How to Stay Legal in Selling Peptides Online (2026)

Updated October 2026: This guide was originally published in May 2025. We’ve refreshed it with the latest changes, including California’s new law, recent FDA warning letters and enforcement actions, and the current status of BPC-157.

If you are selling peptides online, or anything else marketed for muscle growth, recovery or weight loss, 2026 brings significant regulatory challenges.

New York's law on underage supplements has been in effect since April 22, 2024, and California signed a similar law in September 2026. Lawmakers in other major states are considering similar bills. At the same time, the FDA is warning online peptide sellers that a “research use only” label won't protect them. This means that sellers who market peptides for muscle growth or performance face growing legal risk. This applies even if they label their products as “not for human consumption.”

This blog explains how to stay compliant and protect your business. It also shows how to use simple verification without disrupting your store's checkout process.

Quick Answers: Is It Legal to Sell Peptides?

Are peptides legal?

It depends on the peptide and how it's sold. Some peptides, like tesamorelin, are FDA-approved prescription drugs. Others, including BPC-157, TB-500 and CJC-1295, aren't approved by the FDA for any use. When the FDA finds unapproved peptides being sold for human use, it treats them as unapproved drugs.

Is it legal to sell peptides in the US?

There's no simple yes. At the federal level, the FDA sent warning letters to online peptide sellers in March, June and August 2026. In July 2026, federal courts sentenced peptide sellers to prison for selling misbranded drugs. At the state level, New York and California restrict selling products marketed for muscle building or weight loss to anyone under 18, and more states have bills pending.

Does a “research use only” label make it legal?

No. The FDA has said that despite “research use only” and “not for human consumption” labels, a seller's own website can show the products are meant for human use. That includes product claims, dosing instructions and peptide calculators. In one of the July 2026 cases, the seller's websites said the products were “for research purposes only.”

Is BPC-157 legal now?

It hasn't been cleared. In April 2026 the FDA removed BPC-157 from its “Category 2” compounding list because the nominations were withdrawn, not because it was found safe. In July an FDA advisory committee voted to recommend allowing pharmacies to compound it, but the vote isn't binding. Even if the FDA acts on it, the change wouldn't cover online “research use” sales.

How can I reduce my risk selling peptides online?

Be careful how you market your products. Use state-aware age verification at checkout, and keep an audit trail of every verification. Verification helps you meet state age laws and satisfy payment processors. It doesn't change the FDA's rules on what you can sell or how you can market it.

Why Peptides Are in the Crosshairs

Peptides are short chains of amino acids. They help trigger many biological responses. These include muscle growth, tissue repair and fat loss. People choose from a wide range of popular ones like BPC-157, growth hormone-releasing peptide, and CJC-1295 in:

• Bodybuilding, improving immune system and athletic performance.
• Anti-aging, treat diseases and recovery therapies
• Experimental or off-label use

Despite these claims, BPC-157, TB-500 and CJC-1295 are not approved by the FDA (Food and Drug Administration) for any use, including muscle enhancement. Even tesamorelin, a growth hormone-releasing peptide that is FDA-approved as a prescription drug, has been called an unapproved drug by the FDA when “research use only” versions were sold online.

Instead, they fall into legally gray categories like:

• Research chemicals (often labeled “not for human consumption”)
• Experimental wellness compounds
• Unapproved drugs, when the FDA finds they are sold for human use

This label and the way people are selling peptides place them in the same compliance risk as SARMs, steroids, or nootropics.

And in 2026, the gray area got smaller:

• FDA warning letters: The FDA warned online peptide sellers in March, June and August 2026, including at least five sellers on August 24 alone. It said that despite “research use only” and “not for human consumption” labels, “evidence obtained from your website establishes that your products are intended to be drugs for human use.”
• Prison sentences: In July 2026, federal courts in Michigan and Indiana sentenced peptide sellers to prison for selling misbranded drugs. In the Michigan case, the websites claimed the products were “for research purposes only.”
• BPC-157 is in limbo, not cleared: In April 2026 the FDA removed BPC-157, TB-500 and other peptides from its “Category 2” compounding list because the nominations were withdrawn, not because they were found safe.

• In July, the FDA's compounding advisory committee voted 8–6 to recommend adding BPC-157 to the list of substances pharmacies may compound. That went against the FDA staff's own assessment.
• The vote isn't binding. The FDA would still need a formal rulemaking, and it hasn't acted.
• Even if BPC-157 is added, the list covers pharmacies compounding for patients. It doesn't cover online “research use” sales.

New & Pending State Regulations You Need to Know

Until recently, peptide sellers primarily focused on challenges with payment processors or customs regulations. However, this changed a lot when New York passed its law, which took effect in April 2024. The law bans the sale of muscle-building and weight-loss supplements to anyone under 18.

This move by New York set a major precedent, making it clear that peptide sales could no longer ignore age-related restrictions. The law has also held up in court. In 2025, a federal appeals court refused to block it, and in October 2026 the U.S. Supreme Court declined to hear the challenge. Sellers in the industry must pay more attention to compliance. They need to change their business models to avoid legal issues.

Here's the current state of play:

In Effect:

• New York (2024): Prohibits the sale of dietary supplements and over-the-counter diet pills marketed for muscle building or weight loss to minors. Online orders must be shipped with delivery that requires an adult signature and a government-issued photo ID. This law is an important step in controlling the sale of performance-enhancing products. It aims to protect young consumers from possible harm.
• California (2026): Signed September 28, 2026 (AB 2030) and expected to take effect January 1, 2027. It bans the same kinds of products for anyone under 18 without a prescription. Online sellers must confirm the buyer is 18 or older by checking their name, birth date and address against a commercial database, by requiring an adult signature with photo ID at delivery, or both.
• Narrower laws elsewhere: Colorado and Florida ban selling over-the-counter diet or weight-loss pills to minors, and Rhode Island bans selling minors supplements with certain ingredients, such as ephedra. Unlike New York and California, these laws don’t cover products based on how they’re marketed.

In Progress (2025–2026):

• Michigan and Ohio have pending bills (HB 5250, introduced November 2025, and HB 943, introduced May 2026). Alaska, Connecticut, Hawaii, Illinois, Maryland, Massachusetts, New Hampshire, Rhode Island, Texas, Virginia and Washington also introduced similar legislation in 2025–2026, but none of those bills has become law.

These bills aim to limit access to products for muscle building and weight loss. They want to protect minors from potentially harmful products.

These laws don't name peptides. They are written for dietary supplements and diet pills. However, selling peptides and promoting them for muscle growth or better performance can lead to legal issues for sellers. Both laws cover products “labeled, marketed, or otherwise represented” for weight loss or muscle building. Marketing phrases like “lean mass,” “GH boost,” or “recovery enhancer” can face close examination from state rules.

Sellers should be careful about how they show these products. This will help them avoid unwanted attention from regulators. More states are planning to create similar laws soon.

Why Peptide Sellers Are at Risk (Even Without a Ban)

Here's the kicker: Compliance doesn't just depend on your product, it depends on your messaging.

State laws often focus on how companies promote a product, not just on what's inside the bottle. So does the FDA. This means that even compliant ingredients can trigger enforcement if marketing language suggests unapproved uses or benefits.

And let's be honest, most peptide product pages use phrases like:

• “Supports lean muscle growth”
• “Increases recovery and strength”
• “Anti-aging performance booster”

These trigger words, combined with the fact that officials haven't approved these compounds, create significant legal risks from:

• The FDA: Your website copy, dosing instructions, peptide calculators and even bacteriostatic water sold alongside your products can be used as evidence that your products are intended for human use.
• State attorneys general can start investigations or legal actions for non-compliance. This is especially true if the marketing targets underage users.
• Payment processors: Accounts could be flagged, restricted, or terminated, limiting your ability to process transactions.
• Shipping carriers and customs: There is a risk of delays, returns or rejections of products. This can happen if products do not follow state laws.
• Online stores like Shopify and WooCommerce must follow platform rules. If they don't, they may face account suspension, listing restrictions, or other penalties.

These combined risks highlight the importance of adhering to the latest regulations to protect your business and avoid disruptions.

How to Implement Compliant Age & State Verification

So how do you stay ahead of this mess without killing conversions?

First, a reality check: verification helps you meet state age laws and show processors you're in control. It doesn't change the FDA's rules on what you can sell or how you can market it.

Here's how the smartest peptide sellers are future-proofing their stores right now:

1. Use State-Aware Age Verification

Basic “Are you 18+?” popups won't cut it anymore. You need a system that can:

• Apply the right verification based on the product and the customer's location
• Confirm age with real data or an ID check, not a checkbox
• Block checkout or flag manual review if conditions aren't met

Tools like Token of Trust offer this kind of targeted control in selling peptides through Age Verification with minimal impact on UX.

Example: A shopper in New York sees a prompt requiring age verification for a product marketed for muscle building or weight loss. The system blocks checkout if you are under 18. In a state without an age law, they might proceed normally, unless new legislation passes.

Also check what each state asks for shipped orders. California lets online sellers verify age against a commercial database at checkout. New York requires an adult signature with photo ID at delivery, which you set up with your shipping carrier.

2. Choose Compatible Platforms & Plugins

Peptide stores face a double challenge: ensuring compliance while maintaining platform integration.

Many age verification plugins are awkward or can cause problems with theme integrity. This is especially true for custom Shopify themes or headless builds. Non-compliant plugins can break site elements or create bad user experiences. This can hurt sales and customer satisfaction.

Look for tools that:

• Integrate seamlessly with WooCommerce, Shopify, BigCommerce, and custom-built sites
• Are optimized for mobile-first UX to cater to a growing number of mobile shoppers
• Offer plugin-free JS injection options if needed, minimizing technical hurdles and improving overall store performance

Making sure your store's systems work well together will help avoid problems. This will keep everything running smoothly and meet the latest rules.

But what if your platform or processor has already pushed you out? For peptide merchants operating legally, Token of Trust Storefront is another option. It's a managed commerce platform for regulated sellers with legal but restricted products. We run the platform, and the compliance services you choose work inside checkout.

You can bring your own payment processor if it's compatible with your category and Storefront's checkout. The provider still decides underwriting and approval.

Storefront isn't the right fit for every peptide business, so it starts with a free continuity assessment. That's a fit-checking conversation that helps identify what can travel with you and whether Storefront fits.

3. Create an Audit Trail

If a regulator or payment processor asks you to prove compliance, screenshots won't cut it.

Your system should:

• Log the date/time and result of each age verification
• Record what was checked and what decision was made, not just a self-declared age
• Keep records you can pull up quickly when a processor or regulator asks

This level of traceability helps you survive audits, chargebacks, and legal challenges.

Case Study: How Token of Trust Solves This

Token of Trust was built to handle exactly this kind of fragmented compliance challenge, particularly in selling peptides.

Here's what it offers peptide merchants:

• Dynamic age verification based on product and customer location
• Age and location gate for your storefront
• Audit-ready logs of every verification
• Shopify, BigCommerce and WooCommerce ready
• Fast checkout: 90% of verifications clear in under 5 seconds
• Storefront, a managed commerce platform, for legally operating merchants who need a new home for their store

Token of Trust is different from regular plugins. It knows that peptide merchants face legal challenges. It provides you with the tools to stay balanced.

Don’t Wait for a Lawsuit

Selling peptides today requires running a high-risk operation.

New York's law sets the precedent. California has followed, and we expect additional states to enact similar regulations.

• You can wait until a customer files a complaint.
• Or until the FDA sends a warning letter.
• Or until Shopify enforces compliance measures against your store.
• Or until Stripe raises a compliance issue with your account.

Or, you can get ahead of this now with state-aware, age-gated compliance.

Want Help?

📅 Want Help? Book a demo with our team today and get personalized advice before regulations tighten further.

Ensure regulatory compliance. Maintain your business operations. And avoid the stress of regulatory uncertainty.

This article is for general information and is not legal advice.