Protocol·One

Start here · Sourcing

How to vet a peptide source

Most people who get scammed or hurt with peptides did not get the molecule wrong. They got the source wrong. Here is how to check one before you spend a dollar - the document to demand, the red flags to walk away from, and the legal route to try first.

Safety guide Updated June 2026

How do I know a peptide source is legit?

The single most important document is a Certificate of Analysis (COA) - a lab report that proves what is in the vial and how pure it is. A real COA names an independent third-party lab, confirms the molecule by mass spec or HPLC, states a purity percentage, and includes endotoxin and sterility testing for anything you inject. The route with real consumer protection is a licensed provider working with a compounding pharmacy, not a research vendor. Gray-market sellers labeled "not for human consumption" carry real risk: no required testing, no accountability, and contamination you cannot see. No COA, no buy.

What a real Certificate of Analysis (COA) contains

A COA is the receipt that proves the lab work happened. A trustworthy one has all of the following. If any single item is missing, that is a problem, not a rounding error.

  • Identity. Confirmation that it actually is the peptide on the label, verified by mass spectrometry or HPLC. The molecular weight on the report should match the known weight of that peptide.
  • Purity percentage. A stated purity, typically 98% or higher for a quality peptide, with the method that produced the number shown alongside it (usually HPLC).
  • Sterility and endotoxin testing. For anything injected, the report must include endotoxin (LPS) testing and a sterility result. Endotoxin contamination is the contamination that quietly accumulates and triggers an inflammatory reaction.
  • A batch or lot number that matches your vial. The number on the COA has to match the number printed on the product in your hand. A COA for a different batch tells you nothing about what you received.
  • A named independent third-party lab and a recent date. The testing lab is named, and it is not the seller. An in-house "we tested it ourselves" claim is not third-party verification. The date should be recent enough to apply to current stock.

5 things a fake or weak COA omits

Scam COAs are common because a PDF is cheap to fake. These are the tells that a report is decoration rather than proof.

  • No third-party lab named. The document credits no independent lab, or it credits the seller's own bench. That is a self-graded test.
  • No batch number, or one that does not match the vial. If you cannot tie the report to the exact product you hold, the report covers nothing you can verify.
  • No endotoxin or sterility test. For an injectable, this omission alone is disqualifying. A purity number means nothing if the vial is contaminated.
  • A percentage with no method shown. "99% pure" with no HPLC trace, no instrument, and no method is a marketing claim wearing a lab coat.
  • A generic PDF reused across products. The same document attached to several different peptides, or a stock template with no product-specific data, is a sign nobody ran the test for your item.

The legal route, first

Before the research-vendor question even comes up, try the path that actually protects you. A licensed provider - telehealth or in-person - working with a compounding pharmacy is the only route with real consumer protection: a prescriber who screens you, a pharmacy held to standards, and product you can trace.

FDA approval status varies a lot by peptide. Some are approved prescription drugs. Some can be compounded with a prescription. Some are research-only with no approved human use at all. That distinction decides which legal paths are even open to you, so it is worth knowing where your specific peptide sits before you go looking. The legal route is slower and it costs more. It is also the version of this where someone is accountable for what ends up in your body.

If you go the research-vendor route anyway

This is the honest part. People do buy from research vendors, and pretending otherwise helps no one. So here is harm reduction, not a green light. This path is riskier and unregulated, and the safest version of it still runs through a doctor.

  • Do it with a doctor who knows. A physician who is aware of what you are taking can screen you for contraindications and catch a problem early. Going it alone removes the one person who can tell you to stop.
  • One peptide at a time. Never stack two unknowns. If something goes wrong, you need to know which vial caused it.
  • A COA per peptide, per batch. Not one COA for the brand - one for the exact molecule and the exact lot you received, with the batch number matching your vial.
  • Start low. The lowest sensible dose first, so an adverse reaction shows up small rather than large.
  • Know the contraindications for your specific peptide. Each one has its own list of who should not touch it. Read it for the peptide you are considering, not peptides in general.

None of this makes a gray-market vial safe. It makes a risky decision less reckless. The regulated route remains the better one for a reason.

Think you injected the wrong dose? Peptide overdose: what to do ->

Sourcing peptides - FAQ

What is a Certificate of Analysis (COA)?

A Certificate of Analysis is a lab report that documents what is actually in a product and how pure it is. For a peptide, a real COA confirms the identity of the molecule (usually by mass spec or HPLC), states a purity percentage, reports sterility and endotoxin testing for anything injected, lists a batch or lot number that matches your vial, and names the independent third-party lab that ran the tests, with a recent date. It is the single most important document when you are deciding whether a source is legit.

Are research peptides legal?

It depends on the peptide and how you obtain it. Some peptides are FDA-approved prescription drugs, some can be made by a compounding pharmacy with a prescription, and some are research-only with no approved human use. Research-chemical vendors sell many peptides labeled "not for human consumption," which is the unregulated gray zone. The route with real consumer protection is a licensed provider working with a compliant pharmacy. Legal status changes, so verify it for your specific peptide before you act.

Is it safe to buy peptides online?

Buying from gray-market research vendors carries real risk. There is often no reliable third-party testing, so a vial can be underdosed, the wrong molecule, or contaminated with bacterial endotoxin (LPS) that triggers an inflammatory reaction. The molecule is rarely the first problem - the supply chain is. The safer path is a licensed provider and a compounding pharmacy that provides a Certificate of Analysis per peptide. If there is no COA, do not buy.

What does "not for human consumption" mean on a peptide label?

That label means the product is being sold as a research chemical, not as a drug for people. The seller uses it to sidestep the rules that apply to medicines, which also means nobody is required to check purity, sterility, or dosing. It is a legal disclaimer, not a safety claim. If a vial says "not for human consumption," treat it as an unregulated product with no guarantee of what is inside.

Where to go next

Last reviewed · 2026·06·04 · We update this as sourcing rules and testing standards change