What is LegitScript and VIPPS Certification?

LegitScript certification is a third-party approval that shows banks, payment processors and ad platforms that a healthcare, telehealth, pharmacy or supplement business operates legally and safely. If you sell prescriptions or other regulated health products online, it is often the first thing a processor asks for. This guide explains what LegitScript is, what happened to VIPPS, who needs certification, and how it affects your merchant account.

LegitScript Certification: The Quick Answer

• What it is: an independent review of your business, licenses and website against legal and platform standards.
• Who needs it: online pharmacies, telemedicine and telehealth providers, and many supplement, CBD and other regulated health brands.
• Why it matters: many processors will not board prescription sellers without it, and Google requires it for certain healthcare ads.
• What about VIPPS: VIPPS is NABP’s older accreditation for online pharmacies. Processors and ad platforms generally accept either LegitScript certification or accreditation from NABP, the National Association of Boards of Pharmacy, which offers Digital Pharmacy Accreditation and .Pharmacy domains for licensed pharmacies.

What Is LegitScript?

LegitScript is a third-party company that reviews and monitors businesses in regulated and high-risk categories, especially healthcare. A certified business is listed as verified and can display the LegitScript seal. Banks, payment processors and advertising platforms use that status to decide whether a merchant is safe to work with.

What Happened to VIPPS Certification?

VIPPS (Verified Internet Pharmacy Practice Sites) is a program from the National Association of Boards of Pharmacy (NABP) that verifies online pharmacies meet state and federal requirements. NABP also offers Digital Pharmacy Accreditation and the .Pharmacy domain program. LegitScript runs its own separate Healthcare Merchant Certification. Processors and ad platforms generally accept either LegitScript or NABP accreditation, so ask your processor which one they require for your business model.

Is LegitScript Certification Required?

It depends on what you sell and where you advertise and process payments.

• Payment processing: if you sell prescriptions online, processors will generally not approve a merchant account without LegitScript, NABP or an equivalent certification. Other high-risk merchants may be approved without it, but certification improves your options.
• Advertising: Google requires certification for prescription drug services such as online pharmacies and telemedicine, and recognizes LegitScript (or NABP accreditation for pharmacies) as the third-party step. Meta (Facebook and Instagram) only allows prescription drug ads from advertisers with valid LegitScript certification, in eligible countries and for adults 18 and older. Rules vary by country and product, so check each platform’s current policy.

Who Needs LegitScript Certification?

Telemedicine and Online Pharmacies

Providers offering prescriptions or consultations online must meet strict legal standards. Certification proves it. If this is you, see our guide to telemedicine and online pharmacy payment processing.

CBD and Supplement Brands

Products under regulatory scrutiny benefit from independent verification when advertising and applying for merchant accounts. If you sell hemp or CBD products, see our guide to CBD and hemp payment processing.

Other High-Risk Merchants

Some other regulated businesses, including those in online gaming payment processing, may find that independent verification supports their application and lowers the risk of account shutdowns.

How Does LegitScript Certification Affect Your Merchant Account?

Processors and acquiring banks carry the risk of chargebacks and regulatory problems. A LegitScript certification gives them proof that your licensing, products and website claims have been reviewed. That can shorten underwriting questions and help keep your account stable once approved.

How Do You Get LegitScript Certified?

1. Confirm your licenses and registrations are current (pharmacy, medical practice, state and federal as they apply).
2. Make sure your website matches your real business: accurate product claims, clear contact details, privacy and prescription policies.
3. Apply through LegitScript’s website and answer their review questions.
4. Talk to your payment processor in parallel, so your merchant account application and certification move together.

Frequently Asked Questions

What is LegitScript certification?

It is an independent verification that a business complies with the laws and platform rules of its industry, mainly in healthcare, telemedicine and supplements.

Is LegitScript legit?

Yes. It is a widely used verification service that banks, processors and ad platforms rely on when they review healthcare merchants.

What is the difference between VIPPS and LegitScript?

VIPPS is an NABP accreditation for online pharmacies. LegitScript is a separate third-party certification covering pharmacies, telemedicine and other healthcare merchants. Many processors and ad platforms accept either for pharmacies, but telemedicine providers are generally asked for LegitScript.

Is LegitScript required to advertise online?

For prescription drug services, generally yes. Google and Meta both require third-party certification (LegitScript, or NABP accreditation for pharmacies on Google) before allowing these ads. Rules vary by platform, product and country.

Can I get payment processing without LegitScript?

Some high-risk businesses can. If you sell prescriptions online, processors will generally not approve you without LegitScript, NABP or similar certification.

How much does LegitScript certification cost?

Fees depend on your business type and the program, and LegitScript sets them. Request current pricing from LegitScript directly.

Do peptide sellers need LegitScript?

It depends on the product and how it is sold. Regulated or prescription products raise the bar. Talk to us before applying so we can tell you what processors will accept.

Do Telehealth companies need LegitScript certification? 

In most cases, yes. Telehealth companies that prescribe medication or sell regulated health products online are generally asked for LegitScript certification by both ad platforms and payment processors. Without it, ad accounts can be restricted and merchant account applications are often declined or delayed. Requirements vary by service and state, so confirm what applies to your business. For payment setup, see our guide to telemedicine and online pharmacy payment processing.