Answer extracted from the B2B Vault: The Biz To Biz Podcast — listen to the full episode below.
Why does LegitScript reject certification applications?
LegitScript rejects applications when products fall outside what is legally sellable, such as peptides like tirzepatide mixed with legitimate GLP-1s, or when merchants provide incomplete answers and fail to disclose past disciplinary issues. The platform also rejects applications featuring marketing claims that outrun the actual product, improperly licensed pharmacies or prescribers, or merchants who treat certification as a one-time checkbox rather than an ongoing compliance obligation.
Products outside the legal framework
The most straightforward rejection category involves products that cannot legally be sold or marketed in their current form. As Angela Salter discusses in the episode, LegitScript certifies based on current applicable laws and regulations, not what a committee thinks might be true in a year or two. This means that even if a product is in development or regulatory discussions, if it falls outside present legal boundaries, the application will be denied.
Applications featuring research-only peptide formulations marketed for human consumption similarly fail review. When a label states "research use only" but the website simultaneously promotes fat loss, recovery, anti-aging, or longevity benefits, the marketing messaging contradicts the legal positioning, making certification impossible under current FDA and FTC enforcement standards.
Incomplete disclosures and evasive answers
Merchants who provide vague, incomplete, or evasive responses during the LegitScript review process face automatic rejection. Full transparency about past disciplinary actions—whether at the provider, pharmacy, or prescriber level—is non-negotiable for approval. If a merchant omits or downplays prior regulatory issues, enforcement actions, or violations, the application will be declined.
Licensing and operational compliance gaps
Pharmacies and prescribers must hold proper licensure in their operating states to pass certification. A pharmacy licensed in one state but operating across multiple jurisdictions without proper credentials, or a prescriber working outside their licensed scope, will trigger rejection. This is not a technicality—it is a direct compliance requirement enforced by Visa, MasterCard, and ad platforms like Google and Meta.
Treating certification as a checkbox, not a relationship
One of the most common rejection signals mentioned by Salter is when merchants view LegitScript certification as a one-time approval rather than an ongoing compliance partnership. Merchants must update their certification within 30 days of adding new products, services, or making material changes to their business. Those who fail to maintain this active relationship or who view approval as permanent are at risk of decertification and potential placement on payment processor match lists, which can result in fines ranging from $50,000 to $200,000 or higher.
"We certify based on current applicable laws and regulations, not what a committee thinks might be true in a year or two."
Angela Salter — Vice President of Enterprise Certification Sales and Partnerships, LegitScript. Salter oversees enterprise customer onboarding and account management for all LegitScript certification customers, as well as strategic relationships with ad platforms and card brands such as Visa and MasterCard that require LegitScript certification for any telemedicine or pharmacy business operating online. Her role focuses on translating regulatory requirements into operational standards for merchants in the high-risk pharmaceutical and peptide sectors.
For deeper insight into how the certification process works in practice and what specific compliance triggers can lead to match-list placement, listen to the full episode on Listenly, where Salter walks through real-world scenarios and enforcement outcomes.
See also
What happens to merchants placed on the Visa and MasterCard match list?
Once on the match list, the chance of getting credit card processing again is slim to none, and merchants remain on the list for five years. Even after five years, approval is not guaranteed.
How does LegitScript treat websites that claim products are research-only while marketing them for human consumption?
If a website labels a product as research use only on the bottle but the entire page discusses fat loss, recovery, anti-aging, or longevity, the label and marketing messaging must align or the application is rejected.
What enforcement actions have occurred against research-only peptide sellers?
Research-only peptide companies have faced significant penalties including fines ranging from $50,000 to $200,000, with some companies fined into the millions following FTC and FDA investigations.
Key takeaways
- Products outside current legal frameworks—such as impermissible peptides or unapproved medication combinations—are automatically rejected.
- Incomplete answers, evasive responses, and undisclosed disciplinary history are grounds for immediate denial.
- Marketing claims must match the actual product; a "research only" label contradicted by consumer-use marketing will fail certification.
- Proper state licensing for pharmacies and prescribers is mandatory; operating without full credentials results in rejection.
- Certification is an ongoing obligation; merchants must update LegitScript within 30 days of material business changes or face potential decertification and match-list placement.