operating online, and publishes who holds it (NABP).
- The FDA's own checklist. BeSafeRx lists the warning signs of an unsafe online pharmacy (FDA).
One shortcut covers most of it. If a seller can't tell you which licensed pharmacy is filling your prescription, you have your answer. The Brooklyn seller never named one. Our plain-language guide to what's legitimate and what's risky in peptides covers the rest.
Final Takeaway
The unsettling part of that corner store vial is how reasonable it looked. A brand, a shop, a fair price, a lab report with a graph on it. Someone doing their homework would have come away satisfied. The signals people use to judge a product are exactly the signals that are easy to manufacture. The protections that matter, inspections and sterile standards and a prescription with your name on it, never appear on packaging. They appear in one place: your state pharmacy board's license lookup. Run that search before your next order, ahead of comparing the price tag or reading the paperwork.
If you enjoy posts like these, you can subscribe to receive newsletter updates.
Frequently Asked Questions
Does a certificate of analysis mean a peptide is safe?
Not on its own. A typical certificate covers identity and strength for a batch of raw ingredient rather than sterility, and describes that batch rather than the vial you received. Federal rules don't let a licensed manufacturer accept a supplier's certificate without running its own identity test, which tells you how much weight one carries by itself.
Is a cheaper compounded option a warning sign?
No. Compounded medications are often less expensive than brand-name ones, and that is normal. The FDA's consumer guidance ties risk to whether a source is licensed and regulated, and never mentions price. The useful question is which pharmacy is filling it and whether you can verify them.
How do I check whether a pharmacy is licensed?
Start at the National Association of Boards of Pharmacy directory, find your state's board, and use that board's own license lookup. NABP doesn't run a single national pharmacy search, so the state board is the real destination. For an online pharmacy you can also check whether it holds NABP's Digital Pharmacy Accreditation.
Find a provider in your state
Answer a few questions and see live pricing from the providers that ship where you live.
Keep Reading
A study found 15 cases of a rare B1 deficiency brain injury in GLP-1 users. See what the data shows and the warning sign 13 of them had first.
An Australian lab tested 18 vials sold as retatrutide. One matched its label. See what the dosing errors were and why a purity test proves little.
Three diagnoses disqualify you from Medicare's $50 GLP-1 price. See why, what a Part D copay really costs, and how cash pay compares.
Categories
Written by
Lauren PescarusLauren Pescarus is a team member with GLP Winner where she works on marketing, content creation, and operations. She has over 10 years experience in the content creation space, including in the GLP-1 space where she works to stay on top of access news, research updates, and lifestyle tips guided by science.