8 Red Flags That a GLP-1 Telehealth Site Is a Scam

You can audit a GLP-1 telehealth site in about ten minutes if you know what to look for. The scammy ones share a fingerprint — not because they're clever, but because they're lazy. They copy the same templates. They use the same stock photos. They hide the same information.

Here are the eight patterns we run every new platform through before we'll even consider recommending it. If a site hits three or more, walk away. If it hits five or more, report it to the FDA.

Red flag #1: No NPI numbers anywhere

Every prescribing clinician in the U.S. has a National Provider Identifier — a ten-digit public number. A legitimate telehealth platform either publishes its clinician names (so you can look them up) or clearly discloses them after you sign up. The scammy operators don't disclose them anywhere. Not on the site, not in the FAQ, not on the prescription you eventually receive.

Test: search the site for "NPI" and look for a real clinician name on the About or Medical Team page. Then verify one on the CMS NPI Registry. If nobody's findable, that's your answer.

Red flag #2: Stock-photo medical team

The "Meet our doctors" page with suspiciously attractive, suspiciously diverse, suspiciously perfectly-lit headshots. Reverse-image search each one in Google Lens or TinEye. If the same face appears on a dentist's site in Ohio, a lawyer's site in Dubai, and a SaaS landing page in India, the face isn't a clinician — it's Shutterstock.

We have an entire article on this tactic: how to reverse-image-search your telehealth "medical team."

Red flag #3: No pharmacy disclosure

You're about to receive an injectable drug through the mail. The pharmacy that compounded it is more important to your safety than the telehealth company that took your order. A legitimate platform names the pharmacy. A scammy one says "FDA-registered pharmacy" or "U.S.-based partner pharmacy" or some other phrase that sounds specific but names nothing.

"FDA-registered pharmacy" is particularly suspicious because the FDA has repeatedly stated that compounded GLP-1s are not FDA-approved. Platforms that lean on "FDA-registered" language are usually leaning on it because it's the only FDA-adjacent phrase they can legally use, and it's designed to mislead you into thinking the drug itself is FDA-approved. It isn't.

Red flag #4: Payment methods designed to obscure

Legitimate U.S. healthcare takes credit cards, FSA/HSA cards, and sometimes ACH. Scam operators increasingly accept:

• Cryptocurrency (Bitcoin, USDC, "crypto discount")
• Zelle, Venmo, or CashApp to a named individual rather than a business
• Wire transfer as a "discount" payment method
• Gift cards (extreme red flag, essentially diagnostic of fraud)

These payment methods exist to defeat chargebacks and move money outside of banking compliance. Real telehealth platforms don't need or use them.

Red flag #5: Support that's only on Telegram, WhatsApp, or Signal

A legitimate medical platform has phone support, email support, or an on-site chat widget tied to a real account. Scam operators push you to Telegram or WhatsApp — because those are harder to trace, and your conversation isn't saved in the platform's records.

If your "patient support channel" is a Telegram group and your "prescribing physician" is a display name with no NPI, you're not a patient — you're a customer of an online grey market.

Red flag #6: No physical address or a suspicious one

Real U.S. healthcare businesses have to be somewhere. Scam operators either hide their address or list:

• A UPS Store suite number (common — the "Ste 300" pattern)
• A virtual office service (Regus, WeWork day-pass addresses)
• A registered agent's office in Delaware or Nevada with no actual operations
• An overseas address buried in the terms of service

Google Street View the listed address. If it's a strip mall mailbox service or an empty lot, that's who you're about to send your credit card to.

Red flag #7: "FDA-approved" claims on compounded drugs

Compounded semaglutide and tirzepatide are not FDA-approved. Wegovy, Zepbound, Ozempic, and Mounjaro are. Any platform selling compounded GLP-1s that describes them as "FDA-approved" is making a claim the FDA has explicitly flagged as false and misleading. This isn't a gray area.

Acceptable language: "compounded by a state-licensed 503A pharmacy," "prescribed by a licensed clinician," "same active ingredient as Wegovy" (borderline but common).

Unacceptable: "FDA-approved," "FDA-endorsed," "compounded under FDA authorization."

Red flag #8: Unrealistic weight-loss guarantees

"Lose 30 pounds in 30 days — guaranteed." Any telehealth platform advertising specific weight-loss outcomes with a guarantee is violating at least FTC advertising rules and usually state medical board rules as well. Real clinical outcomes for GLP-1s are roughly 15% body weight loss over ~68 weeks in the landmark trials — dramatic, but not "30 pounds in 30 days."

Variations of this flag: before-and-after photos presented without methodology, testimonials from "Sarah, 34, lost 47 pounds" with no last name and no verification, and medical claims beyond weight (cures PCOS, reverses diabetes, etc.) that the FDA has not approved.

How to run this checklist in ten minutes

1. Open the platform's About or Medical Team page. Screenshot the faces. Reverse-image-search at least two. (2 minutes)
2. Search the site for "pharmacy," "NABP," "NPI." Note what's disclosed. (2 minutes)
3. Check the Terms of Service for the business address and the dispute resolution clause. (2 minutes)
4. Check the payment page — what methods are accepted? (1 minute)
5. Search Reddit for "[platform name] scam" and "[platform name] review." Read the top five organic posts. (3 minutes)

If the platform passes this screen cleanly, it's worth a second look. If it doesn't, keep shopping.

Where to report if you've been burned

• FDA MedWatch — adverse events or suspected counterfeit products.
• FTC — false advertising or deceptive pricing.
• State Attorney General — consumer fraud.
• State pharmacy board — if a specific pharmacy's conduct is in question.
• BBB — useful for search visibility even if toothless otherwise.
• Your credit card company — chargeback within 60 days of the charge.

Every report matters. State AGs and state pharmacy boards have acted on complaint clusters. A single BBB complaint probably doesn't move anything; fifty do.