LegitScript Is No Longer Optional — What Every Med Spa and Wellness Clinic Needs to Know

A few years ago, LegitScript was something most wellness clinic owners had never heard of. Today, it's the reason ads get shut off, payment accounts get frozen, and clinics that were operating profitably suddenly can't reach new patients.

If you're offering GLP-1 weight loss injections, peptide therapy, IV hydration, hormone replacement, or any other prescription-adjacent service — and you haven't yet dealt with LegitScript — this is the moment to take it seriously. Because the enforcement window isn't opening. It's closing.

What Is LegitScript?

LegitScript is a third-party compliance certification and monitoring organization that partners with the world's major digital advertising platforms and payment networks to verify that healthcare businesses operate legally and transparently.

Here's the short version of why it matters: Google, Meta, TikTok, Microsoft Bing, LinkedIn, YouTube, Nextdoor, Visa, and Mastercard have all integrated LegitScript certification into their compliance requirements. For healthcare businesses offering medical services, prescription treatments, or anything that falls under regulated healthcare advertising, these platforms won't let you run ads — or in some cases, process payments — without it.

LegitScript isn't a government agency, and in most states, obtaining its certification isn't technically required by law. But the practical reality is that the major commercial infrastructure your business depends on — advertising platforms, payment processors, even online directories — now treats LegitScript certification as the baseline for legitimacy.

Think of it like FDIC insurance for a bank. No law requires it in every scenario. But try operating a bank without it and see what happens to your depositors' trust — and your ability to operate at all.

Why This Happened — And Why It Accelerated

The wellness industry exploded over the past five years. GLP-1 medications like semaglutide and tirzepatide became cultural phenomena. Peptide therapy went from a fringe offering to a mainstream wellness service. IV hydration lounges opened in strip malls across the country. Telehealth platforms started prescribing compounded medications at scale.

With that growth came a flood of bad actors — unvetted providers, counterfeit medications, misleading advertising, and clinics operating outside their legal scope of practice. Multiple high-profile incidents involving med spas and online health platforms damaged consumer confidence and triggered regulatory scrutiny at both the federal and state level.

The advertising and payment platforms responded by tightening enforcement. LegitScript, which had been quietly certifying online pharmacies and addiction treatment centers for years, became the mechanism through which these platforms separated compliant providers from risky ones. The numbers reflect just how fast this shift happened:

• In the first half of 2024 alone, LegitScript received 94% as many new healthcare certification applications as it received in all of 2023
• Applications grew 47% from 2022 to 2023 — and then nearly doubled again
• Over 60% of new applicants focus on weight-loss medications; of those, 98% offer compounded GLP-1s
• LegitScript monitored more than 500,000 paid search advertisements referencing GLP-1s in just a two-month period
• Violative and problematic advertisements increased 1,200% since 2022
• 2024 saw a 300% increase in payment processor violations tied to GLP-1 and peptide sales
• Med spas flagged for compliance issues spiked 220% in the same year

If you've been watching this from the sidelines, waiting to see how enforcement shakes out — the data above is your answer.

Who Needs LegitScript Certification?

Not every wellness business needs it. If your practice is entirely in-person, you don't process card-not-present payments, you don't run paid digital advertising for medical services, and none of your services involve prescription medications — you may not be in the crosshairs.

But for the vast majority of growing wellness businesses, at least one of these scenarios applies:

Medical Spas

If you're advertising Botox, fillers, laser treatments, GLP-1 programs, hormone therapy, or IV hydration on Google or Meta — and you're not LegitScript certified — your ads are either already being disapproved or will be soon. Google and Meta both require LegitScript certification to advertise prescription-based or medically supervised services.

IV Hydration and Vitamin Therapy Clinics

IV therapy falls squarely in the regulated healthcare advertising category. If you're running search ads or social campaigns promoting IV infusions, high-dose vitamin protocols, or NAD+ therapy, LegitScript certification is typically required to remain compliant on those platforms.

GLP-1 and Weight Loss Programs

This is the highest-scrutiny category right now. Advertising semaglutide, tirzepatide, or any branded or compounded GLP-1 without LegitScript certification means you cannot legally include those medication names in your ad copy or landing pages on Google or Meta — full stop. Violations can result in account suspension, not just individual ad disapprovals.

Peptide Therapy Clinics

Peptides occupy a regulatory gray area, which is exactly why platforms have tightened oversight. BPC-157, TB-500, sermorelin, AOD-9604, and similar peptides are frequently marketed with health claims that trigger healthcare advertising policies. LegitScript certification provides the compliance credential needed to advertise these services legitimately.

Telehealth and Online Prescribing Platforms

Any platform collecting payment online for prescribed medications — even when a pharmacy ultimately fulfills the prescription — may be subject to LegitScript requirements under Visa and Mastercard's Merchant Category Code rules.

What Certification Actually Gets You

Framing LegitScript purely as a compliance burden misses the bigger picture. Certified clinics get tangible operational advantages:

• Full access to paid search on Google and Meta for restricted healthcare categories
• Permission to include specific medication names (like semaglutide) in ad copy and landing pages
• Stable payment processing — Visa and Mastercard treat certified merchants as lower risk, which can also reduce high-risk processing fees
• A verified listing in LegitScript's global directory — increasingly a trust signal consumers are using when researching providers
• Google's E-E-A-T (Experience, Expertise, Authoritativeness, Trustworthiness) framework rewards demonstrable credibility signals, and LegitScript certification is one of the clearest available
• A competitive moat — the certification process is rigorous enough that many clinics don't complete it, leaving certified providers with ad placements and marketing access their competitors can't access

How Wellness MD Group Can Help

Wellness MD Group holds LegitScript certification and works directly with affiliated clinics to help them navigate the certification process — including understanding what documentation is required, how to structure their websites and advertising to meet platform standards, and what operational changes may be needed to qualify.

For clinics that are building out their GLP-1, peptide, or IV therapy programs at the same time as pursuing certification, Wellness MD Group's combination of clinical infrastructure (medical directors, protocols, standing orders) and marketing compliance expertise (LegitScript, HIPAA-aligned digital presence) means you don't have to piece together five different vendors to get there.

The window for operating without LegitScript certification in this space is shrinking. The clinics that get certified now will have the marketing and payment infrastructure to scale. The ones that wait will spend months rebuilding after enforcement hits.