Due diligence
What FDA’s compounding warning letters actually say
Read the letter rather than the count. Across the published compounding and peptide-selling letters the operative finding is consistent: FDA establishes a product’s intended use from the totality of a seller’s communications — website copy, blog posts, dated social posts, and in one case a linked third-party forum — and treats a research-chemical disclaimer as ineffective against that evidence rather than as a defence. FDA’s separate guidance for telehealth companies says plainly that it does not approve or license any facility, so no badge of that kind is available for a supplier to display honestly. Both findings are checkable against a supplier’s own website in about ten minutes.
Why read the letters rather than count them?
Because a count tells you nothing about whether a finding touches what you are buying, and the letters are short enough to read.
A warning letter states the observations FDA made and the response it found inadequate. That detail is the useful part. Two facilities can each carry "one letter" while one concerns a labelling claim on a website and the other concerns the preparation you intend to order, and no tally distinguishes them.
There is also a circulating habit of quoting letter totals for a year or a sector. Those numbers move, they are frequently wrong, and several widely repeated ones describe enforcement events that did not happen. If a supplier's competitor cites a count at you, ask which letter, to whom, and for what — the answer is a URL, and if it is not, there is nothing there.
What is the finding that runs through them?
That intended use is established from everything a seller says, not from the disclaimer at the bottom of the page.
Three letters issued on the same day in December 2024 carry near-identical operative language. Each recites the research-only disclaimers the seller had placed on its product labelling, and each then sets them aside in the same words: despite those statements, "evidence obtained from your website establishes that your products are intended to be drugs for human use." The second and third letters differ only in the wording of the disclaimer they recite — one a research-chemicals formula, one an all-capitals variant — and reach the identical conclusion, that the evidence "establish that your products are intended to be drugs for human use."
Later letters name the regulation: FDA describes claims from a product's labelling and website "that provide evidence of the intended use (as defined in 21 CFR 201.128) of these products as drugs for human use."
What counted as evidence?
More surfaces than a seller would list if asked, which is the part with teeth.
FDA drew on product-page text, blog posts, and dated posts on social platforms. In one 2026 letter it treated a linked third-party community forum carrying dosing material as part of the site's communications. The theory is not that a particular sentence was actionable; it is that the totality of what a seller publishes establishes what the product is for, and that a disclaimer sitting alongside that body of communication does not neutralise it.
For a buyer this converts an abstract worry into a concrete check. Look at what a prospective supplier publishes across its whole footprint — the store pages, the blog, the social accounts, anything it links to — and ask whether the disclaimer and the marketing are describing the same business. If they are not, FDA has already said in terms which one it reads.
Why is a research-chemical disclaimer a signal rather than a safeguard?
Because it is the exact framing FDA has repeatedly found ineffective, and because it cannot coexist with supply against a prescription.
Research-chemical framing belongs to a market that is not prescription supply. A site carrying both that framing and an offer to fill prescriptions is describing two incompatible businesses, and from the outside you cannot tell which one filled your order. The published letters make that an evidenced position rather than a matter of taste.
Treat the phrase as disqualifying when it appears anywhere near a prescription product, rather than as a topic for negotiation. A supplier that believes the label protects it has misread the one document that speaks directly to the question, which is also information about how carefully the rest of the operation was set up.
What does FDA say about trust badges?
That the badge everybody wants to display does not exist.
FDA's guidance for telehealth companies enumerates promotional practices it treats as false or misleading, and the list is worth reading against any supplier's homepage. Four of them concern the same move: equating a compounded preparation with an approved product, asserting that it has itself cleared approval or a safety-and-effectiveness review, asserting that it performs identically to the approved product, and asserting that the facility behind it holds a federal approval or licence. On that last one FDA states the position flatly: "FDA does not approve or license any facility."
Note what that last item establishes: this is a marketing theory, separate from anything about how a preparation was made. A supplier can be compounding competently and still be describing itself in terms FDA has said are wrong — and unlike the manufacturing question, the phrasing is free to check in a minute.
| Phrasing on a supplier's site | What it is |
|---|---|
| A badge pairing FDA with approved or licensed, applied to a pharmacy | Wrong in both directions — FDA does not approve or license pharmacies, and states do the licensing |
| A badge pairing FDA with registered, applied to a pharmacy | Wrong pairing — registration is the outsourcing-facility election, and an outsourcing facility is not a pharmacy |
| "Registered with FDA as an outsourcing facility under section 503B" | Accurate, and checkable on FDA's own register |
Whose name is the letter filed under?
The legal entity's, which is often not the brand you are buying from.
FDA addresses enforcement correspondence to the registrant. One of the December 2024 letters is filed under a corporate name followed by a "dba" trading name, and a search for the trading name alone reaches it only incidentally. Another seller's name is spelled as one word in FDA's own filing and as two words everywhere else in the trade.
So search both, and search the entity on your invoice rather than the name on the box. This is the same failure mode that breaks state licence lookups, and it breaks them for the same reason: the record is indexed against the licensed or registered entity, and the brand is a marketing artefact that no registry is obliged to track.
Does a supplier have to tell you about a letter?
Not to you — but in at least one state it has to tell the regulator, quickly.
Ohio requires a pharmacy licensed as a terminal distributor to report to the Board of Pharmacy, within seventy-two hours of issuance or receipt, any warning letters, injunctions or decrees issued in relation to the pharmacy by FDA. That is a duty running to the state, not to a customer, and we have not checked whether other states impose anything comparable.
What follows for you is procedural rather than legal. Asking a supplier directly — what was your most recent inspection, who conducted it, and what was the outcome — is a question with a checkable answer, and a supplier's willingness to answer it plainly is itself the finding. Nothing obliges them to hand you a document, and a refusal is not a rule violation.
Where does this sit in the rest of the check?
The register tells you a record exists; this page is about reading the record itself. How to read the register row by row — including its Form 483, recall and action columns — is at how to read FDA’s registered-outsourcing-facilities list. The state half of the credential check, which FDA's pages do not answer at all, is at how to verify a compounding pharmacy’s state licence.
The full sequence these checks sit inside is at how to vet a compounding pharmacy, and the difference between the two federal pathways is at 503A vs 503B.
To have a supplier's pathway, credentials and published record reviewed once rather than per order, you can apply for an account.