FDA's Second Wave: 25 More Warning Letters Over Compounded GLP-1 Marketing

The FDA issued 25 warning letters to telehealth companies on June 16, 2026, alleging their websites carried false or misleading claims about compounded semaglutide, tirzepatide, and liraglutide, as reported by McDermott Will & Emery. It was the second wave in four months. Two waves plus a standing FDA guidance page is not a warning shot. It is a posture.

The first round could be read as a signal. Thirty letters in February and March looked like the agency drawing a line and daring the category to cross it. A second round of 25, citing the same misbranding provisions against a wider set of surfaces, is something else: a repeatable enforcement program with a published rulebook attached. Operators who budgeted for a one-time cleanup budgeted wrong.

How is the June 2026 wave different from the first one?

The June letters are broader in scope and more specific in legal theory. Reporting differs on the exact subsections cited: McDermott Will and Emery reports sections 502(a) and 502(bb), while the National Law Review reports 502(a) and 502(n). The distinction is worth understanding rather than glossing. Section 502(a) is the general rule that a drug is misbranded if its labeling is false or misleading. Section 502(bb) is the compounding-specific provision: a compounded drug is misbranded if its advertising or promotion is false or misleading in any particular. Section 502(n) governs the disclosure obligations that attach to prescription drug advertising. Whichever subsections a given letter cites, the letters reach beyond product pages into social media promotions, patient communications, and other marketing. The first wave read as a category warning. The second reads as a template.

Dimension	First wave	Second wave
Letters	30	25
Dated / made public	Dated Feb 20, announced Mar 3, 2026	Dated June 8, posted June 16, 2026
Products named	Compounded GLP-1 products	Compounded semaglutide, tirzepatide, and liraglutide in one letter
Provisions cited in reporting	Misbranding under the FD&C Act	Section 502(a), plus 502(bb) or 502(n) depending on the report
Surfaces covered	Website marketing claims	Websites, social promotions, patient communications, other marketing

The published example is instructive. The letter to Medica Weight Loss (MARCS-CMS 728284, dated June 8, 2026) concerns false or misleading representations about compounded semaglutide and tirzepatide, and rests on the plain reading of section 502(a): a drug is misbranded if its labeling is false or misleading (FDA, https://www.fda.gov/inspections-compliance-enforcement-and-criminal-investigations/warning-letters/medica-weight-loss-728284-06082026). That is not an exotic theory requiring novel interpretation. It is the oldest provision in the statute, applied to a website.

The agency's objection in these letters is not subtle. As quoted by Regulatory Focus, the FDA told recipients that "compounded drug products are not FDA-approved" and that their claims represented otherwise. There is no interpretive gap to argue about, which is why the response window is short and the corrective action is usually a site change rather than a legal brief.

The context underneath both waves is larger than either. In late 2025 the FDA issued more than 40 warning letters to telehealth-based compounding operations over claims implying compounded GLP-1 products were equivalent to their approved counterparts, with the September 9, 2025 batch naming Hims & Hers Health (dba Hers), Lumimeds, GLP-1 Solution, and Elevate Your Wellness (dba Elevated). Counting all three rounds, more than 95 letters have gone out in under a year against a single marketing pattern.

Why is "implying you are the compounder" a branding problem, not a copy problem?

Because you cannot fix it by rewriting a paragraph. The FDA's standing guidance for telehealth companies warns against branding that falsely or misleadingly implies the telehealth company is the compounder. That implication is usually created by product architecture, packaging, and naming decisions made long before anyone wrote the page it appears on.

This is the most under-covered line in the whole enforcement wave, and it is the one most likely to catch an otherwise careful operator. Compliance reviews look at sentences. This violation lives in nouns.

Where the implication actually gets created

Direct-to-consumer telehealth brands white-label hard, because white-labeling is what makes the brand feel like a product company instead of a referral form. The individual decisions each look harmless:

• The product is named after the brand, not the molecule, so the catalog reads "Ascend Weekly" rather than "compounded semaglutide."
• The vial or pen label carries the brand's logo and no visible pharmacy attribution.
• The shipping box, packing slip, and order-confirmation email are all brand-only.
• The site says "our formulation" or "our dosing protocol," language that asserts authorship of the drug rather than authorship of the care plan.
• The pharmacy is never named anywhere a patient will actually look, sometimes because the operator treats the pharmacy relationship as a trade secret.

Individually, each is a marketing choice. Together they compose a claim: that this company makes the drug. The FDA's guidance treats that composite as a misleading representation regardless of whether any single sentence says it.

What attribution looks like when it is built in

The fix is structural, and it is cheaper to build than to retrofit. Attribution has to be a property of the order, not a disclaimer in the footer. That means the compounding pharmacy that filled a given order is a field on the order record, it renders on the product page for the product that pharmacy fills, it renders on the confirmation email and the packing slip, and it survives a change of pharmacy without a copy rewrite.

Operators running multiple pharmacies for capacity or geography feel this immediately. If your attribution is hardcoded prose, every routing change becomes a legal review. If attribution is data attached to the order, routing changes are routing changes. The same architecture that keeps you adding pharmacies without a rip-and-replace is the architecture that keeps your labeling truthful when the fill moves.

Which claims read as misbranding, and how do you rewrite them?

The letters cluster around a small number of recurring claim patterns, and each has a compliant version that says something true and still sells. The rewrite is almost never weaker. It is usually more specific, and specificity converts better than borrowed authority does. The table below pairs the claim, the objection, and a version that survives review.

Claim as written	Why the FDA objects	Compliant rewrite
"Generic Ozempic"	Compounded drugs get no therapeutic-equivalence rating; "generic" is a regulatory term with a defined meaning	"Compounded semaglutide, prepared by a licensed compounding pharmacy. Not an FDA-approved drug."
"FDA-approved pharmacy"	The FDA does not approve pharmacies; 503A pharmacies are state-licensed and 503B outsourcing facilities register with the FDA	"Filled by a state-licensed pharmacy" or "Filled by an FDA-registered 503B outsourcing facility"
Brand-only product name and label	Implies the telehealth company compounded the drug	Molecule-first naming, with the compounding pharmacy named on the product page, the label, and the confirmation
"Clinically proven to deliver the same results"	Transfers the approved product's trial evidence to a product that had no premarket review	Describe the approved drug's evidence as the approved drug's, and describe your program's protocol separately
"Same active ingredient, a fraction of the price"	Sameness framing plus price comparison implies substitutability	State the active ingredient factually, state your price, and do not draw the equivalence for the reader

Two rules generalize from the table. Never let a compounded product borrow the regulatory status of an approved one, and never let your brand stand where the pharmacy's name belongs. Everything else is downstream of those. The wider set of platform, FTC, and certification obligations that sit on top of this is covered in the marketing compliance rules telehealth operators must follow.

What does a permanent FDA guidance page change for planning?

It removes the ambiguity defense. A press release is an event that ages out of relevance. A maintained guidance page titled "FDA to Telehealth Companies: What to Know When Promoting Compounded Drugs" is a published standard that anyone can check your site against, at any time, forever (FDA, https://www.fda.gov/drugs/human-drug-compounding/fda-telehealth-companies-what-know-when-promoting-compounded-drugs).

That changes who reads it. The FDA is the least frequent reader of that page. The frequent readers are ad-platform policy reviewers deciding whether to approve your healthcare campaign, LegitScript analysts working a certification file, payment-processor risk teams underwriting a high-risk merchant account, pharmacy partners running diligence before they take your volume, and plaintiffs' counsel building a consumer-protection theory. Every one of them now has a citable agency document that describes your site's problem in the agency's own words.

The practical consequence is that marketing compliance stops being an annual legal spend and becomes a recurring operating control, like uptime or chargeback rate. You do not "finish" it. You hold it, and you re-verify it every time you launch a product, change a pharmacy, or ship a landing page.

What records make a marketing claim defensible?

Records that were created when the thing happened, not assembled when someone asks. A claim is defensible when you can produce, for any specific order, the licensed provider who approved it, the pharmacy that compounded it, and the version of the page the patient saw. If any of those three has to be reconstructed, the claim is a hope.

Three artifacts carry most of the weight:

1. A provider-approval record per order. "Prescribed by a licensed provider" is a factual assertion about individual orders. If a licensed provider approves every order and the approval is timestamped and attributable, the claim substantiates itself. If approval is a checkbox bolted onto checkout, the claim is decorative.
2. Pharmacy attribution on the order. Which pharmacy filled which order, retrievable without emailing anyone. This is what lets you name the compounder truthfully instead of hiding behind your own brand.
3. A substantiation file per claim. Every efficacy or safety statement mapped to the evidence behind it, with the page version and date it went live.

This is where the overlay model earns its place. neolife sits on top of the compounding pharmacy a clinic already uses, keeps a licensed provider approving every order, routes each order to the pharmacy that actually fills it, and keeps the clinic as the system of record for all of it. Nothing about that makes the FDA's rules softer. It makes them cheap to comply with, because the truthful version of your marketing is the version your own database already supports. On a stack where sourcing and approval are opaque even to you, the honest claim and the provable claim are different claims.

What should change in your operating plan?

Stop treating this as a GLP-1 problem. The claim patterns in these letters are molecule-agnostic, and the compounded GLP-1 pathway is narrowing for unrelated reasons anyway. A clinic sanitizing its semaglutide pages while leaving brand-only naming on its compounded testosterone, peptide, and hair-loss lines has moved the exposure, not removed it.

That is the same reasoning that argues for widening the catalog beyond GLP-1 in the first place: a business whose compliance posture depends on one molecule has a concentration problem in two directions at once.

Three changes worth making at the architecture level rather than the copy level:

1. Make pharmacy attribution a data field, not prose. It should render everywhere a patient sees the product, and it should update automatically when routing changes.
2. Name an owner for the guidance page. Someone re-reads the FDA's telehealth guidance each quarter and signs off that the live site matches it. Publishing a new product page triggers the same check.
3. Tie every marketing claim to a retrievable record. If a claim cannot be traced to a provider approval, a pharmacy, or a substantiation file, either fix the record or delete the claim.

More than 95 letters in under a year is a rate, not an anomaly. Plan for the third wave.

If you want your provider approval and pharmacy attribution to be records rather than assertions, talk to us. neolife overlays the pharmacy you already use, keeps a licensed provider approving every order, and keeps you the system of record, so the compounder is named because the data names them.

This article is for informational purposes only and is not legal, medical, or regulatory advice; consult qualified counsel and licensed clinicians for your specific situation.