Peptide Intelligence › Regulation & access

Are Peptides Legal? What HHS's New Peptide Policy Changes

Are peptides legal? HHS now lets licensed pharmacies compound BPC-157, TB-500, KPV and three other peptides under strict rules. What changed and what didn't.

Key takeaways

  • On October 28, 2026, HHS announced it will not take enforcement action against licensed 503A pharmacies and physicians that compound six peptides: BPC-157, TB-500, KPV, MOTS-c, epitalon and semax.
  • This is enforcement discretion, not FDA approval. None of the six is an approved drug, and HHS can pull the policy back if safety or quality problems show up.
  • The policy comes with real conditions: a patient-specific prescription, one peptide per product, listed routes only, and bulk ingredient from an FDA-registered manufacturer with a full certificate of analysis.
  • "Research use only" vials sold online are still outside the legal medicine supply chain. State pharmacy boards can still say no.

Are peptides legal? The short answer changed this week

People have asked me "are peptides legal?" for as long as I've been fielding questions about hair loss and regenerative treatments, and the honest answer has always been "it depends which peptide and where it came from." That's still true. But on October 28, 2026, the federal answer moved for six of the most talked-about peptides, and it's worth walking through exactly what changed and what didn't.

HHS released an interim enforcement discretion policy covering 503A compounding with six peptide bulk drug substances. The Federal Register notice says HHS "does not intend to take enforcement action against a State-licensed pharmacy, Federal facility, or licensed physician" that compounds with the listed peptides, as long as the conditions in the policy are met. The notice was set for formal publication on October 30, with a two-week public comment window on docket HHS-OASH-2026-0496.

If you read our earlier piece on where BPC-157 stood after the 2026 votes, this is the next chapter: the advisory committee vote has now been followed by a federal decision not to block pharmacies while rulemaking continues.

How we got here

  • Late 2023: FDA placed BPC-157 and many other peptides in Category 2 of its interim bulks policy, which effectively shut down compounding.
  • April 2026: FDA removed 12 peptides from Category 2. That lifted the safety flag but didn't make any of them compoundable.
  • June 2026: FDA staff briefing documents recommended against adding the peptides under review, citing limited human data and immune-reaction concerns.
  • July 2026: The Pharmacy Compounding Advisory Committee voted to recommend six peptides for the 503A bulks list and rejected DSIP (emideltide). BPC-157, KPV and TB-500 each passed narrowly, 8 to 6.
  • October 14, 2026: HHS and FDA sent an interim access policy to the White House budget office for review.
  • October 28, 2026: HHS released the enforcement discretion policy.

What the HHS peptide policy actually allows

The policy's appendix spells out the specific chemical form and the routes of administration HHS will tolerate for each peptide. Anything outside this table isn't covered.

PeptideForm named in policyRoutes covered
BPC-157AcetateSubcutaneous, intramuscular, oral, topical
TB-500AcetateSubcutaneous, intramuscular
KPVAcetateTopical, oral
MOTS-cAcetateSubcutaneous, intramuscular
EpitalonAcetateSubcutaneous, intramuscular, in intermittent courses
SemaxBase (non-salt) formIntranasal

For any oral version, the compounding pharmacy has to keep documentation showing adequate oral absorption in humans. That's a meaningful bar, because human pharmacokinetic data for several of these peptides is thin.

The conditions pharmacies must meet

  • Patient-specific prescription. No office stock, no bulk resale. The label must say the product is compounded and not for resale.
  • One peptide per product. The popular "stacks," such as BPC-157 combined with TB-500 in one vial, are excluded.
  • Traceable ingredient. The raw peptide must come from an FDA-registered facility, and the original manufacturer itself (not just a repackager or distributor) must be registered and follow current good manufacturing practice. Each lot needs a certificate of analysis covering identity, potency, impurities, residual solvents, elemental impurities and, for injectables, endotoxin and microbial testing.
  • Device limits. The only delivery device that can be packaged with the drug is an FDA-cleared syringe, which rules out pre-filled pens and auto-injectors.
  • Safety reporting. Compounders must report serious adverse events, whether or not they look drug-related, plus quality problems, to FDA's MedWatch program and to the states. Patient labeling has to explain how to report a problem.

What it does not do

This is where I'd slow down before getting excited. Health-law analysts at Holland & Knight noted that enforcement discretion "does not modify the underlying statutory framework or confer FDA approval on a compounded product." In plain English:

  • None of these peptides is FDA-approved. No agency has reviewed a compounded version for safety, effectiveness or quality.
  • It's temporary and revocable. HHS says it may revisit the policy, in whole or in part, if a safety signal or product-quality issue appears. Permanent access depends on FDA rulemaking to add these peptides to the 503A bulks list, which law firms expect to take one to two years or longer.
  • It doesn't bind the states. State pharmacy boards still regulate compounding. Some states have already issued their own peptide statements, so a pharmacy legal in one state may not be able to ship to another.
  • It doesn't cover 503B outsourcing facilities, imports or research chemicals. The policy is built around 503A, patient-specific compounding.
  • Other peptides aren't included. GHK-Cu (injectable), LL-37, dihexa, melanotan II and PEG-MGF are still waiting on a later advisory committee meeting, and DSIP was voted down.

Which peptides are clearly legal, and which aren't

It helps to sort the whole category into three buckets:

  1. FDA-approved peptide drugs. Semaglutide, tirzepatide, tesamorelin, bremelanotide (PT-141, sold as Vyleesi) and others are legal with a prescription, made to FDA standards and backed by human trials.
  2. Compounded peptides under federal policy. The six peptides above, now compoundable by licensed 503A pharmacies on a prescription under the HHS conditions, where state law allows. Legal to prescribe and dispense, but unapproved and with limited human evidence.
  3. "Research use only" products. Vials sold online with a "not for human consumption" label. FDA sent warning letters to online vendors in August 2026 and made clear that the label isn't a shield. HHS itself cited the safety risks of these products as a reason for the new policy. Nothing about this week's news makes them a legitimate medicine.

The evidence question nobody should skip

Legal access and good evidence are two different things. FDA's own scientists recommended against listing these peptides, mainly because human data is limited and the substances are poorly characterized. Most of what's known about BPC-157, TB-500 and KPV comes from animal and lab studies. Epitalon and semax have some human research, much of it small and published outside the US. MOTS-c is promising biology with very little clinical data.

So a legal prescription doesn't mean a proven treatment. It means you can now get a product with a traceable ingredient, a quality paper trail and a clinician who is accountable for the decision. That's a real improvement over a vial of unknown powder, but it's not the same as an approved drug.

How to tell if a peptide prescription is legitimate

Here's the practical angle most "are peptides legal" articles miss. If a provider offers you one of these six peptides, ask:

  • Did a licensed clinician evaluate me, review my history and order baseline bloodwork where it makes sense?
  • Is the prescription being filled by a named, state-licensed 503A pharmacy that's allowed to ship to my state?
  • Is it a single peptide, in a route that matches the policy, or is someone selling a multi-peptide stack?
  • Can the pharmacy tell me who manufactured the raw ingredient and confirm it came from an FDA-registered facility?
  • Does the label say it's a compounded product, and does it explain how to report side effects?

If the answer to any of those is a shrug, walk away. Our peptide formulary and waitlist is built around these same standards, and the assessment is the place to start if you want a clinician to review whether any peptide makes sense for you.

Bottom line: As of late October 2026, six peptides can be legally compounded by licensed pharmacies on a prescription under strict federal conditions, but they're still unapproved, the evidence is still mostly preclinical, the policy can be withdrawn, and your state may set its own rules. Research-use-only peptides remain outside the law's protection. Treat this as a door that opened carefully, not a green light.

Have a question this didn't answer?

Ask the peptide AI for a straight answer, or start a 3-minute assessment and a licensed clinician will review it.

Frequently asked questions

Are peptides legal in the US?

It depends on the peptide and the source. FDA-approved peptide drugs such as semaglutide, tesamorelin and bremelanotide are legal with a prescription. Since October 2026, HHS also allows licensed 503A pharmacies to compound six unapproved peptides (BPC-157, TB-500, KPV, MOTS-c, epitalon and semax) on a patient-specific prescription under strict conditions. Research-use-only products sold online are not legitimate medicines.

Is BPC-157 legal now?

Under the October 28, 2026 HHS enforcement discretion policy, a state-licensed 503A pharmacy can compound BPC-157 on a valid prescription if it meets the policy conditions, where state law allows. It is still not an FDA-approved drug, and the policy can be revised or withdrawn.

Is it illegal to buy research peptides?

Research-use-only peptides are labeled not for human consumption and sit outside the legal medicine supply chain. FDA has sent warning letters to online sellers and has said the research-use label does not protect products marketed for people. The new HHS policy does not cover them.

Does the HHS peptide policy override state law?

No. The policy does not bind state pharmacy or medical boards. A pharmacy must still comply with the rules of its own state and of any state it ships to, and some states have issued their own peptide guidance.

Are compounded peptides FDA approved?

No. Compounded drugs are not reviewed by FDA for safety, effectiveness or quality. Enforcement discretion means HHS will not take action against qualifying pharmacies; it is not an approval.

Sources

  1. HHS: Enforcement Discretion Policy Regarding 503A Compounding Using Certain Peptide Bulk Drug Substances (Federal Register public inspection)
  2. HHS: 503A Peptide Enforcement Discretion Policy, Appendix B
  3. Holland & Knight: Peptides at a Crossroads: What Wellness Providers Need to Know About HHS and FDA Actions
  4. Frier Levitt: HHS Peptide Compounding Enforcement Discretion Policy
  5. NCPA: FDA grants enforcement discretion to compounding six peptides
About Scott Hoffman

Scott founded Regrowth.com, the first hair-loss network on the web, whose community grew to more than 50,000 members including physicians, dermatologists and trichologists. He has spent over 30 years in hair loss and formulating treatments. Articles are researched with Regrowth Intelligence AI and checked against the sources listed.

This article is for education only and isn't medical advice. Peptides discussed may not be FDA-approved for these uses, and compounded medications are not FDA-approved. Talk with a licensed clinician before starting any therapy.