How to Verify a Compounding Pharmacy License, Step by Step
To verify a compounding pharmacy, take the exact pharmacy name and address from your vial label, find that state's board of pharmacy through NABP's directory, and confirm the license is active with no current discipline. If the label names a 503B outsourcing facility, also confirm it appears on FDA's registered outsourcing facility list. It's free, it's quick, and it's one of the most useful checks a patient can run before injecting a compounded GLP-1.
Key takeaways
- Verify the pharmacy named on the vial, not the telehealth brand on the website. They are often different companies.
- State boards license pharmacies; NABP's directory links to every board's site.
- FDA's outsourcing facility list, updated weekly, shows registration dates, last inspection, Form 483s, and recalls for 503B facilities.
- FDA has found compounded GLP-1 labels naming nonexistent pharmacies, and real pharmacies that never made the product. Call the pharmacy using the board's contact information, not the package's.
Step 0: Figure out who actually made your medication
Many patients buy compounded semaglutide or tirzepatide through a telehealth company. The telehealth company usually doesn't compound anything; it connects you with a prescriber, and a separate pharmacy fills the prescription. The license you need to check belongs to that pharmacy.
The pharmacy should be identified on the dispensing label. For 503B outsourcing facilities, federal law requires the label to include the statement "This is a compounded drug," the facility's name, address and phone number, and the lot or batch number (21 U.S.C. 353b). Write down the name exactly as printed, the street address, the phone number, and the lot number before you start.
The step-by-step lookup
- Find the right state board. Start with the state in the pharmacy's address. The National Association of Boards of Pharmacy maintains a directory of every state board, with phone numbers and website links (NABP). FDA's BeSafeRx program points consumers to the same directory (FDA BeSafeRx).
- Open the board's license verification tool. Most boards have a public "license lookup" or "verify a license" page. Choose the facility or pharmacy license type, not an individual pharmacist.
- Confirm status and type. You want an active license, a license type that covers the work (some states issue separate sterile compounding permits or endorsements), and an expiration date in the future.
- Read the discipline section. Look for board orders, probation, fines, or consent agreements. Open the documents if they're posted; a board order explains what the inspector found.
- Check your own state, too. If the pharmacy is out of state and ships to you, search your home state board's lookup as well. States generally require out-of-state pharmacies that ship to their residents to hold a "nonresident" pharmacy license. Illinois law, for example, requires one for every pharmacy outside the state that mails, ships or delivers prescription medications to Illinois residents (225 ILCS 85/16a), and a 2024 law-firm review of Massachusetts's rollout noted that other states already require nonresident licenses (Holland & Knight). Rules vary, so check your own board's site.
- Check the pharmacist-in-charge. Board records often list a pharmacist-in-charge. Looking up that pharmacist's license is a quick extra check.
- Call the pharmacy using the board's listed number. Ask them to confirm they filled your prescription and your lot number. This is the step that catches counterfeit labels.
That last step matters because labels can lie. FDA reports fraudulent compounded semaglutide and tirzepatide with false label information, including labels listing nonexistent pharmacies and real pharmacies that did not compound the product (FDA, updated October 1, 2026). A real license number on a fake label will pass a lookup. A phone call to the real pharmacy won't.
If it's a 503B: check FDA's outsourcing facility list
Outsourcing facilities register with FDA under section 503B, and FDA publishes the list. The page was updated as of September 30, 2026, with content current as of October 13, 2026, and FDA describes it as reflecting the data lock date for the latest weekly update (FDA).
| Column on FDA's list | What to look for |
|---|---|
| Initial / most recent registration date | A current-year registration. Facilities that don't re-register by December 31 are removed on January 1. |
| Last inspection | Whether and when FDA has inspected the site |
| Form 483 issued? | Whether inspectors recorded observations. FDA notes a 483 is not a final agency determination. |
| Recall conducted? | Any recall history |
| Action based on last inspection | Follow-up such as a warning letter |
| Intends to compound sterile drugs from bulk | Self-reported by the facility and not verified by FDA |
Source: FDA, Registered Outsourcing Facilities.
Two cautions. First, FDA says registration "means only that FDA has received the information required to register the facility," not that its drugs are FDA-approved or that it complies with CGMP (FDA). Second, the list excludes state board actions, so a 503B facility still needs a state board lookup (FDA). FDA warning letters to compounders are a separate public record, covered in our article on GLP-1 compounder warning letters.
A practical note for 2026: FDA says tirzepatide and semaglutide do not currently appear on the 503B bulks list or the drug shortage list (FDA, April 2026 update). If a 503B facility is supplying compounded semaglutide or tirzepatide made from bulk API, that is worth raising with your prescriber.
Skip the verification homework
FDA-approved GLP-1s are dispensed by retail and mail-order pharmacies with brand-name supply chains.
Paid links. We may earn a commission; it never changes what we write. See all options. Compounded medications are not FDA-approved.
Checking the website itself
A license lookup verifies a pharmacy. It doesn't verify that the website you ordered from is connected to it. For that, NABP offers a Safe Site Search tool at safe.pharmacy where you can enter a website address before you buy (NABP Safe.Pharmacy). NABP says it has identified more than 40,000 websites that fail its patient safety and pharmacy practice standards, and that 96% of the illegal online pharmacies it reviewed did not require a valid prescription (NABP).
You may also see references to "NABP Verify." That is a license verification and monitoring service for qualifying pharmacists, not a consumer lookup for pharmacies (NABP). For patients, the state board lookup and the safe-site tool are the relevant ones.
What each lookup does and doesn't tell you
| Check | Tells you | Doesn't tell you |
|---|---|---|
| State board license lookup | License status, type, expiration, public discipline | Whether a specific vial came from that pharmacy |
| FDA outsourcing facility list | 503B registration, inspection, 483 and recall history | State discipline; whether products are FDA-approved |
| NABP Safe Site Search | Whether NABP considers a website safe or not recommended | Product quality or sourcing |
| Phone call to the pharmacy (board-listed number) | Whether they filled your prescription and lot | Testing results, unless you ask |
Red flags
FDA's BeSafeRx guidance lists signs of a potentially unsafe online pharmacy. Among them: it "does not require a doctor's prescription," "is not licensed in the United States and by your state board of pharmacy," has no licensed pharmacist available, or "offers deep discounts or prices that seem too good to be true" (FDA BeSafeRx). For compounded GLP-1s specifically, add these:
- No pharmacy name on the label, or a name that doesn't match any board record.
- "Research use only" or "not for human consumption" anywhere on the product or paperwork. Research-grade peptides may not be used for compounding (NCBOP).
- A salt form on the label, such as semaglutide sodium or acetate. FDA says it is "not aware of any lawful basis" for using salts in compounding (FDA).
- Retatrutide or cagrilintide offered as a compounded product. FDA states these "cannot be used in compounding under federal law" (FDA).
- A boilerplate or check-box prescription process. Kansas's board warns that pre-printed or check-box prescriptions may not meet compounding requirements (Kansas Board of Pharmacy).
- A pharmacy that won't say where its API comes from. State rules require API from FDA-registered manufacturers with a certificate of analysis identifying the original maker (Kansas Board of Pharmacy).
A clean license is the floor, not the ceiling
An active license with no discipline tells you the pharmacy is legally operating and hasn't been publicly sanctioned. It doesn't tell you about a given lot's potency, sterility testing, or ingredient source. Pair the lookup with the questions in our certificate of analysis guide and the sourcing checks in our explainer on FDA's GLP-1 import alert. Together, they cover who made your medication, what went into it, and how it was tested.
Comparing providers?
See current pricing for FDA-approved GLP-1 medications from telehealth providers.
Paid links. We may earn a commission; it never changes what we write. See all options. Compounded medications are not FDA-approved.
Frequently asked questions
How do I look up a compounding pharmacy's license?
Take the pharmacy name and address from your vial label, find that state's board of pharmacy through NABP's directory, and use the board's license lookup to confirm the license is active, the right type, and free of current discipline.
How do I check if a pharmacy is a registered 503B outsourcing facility?
Search FDA's Registered Outsourcing Facilities list, which is updated weekly and shows registration dates, last inspection, whether a Form 483 was issued, and recall history. Registration does not mean FDA approved the facility's drugs.
Can a compounded GLP-1 label list a real pharmacy and still be fake?
Yes. FDA has reported fraudulent compounded semaglutide and tirzepatide with labels naming nonexistent pharmacies and real pharmacies that did not compound the product. Call the pharmacy using the phone number in the board record to confirm your lot.
Is NABP Verify a tool for checking pharmacies?
No. NABP Verify is a license verification and monitoring service for pharmacists. For consumers, NABP's board directory and its Safe Site Search tool at safe.pharmacy are the relevant resources.
Sources
- NABP, Boards of Pharmacy directory
- FDA, BeSafeRx Resources for Consumers
- FDA, BeSafeRx: Considering an Online Pharmacy?
- FDA, Registered Outsourcing Facilities (content current as of October 13, 2026)
- FDA, Questions and Answers: Outsourcing Facility Registration
- 21 U.S.C. 353b, Outsourcing facilities (Cornell LII)
- NABP, Safe.Pharmacy Safe Site Search
- NABP, Verify Terms and Conditions
- FDA, FDA's Concerns with Unapproved GLP-1 Drugs Used for Weight Loss (updated October 1, 2026)
- FDA, FDA Clarifies Policies for Compounders as National GLP-1 Supply Begins to Stabilize
- North Carolina Board of Pharmacy, Statement Concerning Semaglutide Compounding (April 2023)
- Kansas Board of Pharmacy, Statement on Compounded GLP-1 and GIP Receptor Agonists (updated April 22, 2026)
- Illinois Pharmacy Practice Act, 225 ILCS 85/16a (nonresident pharmacies)
- Holland & Knight, Massachusetts Board of Pharmacy to Take a Big Step (September 18, 2024)
Medical disclaimer: This article is general information, not medical advice, and does not replace a licensed clinician who knows your history. Approvals, labels, coverage and prices change; check the linked sources and talk with your prescriber or pharmacist before making decisions about any medication.