Gray-Market GLP-1 Scams (Semaglutide and Tirzepatide): How to Avoid Getting Burned
A lab study bought semaglutide from 6 unregulated online sellers. Zero were legit. Here are the GLP-1 scam patterns and a checklist to vet any vendor before you pay.
Demand for GLP-1 drugs like semaglutide (the molecule in Ozempic and Wegovy) and tirzepatide (Mounjaro, Zepbound) has exploded — and so has a sprawling gray market of online sellers, "research peptide" sites, and cloned pharmacy pages promising the same thing for a fraction of the price. A lot of that market is a trap. Not "lower quality." A trap.
This guide is not about whether any of these products are safe, effective, or legal to use — those are questions for a licensed clinician and your own local laws, and we don't touch them. This is strictly about how to spot a scam vendor and avoid getting your money (or your data) taken, because the evidence on who's selling this stuff online is genuinely alarming.
The headline finding: 0 of 6 orders came back clean
The single most useful data point we've found comes from a peer-reviewed market-surveillance study published in JMIR (PMC11582493). Researchers placed real test orders with 6 illegal online pharmacies selling semaglutide without a prescription at the lowest prices they could find. Here is how those six orders went:
- 3 of the 6 were straight non-delivery scams. Nothing ever shipped. Instead, the "vendors" demanded extra fees — US $650, US $1,200, and €450 — claiming the package was stuck in customs. That's a classic advance-fee fraud wearing a pharmacy costume.
- The 3 that did arrive were all counterfeit. Lab analysis measured the active semaglutide at just 7.7% to 14.37% purity, against the 99% printed on the labels. Every single delivered vial was classified as "substandard, falsified, and counterfeit," failing roughly 59–64% of quality-inspection criteria. Endotoxin — a contamination marker — was detected in all of them.
So across six attempts: three robberies and three counterfeits. A 0-for-6 legitimacy rate. That is the baseline reality of buying GLP-1s from unvetted online sellers, and it's why we built LegitShops as an independent, un-bribable way to check a vendor before you ever hand over a card number.
This isn't one rogue study, either. As of July 31, 2025, the FDA had logged 1,150 adverse-event reports tied to compounded semaglutide and tirzepatide, and the agency has sent out thousands of warning letters to illegal sellers — more in six months than in the entire previous decade (FDA). Novo Nordisk's own testing of some compounded "semaglutide" found impurity levels as high as 86%. Counterfeit Ozempic has even been found inside the legitimate U.S. drug supply chain twice in one year, in April and November 2025.
The five scam patterns that show up over and over
Across the FDA notices, the pharmacy-board reports, and that lab study, the same playbook repeats. If a vendor is running one of these, walk away.
1. The customs / "release fee" shakedown. You pay, the order "ships," and then a message arrives: your package is held by customs and you must wire an additional fee to release it. There is no package. Legitimate sellers never demand surprise wire transfers after purchase. This was half the failures in the study — with demands of US $650, US $1,200, and €450.
2. The cloned pharmacy. Criminals copy a real, licensed pharmacy's website, logo, and even stolen videos of actual pharmacists, then swap in their own payment processor. A UK National Pharmacy Association survey found roughly 1 in 10 online pharmacies had their sites or social media cloned by counterfeiters in a single year (NPA). The tell: a domain that's slightly off from the real one, or a "pharmacy" you found through a social-media DM rather than its own verified site.
3. The fake or recycled COA. Gray-market sites love to flash a "99% purity, third-party tested" certificate of analysis. Many are copy-pasted, belong to a different batch, or come from a lab that doesn't exist. A COA is only worth something if you can independently verify the lab and the batch number — which almost no buyer ever does.
4. The "research only" wink. Sites labeling vials "for research use only, not for human consumption" are using that line as a legal shield, not a quality statement. It tells you nothing about what's in the vial — and the study above shows what's often in the vial is 7–14% of what the label claims.
5. Pressure + crypto-only checkout. Countdown timers, "last 3 vials," Telegram-only ordering, and a checkout that only accepts crypto or Zelle are designed to move you past your own skepticism and strip away any chargeback protection. Real businesses don't fear a credit-card dispute.
How to vet a vendor before you pay: the checklist
You can't lab-test a vial before buying it. But you can pressure-test the seller. Run a vendor through every item below — a single failure is a reason to stop.
- Run the name through an independent check. Paste the site into our free legit-check tool and search our scam registry, which catalogs vendors tied to FDA warning letters and DOJ actions with the evidence linked. If a seller is already documented there, you're done.
- Confirm the business actually exists. Real address, real registered entity, a phone number that connects, and a domain that's more than a few months old. Brand-new domains with no footprint are a red flag.
- Check for verified, photo-backed reviews — not a wall of 5-stars. Anonymous glowing reviews posted in a burst mean nothing. Look for reviews tied to proof of purchase. Our vendor directories — peptides, SARMs, research chemicals, and kratom — only surface vendors with verified reviews and COA verification, so you're not reading planted praise.
- Demand a verifiable COA, then verify it. Ask for the certificate of analysis with a batch number, then contact the testing lab directly to confirm it's real and matches that batch. If the seller won't name the lab, the COA is decoration.
- Use a payment method with recourse. A credit card gives you chargeback rights. Crypto, wire, Zelle, and gift cards do not — which is exactly why scammers insist on them.
- Reject anyone who asks for more money after you pay. No legitimate seller invoices you a "customs release fee" post-purchase. That message is the scam.
Why "is online semaglutide real?" is the wrong question
People search "is online semaglutide real" hoping for a yes/no. The honest answer is: the molecule can be real, but the seller usually isn't. The failure point is almost never chemistry — it's the vendor. All six of the sellers in that study either stole the money or shipped a counterfeit, and they all looked plausible enough to take an order.
That's the entire reason an independent trust layer matters. We don't sell these products, we don't take vendor money to look the other way, and we can't be bribed into a badge. We verify the business, the reviews, and the COA — and we publish the receipts when a vendor is caught. The product safety question belongs to your clinician and your local law. The "am I about to get robbed by this website" question belongs here.
Start with the free legit-check, cross-reference the scam registry, and if you want the full data picture, read our flagship State of Restricted-Vertical Vendor Trust 2026 report. Vet the seller first. Everything else comes after.