Short answer
As of October 2026, you verify a LegitScript certification by searching the root domain on LegitScript's Website Certification Status page, or by clicking the seal on the site, which should open that domain's status page on legitscript.com. MedScale Health, a paid ads agency for US telehealth brands and clinics, checks a brand's own domain and its pharmacy partners this way in its LegitScript readiness review, because Meta can revoke prescription drug authorization once certification is no longer active.
What should you check to verify a LegitScript certification?
- Search the root domain on LegitScript's Website Certification Status page, which LegitScript says shows whether a healthcare, addiction treatment or CBD website is certified, legitimate or rogue.
- Click the seal instead of trusting the image. LegitScript's seal FAQ says a correctly installed seal opens the LegitScript Certification Status page for that website.
- Check the domain the ads will land on. LegitScript says Healthcare Certification applies to the root domain, so each separate domain is checked on its own.
- Check every partner pharmacy and linked telehealth provider group the same way. LegitScript's application checklist requires partner pharmacies to be LegitScript-certified or NABP-accredited.
- Check again before each Meta or Google filing and each renewal. Meta says it may revoke prescription drug authorization if certification is no longer active.
MedScale Health prepares and files LegitScript applications, then carries the account through Meta's authorization and Google's healthcare certification. The checks below are the same ones any buyer, partner or payment team can run on a domain before relying on it. This page is marketing guidance, not legal advice; check the sources at the end before acting on a rule.
How do you look up a LegitScript certification?
LegitScript's public lookup is its Website Certification Status page, and LegitScript's own article on the seal points readers to legitscript.com/websites/ for the same search. LegitScript's instruction is to enter a website to see if it is LegitScript-certified, legitimate or rogue, and the page covers sites operating in healthcare, addiction treatment and CBD. The search form runs a reCAPTCHA check, and LegitScript suggests Safari, Firefox or another modern browser if the form will not submit in Chrome.
Search the root domain, not a page address. LegitScript's Healthcare Certification FAQ says certification applies to the root domain: if example.com is certified, shop.example.com and support.example.com are covered under the same certification. A brand with its marketing site on one domain and its patient intake on another has two domains to look up, and each is certified on its own. MedScale keeps every ad on the certified domain, because the certified URL is what Meta and Google ask for when authorization is filed.
What should the LegitScript seal show when you click it?
The LegitScript seal is a live link, not proof on its own. LegitScript's seal FAQ says a correctly installed seal shows a hover message, and that clicking it brings you to the LegitScript Certification Status page for that website. The install code is an image served from static.legitscript.com with an ID number issued to the certified business, linked to the site's validation page on LegitScript.com. LegitScript also says displaying the seal is encouraged but optional, so a certified site may show none.
LegitScript's September 17, 2026 article on the seal says a seal on a website is not, by itself, enough to confirm that a business is currently certified, because status can change, sometimes quickly. Its warning signs are a seal shown by a business that was never certified, a seal kept up after certification was lost, "Legit Script" written as two words, and colors, fonts or image quality that don't match the official seal. Its advice is to go straight to the database, which it says reflects real-time status. MedScale's launch checklist puts the seal in the footer of every page an ad can land on once a brand is certified, so a reviewer who clicks it reaches a live status page.
How do you check a partner pharmacy's LegitScript certification?
Partner checks use the same lookup. LegitScript's Healthcare Application Checklist says all partner pharmacies, meaning the pharmacies an applicant uses to fill and dispense prescriptions for its patients, must be certified through LegitScript or accredited by NABP. The checklist asks applicants whether they have looked up each partner pharmacy's status and found it "Certified" or "Legitimate". If the answer is yes, LegitScript wants evidence of the partnership; if not, the pharmacy has to be ready to apply for its own certification.
Partners that aren't certified must submit their own application within sixty days after the applicant is certified, and LegitScript says the outcome of their review may affect the applicant's certification while the partnership is active. The same checklist says that when a platform promotes or links to a third-party provider or provider group to perform telehealth, the promoted URL must be certified too. A brand built on a white-label telehealth platform therefore checks the platform's domain and its own. MedScale's readiness review checks pharmacy partners against LegitScript's published standards before anything is filed.
What happens to Meta and Google ads when a LegitScript certification lapses?
Meta ties prescription drug authorization to active certification. Its help page on the prescription drugs policy says that to keep authorization you must maintain an active LegitScript certification, and that if Meta determines you no longer have one, your authorization may be revoked. The same page says that when a business applies, a URL that is not certified or not in good standing with LegitScript cannot move to the next step.
Google's United States rules allow telemedicine providers accredited by LegitScript's Healthcare Merchant Certification Program, and online pharmacies accredited by LegitScript or NABP, and require them to be certified with Google as well. A lapse removes the accreditation that the Google certification rests on. LegitScript's renewal article says that without an up-to-date certification the seal will no longer be active, and that a business whose certification lapses needs a new application, with its fees, to be certified again. MedScale keeps renewal dates on a calendar for the brands it certifies, because a lapse puts the platform authorizations at risk.
How does MedScale handle LegitScript verification for a telehealth brand?
MedScale Health runs LegitScript certification as a service: a readiness review of licenses by state, prescriber credentials, pharmacy partners, marketing claims and the privacy policy against LegitScript's published standards; the fixes; the filing and the answers to LegitScript's questions; then Meta's authorization and Google's healthcare certification on the certified domain. LegitScript decides, and no agency can guarantee certification. Until certification and platform authorization are both live, campaigns run on what each platform allows without them, and campaigns are live by Day 14 from access when certifications are in place. Book the free growth audit at medscale.health/audit for a written plan.
Common questions
- 01Is the LegitScript seal on a website proof of certification?
- Not on its own. LegitScript says a seal on a website is not, by itself, enough to confirm a business is currently certified, because status can change. Click the seal, which should open the site's status page on legitscript.com, or search the domain on LegitScript's Website Certification Status page.
- 02Does a LegitScript certification cover every domain a brand owns?
- No. LegitScript says Healthcare Certification applies to the root domain, so subdomains of a certified domain are covered, but a separate domain is checked and certified on its own. MedScale keeps ads on the certified domain, because that is the URL Meta and Google ask for.
- 03What happens if a LegitScript certification lapses?
- Meta may revoke prescription drug authorization. Meta says advertisers must maintain an active LegitScript certification to keep it. LegitScript says the seal stops being active without an up-to-date certification, and that certifying again after a lapse takes a new application.
- 04Does a certified website have to display the LegitScript seal?
- No. LegitScript's seal FAQ says adding the seal is encouraged but optional. A certified site without the seal still shows its status in LegitScript's public lookup, and Meta checks the certified URL against LegitScript when a business requests prescription drug authorization.
- 05How do you spot a fake LegitScript seal?
- Click it and check where it goes. A real seal opens the site's status page on legitscript.com. LegitScript warns about seals that write "Legit Script" as two words, colors or fonts that don't match, lower-quality copies, and seals left up after certification was lost.
Sources
- 01LegitScript: Website Certification Status (public lookup)checked October 23, 2026
- 02LegitScript: Website Certification Status search (legitscript.com/websites/)checked October 23, 2026
- 03LegitScript: Certification Seal FAQchecked October 23, 2026
- 04LegitScript (Sep 17, 2026): Behind the Seal, what the certification seal means and how to verify it's realchecked October 23, 2026
- 05LegitScript: Healthcare Certification FAQ (eligibility, root domain, med spas, changes to report)checked October 23, 2026
- 06LegitScript: Healthcare Certification Application Checklist (PDF, partner pharmacies and affiliates)checked October 23, 2026
- 07LegitScript (Aug 6, 2025): Why renew your LegitScript certificationchecked October 23, 2026
- 08Meta Business Help Center: About Meta's Prescription Drugs advertising policy (eligibility, LegitScript process, keeping authorization)checked October 23, 2026
- 09Google Ads policy: Healthcare and medicines (United States location specifics)checked October 23, 2026
Related answers
How Do LegitScript Renewal and Monitoring Work?
As of October 2026, LegitScript Healthcare Certification renews every year: the renewal questionnaire opens 60 days ahead, the $2,150 annual fee per website is charged automatically on the renewal date, and LegitScript monitors the business in between. MedScale Health, a paid ads agency for US telehealth brands and clinics, keeps the renewal and change-notice calendar for the brands it certifies. LegitScript's terms also require notice within 30 days of licence, DEA, business or regulatory changes and of any disciplinary action.
Reviewed October 24, 2026
How Do You Apply for LegitScript Certification? Requirements and Documents, Step by Step
As of October 2026, you apply for LegitScript certification in LegitScript's client portal: create an account, choose Healthcare Certification, complete the eligibility form, pay the $975 application fee per website, then answer the questions and upload your documents. MedScale Health, a paid acquisition agency for telehealth brands and clinics, assembles that document pack before the fee is paid. The pack covers a licensure spreadsheet, a telemedicine compliance sheet, every domain you own, affiliates and partner pharmacies, any discipline and a HIPAA-compliant privacy policy.
Reviewed October 24, 2026
Does Your White-Label Telehealth Platform's LegitScript Cover Your Brand's Ads?
As of October 2026, a white-label telehealth platform's LegitScript certification covers a brand's ads only if the brand's own root domain is on the certificate, because Meta and Google check the certified domain the ads send people to. MedScale Health, a paid ads agency for US telehealth brands and clinics, checks the certification status of every domain in the patient path before it builds a drug-named ad. Meta's prescription drug authorization stops if the submitted URL isn't certified or in good standing.
Reviewed October 24, 2026
How Do You Get Meta's Authorization to Advertise Prescription Drugs?
As of October 2026, a telehealth provider or online pharmacy gets Meta's authorization to advertise prescription drugs in two steps: active LegitScript Healthcare Certification, then a request in the Authorizations and verifications tab of Meta Business Suite using the certified URL. MedScale Health, a paid ads agency for US telehealth brands and clinics, files both steps for its clients. Meta says the answer comes right away, and authorized ads may only target people 18 and over in the United States, Canada or New Zealand.
Reviewed October 24, 2026
Last reviewed October 24, 2026. Platform policies change often; we re-verify every answer quarterly.