A fake pharmacy site does not need to be clever. It needs a checkout box and a visitor in a hurry. If you are shopping for medicine online, the order of your checks matters. Verify first. Type second.
The National Association of Boards of Pharmacy estimates that nearly 95% of websites offering prescription-only drugs online operate illegally.
Why fake online pharmacies put your money and data at risk
The FDA runs a campaign called BeSafeRx to warn people about buying prescription medicine from fake online pharmacies. The agency says these sites can put your personal and financial information at risk. Some operators misuse what customers hand over on purpose.
The damage can go past the order itself. Unsafe sites may infect your computer with viruses. They may also sell your personal details to illegal websites and scammers. Many fake pharmacies lack basic safeguards for the information you enter, so a name, address and card number typed into a form may be exposed or misused.
There is a health side too. Some of these sites look like pharmacies but sell products with the wrong ingredients, too much or too little of the active one, or none at all. That is a separate problem from fraud, and a worse one.
The criteria a legitimate online pharmacy should meet
The FDA gives a short checklist for a safe online pharmacy. It should do all four of these:
- Require a doctor's prescription.
- Provide a physical U.S. address and phone number.
- Have a licensed pharmacist on staff to answer questions.
- Hold a license from a state board of pharmacy.
Miss one, and you have your answer for now. Do not enter anything while you wait to be convinced.
Do not trust the site's own claims on licensing. A page can display any logo it likes. The FDA points people to its Locate a State-Licensed Online Pharmacy tool instead. That puts the check in your hands, not the seller's.
Red flags that signal a fake site
Scam sites tend to share a few habits. Look for these before you look at the price:
- It sells prescription drugs with no prescription required.
- Prices are deep discounts that seem too good to be true.
- You found it through spam or an unsolicited email offering cheap drugs.
- It is located outside the United States, or is not licensed in the U.S.
- No state board of pharmacy license can be confirmed.
The first one shows up again and again in FDA warning letters. The agency sends those letters to website operators it finds in violation of federal law. Selling without a prescription and leaving out required safety warnings are common citations.
The scale is large. The National Association of Boards of Pharmacy estimates about 35,000 online pharmacies are active at any given time. Only about 5% comply with U.S. pharmacy laws and practice standards. Assume a random search result is not in that 5%.
Verifying a site and confirming you are on a real government page
Fake pharmacies are not the only thing to check. Make sure the guidance you are reading is real. The FDA notes that federal government sites end in .gov. Confirm that before sharing sensitive information on any page claiming to be an agency.
One more caution. The FDA has said its list of warning-letter sites is not all-inclusive. A site missing from the list is not automatically safe. Use the state-licensed lookup and the four criteria together.
These operations are being chased. The CDC pointed to a Justice Department indictment, announced September 30, 2024, against people running illegal online pharmacies. Enforcement is real. So are the sites still taking orders.
Gaps in current guidance and what to do if you have already shared information
The FDA and CDC material is about drug safety. It does not explain how to judge whether a checkout page is secure, or which payment methods carry more protection. It also does not lay out steps if you already entered card or bank details on a suspicious site. Nothing there covers reporting to the FTC or CFPB, or identity theft recovery.
So the first move is practical and small. Stop using the site. If you gave payment details, contact your card issuer or bank using the number on your card or statement, not one from the site. Then look at the FTC and CFPB websites for current reporting steps. Do not rely on a single article for procedures, including this one.
Also check dates. One source here is from 2012, and the FDA page was current as of September 2020. Contact details and processes change. Confirm them directly with the agencies before you act.
