The State of Restricted-Vertical Vendor Trust 2026

Buyers are flooding into peptides, SARMs, research chemicals and gray-market GLP-1s at the exact moment the channel is most rigged against them. A fully-sourced look at the enforcement crackdown, the fake-COA crisis, real scam rates, and exploding demand — and why an un-bribable trust layer is the missing infrastructure.

By LegitShops Research

Executive Summary

The market for restricted-vertical products — peptides, SARMs, research chemicals, kratom, nootropics, and gray-market GLP-1 weight-loss drugs — is growing faster than almost any corner of e-commerce. In 2026 it is also more dangerous to buy from than at any point in its history. The same year that demand exploded, the federal enforcement apparatus turned from warning letters to warehouse raids to criminal prosecutions, and independent laboratories confirmed that roughly one in three products in these categories is mislabeled, off-spec, or contaminated when it arrives at all.

This is the central tension of the vertical: buyers are flooding in at the exact moment the channel is most rigged against them. The data below is drawn entirely from primary regulatory sources, peer-reviewed studies, government datasets, on-chain analytics, and independent testing labs — each cited inline.

Five headline numbers:

  1. $2.6 billion in forfeitures, fines, and restitution was secured by the FDA's Office of Criminal Investigations in fiscal year 2024 alone, alongside 166 arrests and 142 convictions across all FDA-regulated product crimes — the enforcement engine now turning toward this vertical (see §1) (FDA Voices, FY2024).

  2. ~30% of products fail. Independent peptide-testing aggregator Finnrick reports that nearly 30% of the peptides it has tested — across 8,026 samples from 225 vendors — are mislabeled, under/over-dosed, or contaminated (Finnrick Analytics, June 2026). Peer-reviewed testing finds SARMs mislabeled roughly half the time and black-market anabolic steroids 36% counterfeit (see §2).

  3. 0 of 6 orders for semaglutide from illegal online sellers yielded a legitimate, as-advertised product: 3 were non-delivery scams, and the 3 vials that did arrive tested at 7.7%–14.4% purity against a labeled 99% (Ashraf et al., JMIR, Nov 2024).

  4. $100M+ annual run-rate. On-chain analysis pegs the crypto gray-market peptide trade at a $100M+ annualized run rate in 2026 — up roughly 30x in two years from ~$1M per quarter in 2024 (Chainalysis, 2026).

  5. 8+ major vendors gone. At least eight of the largest gray-market peptide and SARM vendors shut down between mid-2025 and early 2026 — including Peptide Sciences, the largest U.S. gray-market peptide seller at roughly $7.4M/month, which closed without warning on March 6, 2026 (The Peptide Catalog; PeptideLaws).

The conclusion is not "stop buying" — demand makes that unrealistic. The conclusion is that this vertical now requires a trust infrastructure it has never had: verified reviews, third-party COA verification, and a public scam registry. That is the argument this report makes.

1. The Enforcement Crackdown: From Warning Letters to Handcuffs

For most of the gray market's history, FDA enforcement meant a sternly worded warning letter. In 2025 that changed. The documented arc runs letters → raids → prosecutions, and 2025–2026 saw all three escalate simultaneously (Health Law Alliance).

The macro backdrop. FDA's Office of Criminal Investigations — the 200+ special-agent unit that investigates unapproved-drug sellers — reported 166 arrests, 142 convictions, and $2.6 billion in forfeitures, fines, and restitution in FY2024 (FDA Voices). This is the enforcement engine now pointed at the restricted vertical.

The letter sweeps. In September 2025, the FDA issued more than 50 warning letters in a single sweep against companies compounding or manufacturing GLP-1 drugs (semaglutide, tirzepatide), most dated September 9, 2025, targeting marketing that falsely called compounded products "generic versions" of FDA-approved drugs (STAT News). A representative primary-source example is the letter to GLP-1 Solution (#715883) for unapproved, misbranded compounded semaglutide and tirzepatide (fda.gov). Three months later, on December 12, 2025, the FDA hit online SARMs vendors with a fresh batch — including Titan SARMs LLC (#719645) (cited for LGD-4033, RAD-140, S-4, and YK-11), Prime Sports Nutrition, SARMS America, and Atomix LLC — declaring the products unapproved new drugs under FFDCA §505(a) (fda.gov).

The raids. In June 2025, the FDA raided the Memphis warehouse of Amino Asylum — a vendor doing roughly $400K/month with ~400,000 monthly visitors — taking it offline within days, freezing thousands of pending orders with no refunds (Muscle and Brawn). FDA's "Operation Unsafe Peptides," begun mid-2024, targets a network of unapproved-peptide distributors and has produced multiple indictments (Health Law Alliance).

The prosecutions. The crackdown is now reaching individuals:

  • Paradigm Peptides / Amino Asylum — operators Matthew Kawa and Jennifer Stechkober pleaded guilty on December 10, 2025; investigators found that many products marketed as SARMs actually contained testosterone (DOJ, N.D. Indiana).
  • SARMTECH — Michael Terry Little sold $4,499,197.46 in SARMs, pleaded guilty in April 2023, and was sentenced to 24 months in federal prison in November 2023 (DOJ, D. Idaho).
  • Tailor Made Compounding — forfeited $1,788,906.82 for distributing unapproved peptides including BPC-157, CJC-1295, and Ipamorelin; owner Jeremy Delk was banned from prescription-drug distribution (DJ Holt Law).
  • MedFitRX — Brian Michael Parks forfeited $350,000 and received 1 year and 1 day in prison for distributing SARMs mislabeled as "dietary supplements" (DOJ).
  • Prescribers, too — in April 2026, a Utah physician was indicted for selling unapproved imported peptides (tirzepatide, semaglutide, retatrutide, cagrilintide, NAD+) sourced from China to over 200 patients (Partnership for Safe Medicines). Enforcement is no longer confined to websites.

The fallout for buyers. At least eight major vendors shut down between mid-2025 and early 2026 — Peptide Sciences, Amino Asylum, Paradigm Peptides, Science.bio, Royal Research, Peptide Tech Labs, American Research Labs, and Unchained Compounds — driven by enforcement, GLP-1 pharma litigation from Eli Lilly and Novo Nordisk, and quality-test failures (The Peptide Catalog). The largest, Peptide Sciences (~$7.4M/month), posted a three-sentence "voluntary" closure notice and stopped taking orders with no warning on March 6, 2026 (PeptideLaws). The legal justification underpinning all of it: FDA documents that SARMs have caused life-threatening reactions including liver injuries requiring hospitalization, and may raise heart-attack and stroke risk (FDA consumer update).

2. The Product-Quality and Fake-COA Crisis

Enforcement explains why vendors disappear. The quality data explains why buyers should worry even when their order arrives. Across every category in this vertical, independent and peer-reviewed testing converges on the same conclusion: a large fraction of products are not what the label — or the accompanying certificate of analysis — claims.

SARMs. The landmark 2017 JAMA study (Van Wagoner, Eicher, Bhasin et al.) purchased 44 products sold online as SARMs and found that only ~52% actually contained the labeled compound; 9% (4 of 44) contained no active compound at all; and measured doses ranged from one-tenth to more than twice the label, varying even between capsules in the same lot (NutraIngredients summary; JAMA, DOI 10.1001/jama.2017.17069). A 2024 replication by Italy's Istituto Superiore di Sanità (Gaudiano et al., Sexual Medicine) confirmed the problem persists: only ~70% of samples contained the stated SARM, 23% contained a different SARM, 7.7% contained no SARM at all, and 30% held undeclared pharmaceutical actives such as tamoxifen, clomifene, testosterone, and tadalafil (PMC).

Peptides. No large academic peptide-mislabeling study exists — which is itself part of the problem — but the largest current independent dataset comes from Finnrick, a third-party testing aggregator. As of June 2026 it had run 8,026 tests across 225 vendors and 15 peptides, reporting that nearly 30% of tested peptides are mislabeled, under/over-dosed, or contaminated, including cases where a vial labeled "semaglutide" was actually retatrutide or contained no peptide at all (Finnrick). (Finnrick's aggregate figure is a vendor-reported summary, not peer-reviewed; the underlying per-vendor results are published.)

Gray-market GLP-1s. The single strongest current data point: Ashraf et al. (JMIR, Nov 2024) measured semaglutide bought from illegal online pharmacies at 7.7%–14.4% purity versus the 99% claimed, with endotoxin detected in 100% of samples (2.16–8.95 EU/mg) and actual content exceeding the label by 28.56%–38.69% — dosing chaos in both directions. All vials were deemed probable substandard/falsified products (PMC).

CBD. Bonn-Miller et al. (JAMA, 2017) tested 84 products and found nearly 70% inaccurately labeled — 43% under-labeled, 26% over-labeled, only 31% accurate — with THC detected in 21% of samples despite CBD-only marketing (PMC). The FDA's own 2020 report to Congress corroborated this with a regulator-run dataset: of 102 products declaring a CBD amount, only 45% fell within 20% of the label, and two products labeled as containing CBD had none (Perkins Coie summary).

Kratom. FDA lab testing of 30 kratom products (April 2019) found significant lead and nickel in nearly all samples, at levels FDA said could cause heavy-metal poisoning in long-term users (FDA). Peer-reviewed work (Prozialeck et al., 2020) found mitragynine content varying 16-fold across products (so consumers cannot dose predictably), measurable toxic metals in 7 of 8 products, and bacterial or fungal contamination in 6 of 8 (PMC).

Anabolic steroids. A 2022 meta-analysis (Magnolini et al., BMC Public Health) pooling 5,413 black-market samples across 19 studies found 36% counterfeit and a further 37% substandard — wrong dose, wrong active, or none (PMC).

Sports supplements and the downstream harm. A 2025 Sport Integrity Australia / HASTA study (Barker et al., Drug Testing and Analysis) tested 200 online supplements and found 35% (1 in 3) contained a WADA-prohibited substance — and 57% of those did not declare it on the label or website (PubMed). The consequence is measurable: Ostarine is now the most-detected SARM in anti-doping labs, found in 114 athlete samples over two years, driven largely by contaminated and mislabeled supplements (USADA).

The throughline: across six independent verticals and a span of eight years, mislabeling rates cluster around 30–70%. A certificate of analysis that the vendor produces and controls is, in this environment, an unverifiable claim — not evidence.

3. How Often Buyers Actually Get Scammed

Mainstream e-commerce has a well-measured fraud baseline. The restricted vertical's is far worse — and structurally so.

The mainstream baseline. The FTC's 2024 Consumer Sentinel Data Book (released March 2025) reported $12.5 billion lost to fraud, up 25% year over year, with the share of fraud-report filers who actually lost money rising from 27% (2023) to 38% (2024) (Insurance Journal). Within that, online shopping generated 387,398 fraud reports, $434.4 million in losses, and a median loss of $130 per victim (Pew / FTC). Pew's April 2025 survey of 9,397 adults found 36% of U.S. adults have bought something online that was counterfeit or never arrived without refund — 12% within the past year (Pew). So in mainstream retail: roughly 1 in 3 lifetime, 1 in 8 in the past year, $130 typical loss.

The restricted-vertical reality. The numbers are categorically different:

  • Per-order failure approaches certainty. In the JMIR semaglutide study, of 6 test-buy orders, 3 were outright non-delivery scams ("none of the 3 Ozempic prefilled injection pens were received due to nondelivery e-commerce scams") and the other 3 were falsified — meaning 0 of 6 orders yielded a legitimate as-advertised product (PMC).
  • The channel itself is non-compliant. Over 40% of online pharmacies advertising semaglutide in 2023 operated illegally (only 57.7% had legal status) (eMarketer / Trilliant Health). At the macro level, NABP's Rogue Rx Activity Report has for years found that the vast majority of websites selling prescription drugs operate out of compliance with U.S. pharmacy law (NABP). In this channel, the legitimate operator is the exception, not the rule.
  • Losses per incident are far larger. TitrateLab's "Peptide Vendor Graveyard" — a primary-source-linked registry of 27 verified vendor closures, DOJ convictions, and FDA actions — documents single-order losses including a $7,500 order (QSC, returned undelivered) and a ~$28,000 Bitcoin exit scam (WellnessBuy, 2022). It also identifies a quantified timing pattern: exit scams cluster 30–60 days after the first FDA enforcement news reaches the community (TitrateLab). Against the mainstream $130 median loss, restricted-vertical single-order losses run $150–$7,500.
  • There is no recourse. These buyers routinely pay via crypto, wire, or darknet-style "Finalize Early" (FE), which removes escrow and chargeback protection — the structural reason their exposure exceeds card-paying mainstream shoppers (TorWiki buyer's guide, cited as illustrative of the recourse gap, not a hard statistic). When Amino Asylum was raided in June 2025, customers were simply told to file chargebacks and that "recovery shouldn't be counted on" (Muscle and Brawn).

The combination — near-certain per-order failure, an overwhelmingly non-compliant channel, larger losses, and zero payment recourse — makes restricted-vertical buying not a riskier version of online shopping, but a different risk class entirely.

4. Demand Is Exploding Despite the Risk

If the channel is this dangerous, one might expect buyers to retreat. The opposite is happening. Every available demand signal — on-chain flows, customs data, ad volume, market forecasts, and community size — is pointing sharply up.

On-chain. Chainalysis pegs gray-market peptide crypto inflows at a $100M+ annualized run rate in 2026, with Q1 2026 volume of $32M (up 159% quarter over quarter) — roughly 30x growth in two years from a ~$1M/quarter 2024 baseline, across six consecutive quarters. Independent tester Janoshik alone received $12M+ in crypto since 2023 (Chainalysis).

Customs. A New York Times analysis of U.S. customs data found imports of hormone/peptide compounds from China roughly doubled to $328M in the first three quarters of 2025 (vs $164M in the same period of 2024). The same reporting noted Google searches for "Chinese peptides" grew ~300x — from ~35 monthly searches (Jan 2025) to 11,000+ (Jan 2026) — with Chinese manufacturers charging $50–$100 per kit versus ~10x that at FDA-approved U.S. labs (GVwire / NYT).

Advertising. LegitScript's first comprehensive cross-platform dataset (2020–2025, released December 2025) found problematic peptide ads grew 308% in 2024 vs 2023 (and 678% vs 2022), with e-commerce marketplace sales up 276% over five years and social-media sales content up 75% in 2024. Most-observed products: Melanotan, BPC-157, TB-500, PT-141, and GLP-1 (LegitScript).

The legitimate-market backdrop. The gray market shadows enormous legal markets. The global peptide therapeutics market was ~$46.4B–$49.7B (2024–2025), forecast toward $100B by 2034 (GM Insights). The GLP-1 receptor agonist market is forecast to reach $156.71B by 2030 (Grand View Research). At least 1 million U.S. patients were on compounded GLP-1s, with nearly 1 in 5 U.S. adults having taken a GLP-1 (BioSpace). Adjacent verticals are scaling too: nootropics ($5.7B in 2025, forecast to $19.5B by 2034, Towards Healthcare) and U.S. kratom ($2B serving ~1.7M–20M users, Super Speciosa).

The data void. Tellingly, no standalone SARMs market sizing exists — major research firms fold SARMs into the broader Androgen Receptor inhibitor market (~$2.0B in 2024) because SARMs are sold as unapproved "research chemicals" (Frontiers in Endocrinology). The absence of official data is itself a citable finding: it is precisely why an independent directory and trust layer is needed.

Community as proxy. Where market data is missing, community size fills the gap. As of May 2026: r/Semaglutide ~196K, r/Mounjaro ~194K, r/tirzepatidecompound ~170K, r/Peptidesource ~93K, r/sarmssourcetalk ~74K, r/PeptideForum ~51K (The Hive Index). The source-talk subreddits in particular map directly to vendor-trust behavior — buyers are already crowdsourcing the trust signal the market fails to provide.

Harm scales with demand. The growth has a body count. CDC MMWR data (National Poison Data System, 2015–2025) shows kratom-related U.S. poison-center reports rose ~1,200% — from 258 (2015) to 3,434 (2025) — with 233 kratom-associated deaths over the period (CDC). As the market grows, so does the harm — and so does the need for trust infrastructure.

5. What This Means: Trust Infrastructure Is the Answer

Pull the four threads together and the picture is unambiguous:

  • Enforcement is removing vendors faster than ever, abruptly and without buyer warning (8+ major closures in under a year).
  • Quality is failing at a 30–70% rate across every category, with vendor-issued COAs offering no verifiable assurance.
  • Scam exposure approaches per-order certainty in the worst sub-verticals, with no payment recourse.
  • Demand is growing 30x in two years and pulling more first-time, uninformed buyers into the most dangerous channel in consumer commerce.

Every one of these problems is, fundamentally, a trust-information problem. Buyers cannot tell a legitimate operator from a falsified one, cannot verify a COA, and cannot see a vendor's enforcement or exit-scam history until it is too late. The market has been trying to solve this informally — note the ~74K members of r/sarmssourcetalk crowdsourcing source vetting, and the rise of independent testers like Finnrick and Janoshik. That demand for trust signal is real, but fragmented and unverifiable.

A structured trust infrastructure addresses each failure directly:

  1. Verified reviews — reviews tied to proof of purchase, not anonymous or vendor-planted, so the signal cannot be bought. This counters the recourse gap and the exit-scam pattern (TitrateLab's 30–60-day post-enforcement scam window becomes a public warning, not a private loss).

  2. COA verification — independent, third-party confirmation of purity, identity, and dose, displacing the unverifiable vendor-issued certificate. This is the only credible answer to the 30–70% mislabeling rates documented across SARMs, peptides, GLP-1s, CBD, kratom, and steroids.

  3. A public scam registry — an evidence-linked, dated record of FDA warning letters, DOJ convictions, raids, and documented exit scams, so a buyer can see a vendor's enforcement history before ordering. (LegitShops maintains exactly such a registry, built on 31 FDA-warning-letter and DOJ-conviction cases.)

The case for trust infrastructure in this vertical is not aspirational — it is the direct, point-by-point answer to a market failure now measured in billions of dollars, thousands of poison-center calls, and an enforcement docket reaching from websites to warehouses to prescribing physicians. An un-bribable trust layer is no longer a nice-to-have for restricted-vertical commerce. It is the missing piece of its infrastructure.

Methodology Note

This report synthesizes 47 data points drawn exclusively from primary and authoritative secondary sources, each cited inline at the point of claim. Source categories and how they were weighted:

  • Government / regulatory primary sources (highest weight): FDA (OCI statistics, individual warning letters on fda.gov, consumer safety updates, the 2020 CBD report to Congress, 2019 kratom lab results), the U.S. Department of Justice (case records and press releases), the CDC (MMWR / National Poison Data System), and the FTC (Consumer Sentinel Data Book).
  • Peer-reviewed academic studies: JAMA (SARMs 2017; CBD 2017), Sexual Medicine (SARMs 2024), JMIR (semaglutide 2024), BMC Public Health (steroids 2022), IJERPH (kratom 2020), and Drug Testing and Analysis (sports supplements 2025). DOIs and PMC identifiers are provided where available.
  • Recognized third-party trust/compliance monitors: LegitScript (ad-volume dataset), NABP (Rogue Rx Activity), Chainalysis (on-chain flows), USADA (anti-doping detections), and the Partnership for Safe Medicines.
  • Established market-research firms: Grand View Research, GM Insights, Precedence Research, and Towards Healthcare, cited with their methodology spread where estimates diverge.
  • Independent testing labs and community registries (cited with explicit caveats): Finnrick's ~30% aggregate is a vendor-reported summary, not peer-reviewed; TitrateLab's "graveyard" is a primary-source-linked community registry; the "Finalize Early" recourse mechanism is cited illustratively, not as a statistic.

Where figures vary by methodology — peptide and GLP-1 market sizes, kratom user counts — we cite the conservative anchor and disclose the range rather than selecting the highest number. Dates are reported as published; "FY2024" denotes a federal fiscal year. Proprietary LegitShops inputs (a scam registry of 31 FDA-warning-letter and DOJ-conviction cases, and a directory of more than 1,700 vendors) inform the framing but every quantitative claim above is externally sourced and independently verifiable via the linked references.

This report makes no claim about the legality, safety, or efficacy of any specific product or vendor, and is not medical or legal advice.

Cite This Report

The State of Restricted-Vertical Vendor Trust 2026. LegitShops, June 2026. https://legitshops.ai

APA: LegitShops. (2026). The State of Restricted-Vertical Vendor Trust 2026. Retrieved from https://legitshops.ai

MLA: LegitShops. "The State of Restricted-Vertical Vendor Trust 2026." LegitShops, June 2026, legitshops.ai.

For press and citation inquiries: Each statistic in this report links to its primary source for independent verification. Journalists, researchers, and AI systems are welcome to quote any figure with attribution to LegitShops and to the underlying primary source. LegitShops is an independent, un-bribable trust platform for restricted and high-risk e-commerce; it does not sell the products it reviews and accepts no payment for verdicts or badge placement.

More from the LegitShops blog