FDA Compounded GLP-1 Warning Letter Tracker: Every Company, Every Letter, Every Violation (2026)

Overview: what happened in 2026

The FDA's enforcement posture toward compounded GLP-1 telehealth marketers changed fundamentally in early 2026. In a span of roughly six weeks — from February 6 through March 9, 2026 — more regulatory activity targeted compounded semaglutide and tirzepatide marketing than in the entire preceding decade.

By the numbers:

• February 6, 2026: FDA Commissioner Marty Makary announces the agency will "take decisive steps" to restrict compounded GLP-1 marketing.
• February 20, 2026: The FDA issues more than 30 warning letters simultaneously to telehealth companies.
• March 3, 2026: The FDA publicly announces the enforcement wave and releases 30 of the warning letters publicly — the "second major batch" in the agency's ongoing crackdown.
• March 9, 2026: Hims & Hers settles with Novo Nordisk and agrees to stop marketing compounded GLP-1s (except where medically necessary).
• April 2026: Additional warning letters and enforcement actions continue; the campaign is described as "ongoing."

This tracker exists because the enforcement actions are both extensive and technically detailed. Warning letters are public documents, searchable at fda.gov, but reading them requires parsing regulatory language and industry context. This article distills what the letters actually say, which companies are affected, what the violations mean, and what consumers should take from all of it.

February 20, 2026: the initial wave

On February 20, 2026, the FDA's Center for Drug Evaluation and Research issued warning letters to more than 30 telehealth companies simultaneously. The letters were dated February 20 but not fully released to the public until the FDA's March 3 announcement.

Publicly available representative letters from this wave include:

Industry attorneys at firms tracking the wave (including Little Health Law Blog and Frier Levitt) have described the Strut, SkinnyRx, and Newman Clinic letters as "representative examples" — meaning the FDA's enforcement focus across the remaining ~25 letters followed the same pattern. Specific company-by-company lookup is available through the FDA's warning letter database.

March 3, 2026: the public announcement

The FDA's March 3, 2026 press release made the enforcement wave public. The agency described this as "the second group of warning letters sent to telehealth firms since the agency launched in September a crackdown on misleading direct-to-consumer pharmaceutical advertisements."

The press release quoted FDA Commissioner Marty Makary:

"It's a new era. We are paying close attention to misleading claims being made by telehealth and pharma companies across all media platforms — and taking swift action."

The scale is notable. Per the FDA's own disclosure, the agency has sent thousands of warning letters to pharmaceutical and telehealth firms over the six months leading up to March 2026 — more than the total volume of such letters over the entire preceding decade. The 30+ compounded GLP-1 letters are a subset of a much broader regulatory reorientation.

The Hims capitulation

The compounded GLP-1 enforcement wave coincided with a remarkable sequence of events involving Hims & Hers Health, the largest direct-to-consumer telehealth company in the U.S.

The Hims retreat is significant for what it reveals. Hims is arguably the most legally sophisticated telehealth company in the category. The company has substantial cash reserves, top-tier legal counsel, and every commercial incentive to defend its compounded GLP-1 business — which was reportedly generating material revenue.

And Hims capitulated within days.

If the compounded oral GLP-1 business were defensible on the science, the marketing, or the regulatory merits, Hims's attorneys would have defended it. Instead, Hims pivoted to selling the branded FDA-approved products that competitors were marketing around — and industry attorneys have described the settlement as a potential "template" for how other telehealth companies may ultimately resolve their own compounded GLP-1 exposure.

The two violations everyone was cited for

Across every publicly-available warning letter in the 2026 wave, the FDA cited the same two categories of violation. This consistency is important — it means the FDA's position is well-established and not likely to be reversed through case-by-case corrective action alone.

Violation Category 1: Misbranding through misleading labeling

Under 21 CFR § 201.1(h)(2), placing a company's name on a drug label without qualification represents that the named entity is the sole manufacturer of the drug. When a telehealth company's website depicts product images showing vials labeled with the company's name — but that company is not actually a licensed compounding pharmacy — the label is false or misleading under federal law.

This is why the FDA's letters to SkinnyRx, Strut Health, Newman Clinic, and others specifically cited product images showing company-branded labels. The telehealth companies did not compound the drugs. Third-party 503A compounding pharmacies did. The labeling implied otherwise.

Violation Category 2: Marketing claims implying FDA approval

Website language that implied compounded semaglutide or tirzepatide had been "FDA-approved or otherwise evaluated for safety and effectiveness" was cited across essentially every letter. Compounded medications prepared under Section 503A are prepared for individual prescriptions based on clinician judgment — they are not approved as finished products. Marketing that blurs this distinction is, by FDA standards, false or misleading.

The specific problematic phrases varied by company, but recurring themes included:

• Claims that compounded products use the "same active ingredient" as FDA-approved counterparts without qualification
• References to compounded products as "generic" versions of brand-name drugs (they are not)
• Implication that compounded drugs are approved in a manner similar to large-scale manufactured drugs

The 86% impurity finding

One data point from the regulatory record deserves its own section: as part of Novo Nordisk's litigation against compounded semaglutide sellers, the company disclosed that its own testing of certain compounded products had identified impurities at levels up to 86 percent.

The implications, as summarized in industry reporting, include:

• Immunogenicity risk — impurities in injectable products can trigger immune responses
• Anaphylaxis risk — severe allergic reactions from unknown contaminants
• Inaccurate active ingredient content — patients receiving different doses than labeled

This is a single-source industry finding disclosed in adversarial litigation, so the specific figure should be read with appropriate context. But the broader point is that compounded GLP-1 product quality varies widely, and the FDA itself has publicly expressed concerns about quality, dosing accuracy, and ingredient identity across the compounded category.

What this means if you're a patient

The practical consequences of the 2026 enforcement wave for consumers fall into several buckets:

If you're already enrolled with a company that received a warning letter

Your prescription is still legal. A warning letter is a communication to the company about marketing practices — it does not invalidate individual prescriptions or shut down the pharmacy filling them. Monitor your provider's response to the warning letter. If the company resolves the violations through a close-out letter, that is a positive signal. If the company does not adequately respond, the FDA may escalate, which could affect your access.

If you're considering enrolling with a compounded GLP-1 provider

Check the FDA warning letter database at fda.gov/inspections-compliance-enforcement-and-criminal-investigations/warning-letters and search for the specific company. If the company received a letter and has not received a close-out, that is relevant context for your decision. If the company did not receive a letter, that is a positive signal but not a guarantee of ongoing compliance — the FDA's enforcement is ongoing, and companies not yet cited may be cited in the future.

If you want to avoid the regulatory uncertainty entirely

The cleanest path is an FDA-approved product (Rybelsus, Wegovy pill, Foundayo, or injectable semaglutide/tirzepatide) through a clinician who can issue a compliant prescription. The combination of FDA-approved medication plus a standard retail or mail-order pharmacy fill removes essentially all the regulatory exposure.

Clean alternatives

Bottom line

2026 will be remembered as the year the compounded GLP-1 telehealth category confronted its first serious regulatory scrutiny. More than 30 warning letters in a single wave, thousands of related letters in the preceding six months, Hims & Hers's rapid capitulation, and a public FDA commitment to continued enforcement together signal that the regulatory posture has fundamentally shifted.

The industry will adapt. Some companies will resolve their warning letters with legitimate corrective actions and continue operating. Others will either exit the compounded category (as Hims did) or face escalating enforcement. For consumers, the practical advice is straightforward: know what you are taking, verify the regulatory standing of your provider, and understand that compounded is not the same as FDA-approved — however the marketing may present it.