This guide covers what LegitScript certification is and who needs it, the certification programs available, how to qualify and apply, what the process costs and how long it takes, how to avoid common denial reasons, and how to maintain certification while unlocking payment processing as a high-risk merchant.
LegitScript certifies businesses across healthcare, addiction treatment, and CBD, confirming that each applicant holds valid licenses, meets consumer safety standards, and operates transparently. Its direct recognition by Google, Meta, Microsoft, TikTok, and Visa makes it an operational prerequisite rather than an optional credential.
Online pharmacies, telemedicine platforms, addiction treatment centers, CBD retailers, and kratom vendors each fall under a distinct certification program, with tailored compliance requirements for each industry type.
Qualifying requires active licenses across all relevant jurisdictions, complete business documentation, a website that meets LegitScript’s published disclosure standards, and transparent ownership records. The application follows a structured sequence, and review timelines depend on preparation quality and responsiveness.
Healthcare Merchant Certification carries a nonrefundable $975 application fee and a $2,150 annual fee per website. Applications are denied most often because of website compliance gaps, missing licenses, or incomplete ownership disclosures.
After approval, maintaining certification requires ongoing monitoring, timely renewal, and consistent compliance. For high-risk merchants, active certification is the verified trust signal that unlocks merchant accounts with processors recognized by Visa and major ad platforms.
What Is LegitScript Certification?
LegitScript certification is a third-party compliance credential that verifies a business meets legal, ethical, and operational standards required to advertise and process payments in regulated industries. The following sections cover what LegitScript certifies, who runs the organization, and how it differs from other compliance programs.What Does LegitScript Actually Certify?
LegitScript certifies that a business operates in compliance with applicable laws, maintains valid licenses, and meets industry-specific standards for consumer safety. Founded in 2007 in response to the proliferation of dangerous counterfeit pharmaceuticals sold online, LegitScript evaluates businesses across three industries: healthcare, addiction treatment, and CBD. Certification confirms that a website, merchant, or service provider has passed a structured review of its documentation, personnel, and business practices.Who Owns and Operates LegitScript?
LegitScript is a private compliance and certification company headquartered in Portland, Oregon. According to Wikipedia, its founder and former CEO, John Horton, served as a White House aide on drug policy issues from 2002 to 2007, bringing direct regulatory experience to the organization’s founding mission. That policy background shaped LegitScript’s focus on protecting consumers from fraudulent or unlicensed health and pharmaceutical services online.How Is LegitScript Different From Other Compliance Programs?
LegitScript differs from general compliance frameworks because it is directly recognized by major advertising and payment platforms, including Google, Meta, Microsoft, TikTok, and Visa. Most compliance programs produce internal documentation; LegitScript certification produces platform-level access. Without it, businesses in regulated verticals cannot run paid ads or secure payment processing through mainstream providers, making it an operational prerequisite rather than an optional credential.Why Does LegitScript Certification Matter?
LegitScript certification matters because it is the gateway credential that unlocks payment processing, advertising, and legal operation for healthcare and high-risk businesses. The sections below explain why payment processors, Google, and Meta require it, and what happens when you operate without it.
Why Do Payment Processors Require LegitScript Certification?
Payment processors require LegitScript certification because it verifies that a merchant holds all necessary and valid licenses from each jurisdiction required to comply with applicable laws. Without that verified compliance, processors classify healthcare and high-risk merchants as unacceptable risks under their underwriting standards. LegitScript is recognized by major platforms including Google, Microsoft, TikTok, Meta, and Visa, making it the single credential that opens access to both advertising and payment processing. For high-risk merchants, this is not a formality: certification is the documented proof that licensing, regulatory compliance, and operational standards are in place before a processor will onboard you.Why Do Google and Meta Require LegitScript for Ad Accounts?
Google and Meta require LegitScript for ad accounts because both platforms treat unverified healthcare advertising as a serious policy violation. According to Google Ads Support, violations of this policy are considered egregious: ad accounts are suspended upon detection, without prior warning, and advertisers are permanently banned from Google Ads. Meta applies the same standard for addiction treatment advertising in the US, requiring active LegitScript certification before granting authorization. These platforms use LegitScript as a third-party verification layer because they cannot independently audit every advertiser’s licensing and compliance status. Operating without it removes your access to the two largest paid advertising ecosystems.What Happens to Your Business If You Operate Without LegitScript?
Operating without LegitScript exposes your business to three compounding risks: loss of ad access, loss of payment processing, and potential legal exposure. According to the Meta Business Help Center, if Meta determines that you no longer have an active LegitScript certification, your authorization status may be revoked immediately. The same applies to Google Ads, where revocation is permanent. Payment processors that require the certification will decline or terminate your merchant account. Together, these consequences can halt revenue entirely. Maintaining an active certification is not a one-time compliance task; it is an ongoing operational requirement for any regulated healthcare or high-risk business.Who Needs LegitScript Certification?
LegitScript certification is required for businesses in healthcare, addiction treatment, and CBD that want to advertise or process payments through major platforms. The following H3s break down which specific business types must certify.
Do Online Pharmacies Need LegitScript Certification?
Yes, online pharmacies need LegitScript certification to run paid ads on Google. According to Google Ads Support, Google allows online pharmacies only if they are accredited by the LegitScript Healthcare Merchant Certification Program. Without this accreditation, any pharmacy attempting to advertise through Google Ads risks immediate account suspension.Do Addiction Treatment Centers Need LegitScript Certification?
Yes, addiction treatment centers need LegitScript certification if they advertise to people in the US. According to the Meta Business Help Center, eligible advertisers include LegitScript-certified in-person alcohol treatment centers, crisis hotlines, mutual support groups, and addiction recovery smartphone apps. LegitScript offers addiction treatment as one of its three core certification industries, alongside healthcare and CBD. Applicants must also comply with all applicable laws related to prescribing or dispensing medications.Do Telemedicine Platforms Need LegitScript Certification?
Yes, telemedicine platforms need LegitScript certification to advertise on Google. Google Ads Support states that telemedicine providers must be accredited by LegitScript’s Healthcare Merchant Certification Program, which covers websites that provide virtual healthcare services and facilitate prescribing. For telemedicine operators, this certification is effectively a prerequisite for any meaningful paid acquisition strategy.Do CBD and Hemp Retailers Need LegitScript Certification?
Yes, CBD and Hemp retailers need LegitScript certification to access advertising and payment processing on major platforms. LegitScript operates a dedicated CBD certification program, one of its three industry-specific tracks alongside healthcare and addiction treatment. Retailers selling Hemp and CBD products face heightened scrutiny from payment processors and ad networks, making certification a critical operational step.Do Kratom Vendors Need LegitScript Certification?
Yes, kratom vendors need LegitScript certification to advertise and secure compliant payment processing. LegitScript maintains a specific kratom certification program that verifies vendors meet product safety and legal compliance standards. Given how frequently mainstream processors and ad platforms restrict kratom businesses, certification is often the only viable path to stable operations.What Are the Types of LegitScript Certification Programs?
The types of LegitScript certification programs are Pharmacy Certification, Healthcare Merchant Certification, Addiction Treatment Certification, Kratom Certification, and Telehealth Certification. Each program targets a specific regulated industry with distinct compliance requirements.
Pharmacy Certification
Pharmacy Certification applies to online pharmacies and mail-order prescription dispensers. This program verifies that a pharmacy operates in compliance with all applicable federal and state laws governing the dispensing of medications. It is among the most rigorous certifications LegitScript offers, given the potential for consumer harm from counterfeit or improperly dispensed drugs.Healthcare Merchant Certification
Healthcare Merchant Certification covers a broad category of health-related businesses that sell regulated products or services online. According to Google Ads Support, Google allows online pharmacies and telemedicine providers that are accredited by LegitScript’s Healthcare Merchant Certification Program. This certification is the primary gateway to advertising on major platforms for most health merchants.Addiction Treatment Certification
Addiction Treatment Certification is designed for rehabilitation facilities, crisis hotlines, mutual support groups, and recovery apps. LegitScript evaluates these organizations against published compliance standards, including verifying that the applicant is in compliance with all applicable laws related to treatment services. This certification is required to run paid ads on both Google and Meta targeting users in the US.Kratom Certification
Kratom Certification covers vendors that sell kratom products, a botanical supplement subject to heightened regulatory scrutiny. LegitScript certifies kratom retailers to signal that they operate transparently and meet defined product and business standards. For kratom merchants, this certification is increasingly important for accessing advertising platforms and payment processing.Telehealth Certification
Telehealth Certification is available to websites that provide virtual healthcare services and facilitate prescribing. It functions as a subcategory within the Healthcare Merchant framework, specifically addressing platforms where licensed providers consult with and prescribe to patients remotely. Choosing the correct program among these five is essential, as applying under the wrong category delays approval.What Are the Requirements to Qualify for LegitScript Certification?
The requirements to qualify for LegitScript certification span five core areas: active licenses, business documentation, website compliance, ownership disclosures, and absence of automatic disqualifiers. Each area is reviewed before approval is granted.What Licensing Requirements Must You Meet Before Applying?
The licensing requirements you must meet before applying are valid, active licenses for every jurisdiction in which your business operates. According to LegitScript’s terms and conditions, applicants must hold all necessary licenses from each jurisdiction required to comply with applicable laws. This includes state-level pharmacy licenses, DEA registrations, or treatment facility licenses depending on your certification type. Missing even one required license will stall or block your application entirely, so auditing your licensure status before submitting is the smartest first step.What Business Documentation Does LegitScript Require?
The business documentation LegitScript requires includes proof of legal business formation, such as articles of incorporation, a valid business address, and relevant operational records. LegitScript also requires evidence of regulatory compliance, including documentation showing the business adheres to all applicable laws governing its industry. Preparing a complete document package before starting your application significantly reduces back-and-forth delays during review.What Website Compliance Standards Must You Meet?
The website compliance standards you must meet require your site to clearly display required disclosures, including contact information, privacy policies, terms of service, and accurate descriptions of services offered. LegitScript reviews every page of your website for deceptive claims, unlawful offers, or content that conflicts with applicable regulations. Ensuring your website is accurate and fully transparent before applying is critical to passing this review.What Ownership and Personnel Disclosures Are Required?
The ownership and personnel disclosures required by LegitScript include identifying all owners, officers, and key personnel associated with the business. LegitScript conducts background reviews on disclosed individuals to screen for prior regulatory violations, criminal history related to healthcare fraud, or involvement with previously denied or revoked certifications. Incomplete or inaccurate disclosures are among the most common reasons applications are delayed or denied.Are There Any Automatic Disqualifiers for LegitScript Certification?
Yes, there are automatic disqualifiers for LegitScript certification. LegitScript may deny certification if an applicant fails to meet its published standards or fails to respond timely to its requests during review. Businesses operating without required licenses, those with undisclosed ownership, or those whose websites promote illegal or deceptive health claims face outright rejection. Any prior revocation of a LegitScript certification also creates a significant barrier to reapplication.How Do You Apply for LegitScript Certification Step by Step?
Applying for LegitScript certification follows a structured sequence: creating your account, selecting the correct program, submitting documents, passing the website review, and awaiting a decision.
How Do You Create Your LegitScript Account and Start an Application?
You create your LegitScript account by visiting the LegitScript website and registering with your business email. Once registered, you access the certification portal, where you initiate a new application. The portal guides you through each subsequent step, so completing your profile accurately from the start prevents delays later in the review process.How Do You Select the Right Certification Program for Your Business?
The right certification program for your business is determined by the industry your website operates in. LegitScript offers certification in three industries: healthcare, addiction treatment, and CBD. Choosing the wrong program adds processing time, so match your selection to your primary service before paying any fees.How Do You Submit Required Business and Licensing Documents?
Submitting required business and licensing documents means uploading valid licenses for every jurisdiction where your business operates, along with ownership disclosures and any personnel credentials LegitScript requests. Organize these files before starting the application. Incomplete or expired documents are among the fastest ways to stall a review, so verify each license is current before uploading.How Do You Pass the Website Review Portion of the Application?
The website review portion requires your site to meet LegitScript’s compliance standards before reviewers approve your application. Ensure all required disclosures, pricing information, and contact details are clearly displayed. According to Meta’s Business Help Center, review length depends on application order, complexity, applicant responsiveness, and the sufficiency and transparency of answers provided. A fully transparent site shortens this phase significantly.What Happens After You Submit Your LegitScript Application?
After you submit your LegitScript application, LegitScript assigns a reviewer who evaluates your documents, website, and disclosures against their certification standards. You may receive follow-up requests for clarification or additional documents. Responding promptly keeps your application moving. Once approved, you receive your certification status, enabling you to advertise and process payments on major platforms.How Long Does the LegitScript Certification Process Take?
The LegitScript certification process takes a variable amount of time, depending on several factors specific to each application. Review timelines are not fixed, but applicants can influence their speed significantly through preparation.According to Meta’s Business Help Center, the length of time to complete a review depends on the order in which an application was received, the complexity of the application, applicant responsiveness, and the sufficiency and transparency of the answers provided.
The four main factors that affect timeline are:
- Application order: Earlier submissions enter the review queue sooner.
- Application complexity: More complex business structures require longer evaluation.
- Applicant responsiveness: Slow replies to LegitScript’s requests extend processing time.
- Answer quality: Insufficient or unclear answers trigger follow-up requests and delays.
How Much Does LegitScript Certification Cost?
LegitScript certification costs vary by program type. The sections below cover pricing for Healthcare Merchant, Pharmacy, and Addiction Treatment programs, plus ongoing annual fees.How Much Does LegitScript Pharmacy Certification Cost?
LegitScript Pharmacy Certification cost information is not publicly listed at a fixed rate, as fees depend on pharmacy type, size, and jurisdiction. Contact LegitScript directly for a pharmacy-specific fee quote before budgeting for this program.How Much Does LegitScript Healthcare Merchant Certification Cost?
LegitScript Healthcare Merchant Certification costs $975 as a nonrefundable application fee plus $2,150 as an annual certification fee, both charged per website. According to LegitScript’s Healthcare Certification page, these fees apply to telemedicine platforms and any website that facilitates virtual healthcare services or prescription-related transactions. Google requires this certification for telemedicine providers to advertise on its platform, making the investment a direct prerequisite for ad access. Budget both fees upfront since the application fee is not returned if certification is denied.How Much Does LegitScript Addiction Treatment Certification Cost?
LegitScript Addiction Treatment Certification cost details are not published at a standard fixed rate on LegitScript’s public pricing pages. Fees for addiction treatment programs vary based on facility type and scope. Contact LegitScript directly to request current pricing before submitting an application.Are There Ongoing Annual Fees After Initial LegitScript Certification?
Yes, there are ongoing annual fees after initial LegitScript certification. For Healthcare Merchant Certification, the annual fee is $2,150 per website, due each renewal cycle. Certification remains active as long as the annual fee is paid and the renewal questionnaire is submitted. Missing either requirement can trigger loss of certified status and suspension of advertising privileges on platforms like Google and Meta.What Are the Most Common Reasons LegitScript Applications Get Denied?
The most common reasons LegitScript applications get denied fall into three categories: website compliance failures, missing or invalid licenses, and incomplete ownership disclosures. Understanding each issue before applying significantly improves approval odds.
What Website Issues Cause LegitScript Application Rejections?
Website issues that cause LegitScript application rejections include missing required disclosures, deceptive marketing claims, broken contact pages, and content that conflicts with applicable healthcare advertising standards. LegitScript reviewers evaluate every page of a submitted website, not just the homepage. Common problems include unsubstantiated outcome claims, absence of a physical address, and failure to display required legal disclaimers. According to LegitScript’s certification terms and conditions, applicants must meet all published standards, and failure to do so is grounds for denial. A website that looks polished but lacks compliant disclosures is one of the most preventable reasons businesses lose their $975 nonrefundable application fee.What Licensing Gaps Trigger LegitScript Denials?
Licensing gaps that trigger LegitScript denials include holding licenses in some but not all required jurisdictions, expired licenses, and unlicensed personnel performing regulated services. LegitScript requires that applicants hold all necessary, valid licenses from each jurisdiction needed to comply with applicable laws. A business operating across multiple states must verify that every state-specific license is current and properly documented before submission. Missing even one required license creates a compliance gap that reviewers will flag immediately.What Ownership Disclosure Problems Lead to LegitScript Rejections?
Ownership disclosure problems that lead to LegitScript rejections include incomplete identification of beneficial owners, failure to disclose personnel with prior regulatory sanctions, and mismatched records between submitted documents and public registrations. LegitScript conducts background screening on key principals and requires transparent, accurate ownership information. Inconsistencies between submitted documents and public business registrations, or omitting a co-owner with a prior compliance history, are common triggers for denial.How Do You Maintain LegitScript Certification After Approval?
Maintaining LegitScript certification requires ongoing compliance, not just a one-time effort. The sections below cover continuous monitoring obligations, what triggers suspension or revocation, and the annual renewal process.What Are LegitScript’s Ongoing Monitoring Requirements?
LegitScript’s ongoing monitoring requirements include continuous website reviews, license verification, and compliance checks against its published standards. After certification, LegitScript actively monitors certified businesses to confirm they remain in good standing with applicable laws and maintain the documentation submitted during the original application. Any changes to business operations, ownership, or website content should be reported proactively. Staying current with regulatory changes in your industry is essential to avoiding unexpected compliance gaps.What Triggers a LegitScript Certification Suspension or Revocation?
LegitScript certification suspension or revocation is triggered by failing to meet its published standards, providing inaccurate information, or not responding to LegitScript’s requests in a timely manner. Platforms enforce this independently: according to Meta, if Meta determines that you no longer have an active LegitScript certification, your advertising authorization status may be revoked. Operational changes such as adding new services, letting licenses lapse, or modifying your website in ways that fall outside compliance are among the most common causes. Proactive communication with LegitScript when circumstances change is the most effective way to protect certification status.How Do You Renew Your LegitScript Certification Each Year?
LegitScript certification renewal requires completing four steps: log in, access your certification, submit the renewal questionnaire, and update payment information. According to LegitScript, certification remains active as long as the annual fee is paid and the renewal questionnaire is submitted. Treating the renewal questionnaire as an audit checkpoint rather than a formality helps catch compliance gaps before they become revocation risks.How Does LegitScript Certification Unlock Payment Processing for High-Risk Merchants?
LegitScript certification unlocks payment processing for high-risk merchants by serving as a verified trust signal that major financial platforms and payment networks accept as proof of compliance. Recognized by Google, Microsoft, TikTok, Meta, and Visa, it opens doors to advertising and payment processing that would otherwise remain closed.Can High-Risk Payment Processing Solutions Help LegitScript-Certified Businesses?
Yes, high-risk payment processing solutions can help LegitScript-certified businesses by pairing compliance credentials with processors that specialize in underserved industries. Certification removes the primary barrier that causes mainstream processors to reject high-risk merchants. As Rob Bast of Corepay stated in a LegitScript webinar recap, “In high-risk verticals, LegitScript isn’t optional — it’s your license to operate.” With certification in hand, businesses in healthcare, addiction treatment, and CBD can access merchant accounts, lower their risk profile, and maintain stable payment infrastructure that platforms like Visa and Meta require for ongoing authorization.What Are the Key Steps and Takeaways for Getting LegitScript Certified?
The key steps for getting LegitScript certified are: selecting the correct program type, meeting all licensing and documentation requirements, submitting a complete application, passing the website review, and maintaining annual renewal. The most important takeaways are:- Choose the right program: healthcare, addiction treatment, or CBD.
- Prepare licensing documents and ownership disclosures before applying.
- Build a compliant website that meets LegitScript’s published standards.
- Budget for the nonrefundable application fee and annual certification costs.
- Maintain active certification to preserve access to advertising and payment platforms.