The National Association of Boards of Pharmacy (NABP) has identified more than 50,000 online pharmacy websites that it considers rogue, operating outside the law, dispensing prescription medications without valid prescriptions, selling counterfeit or substandard products, or based outside the United States without appropriate oversight. In a market this saturated with illegitimate operators, recognizing red flags is a practical patient safety skill.
The Most Common Red Flags
No valid prescription required: Any online pharmacy selling prescription medications without requiring a valid prescription from a licensed US prescriber is operating illegally. The prescription requirement exists because medications have specific indications, dosing considerations, contraindications, and monitoring requirements. An online pharmacy that asks you to self-certify that you “have a prescription” without actually verifying one is not the same as requiring a prescription.
Based outside the United States (for US patients): Legitimate online pharmacies that ship to US patients must hold US state pharmacy licenses and comply with US federal drug laws. Pharmacies based in Canada, India, or other countries cannot legally ship prescription medications directly to US patients without DEA and FDA compliance. Some do so anyway, their products have no oversight guarantee.
Prices dramatically below US market rates: When an online pharmacy offers brand-name medications at 80-90% below US list prices, the product is either counterfeit, substandard, or from an unregulated overseas source. Legitimate compounding pharmacies offer lower prices for compounded versions, not for brand-name products.
No physical address or contact information: Legitimate pharmacies have verifiable addresses, licensed pharmacists available by phone, and multiple contact methods. A pharmacy with only a web form for contact and no verifiable physical address is almost certainly not operating legitimately.
Unsolicited email or social media offers: Legitimate pharmacies do not send unsolicited promotional emails offering prescription medications or contact individuals through social media to sell prescription drugs.
Poor website quality with urgent upsells: Rogue pharmacies often use high-pressure tactics, “Limited supply,” “Order in the next 30 minutes”, and poorly written or translated website content. These are characteristics of marketing operations rather than clinical operations.
How to Verify an Online Pharmacy in 60 Seconds
- Go to nabp.pharmacy and search for the pharmacy name or website
- If VIPPS-accredited or NABP-approved, it appears in their database
- Go to the LegitScript database (legitscript.com/lookup) and search the pharmacy
- If the pharmacy claims 503B outsourcing facility status, check the FDA’s outsourcing facility list
- Check your state pharmacy board’s license lookup for the state where the pharmacy claims to be located
A pharmacy that cannot be verified through any of these sources should not receive your order or your payment information.
The NABP’s “.pharmacy” Domain
NABP manages the “.pharmacy” top-level domain, which is available only to verified pharmacies that have passed NABP’s vetting process. A pharmacy operating at a .pharmacy domain has met a baseline verification standard. This is not available to rogue operators, though many legitimate pharmacies continue to use .com domains as well.
For the broader framework on evaluating online healthcare providers, see LegitScript Certification: What It Means for Online Pharmacies and Telehealth and Online Prescription Safety: How to Avoid Counterfeit and Substandard Medications.
