Enforcement is real. States are suspending licenses. Courts are closing businesses permanently. And that label on your vials protects no one. Providers are being lied to, and the truth about peptide sourcing is more dangerous than they realize
If you operate a MedSpa, wellness clinic, or medical practice that has sourced peptides, the regulatory picture has shifted dramatically. What was once a gray area defended by disclaimers has become an active enforcement priority. Federal agencies, state boards, and pharmaceutical companies are all moving at the same time.
This article summarizes the most critical findings from a comprehensive compliance report. That report draws from FDA enforcement records, state board actions, attorney general filings, and healthcare attorney commentary. You can download the full version, with 58 primary sources, free at the bottom of this page.
If you currently source peptides for clinical use, read this carefully. Be sure to use the button below to Download the Free Peptide Compliance Report (PDF).
The Enforcement Wave Is Real, and It Is Accelerating
The shift began in September 2023, when the FDA moved 17 popular peptides from permissible to restricted status for compounding. That list included BPC-157, TB-500, Ipamorelin, CJC-1295, and others. Since then, the enforcement escalation has been steep and consistent:
- December 2024: The FDA issued formal warning letters to Prime Peptides, Xcel Peptides, SwissChems, and Summit Research Peptides for selling unapproved GLP-1 drugs.
- June 2025: FDA agents physically raided Amino Asylum’s Kentucky warehouse. The website went dark overnight. Customers lost access to frozen orders with no warning.
- September 2025: The FDA issued over 50 warning letters in a single month targeting peptide vendors and GLP-1 compounders.
- November 2025: A Cullman, Alabama judge permanently closed a MedSpa after the state AG sued over RUO-labeled tirzepatide and semaglutide injections. The court permanently banned the owners from any healthcare role.
- December 2024: A Tennessee court criminally charged a clinic operator. Charges included reckless endangerment with a deadly weapon and money laundering. Agents seized 698 vials labeled “for research purposes only” across three locations.
Beyond those cases, more than 40 state attorneys general have co-signed a formal letter demanding federal crackdowns. Eli Lilly and Novo Nordisk have also filed civil lawsuits. Additionally, the Ohio Board of Pharmacy has suspended multiple clinic licenses. In some cases, the only evidence was RUO-labeled vials in a clinical refrigerator. No patient harm required.
This is not theoretical risk. This is happening to real operators right now.
There Are Only Three Legal Sources for Clinical Peptides
Healthcare attorney Courtney Walker, speaking on the HRT University Podcast in December 2025, states the framework plainly:
“If it requires a prescription, you can only get them from one of three places. The first being a manufacturer, an approved manufacturer. The second two are compounding pharmacies. 503A and 503B. If it is not one of those three sources and you’re a provider with a license, then you’re violating FDA law.”
Specifically, those three sources are:
- FDA-Approved Manufacturer (NDA/ANDA): Companies with formal FDA product approval, such as Eli Lilly for tirzepatide and Novo Nordisk for semaglutide. Both the facility and the specific drug have cleared FDA review.
- 503A Compounding Pharmacy: A state-licensed pharmacy that compounds individualized medications for specific patients with valid prescriptions. It must source APIs from FDA-registered bulk manufacturers. It can also only compound substances from the FDA’s approved list, which currently excludes most peptides providers want.
- 503B Outsourcing Facility: A voluntarily FDA-registered facility that operates under full commercial pharmaceutical manufacturing standards. The FDA actively and regularly inspects these facilities. You can verify them on FDA’s public database.
Walker’s follow-up leaves no room for interpretation: “If you’re starting off by not getting it from one of those three sources, I wouldn’t represent you. It’s a losing argument from the beginning.”
Why “Research Use Only” and “Physician Use Only” Both Fail as Legal Defenses
The most common misconception in this space is that the label on a product determines its legal status. It does not.
The FDA uses an intended use test to decide whether a product counts as a drug. It looks at the full picture: who buys it, what dosing information appears, how the website frames it, and how sellers market it. A disclaimer saying “for research use only” cannot override a website full of dosing protocols and therapeutic claims.
The FDA’s own language from multiple 2024-2025 warning letters calls the RUO label “a ruse to avoid FDA scrutiny for selling misbranded and adulterated products in violation of the FD&C Act.”
In recent years, a new label has emerged: Physician Use Only (PUO) or Clinic Use Only (CUO). Distributors, not chemical manufacturers, apply these labels. The intent is to look more legitimate than RUO while operating identically. Under the law, however, they are identical.
The Ohio Board of Pharmacy confirmed this in two enforcement cases against Alpha BioMed, a prominent PUO supplier. Despite the provider-only marketing, the Board found the products were misbranded. It also found that Alpha BioMed held no FDA manufacturer registration and carried no Ohio license. As a result, the clinic that sourced from them paid a $25,000 penalty and received a permanent reprimand. Alpha BioMed, meanwhile, continues to operate.
That last point matters enormously, and we cover it in detail next.
The “FDA-Registered cGMP Manufacturer” Myth
Many PUO/CUO suppliers prominently claim to be “FDA-registered, cGMP-compliant manufacturers.” For providers, that claim is legally meaningless.
FDA Section 510 registration is simply an administrative filing. Every drug facility must register. Receiving an FDA Establishment Identifier (FEI) number, however, does not authorize a facility to distribute finished drug products for human use. That authorization requires one of the three sources Attorney Walker describes.
Similarly, “cGMP compliance” is entirely self-reported. The FDA runs no pre-certification process. In fact, any company can print “cGMP” on its website without inspection or verification. The Ohio Board specifically found that Alpha BioMed’s “FDA-registered cGMP” claims had no actual FDA manufacturer registration behind them.
High product quality and legal distribution authority are entirely separate questions. A clean certificate of analysis from a non-licensed source creates no legal defense.
Provider Liability vs. Supplier Liability: A Critical Asymmetry
This enforcement environment affects suppliers and providers very differently. Most providers do not realize the gap until it is too late.
When a PUO/CUO supplier receives an FDA warning letter, the typical response is straightforward: reply, rebrand under a new LLC, and keep selling. Suppliers have no state medical license to lose. For example, BioMed Peptides currently publishes fabricated blog posts claiming a 2026 HHS reclassification that does not exist. It still operates. Alpha BioMed appears in two Ohio Board enforcement cases. It also still operates.
Providers face a very different outcome. When a state board finds that a provider sourced from an unlicensed supplier, the response is immediate. Boards issue summary suspensions the same day. License revocation proceedings can end a career permanently. Criminal referrals are also becoming more common. Unlike a supplier that can rebrand, a provider cannot simply apply for a new license.
The supplier’s continued operation provides zero protection in any regulatory proceeding. The board has one question: was your source a licensed pharmacy? If the answer is no, your supplier’s status is irrelevant.
What About the RFK Jr. Announcement?
In February 2026, HHS Secretary RFK Jr. announced plans to move approximately 14 Category 2 peptides back to Category 1. This would re-enable compounding at licensed 503A pharmacies. The announcement generated significant excitement across the MedSpa community.
In legal terms, though, nothing has changed yet. The FDA’s enforcement posture is administrative policy, and changing it requires formal notice-and-comment rulemaking. That process typically takes 12 to 24 months. Until the FDA publishes a final rule, these substances remain restricted. Therefore, providers who resumed sourcing based on that announcement currently have no regulatory cover.
Even if rulemaking does complete, the change would benefit licensed 503A pharmacies. It would not help PUO/CUO non-pharmacy suppliers. Those suppliers would still lack 503A status, regardless of how the substance categories shift.
What You Should Do Right Now
If you currently source peptides for clinical use, here is what every healthcare attorney in the full report agrees on:
- Verify your source independently. If your supplier claims to be a 503A compounding pharmacy, look them up in your state pharmacy board’s public database. Do not take their word for it.
- Stop sourcing from RUO, PUO, or CUO non-pharmacy labs. No due diligence package, whether COAs, consent forms, or waivers, creates a legal distribution pathway where one does not exist.
- Know which peptides are currently Category 2. BPC-157, TB-500, Ipamorelin, CJC-1295, GHK-Cu, and approximately 14 others are currently restricted. Even sourcing these from a licensed 503A pharmacy exposes that pharmacy to enforcement.
- Consult a qualified healthcare attorney before making any sourcing changes, especially if you have existing inventory from non-pharmacy sources.
- Be skeptical of suppliers publishing regulatory news. Several PUO/CUO suppliers currently publish misleading content about FDA policy to create a false sense of legal cover.
Download the Full Compliance Report
The full Peptide Sourcing & Compliance Report is a 40-plus page primary-source document. It covers:
- The complete regulatory framework, including the FDA’s Category 1 and 2 system and what the RFK Jr. announcement actually means legally
- Detailed analysis of every major enforcement action from 2023 to present
- Profiles of key PUO/CUO suppliers, including Alpha BioMed, Zen Labs, MedSpa Peptides, and BioMed Peptides, with specific red flags for each
- Five good-faith arguments providers make for PUO sourcing, presented fairly and then analyzed honestly
- A complete enforcement risk matrix broken down by sourcing scenario
- 58 cited primary sources, including FDA.gov, state AG filings, Ohio Board of Pharmacy case records, and healthcare law firm analysis
It is free. No strings attached.
Disclaimer: This article is for informational purposes only and does not constitute legal advice. Regulatory requirements vary by state and jurisdiction. Consult a qualified healthcare attorney regarding peptide sourcing and compliance obligations in your specific jurisdiction.