Deep Dive: Peptides and Telehealth in 2026 — Looser Access, Tighter Enforcement

Peptides have moved from the fringes of "biohacking" forums into mainstream telehealth menus faster than almost any therapeutic category since GLP-1s. The regulatory picture is contradictory. Federal health leadership has publicly championed broader peptide access, and an FDA advisory committee recently voted to open a lawful compounding pathway for several popular compounds. Over the same period, FDA, the FTC, and state attorneys general have stepped up enforcement against the telehealth companies, compounders, and vendors who bring these products to patients.

This article explains how peptides are regulated, what has changed since 2023, where the legal exposure sits for telehealth platforms, and how operators can structure their businesses to capture the opportunity without becoming the next enforcement example.

What Are Peptides?

Peptides are short chains of amino acids, the same building blocks that make up proteins, only smaller. Many occur naturally in the body and act as signaling molecules for hormones, healing, and metabolism. Some peptides are well-established, FDA-approved drugs: insulin and the GLP-1 receptor agonists semaglutide and tirzepatide are the best-known examples.

But much of the current market excitement centers on a different, less researched group of "wellness" peptides. These include BPC-157, TB-500, MOTs-c, KPV, GHK-Cu, Semax, and Epitalon, which are marketed in a variety of wellness categories, such as tissue repair, longevity, cognition, and metabolic health. However, unlike the blockbuster GLP-1s, none of these peptides are FDA-approved. A "peptide" is not a legally meaningful FDA drug category -- it is just a chemical description, and each peptide must undergo FDA review and approval before it can be marketed as safe and effective. Some peptides, such as BPC-157, have undergone limited human subject trials and are used among the general public for injury recovery and chronic conditions, but sit in a legal grey area without FDA approval status.

The Regulatory Framework Before 2026

Because most wellness peptides are unapproved, patient access has historically run through pharmacy compounding under Section 503A of the Federal Food, Drug, and Cosmetic Act (FDCA), 21 U.S.C. § 353a, or, less commonly, through Section 503B outsourcing facilities, 21 U.S.C. § 353b.

A 503A pharmacy may compound from a bulk drug substance only if one of three conditions is met. The substance must comply with a USP or NF monograph, be a component of an FDA-approved drug, or appear on FDA's 503A bulks list, and many peptides do not fit neatly into any of those categories. In fact, the FDA has finalized very few bulks-list entries.

For substances that have not yet been added to the bulks list, the FDA relies on its Interim Policy on Compounding Using Bulk Drug Substances Under Section 503A of the FD&C Act (Jan. 2017). Under that policy, nominated substances are sorted into Category 1 (no significant safety risks identified, so enforcement discretion permits compounding), Category 2 (significant safety risks identified, so compounding is not permitted), or Category 3 (inadequate supporting information). Some peptides fell within Categories 1, permitting compounding and distribution, but others were restricted to Categories 2 and 3.

The peptide market was also shaped by two other notable restrictions:

• The biologics threshold. Since the Biologics Price Competition and Innovation Act (BPCIA) transition on March 23, 2020, a "protein" is any alpha amino acid polymer greater than 40 amino acids (21 C.F.R. § 600.3(h)(6)). Such products are regulated as biologics and cannot be compounded under 503A. Tesamorelin, for example, is a 44-amino-acid product and falls outside the compounding pathway.

• The "essentially a copy" prohibition. Pharmacies may not regularly, or in inordinate amounts, compound drugs that are essentially copies of commercially available approved drugs (21 U.S.C. § 353a(b)(1)(D)). This rule became central to the GLP-1 story discussed below.

The inflection point came in fall 2023. On September 29, 2023, FDA updated the 503A nominations list and placed various peptides into Category 2, citing significant safety risks. The agency categorized 19 peptides as Category 2, pointing to concerns such as immunogenicity, manufacturing impurities, and insufficient human clinical data. That action pushed much of the peptide market into gray-market "research use only" channels.

What Has Changed: The Loosening

The Category 2 reversal. In early 2026, HHS Secretary Robert F. Kennedy Jr. made peptide access a public priority. On a February 27 podcast appearance, he described himself as a fan of peptides and asserted that FDA had illegally reclassified 19 peptides to Category 2 during the prior administration. By April 15, 2026, the FDA removed 12 peptides from Category 2, including: BPC-157, TB-500, MOTs-c, injectable GHK-Cu, Melanotan II, Semax, PEG-MGF, Emideltide (DSIP), Epitalon, KPV, Cathelicidin LL-37, and Dihexa acetate. However, this removal did not mean all 12 peptides were immediately eligible for compounding or considered Category 1 substances. Instead, they effectively remained illegal to compound, but subject to review.

The July 2026 advisory committee votes. In late July 2026, the FDA Pharmacy Compounding Advisory Committee (PCAC) recommended adding BPC-157, KPV, TB-500, MOTs-c, Epitalon, and Semax, in both free base and acetate forms, to the 503A bulks list, and voted against recommending Emideltide (effectively relegating it back to Category 2 status). The margins were narrow. BPC-157, KPV, and TB-500 each passed 8-6 with one abstention, and MOTs-c passed 7-5 with two abstentions. The remaining five peptides, including GHK-Cu, Melanotan II, LL-37, Dihexa acetate, and PEG-MGF, are slated for PCAC review before the end of February 2027.

State-level support. States are beginning to legislate in parallel. Louisiana's Act 374 (SB 253), effective August 1, 2026, bars licensing boards from prohibiting prescribers from providing peptides shipped from a compliant 503B outsourcing facility or a 503A pharmacy that complies with 21 U.S.C. § 353a and applicable USP-NF chapters. Notably, the statute does not protect providers from liability for prescribing peptides, so prescribers should still ensure that prescribing these peptides is within the standard of care.

The critical caveat. Even though certain peptides have been removed from Category 2 and recommended for addition to the bulks list, they are not authorized for legal compounding. These substances sit in a regulatory gray zone: they are no longer designated as posing a significant safety risk, but they have not been affirmatively authorized for compounding, and compounders who treat removal as implicit permission face enforcement risk. PCAC votes are advisory, and formal placement on the bulks list requires notice-and-comment rulemaking. Industry insiders expect FDA to exercise some form of informal enforcement discretion in the interim, at least for the peptides PCAC recommended. Thus far, this prediction seems accurate — there has been no FDA enforcement targeting compounding pharmacies specifically for compounding a PCAC-recommended substance since the PCAC decision. However, absent formal FDA guidance, this enforcement prediction is not a safe harbor.

What Has Changed: The Tightening

The loosening of peptide access has come alongside the most aggressive enforcement environment the telehealth industry has ever seen.

Compounded GLP-1s as the template. Telehealth platforms exploded dramatically during the Ozempic®, Wegovy®, and Mounjaro® production shortages in 2022 to 2024. Due to the shortages, compounders were permitted to compound and distribute copies of the semaglutide and tirzepatide. Telehealth platforms connecting patients to providers, labs, and pharmacies facilitated access to these compounded drugs en masse. However, when the FDA declared the tirzepatide and semaglutide shortages resolved (in December 2024 and February 2025), mass compounding of those drugs lost its exemption under the "essentially a copy" prohibition.

The FDA, and branded drug manufacturers like Novo Nordisk and Eli Lilly, quickly moved to quash copycat compounding. In February 2026, Hims & Hers announced it would provide a compounded semaglutide pill, essentially copying Novo Nordisk's Wegovy pill. Consequences were swift. The company launched, defended, and withdrew its compounded version of Novo Nordisk's Wegovy pill within four days. HHS's General Counsel announced that his office had referred Hims to the Justice Department for potential violations of federal drug-sales law.

Advertising enforcement at unprecedented scale. On September 9, 2025, a presidential memorandum directed the FDA Commissioner and HHS Secretary to enforce prescription drug advertising laws, and FDA responded with successive waves of letters. The September 2025 round included roughly 80 warning letters and 40 untitled letters. During the week of June 15, 2026, FDA issued 25 more warning letters to telehealth companies for allegedly false or misleading promotion of compounded GLP-1s under FDCA Sections 502(a) and 502(n).

The theories in these letters apply directly to peptide marketing. The FDA's primary concern? Telehealth companies making claims implying their compounded drugs were "the same" as FDA-approved products or advertising these drugs under their own name/trademark without clarification, which implied the telehealth platform was the compounder. Though the FDA has not leveraged its DOJ referral tool since Hims, the enforcement intensity has not slowed, and telehealth companies should take heed with rigorous advertising standards.

The end of the "research use only" workaround. FDA has systematically dismantled RUO labeling as a defense. In several warning letters this year, the FDA relied on FDCA Section 201(g)(1), and inferred a product's intended use from its surrounding marketing context rather than from its disclaimers. For example, the FDA cited the following statement relating to compounded Retatrutide as evidence of intended human use in its warning letter to Gram Peptides:

"[D]emonstrated significant potential for reducing body weight, improving glucose handling, and enhancing lipid metabolism.”

This warning letter and others like it show that the FDA is looking past the traditional buzzwords — like "treat", "prevent", "cure" — in enforcing drug classification rules, and RUO disclaimers will not "cure" noncompliance.

Risk to "essential copy" workaround. For 503A compounding pharmacies and the telehealth companies that rely on them, free flowing GLP-1 access may be ending. In September 2026, the FDA issued a warning letter to Empower Pharmacy (one of the major GLP-1 compounding pharmacies), citing noncompliance with the "essential copy" restrictions on compounding pharmacies. To comply with the "essential copy" restrictions, compounders need to (a) not produce an exact replica of a commercially available/branded drug, and (b) "personalize" the drug formation in a way that would make a "significant difference" for a patient, per the patient's provider.

In practice, this meant providers working with telehealth companies offering access to GLP-1s would write a prescription for something like semaglutide+cyanocobalamin, or tirzepitide+niacinamide (i.e., not an exact replica of Ozempic® or Wegovy®), and state in the prescription that such a formulation of the drug would create a "significant difference" for the patient. Then compounding pharmacies, like Empower, would be able to compound a personalized drug for the patient. With this warning letter, the FDA is signaling that it will be looking under the hood for compounding pharmacies relying on this workaround, jeopardizing GLP-1 supply for telehealth platforms, providers, and patients.

However, the FDA has historically stopped short of questioning a provider's clinical judgment in prescribing a drug, as that is not within its jurisdiction. It is crucial that providers maintain legitimate processes and practices for prescribing "personalized" compounded GLP-1s, documenting their rationale for the "significant difference" to the patient, whatever that may be.

503B bulk compounding risk. Amidst the GLP-1 blitz, semaglutide, tirzepatide and liraglutide were nominated to be included in the 503B bulks list. However, in April 2026, the FDA proposed not including these peptides on the bulks list. These peptides were previously listed via the shortage pathway but were removed when the shortage was declared over. The FDA's position is still "proposed" at this time, with a final decision likely to come at the end of the year.

FTC consumer protection. Enforcement does not stop at the FDA. The FTC continues to police telehealth marketing and billing. In July 2025, telemedicine company NextMed settled FTC charges that its GLP-1 weight-loss program used false pricing, misleading weight-loss claims, and fake testimonials. The FTC alleged the company claimed an average weight loss of 53 pounds without substantiation. Non-GLP-1 peptides that have not undergone clinical trials may face even greater risk, as the FTC requires "competent and reliable scientific evidence" for health claims.

Where the Risk Sits for Telehealth Platforms

Product-status risk. A platform that facilitates access to a peptide that cannot lawfully be compounded may face exposure for causing the introduction of unapproved new drugs into interstate commerce. This applies to the PCAC-recommended peptides until FDA acts. This could also extend into compounded GLP-1s that fail to meet the 503A or 503B requirements.

Marketing risk. The FDA is enforcing prescription drug advertising rules at record scale, and telehealth companies are a prime target. Avoid marketing that suggests compounded drugs are “the same” as FDA-approved products, and be clear that patient would receive "personalized" compounded peptides from an approved compounding pharmacy. The FDA is also judging a product’s intended use by the marketing around it, so “research use only” disclaimers no longer protect implied efficacy claims, and peptide and GLP-1 advertising needs legal review.

Supply-chain risk. Even well-established compounding pharmacies are facing FDA enforcement for compounding GLP-1s, and access to these drugs could be disruptive without proper prescribing protocols in place. For peptides more broadly, FDA and FTC enforcement activity shows risk to telehealth platforms that are contracting with an RUO vendor, a pharmacy sourcing API from unregistered manufacturers, or a 503A pharmacy that ships office-use or non-patient-specific products.

Mitigating the Risk

Build a living peptide formulary. Track each peptide's status by chemical form: approved drug, bulks-list or Category 1 substance, PCAC-recommended but pending, removed from Category 2 without further action, or biologic (more than 40 amino acids). Only offer products in categories counsel has cleared, and monitor the Federal Register and FDA's bulks-list page, since status is changing regularly. Treat "pending rulemaking" peptides as high-risk until FDA issues written enforcement-discretion guidance.

Diligence your pharmacy partners. Require evidence of:

• state licensure in every ship-to state,

• 503B registration where applicable,

• FDA-registered API sources with certificates of analysis, and

• USP <797> compliance for sterile injectables.

Contract for audit rights, recall cooperation, and strong indemnification. Avoid offerings that looks like RUO marketing, such as reconstitution kits or dosing calculators paired with unapproved products.

Scrub your marketing. Do not imply equivalence to approved drugs. Clearly disclose that compounded products are not FDA-approved. Identify the actual compounding pharmacy rather than branding products as your own. Avoid disease or efficacy claims you cannot substantiate. Present pricing, subscription terms, and cancellation rights transparently. Route all consumer-facing copy, including influencer and affiliate content, through a documented legal review process as the FDA and the FTC will attribute third-party content to you.

Protect clinical independence. Document that licensed clinicians, not a management company, set clinical protocols and formularies. Ensure clinicians can decline to prescribe without penalty and establish documentation standards to support prescription rationale. Build in real, individualized evaluation, including informed-consent language that addresses the limited human evidence for these products.

Prepare for inquiries. Maintain an enforcement-response plan. Warning letters typically demand a response within 15 business days, and a thoughtful, documented corrective-action response often determines whether a matter escalates. Have counsel on hand to support this plan — you will burn precious response time trying to find counsel after receiving a warning letter.

Conclusion

Peptides are likely to become more accessible through lawful compounding over the next 12 to 24 months, and early movers who build compliant infrastructure will be well positioned. The same regulators opening that door are watching closely to see who walks through it early, and how. For telehealth platforms, the winning strategy is to be precisely aligned with where the law is today while preparing to move quickly when it changes.

Choose counsel that understands this rapidly changing area. Health Law Counsel advises telehealth platforms from set up to nationwide operations in navigating compliance through a changing regulatory landscape. Contact us to learn more.