Why GLP-1 Telehealth Now Asks for Selfies and Government ID

The ID upload and the awkward live selfie aren't bureaucratic theater — they're the legal spine of remote prescribing. Here's what's being verified, where the images go, and why a site that skips this step is the red flag.

Process verified · Updated August 2026

Somewhere between the intake questionnaire and the payment page, every legitimate GLP-1 telehealth platform now stops you for the same two-step: photograph your government ID, then take a live selfie — sometimes with a liveness check that asks you to turn your head or blink. Patients find it invasive; skipping it would actually be the alarming part. Here's what that step is legally doing.

What's actually being verified

• You are a real, specific person. Telemedicine law in every state requires the prescriber to verify the identity of the patient they're treating. In an office, your driver's license and your face do this. The ID-plus-selfie flow is the remote equivalent — the selfie proves the ID's owner is the one filling out the intake, not someone using a found or borrowed license.
• You are an adult in a state where the platform's clinicians hold licenses. The ID's date of birth and address gate age and jurisdiction — a prescriber licensed in your state must be the one treating you (see our multi-state licensure guide for how the clinician-matching works behind the scenes).
• You aren't creating duplicate or fraudulent accounts. Identity verification is the backbone of preventing multi-account medication seeking, stolen-card fraud, and — bluntly — people obtaining GLP-1s for resale.
• The person in follow-ups is the patient of record. Some platforms re-verify at intervals or before major dose changes for the same reason.

Why it intensified for GLP-1s specifically

Three converging pressures made weight-loss telehealth stricter than, say, hair-loss telehealth: enforcement attention on the whole category (regulators scrutinizing prescribing standards at high-volume platforms), medication value (a cold-chain drug with street resale value invites fraud in a way finasteride doesn't), and payment fraud (subscription programs eat chargebacks when stolen identities enroll). Platforms tightened identity flows because the alternative was becoming the industry's soft target.

Where the images go

Legitimate platforms typically run verification through specialized third-party identity providers, which check the document's security features, match the selfie biometrically, and return a pass/fail to the platform. The practical questions worth checking in the privacy policy: how long are images retained, who can access them, and are biometrics deleted after matching? Health-adjacent identity data sits under both state privacy laws and, once inside the clinical record, HIPAA. Our data-flow guide traces the full journey from intake to pharmacy.

Making the step painless

• Use the phone flow, not webcam — document capture is far better.
• Photograph the ID on a dark, matte surface in daylight; glare on the hologram is the #1 rejection cause.
• Match the name on your intake exactly to the ID (middle names included); mismatches trigger manual review delays.
• If your address recently changed, expect a possible follow-up — platforms cross-check the state for licensure routing.

Platforms that do this cleanly

Verification friction varies more than you'd expect. YourEra runs a smooth modern intake with licensed clinicians behind it:

The bottom line

The selfie step is remote medicine proving you exist, you're of age, you're in-jurisdiction, and you're not a fraud vector — the same verification a front desk does with a glance. Two minutes of good lighting, and it's the strongest signal you're dealing with a real clinic rather than a checkout page with a stethoscope logo.