Why GLP-1 Is High-Risk
GLP-1 receptor agonists — semaglutide (Ozempic, Wegovy) and tirzepatide (Mounjaro, Zepbound) — have created one of the fastest-growing markets in healthcare. Telehealth clinics, med spas, weight loss practices, and compounding pharmacies are all building services around these medications. Revenue is climbing. So are account shutdowns.
Stripe, Square, and PayPal are terminating GLP-1 merchants at scale. The pattern is consistent: a clinic opens an account, processes payments for a few weeks or months, and then receives a notice that the account has been closed due to "prohibited activity" or "unacceptable risk." Funds get held. Revenue stops. Patients cannot pay.
Clinics selling GLP-1 medications online are among the most frequently shut down merchant categories in 2026 — not because the business is illegal, but because aggregator processors are not built to underwrite healthcare risk.
The core reasons acquiring banks classify GLP-1 merchants as high-risk:
- Regulatory scrutiny. GLP-1 medications sit at the intersection of FDA regulation, state pharmacy law, and telehealth licensing requirements. Banks see regulatory complexity as risk.
- High chargeback potential. Subscription weight loss programs generate disputes — patients cancel, dispute charges after experiencing side effects, or claim they did not authorize recurring billing. Chargebacks in this category often run 1.5-3% without active prevention.
- Large recurring transactions. Monthly GLP-1 programs typically range from $200 to $600+ per patient. High average tickets combined with recurring billing increase the financial exposure per dispute.
- FDA compliance exposure. A single compliance misstep — unapproved claims, improper prescribing protocols, unlicensed compounding — can trigger enforcement action that puts the processor's entire portfolio at risk.
These factors do not make GLP-1 processing impossible. They make it a category that requires dedicated underwriting from processors experienced in healthcare and pharmaceutical risk — not a generic Stripe account.
The Compounded GLP-1 Shutdown
In May 2025, the FDA removed semaglutide and tirzepatide from the drug shortage list, effectively ending the legal basis for 503A and 503B compounding pharmacies to produce compounded versions of these medications. Only FDA-approved brand-name drugs (Ozempic, Wegovy, Mounjaro, Zepbound) are now permitted.
This regulatory shift had immediate consequences for payment processing:
Any merchant still selling compounded semaglutide or tirzepatide is operating outside FDA authorization — and no acquiring bank will knowingly process those transactions.
Clinics that built their business model around lower-cost compounded GLP-1 medications need to transition to FDA-approved drugs or restructure their service offerings entirely. From a processing standpoint, underwriting teams now specifically verify whether a GLP-1 merchant uses compounded or FDA-approved medications. The answer determines whether an application moves forward or gets declined on the spot.
If your clinic previously processed compounded GLP-1 payments and your account was terminated, the path back to stable processing requires demonstrating that your current operations use only FDA-approved products, prescribed by licensed providers, and dispensed through licensed pharmacies. Unison helps clinics navigate this transition — contact us to discuss your situation.
LegitScript Certification
Visa and Mastercard now require LegitScript certification for merchants selling GLP-1 medications and other prescription weight loss treatments through telehealth or direct-to-consumer channels. This is not a recommendation — it is a card network mandate.
LegitScript evaluates your business across multiple dimensions: prescribing protocols, pharmacy licensing, product legitimacy, marketing compliance, consumer protection policies, and telehealth standards. Certification tells acquiring banks that an independent third party has verified your compliance infrastructure.
For GLP-1 merchants, the practical impact of LegitScript certification is significant:
- Approval odds increase substantially. Most acquiring banks will not consider a GLP-1 application without current LegitScript certification.
- Reserve requirements drop. Certified merchants typically see rolling reserves of 5-10% versus 10-15%+ without certification.
- Processing rates improve. Certified merchants qualify for the lower end of the high-risk rate range.
- Google and Meta advertising becomes possible. Both platforms require LegitScript certification for healthcare-adjacent advertisers.
The certification process typically takes 3-6 weeks. Unison is a LegitScript partner and provides pre-application compliance reviews, discounted certification fees, and coordinated support throughout the review process.
What You Need to Get Approved
Getting approved for a GLP-1 merchant account requires more documentation than a standard high-risk application. Underwriting teams evaluate both your business viability and your medical compliance. Here is what processors need to see:
Medical credentials and licensing:
- Active medical licenses for all prescribing providers (MD, DO, NP, PA as permitted by state law)
- State-by-state telehealth authorization for every state where you treat patients
- DEA registration if applicable
- Collaborative practice agreements where required
Pharmacy and dispensing:
- Licensed pharmacy partner for fulfillment (retail or specialty pharmacy)
- Documentation that all medications are FDA-approved (not compounded, post-May 2025)
- Chain of custody records from manufacturer to patient
Compliance infrastructure:
- HIPAA compliance documentation including Business Associate Agreements with all vendors
- Telehealth protocols covering informed consent, patient screening criteria, and follow-up requirements
- Clear refund and cancellation policies published on your website
- Chargeback protection and dispute management procedures in place
Business documentation:
- 3-6 months of business bank statements
- Processing history with chargeback ratios (if available from a prior processor)
- Corporate formation documents and EIN
- Website live and compliant with LegitScript standards
The single most common reason GLP-1 merchant applications get declined is incomplete documentation — not the business model itself.
Unison's onboarding team provides a pre-underwriting checklist specific to GLP-1 and telehealth merchants. Completing this checklist before submission typically reduces approval timelines from 3-4 weeks to 7-10 business days.
Processing Rates and Terms
GLP-1 payment processing costs more than standard retail or e-commerce processing. This reflects the risk profile of the category — acquiring banks price based on historical chargeback data, regulatory exposure, and average transaction size.
Typical rate structure for GLP-1 merchants:
| Term | Typical Range |
|---|---|
| Processing rate | 3.5% - 6% + per-transaction fee |
| Per-transaction fee | $0.20 - $0.35 |
| Rolling reserve | 5% - 15% (held 6 months, released on a rolling basis) |
| Monthly minimum | $25 - $50 |
| Chargeback fee | $25 - $35 per dispute |
| Approval timeline | 7 - 21 business days |
Where you land in these ranges depends on LegitScript certification status, processing history and chargeback ratios, monthly volume, business tenure, and the strength of your compliance documentation.
Merchants processing $50,000+/month with LegitScript certification and chargeback ratios below 1% typically qualify for rates at the lower end — 3.5-4.5%. Newer merchants without processing history should expect rates toward the higher end initially, with rate reviews after 6-12 months of clean processing.
Multi-PSP routing — maintaining active accounts with two or more processors — is standard practice in this space. If one processor experiences an issue or goes offline, transactions automatically route to the backup. Unison configures this through our payment gateway with automatic failover so your checkout never goes dark.
Building a Compliant Operation
Approval is not the finish line. The clinics that maintain stable processing long-term build compliance into daily operations, not just their application package.
Chargeback prevention is the priority. GLP-1 subscriptions generate disputes when patients experience side effects, decide to stop treatment, or do not recognize the billing descriptor on their bank statement. Proactive measures that keep your ratio below 1%:
- Clear billing descriptors that patients recognize (clinic name + "GLP1" or "WEIGHTLOSS")
- Pre-charge email or SMS notifications before each recurring billing cycle
- Easy, visible cancellation process — a buried cancellation flow generates more chargebacks, not fewer
- Responsive patient support backed by a documented refund policy
Marketing compliance is ongoing. FDA restricts certain claims about prescription medications. Phrases like "guaranteed weight loss," "no side effects," and before-and-after imagery without proper disclosures create regulatory risk that cascades into processing problems. Have a compliance-trained team member review every marketing asset before publication.
HIPAA extends to your payment stack. Your payment gateway, CRM, email provider, and any system touching patient data must have a signed Business Associate Agreement. A HIPAA breach does not just create legal liability — it gives your acquiring bank a reason to terminate your account.
Multi-state telehealth compliance requires maintenance. Telehealth laws change frequently. Monitor licensing requirements in every state where you treat patients and maintain current authorizations. A lapsed license in one state can trigger a processor review of your entire account.
For clinics that also offer in-person services, Unison provides integrated processing for both telehealth and medical-dental payment solutions — one provider, one dashboard, one compliance framework. Learn more about our peptide payment processing for related high-risk healthcare categories.
Bottom Line
GLP-1 payment processing is complex, but it is solvable. The clinics that maintain stable, long-term processing share common traits: they use FDA-approved medications exclusively, hold LegitScript certification, work with processors experienced in healthcare risk, and invest in chargeback prevention and compliance infrastructure from day one.
The cost of getting this wrong — frozen funds, terminated accounts, lost patients, MATCH listing — far exceeds the cost of building it properly from the start.
If you operate a weight loss clinic, telehealth practice, or med spa offering GLP-1 medications, Unison Payment Solutions provides the processing infrastructure, compliance support, and payment gateway integration to keep your business running without interruption.
Contact Unison for a free consultation or call (925) 290-6003. We will review your current setup, identify compliance gaps, and get you approved with the right processing partner for your GLP-1 program.
Related resources: