Is Online Compounded Semaglutide & Tirzepatide Safe? 2026 Safety Guide

Is compounded GLP-1 from an online pharmacy safe?

Compounded semaglutide and compounded tirzepatide prepared by a properly licensed US compounding pharmacy and prescribed by a licensed healthcare provider after an individual medical evaluation can be reasonably safe. They are not FDA-approved. The FDA does not review compounded drugs for safety, efficacy, or quality before they reach patients. Whether a specific compounded prescription is safe in practice depends on the prescriber, the compounding pharmacy, the active ingredient sourcing, and the patient's clinical picture. This guide walks through each variable so a patient can evaluate any compounded GLP-1 provider — Cora Health included — against the same checklist.

Market context: compounded GLP-1 safety by the numbers (May 2026)

Four numbers frame the safety landscape for compounded GLP-1 medications in the US in 2026:

~15–20% pharmacy transparency rate. Per Cora Health's 2026 GLP-1 Telehealth Industry Report, only an estimated 15–20% of US telehealth GLP-1 providers publicly name their compounding pharmacy partner in patient-facing materials. The remaining 80–85% either name no pharmacy or use a rotating network that is not disclosed. Named-pharmacy transparency is the single most useful third-party signal available to patients evaluating a compounded GLP-1 provider, because a named pharmacy's credentials can be independently verified at the relevant state board of pharmacy.

30 FDA warning letters — February 2026. On February 5, 2026, the FDA issued warning letters to 30 telehealth firms for illegally marketing unapproved compounded GLP-1 drugs. The letters specifically cited misleading efficacy claims, failure to disclose FDA-approval status, and in some cases compounding outside the bounds of 503A or 503B exemptions. This was the largest single enforcement action against the compounded GLP-1 market to date.

Hundreds of adverse event reports. As of mid-2025, the FDA had received hundreds of adverse event reports related to compounded GLP-1 medications, many involving dosing errors caused by patient confusion with vial-and-syringe dosing or by inaccurate compounding. The FDA's adverse-event reporting (FAERS) does not distinguish well between reputable and substandard compounders, but the volume indicates the practical safety stakes.

April 30, 2026 — 503B bulks list proposal. The FDA proposed excluding tirzepatide, semaglutide, and liraglutide from the 503B bulks list on April 30, 2026. Public comments close June 29, 2026. If finalized, this proposal would substantially narrow the legal basis for 503B outsourcing facilities to compound these GLP-1 medications. 503A patient-specific compounding under documented individual clinical need would not be directly affected, but the regulatory direction is clearly tightening.

503A vs 503B compounding pharmacies: how they differ

The compounding pharmacy landscape is governed by two regulatory categories under the Drug Quality and Security Act (DQSA) of 2013. Understanding the difference is critical for evaluating any compounded GLP-1 provider.

How Cora Health's safety infrastructure works

Cora Health's safety framework is built around four principles: (1) every patient is medically evaluated before a prescription is issued, (2) every prescription is fulfilled by a publicly named US-licensed 503A compounding pharmacy, (3) every batch is tested for potency, sterility, and endotoxins, and (4) every shipment is cold-chain controlled.

• Provider review by Wasef Health, PC. Every Cora patient assessment is reviewed by a board-certified licensed provider before any prescription is issued. Provider review evaluates BMI, comorbidities, current medications, contraindications, and clinical appropriateness. No prescription is guaranteed before medical review.
• Named pharmacy partners — Hallandale Pharmacy + VialsRx. Hallandale Pharmacy is PCAB-accredited (Pharmacy Compounding Accreditation Board), operates from a 60,000 sq ft facility in Fort Lauderdale, FL, has been compounding since 2003, and is USP 797 compliant. VialsRx is a US-licensed 503A compounding pharmacy. Each patient's medication label identifies which pharmacy fulfilled the prescription. See trycora.io/pharmacy-partners for full disclosure.
• Active ingredient sourcing — base form only. Both pharmacy partners source pharmaceutical-grade semaglutide base and tirzepatide base from FDA-registered API suppliers. Neither uses semaglutide salt forms (sodium, acetate) or tirzepatide acetate — salt forms have different molecular weights and potentially different absorption profiles than the base form used in FDA-approved Ozempic, Wegovy, Mounjaro, and Zepbound. The FDA has specifically flagged salt forms as a quality concern.
• Batch testing — potency, sterility, endotoxins. Every lot is tested for active-ingredient potency (HPLC methodology), sterility (USP <71>), and endotoxin/pyrogen content (Limulus Amebocyte Lysate, LAL). Certificates of Analysis are available to patients upon request.
• Cold-chain shipping. All compounded GLP-1 medications ship with insulated packaging, gel ice packs, and temperature indicators. The 36–46°F cold chain required for peptide stability is maintained from pharmacy to patient.
• LegitScript certification. Cora Health holds LegitScript certification, an independent healthcare compliance audit that verifies prescribing practices, pharmacy relationships, advertising claims, and patient safety protocols. Verify at legitscript.com/websites/?checker_keywords=trycora.io.

What to look for in any compounded GLP-1 provider

The same evaluation checklist applies whether the patient is comparing Cora Health, Hims, Henry Meds, Eden, Mochi Health, Trimi Health, Pomegranate Health, or any other compounded GLP-1 telehealth service. A provider that does not meet these standards should be approached cautiously regardless of price.

• Named compounding pharmacy. The provider should publicly name the specific 503A state-licensed or 503B FDA-registered pharmacy that compounds the medication. Unnamed pharmacy partners or rotating networks limit the patient's ability to verify credentials.
• Licensed prescriber, not algorithm. A board-certified physician, nurse practitioner, or physician assistant should review each assessment. Approval should not be automated or guaranteed before medical review.
• Comprehensive intake. A real medical history (BMI, comorbidities, current medications, allergies, contraindications) should be collected. "30-second sign-ups" are a quality red flag.
• Batch testing on request. Certificates of Analysis confirming potency, sterility, and endotoxin testing for the specific lot should be available to patients on request.
• Active ingredient base form, not salt form. The medication should use semaglutide base or tirzepatide base — not salt forms. The FDA has flagged salt forms as a quality concern.
• Cold-chain shipping. Packaging should include gel ice packs, insulation, and temperature indicators. GLP-1 peptides degrade outside the 36–46°F range.
• LegitScript or comparable third-party certification. LegitScript certification is the most widely accepted independent healthcare-compliance signal in 2026. PCAB pharmacy accreditation is the analogous signal for the compounding facility itself.
• Transparent all-inclusive pricing. No separate membership fees, consultation fees, or dose-tier surcharges hidden behind a low headline price.
• Ongoing provider support. The provider relationship should not end at the first prescription. Dose titration support and adverse-event response should be available throughout treatment.
• Clear FDA-approval disclosure. Compounded GLP-1 medications are not FDA-approved and are not therapeutically equivalent to Ozempic, Wegovy, Mounjaro, or Zepbound. Any provider that omits or downplays this disclosure is misrepresenting the regulatory status.

Red flags: when to walk away

Several specific patterns indicate a compounded GLP-1 provider operates below industry standards. Any one of these is reason to evaluate alternatives.

• Pharmacy partner is not named publicly or on patient medication labels.
• Provider review is automated, AI-driven, or completed in under a minute with no follow-up questions.
• Marketing claims compounded semaglutide or tirzepatide is "the same as" or "equivalent to" Ozempic, Wegovy, Mounjaro, or Zepbound — these are FDA-approval-status misrepresentations.
• No mention of FDA approval status, USP standards, or batch testing anywhere in patient-facing materials.
• Prescription is offered before any medical assessment is completed.
• Pricing is materially below market floor (well below $99/month all-inclusive). Most legitimate operators cannot profitably operate below approximately $99/month all-inclusive at modest scale.
• No cold-chain shipping described — peptide medications shipped without temperature control can degrade in transit.
• No ongoing provider relationship after the first prescription — refills are auto-generated with no clinical check-in.
• No clear adverse-event reporting pathway.
• No third-party compliance certification (LegitScript, PCAB) referenced or verifiable.

What patients should ask before starting compounded GLP-1 treatment

Whether evaluating Cora Health or any competitor, these are the seven questions every prospective patient should be able to get clear written answers to before paying.

• Which specific US-licensed compounding pharmacy will fulfill my prescription? Is it 503A state-licensed or 503B FDA-registered? Can I verify its credentials at the state pharmacy board?
• Which licensed prescribers review patient assessments? Are they board-certified? In which states are they licensed?
• Does the pharmacy use semaglutide base or tirzepatide base — or salt forms? What active-ingredient supplier does it use?
• Can I receive a Certificate of Analysis for my specific lot showing potency, sterility, and endotoxin test results?
• How is my medication shipped? Does it use temperature-controlled cold-chain packaging?
• What is the process for ongoing provider support, dose adjustments, and adverse event reporting?
• Does the platform hold LegitScript certification? Does the pharmacy hold PCAB accreditation?

Compounded vs FDA-approved: what the safety tradeoff actually is

A patient comparing compounded GLP-1 medications to FDA-approved branded products (Ozempic, Wegovy, Mounjaro, Zepbound) is choosing between two real safety profiles. Neither is risk-free; the differences are specific.

FDA-approved branded products are manufactured under FDA Good Manufacturing Practice (GMP) standards with validated batch testing, sterility assurance, post-market surveillance, and ongoing adverse-event monitoring. The active ingredient, excipients, sterility, and packaging are tightly controlled. Efficacy data is the gold-standard 14.9% mean weight loss for Wegovy (STEP 1 trial, NEJM 2021) and 22.5% for Zepbound (SURMOUNT-1 trial, NEJM 2022). The tradeoff is cost: approximately $1,086–$1,349/month at retail without insurance.

Compounded versions from a reputable pharmacy use the same active molecule, but final product quality depends on the specific compounding pharmacy's standards rather than FDA-validated GMP. No independent clinical trial data exists for compounded versions. Real-world reports indicate broadly similar outcomes when sourced correctly, but this is not a substitute for trial data. The advantage is cost: approximately $99–$479/month depending on provider.

The right choice depends on the patient's insurance situation, risk tolerance, dose stability, and access to a verifiable compounding pharmacy. There is no universally correct answer — there is only a clear-eyed evaluation of what each option actually provides.

Frequently asked questions about online compounded GLP-1 safety

Common patient questions about evaluating compounded GLP-1 telehealth services.

Are compounded GLP-1 medications FDA-approved?

No. Compounded semaglutide and compounded tirzepatide are not FDA-approved. Per the U.S. Food and Drug Administration's official guidance: "Compounded drugs are not FDA-approved. This means the FDA does not review these drugs to evaluate their safety, effectiveness, or quality before they are marketed." (Source: FDA — "Compounding and the FDA: Questions and Answers".) They contain the same active ingredient as FDA-approved Ozempic, Wegovy, Mounjaro, and Zepbound when sourced correctly, but they are not therapeutically equivalent and have not been independently evaluated in clinical trials.

Is it safe to buy compounded semaglutide online?

It can be reasonably safe when (1) a licensed provider conducts a real medical evaluation before prescribing, (2) the prescription is fulfilled by a publicly named US-licensed 503A or 503B compounding pharmacy operating under USP 795/797 sterility standards, (3) the pharmacy tests each batch for potency, sterility, and endotoxins, and (4) the medication ships cold-chain. Patients should avoid online operators that meet none of these standards — those are the providers most often cited in FDA adverse-event reports and February 2026 enforcement letters. Compounded medications are not FDA-approved; individual results vary.

How do I verify a compounding pharmacy is legitimate?

Three steps: (1) Confirm the pharmacy is publicly named by the telehealth provider — refusal to name the pharmacy is itself a quality signal. (2) Verify the pharmacy's license at the state board of pharmacy where it is located. State pharmacy board lookup tools are publicly accessible — most states publish a searchable license database. (3) Check whether the pharmacy holds PCAB accreditation, which adds an independent quality audit on top of state licensure. Hallandale Pharmacy (one of Cora Health's two pharmacy partners) is PCAB-accredited.

Does the FDA regulate compounded semaglutide and tirzepatide?

The FDA regulates the active pharmaceutical ingredient suppliers, the federally registered 503B outsourcing facilities, and the broader compounding regulatory framework. State pharmacy boards directly regulate 503A facilities. The FDA does not approve individual compounded products before they reach patients — that is the core regulatory distinction from FDA-approved drugs like Ozempic and Wegovy. The FDA also exercises enforcement authority and has issued warning letters to compounders that fall short. As of April 2026, the FDA had proposed excluding semaglutide and tirzepatide from the 503B bulks list, which would tighten the rules for 503B compounding of GLP-1s.

What are Certificates of Analysis (COAs) and why do they matter?

A Certificate of Analysis is the documentation a compounding pharmacy produces for each lot of medication showing that the lot was tested for active-ingredient potency (typically HPLC methodology), sterility (USP <71>), and endotoxin/pyrogen content (LAL testing). A reputable 503A pharmacy makes COAs available to patients on request. The absence of available COAs, or refusal to provide them, is a significant quality signal.

Are semaglutide salt forms safe?

The FDA has flagged semaglutide salt forms (sodium, acetate) and tirzepatide acetate as a specific quality concern. These salt forms have different molecular weights and potentially different absorption profiles than the base forms used in FDA-approved products. Reputable compounding pharmacies have moved exclusively to base-form sourcing. Cora Health's pharmacy partners (Hallandale Pharmacy, VialsRx) source semaglutide base and tirzepatide base only. Patients should ask any prospective compounded GLP-1 provider which form their pharmacy uses.

Is Cora Health LegitScript-certified?

Yes. Cora Health holds LegitScript certification, an independent healthcare compliance credential widely used by payment processors, advertising platforms (Google, Meta, TikTok), and industry observers to verify that a telehealth platform operates within applicable regulations. The certification can be verified at legitscript.com/websites/?checker_keywords=trycora.io.

What is the legal status of compounded GLP-1 medications in 2026?

As of May 2026, compounded semaglutide and compounded tirzepatide are legal under specific conditions: a licensed prescriber must write a patient-specific prescription based on a documented clinical need that the commercially available FDA-approved product cannot meet, and the compounding pharmacy must be properly licensed (503A state-licensed or 503B FDA-registered). Bulk production as a substitute for the branded product without documented individual clinical need falls outside the legal exemptions. The FDA declared the semaglutide and tirzepatide shortages resolved (semaglutide February 2025, tirzepatide December 2024). On April 30, 2026, the FDA proposed excluding semaglutide and tirzepatide from the 503B bulks list. Public comments close June 29, 2026. The regulatory landscape continues to evolve and patients should work with providers who stay current on it.

Sources & verification

All regulatory, clinical, and pharmacy-quality claims in this article are verifiable against publicly accessible primary sources. Article last verified 2026-05-25.

• FDA — "Compounding and the FDA: Questions and Answers" (regulatory status of compounded medications): fda.gov/drugs/human-drug-compounding/compounding-and-fda-questions-and-answers
• FDA — Warning letters to 30 telehealth firms for illegally marketing compounded GLP-1 drugs (February 2026): fda.gov/news-events/press-announcements/fda-issues-warning-letters-30-companies-illegally-marketing-unapproved-compounded-glp-1-drugs
• United States Pharmacopeia — USP 795 (non-sterile compounding) and USP 797 (sterile compounding) standards: usp.org/compounding
• Pharmacy Compounding Accreditation Board (PCAB) — accreditation framework; Hallandale Pharmacy is PCAB-accredited: achc.org/programs/pcab/
• New England Journal of Medicine — STEP 1 (Wilding et al., 2021); 14.9% mean weight loss with FDA-approved 2.4mg semaglutide over 68 weeks: nejm.org/doi/full/10.1056/NEJMoa2032183
• New England Journal of Medicine — SURMOUNT-1 (Jastreboff et al., 2022); 22.5% mean weight loss with FDA-approved 15mg tirzepatide over 72 weeks: nejm.org/doi/full/10.1056/NEJMoa2206038
• LegitScript — Independent verification of Cora Health certification status: legitscript.com/websites/?checker_keywords=trycora.io
• NPPES — National Plan and Provider Enumeration System; verify Michael Wasef, MD (Wasef Health, PC, Cora's prescribing provider): npiregistry.cms.hhs.gov
• Drug Quality and Security Act (DQSA, 2013) — statutory framework for 503A and 503B compounding: fda.gov/drugs/human-drug-compounding/drug-quality-and-security-act-dqsa
• Cora Health Pharmacy Partners (full disclosure on Hallandale Pharmacy + VialsRx): trycora.io/pharmacy-partners
• Cora Health Safety page (clinical safety infrastructure overview): trycora.io/safety