By Darrin LaVelle, Founder of RENVA Health
Last updated: July 4, 2026
Short answer: legitimate compounding pharmacies fall into one of two federally defined categories — 503A or 503B — and both can be independently verified through public databases. If a provider can't or won't tell you which category their pharmacy falls into, or the pharmacy doesn't show up when you check, that's a meaningful red flag worth taking seriously.
If a telehealth provider tells you your GLP-1 medication comes from a "compounding pharmacy," that phrase alone doesn't tell you much — it could describe a properly licensed, closely regulated facility, or it could describe something with none of the oversight that phrase implies. Here's exactly how to tell the difference, using tools anyone can access.
Under federal law, legal compounding pharmacies fall into one of two categories, and understanding which one you're dealing with tells you a lot about the oversight involved.
A 503A pharmacy compounds medication based on a prescription for a specific, named patient. These are primarily regulated by state boards of pharmacy rather than the FDA directly — the FDA's involvement is generally limited to situations involving serious safety concerns. 503A pharmacies are exempt from the FDA's standard manufacturing requirements (current Good Manufacturing Practice, or CGMP) but are still required to meet pharmacy compounding standards set by the U.S. Pharmacopeia, plus whatever additional rules their state imposes.
A 503B outsourcing facility is a category created by federal law in 2013, specifically to allow larger-batch compounding — without a patient-specific prescription — under much closer federal oversight. These facilities must register directly with the FDA, follow full pharmaceutical manufacturing standards (the same CGMP framework that applies to conventional drug manufacturers), undergo FDA inspections on a risk-based schedule, and report the products they compound to the FDA twice a year.
If you're picturing a spectrum of oversight, 503B facilities sit much closer to the level of scrutiny applied to conventional drug manufacturers, while 503A pharmacies operate under a lighter, primarily state-based framework intended for individualized patient prescriptions rather than large-scale production. Neither category is inherently the "wrong" choice — a properly licensed 503A pharmacy filling a legitimate, patient-specific prescription is completely different from an unlicensed or misrepresented operation claiming 503A status without actually meeting its requirements.
This isn't an abstract regulatory distinction — it connects directly to real problems the FDA has documented with compounded GLP-1 products specifically: vials naming pharmacies that don't actually exist or aren't actually involved in making the product, and marketing claims like "same active ingredient as Ozempic" that turn out to involve unverified salt forms or substances that aren't actually the approved active ingredient at all.
Verifying that a compounding source is a real, properly registered facility is one of the most concrete, actionable things you can do to protect yourself against exactly these kinds of misrepresentation — and unlike a lot of pharmaceutical questions, it doesn't require medical expertise to check. It requires knowing where to look.
The FDA maintains a public list called "Registered Outsourcing Facilities," which shows facility names, addresses, and current registration status, updated regularly. If a provider tells you their compounded medication comes from a specific 503B facility, you can check that name directly against this list. The FDA also maintains a separate database showing which specific products a given 503B facility has reported compounding — so you can check not just whether the facility is registered, but whether it has actually reported compounding the type of product in question.
Since 503A pharmacies are licensed at the state level, verification means checking with the relevant state board of pharmacy — every state maintains a public license-lookup tool for this purpose. If a pharmacy ships medication across state lines, it typically needs a non-resident pharmacy license in the state it's shipping to, which can usually be checked through that destination state's board of pharmacy as well. If a provider can't tell you which state licensing board to check, or the pharmacy name doesn't turn up a match, that's worth following up on directly rather than letting it go.
You may also come across the term "LegitScript certified." It's worth understanding exactly what this does and doesn't mean: LegitScript is a private company, not a government body, and its certification isn't legally required under federal compounding law. It's a voluntary, independent compliance review that evaluates a pharmacy or telehealth provider's licensure, legality, transparency, and safety practices — and it's often required by major platforms (like search engines and payment processors) before they'll allow a pharmacy to advertise or process payments.
LegitScript certification isn't a substitute for confirming actual 503A or 503B status, but it's a legitimate additional signal, and you can independently verify a provider's claimed certification by searching LegitScript's own public directory rather than just taking a provider's word for a badge on their website.
When a telehealth provider tells you they use compounded medication, here's what's worth asking and checking:
None of these checks require medical training — they require knowing that the databases exist and taking a few minutes to use them before committing to a provider or a specific compounded product.
If a facility name doesn't appear where it should, if a provider is evasive about which category their compounding source falls into, or if a licensing search comes up empty, that's meaningful information — not necessarily proof of fraud, since databases can occasionally lag behind real registration changes, but a strong enough signal to ask more direct questions before proceeding, or to look elsewhere. A legitimate operation should be able to help you verify its own standing without friction; reluctance to do so is itself worth paying attention to.
Q: Is a 503A pharmacy less trustworthy than a 503B facility?
Not inherently — they serve different purposes under the law. A 503A pharmacy compounding a legitimate, individualized prescription under proper state licensure is a completely normal, legal arrangement. The concern isn't the category itself, but whether a given pharmacy is actually operating within it properly and can be verified as such.
Q: What if a provider won't tell me which pharmacy they use?
That's worth treating as a significant red flag. A transparent provider prescribing compounded medication should be willing to disclose which pharmacy is filling the prescription, since that's exactly the information you need to verify legitimacy.
Q: Does LegitScript certification mean a pharmacy is 100% safe?
It's a meaningful, independently verifiable signal of legitimacy and compliance, but it's a private certification, not a government safety guarantee, and it doesn't replace confirming actual 503A/503B regulatory status.
Q: How often are the FDA's databases updated?
The FDA's Registered Outsourcing Facilities list is updated regularly, though as with any public database, there can be some lag between a real-world change and the database reflecting it. If something seems off, it's reasonable to ask the provider directly rather than relying on the database alone as a final answer.
Q: Can I ask my provider to prove their pharmacy's licensing directly?
Yes — this is a completely reasonable request, and a legitimate provider should be willing and able to provide this information without resistance.
See also: Compounded vs. Brand-Name GLP-1 for the full regulatory and clinical picture on compounded GLP-1 medications, and How to Get Prescribed a GLP-1 Medication for the full evaluation and prescribing process.
Medical disclaimer: RENVA is not a healthcare provider. This article is informational and educational only. It does not constitute medical advice, diagnosis, or a prescription. Always consult a licensed healthcare professional before making health decisions. Full medical disclaimer →
Answer a few preference questions — budget, labs, provider model, and cancellation flexibility. Preference-based and informational only.
Take the free quizCompounded GLP-1 medications aren't FDA-approved and aren't reviewed for safety or quality before they're sold. Here's what that actually means and why the distinction matters.
What it actually takes to get prescribed Wegovy, Zepbound, or another GLP-1 medication — eligibility criteria, the evaluation process, insurance steps, and realistic timelines.
The FDA-approved titration schedules for Wegovy, Zepbound, and Foundayo explained — plus why skipping steps or 'microdosing' claims deviate from tested, approved dosing.