Every GLP-1 scam we've documented shares one feature: the payment method is designed to prevent you from getting your money back. Not sometimes. Every time.
Legitimate healthcare — telehealth included — accepts credit cards processed through a HIPAA-compliant payment processor. Credit cards offer chargeback rights under the Fair Credit Billing Act. If the service isn't delivered, if the product is defective, or if the company disappears, you can dispute the charge with your card issuer and have a realistic chance of getting your money back.
Platforms that steer you away from credit cards are steering you away from that protection. Here's the hierarchy of concern.
Tier 1: Immediate disqualifiers
Cryptocurrency only
No legitimate, licensed GLP-1 telehealth platform accepts only cryptocurrency. Period. Crypto payments are irreversible, unregulated for healthcare transactions, and functionally untraceable for dispute purposes. If a platform asks you to pay for a medical consultation or prescription medication in Bitcoin, Ethereum, or any other cryptocurrency, you are not dealing with a healthcare provider. You are dealing with a scam.
The crypto-only model is concentrated in platforms selling "research-grade peptides" — products marketed as semaglutide or tirzepatide but sold without a prescription, without pharmacy oversight, and without any quality assurance. These are not telehealth platforms. They are gray-market drug vendors wearing a lab coat.
Wire transfer only
Wire transfers share crypto's fundamental problem: once sent, the money is gone. No chargeback mechanism exists. Wire-transfer-only requests are a hallmark of advance-fee fraud — pay first, receive nothing — and have no place in healthcare transactions.
Tier 2: Serious warnings
Zelle, Venmo, or Cash App as primary payment
Peer-to-peer payment apps were designed for splitting dinner with friends, not for healthcare commerce. They offer minimal buyer protection. Zelle explicitly states that it does not offer purchase protection for goods and services. Venmo's purchase protection program applies only to transactions processed through its "Goods and Services" tag — and most scam platforms direct you to send as "Friends and Family" to avoid fees (and protections).
When a GLP-1 platform routes payment through a personal Zelle or Venmo account, it's operating outside the merchant payment infrastructure entirely. That means no HIPAA-compliant payment processing, no PCI compliance, no merchant account — and critically, no payment processor conducting due diligence on whether the business is legitimate.
Money orders or cashier's checks
Functionally equivalent to cash. No dispute mechanism. No paper trail that a payment processor would maintain. If you're asked to mail a money order for a telehealth service, you are not dealing with a modern healthcare company.
Tier 3: Yellow flags worth investigating
Debit card strongly preferred over credit card
Debit cards offer weaker consumer protections than credit cards. Under the Fair Credit Billing Act, credit card disputes cap your liability at $50 for unauthorized charges and provide dispute rights for goods not delivered. Debit card protections under the Electronic Funds Transfer Act are narrower and time-limited — you have 60 days to report, and the investigation timeline gives the bank more latitude.
Platforms that only accept debit or that push debit over credit ("enter your bank card for faster processing") may be optimizing for fewer disputes, not faster processing.
HSA/FSA acceptance without proper documentation
GLP-1 medications are generally HSA/FSA eligible when prescribed for a medical condition (obesity is an IRS-qualifying condition). Legitimate platforms provide itemized receipts coded appropriately for HSA/FSA reimbursement. Platforms that claim HSA/FSA acceptance but can't produce a medical receipt — or that code the charge as "wellness" or "consulting" — may not be processing these correctly, which creates tax liability for you.
What legitimate payment looks like
Every platform we recommend meets this standard:
Credit card accepted through a named payment processor. Stripe, Square, or another PCI-compliant processor. The charge appears on your statement under the platform's business name (or its DBA), not an individual's name or a generic descriptor like "HEALTH SVCS."
Itemized receipts available. You should be able to download a receipt that separates the consultation fee from the medication cost from shipping. This matters for insurance reimbursement, HSA/FSA documentation, and tax deduction purposes.
Refund policy published before checkout. Not buried in the terms of service. Visible on the pricing page. Stating the specific conditions under which a refund is issued, the timeline, and the method (original payment method, not store credit).
Cancellation accessible online. Per the FTC Click-to-Cancel rule: if you signed up online, you cancel online. No phone call required. No "retention specialist" call. No 30-day notice period that conveniently covers one more autoship.
One final pattern to watch
The "discount for non-card payment" trick. "Pay $199/mo by credit card or $149/mo by Zelle." The discount isn't generosity — it's the 3% credit card processing fee plus the elimination of your chargeback rights, packaged as a deal. You're saving $50/month in exchange for giving up your primary consumer protection mechanism. That's not a discount. That's a premium the platform is paying you to waive your rights.
The payment method is the first and simplest audit. If a platform fails at the payment level, nothing else it claims matters. A legitimate healthcare company accepts legitimate payment methods. Full stop.