Resource · Guide
LegitScript Certification Explained
LegitScript certification is a third-party vetting credential that payment processors, banks, and ad platforms use to confirm a merchant in a regulated category is operating legally. In 2026 it's effectively mandatory for GLP-1 and weight-loss merchants, generally required for telehealth and Rx-adjacent models, and sometimes required for peptides and nutraceuticals. This guide explains who needs it, what it costs, how long it takes, and how to get it.
What LegitScript actually is
LegitScript is an independent compliance and monitoring company that vets and certifies merchants in regulated and high-risk verticals, online pharmacies, telehealth providers, supplement and nutraceutical sellers, addiction-treatment services, and similar. When a merchant earns a LegitScript certification, it's a signal the rest of the payments ecosystem trusts: it tells acquiring banks, processors, and advertising platforms that an independent reviewer has checked the business against the applicable laws, regulations, and platform policies and found it compliant.
That signal has become load-bearing. For a growing set of categories, LegitScript certification isn't a nice-to-have badge, it's the gate. Google and Meta require it to run ads in certain health verticals. Processors and sponsor banks increasingly require it to board the merchant at all. So while LegitScript is technically a third party, in practice its certification has become the price of admission for doing business in several high-risk health categories.
Do you need it? A vertical-by-vertical answer
The honest answer is “it depends on what you sell,” so here's the breakdown by the categories that ask the question most.
GLP-1 and weight-loss merchants, yes, effectively mandatory in 2026. This is the clearest case. The surge in demand for GLP-1 medications brought a surge in scrutiny, and both the ad platforms and the payment side have converged on LegitScript as the required credential. If you sell GLP-1 products or weight-loss treatments through a prescription model, treat certification as step one. Without it, you generally can't advertise and you generally can't get boarded. Our peptides, GLP-1 & telehealth page covers how this interacts with processing.
Telehealth and prescription-adjacent models, generally yes. Any model that involves prescribing, dispensing, or facilitating access to prescription medication falls squarely in LegitScript's wheelhouse. If your platform connects patients to providers who prescribe, or you dispense Rx products, expect to need it.
Peptides, often, depending on the product and claims. Peptide sellers sit in a gray zone that depends heavily on what's actually being sold and how it's marketed. Research-only positioning, health claims, and prescription involvement all change the answer. If you're in peptides, assume the question will come up and get a clear read on your specific model before you build your processing around it.
Nutraceuticals and supplements, sometimes. Plain supplement sales often don't require it, but aggressive health claims, continuity billing, or product categories that brush against drug classification can pull a nutra merchant into territory where certification is expected. The nutraceuticals & supplements page goes deeper.
Mainstream retail and e-commerce, no. If you sell apparel, electronics, or general goods, LegitScript isn't part of your world. It's a credential for regulated health and pharmaceutical categories, not a universal requirement.
If your model sits on a line, and many do, the safe move is to get a definitive answer before you invest. We tell merchants at the application stage whether their specific model needs certification, so you're not guessing.
What it costs and how long it takes
This is where you want current numbers rather than a stale figure copied from a blog, because LegitScript prices and timelines by merchant type and revise their schedule periodically.
On cost, LegitScript's healthcare merchant certification runs a one-time application fee of about $975 per website plus an annual certification fee of roughly $2,150 per website at the standard tier. Merchants placed on enhanced “probationary” monitoring after past compliance issues pay a higher annual fee (around $3,995 per website), and each website domain is certified, and priced, separately. The application fee is nonrefundable. LegitScript revises its schedule periodically, so treat these as current-as-of-2026 figures and confirm the live schedule before you budget.
On timeline, plan for several weeks to a few months end to end, driven by the completeness of your application and the complexity of your model. Simpler supplement merchants clear faster; regulated-drug, pharmacy, and telehealth models take longer because the review goes deeper. LegitScript offers expedited processing for an added fee (about $2,500) that begins the review within two business days of submission, but total time still depends on how cleanly your application passes. The controllable variable is your application: a complete, accurate submission with all supporting documentation moves faster than one that comes back with questions. And because certification is a prerequisite to boarding for gated verticals, start it early, running it in parallel with everything else, rather than discovering at the end that boarding is blocked on it.
How to apply
The certification process follows a predictable arc. You submit an application describing your business, your products, your operations, and your compliance posture, backed by supporting documentation, licenses, provider relationships, product information, and policies as applicable to your category. LegitScript reviews the submission against the standards for your vertical, may come back with questions or requests for more detail, and on a clean review issues the certification along with ongoing monitoring to keep it current.
The practical advice that makes the most difference: be thorough and be accurate the first time. The reviews that drag are the ones that come back incomplete, and every round of back-and-forth adds time you can't afford if boarding is waiting on it.
How certification fits into getting boarded
For the verticals where LegitScript is the standard, certification and payment processing are linked steps, not separate projects. Our sponsor banks require it for GLP-1, telehealth, and certain Rx and peptide models, which means we require it too, not as a hurdle for its own sake, but because it's what keeps these accounts boardable and stable over time. An account boarded on a properly certified, compliant merchant doesn't get terminated when a network tightens its health-vertical rules; that stability is the entire reason the requirement exists.
For categories where certification isn't required, we don't impose it. And in every case, we'll tell you clearly at the application stage whether your specific model needs it, so you can sequence it correctly instead of finding out late. To see how certification slots into the rest of underwriting, read how our underwriting works and the complete high-risk processing guide.
If you're in a category that needs certification and want a processor that handles the compliance side as part of the job rather than handing it to you, get approved and we'll map your path, certification included.
FAQ
LegitScript certification FAQ
What is LegitScript certification?
LegitScript is a third-party compliance and monitoring company that certifies merchants in regulated and high-risk verticals, pharmacies, telehealth, supplements, addiction treatment, and similar. A LegitScript certification signals to payment processors, acquiring banks, and ad platforms that a merchant has been vetted against applicable laws and policies. For several categories it has become the de facto credential required to advertise and to process payments at all.
Do I need LegitScript certification?
It depends on your vertical. In 2026, GLP-1 and weight-loss merchants effectively need it, both ad platforms and processors gate on it. Telehealth and prescription-adjacent models generally need it. Peptide and nutraceutical sellers may need it depending on what they sell and how they bill. Plain retail and most mainstream e-commerce do not. If your model touches prescriptions, controlled substances, or health claims, assume you'll be asked for it.
How much does LegitScript certification cost?
LegitScript prices certification by merchant type and complexity, and it typically involves an application fee plus an annual monitoring fee. Because the published schedule changes and depends on your category, confirm the current figure directly with LegitScript before you budget. We track the latest figures with our compliance research and update merchants during onboarding.
How long does LegitScript certification take?
Turnaround depends on how complete your application is and how complex your model is, simpler merchants clear faster, regulated-drug or telehealth models take longer because of the deeper review. Submitting a complete, accurate application with all supporting documentation is the single biggest factor in speed. Confirm current timelines with LegitScript, and start early: for gated verticals, certification is a prerequisite to boarding, not a parallel task.
Does GivePayments require LegitScript certification?
For the verticals where it's the industry standard, GLP-1, telehealth, and certain Rx and peptide models, yes, because our sponsor banks require it and because it's what keeps these accounts boardable and stable. For categories where it isn't required, we don't impose it. We'll tell you clearly at the application stage whether your specific model needs it before you invest the time.
In a category that needs certification?
We handle the compliance side as part of boarding and tell you up front whether your model needs LegitScript.