This is a working checklist for anyone running or launching a research-use-only peptide brand while trying to hold on to a Google Merchant Center account, a Google Ads account, a payment processor, and an email service provider all at once. It isn’t a survey of the law. It’s the set of yes/no questions we work through when we audit a peptide storefront, ordered by the layer of the business they sit in: entity, site copy, product pages, feed, payments, email, certification, and jurisdiction. If you want the underlying reasoning rather than the checks, start with our peptide compliance guide and come back here.
A few assumptions before you start. You sell materials labeled for laboratory research, you don’t sell to consumers for personal use, and you want to advertise or list on mainstream platforms. If your actual business model is consumer supplementation with a disclaimer bolted on, no checklist will hold. The failure points below are the ones that surface repeatedly in real suspensions, and most of them are boring.
How to use this checklist
Every item here is a yes/no. There is no partial credit, and there is no weighted score. That is not a stylistic choice — it reflects how enforcement actually works. Google’s Merchant Center account suspension process describes account-level issues that trigger a warning period, and also states that where an egregious account-level issue is detected, no warning is given and the account is suspended immediately. A single unattended sentence in a blog post can be the egregious issue. The other 400 pages of your site being clean does not offset it.
So work through this the way a reviewer would: one item at a time, answering only from what is visible on your public site, feed, and outbound messages. Not from what you intend, not from what your policy page says, and not from what you told your agency. If you cannot answer yes with evidence you could screenshot, the answer is no.
Two more usage notes. First, several items below are practice patterns rather than documented rules — points where platforms enforce consistently but publish nothing specific. I flag those explicitly, because building a compliance program on inferred rules you think are written is how operators get blindsided. Second, policies move. Where you need the current state of each platform side by side, use our peptide policy map, which we keep dated.
Layer 1: Entity, domain and business identity
Google’s misrepresentation policy is the most under-read document in this category. It requires that you describe your business on your website with updated contact information and a clear explanation of what your company does, and it prohibits presenting a false identity, business name, or contact information. In peptide enforcement, misrepresentation is invoked more often than the healthcare policies, because reviewers can establish it from the homepage in under a minute.
- The registered legal entity is named on the site. Full legal name, not just the brand. It appears in the footer, terms, and privacy policy, and it matches the entity on your merchant account and your payment processor application.
- A verifiable physical address exists. A real address, not a virtual mailbox presented as a laboratory. If your fulfillment address differs from your registered address, both are disclosed.
- A working phone number and a monitored email address are published. Contact forms alone regularly fail review. The email is at your own domain.
- Domain registration is not privacy-shielded in a way that conflicts with your published identity. Privacy protection alone is fine; a WHOIS record that contradicts your stated country or entity is not.
- One brand, one domain, one entity. No mirror sites selling the same catalog under different names off the same infrastructure. Cross-linked duplicate storefronts are the fastest route to a permanent, non-appealable suspension.
- The platform can support what you sell. Merchant of record arrangements, hosted checkouts, and app-store payment gateways all carry their own acceptable use terms. Confirm yours before you build, using our notes on choosing an ecommerce platform for peptides.
- Terms, returns, shipping, and privacy pages are specific and reachable pre-purchase. Generic template text with placeholder company names is treated as an identity signal, not a formality.
Layer 2: Site copy and the research-use-only layer
The single most common structural error is treating research-use-only status as a disclaimer rather than as a property of every sentence on the site. A footer line does not neutralize a homepage that reads like a wellness store. Regulators apply the same logic: the MHRA’s guidance on borderline products states that classification turns on claims that are explicit and implicit, assessed across labeling, packaging, promotional literature, advertisements, websites, social media, and customer reviews. FDA’s intended use regulation at 21 CFR 201.128 works the same way: intended use is established by the totality of evidence, including the circumstances of sale, not by the label alone.
- Every page states research use. Homepage, category pages, product pages, cart, checkout, FAQ, and blog. Not one page with a modal.
- No dosing, protocol, cycling, stacking, or administration guidance exists anywhere. Including in blog posts, downloadable PDFs, alt text, and schema markup.
- No human outcome language. No references to fat loss, recovery, sleep, libido, hair, skin, tanning, muscle gain, or healing — in any tense, including “researchers have investigated” constructions that carry the outcome in the clause.
- No before-and-after imagery, physiques, injection imagery, or lifestyle photography. Vials on a bench are fine; a torso is not.
- No customer reviews describing personal use. This is the item most operators miss. User-generated content is copy you are responsible for. Moderate it or remove reviews entirely.
- No branded prescription-drug names used as marketing. Google’s restricted drug terms policy restricts prescription drug terms in ads, landing pages, and keywords, with certification required to keyword-target them.
- No accessory bundling that implies administration. Selling bacteriostatic water, syringes, and a peptide as a kit reframes the entire catalog regardless of your disclaimer.
- No comparative claims against approved drugs. Suggesting equivalence to a prescription product is separately prohibited under Google’s unapproved substances policy.
- Search your own site for the failure terms. Run a site search for “dosage,” “mg per week,” “protocol,” “results,” “benefits,” and “cycle” before you claim this layer passes.
For the sentence-level patterns that survive review and the ones that do not, see our breakdown of peptide product page copy. The advertising-side constraints are covered separately in the Google Ads policy for peptides.
Layer 3: Product pages and testing evidence
Product pages carry two jobs at once: they must document what the material is with scientific precision, and they must avoid implying what it is for. Most peptide product pages fail by being thin on the first and generous on the second. Inverting that ratio is the single highest-leverage change available to most operators.
- Each product page identifies the material technically. Sequence or full chemical name, CAS number where one exists, molecular formula, molecular weight, purity, and physical form.
- Storage, handling, and reconstitution-for-analysis notes are framed as laboratory handling, not preparation for use. There is a real difference and reviewers read it.
- A certificate of analysis is linked per lot, not per product. A single undated COA reused across every SKU reads as decoration. Our guidance on COAs and third-party testing covers what an audit-grade COA set looks like.
- The testing laboratory is named and independent. Third-party HPLC and mass spectrometry results, with the lab identifiable. In-house-only testing is not disqualifying but is materially weaker under payment review.
- Quantities are laboratory-scale and consistent. Catalogs built around multi-month personal supply quantities contradict the stated purpose.
- No product page names an indication, condition, or population. Not even in a “research has explored” framing with a citation attached.
- Citations, where used, are to primary literature and are not summarized into outcomes. A linked PubMed reference is defensible. A paraphrase of its conclusion in marketing voice is not.
- Products with known regulatory heat are handled deliberately. FDA has placed several peptides in Category 2 of its bulk drug substances that may present significant safety risks list, including ipamorelin acetate, kisspeptin-10, GHRP-2, GHRP-6, and ibutamoren mesylate. Carrying them is a business decision; carrying them without knowing they are listed is not.
Layer 4: Feed and catalogue wording
Feeds fail independently of sites. A clean site with a careless feed still produces item-level disapprovals that escalate to account-level action. Google’s Merchant Center healthcare and medicines policy and its list of unapproved pharmaceuticals and supplements are the operative documents. Worth stating plainly, because it is widely misreported: neither page uses the word peptide anywhere. There is no peptide-specific Google policy. Enforcement in this category is reached through the general prohibitions on unapproved pharmaceuticals and supplements, unapproved substances, and misrepresentation, and Google states that its list of unapproved products is non-exhaustive — so matching your catalog against it is necessary but not sufficient.
- Titles are literal. Compound name, quantity, purity, form. No adjectives, no outcome nouns, no “premium” or “high potency.”
- Descriptions mirror the product page and repeat the research-use statement. Feed descriptions are reviewed on their own, detached from the landing page.
- No prohibited or listed substance names appear anywhere in the feed. Including in product_type, custom labels, and additional image filenames.
- Google product category is set deliberately and is not a health or supplement node. Miscategorization into supplement taxonomies invites the supplement policy stack.
- Landing pages resolve, are in stock, and match the feed price exactly. Mismatches are handled as misrepresentation, not as data quality.
- Structured data on the page does not contradict the feed. Leftover schema describing health benefits is machine-readable and gets read.
- Supplemental feeds and third-party channel apps are audited too. Marketplace connectors frequently rewrite titles.
The channel-specific detail — including what typically survives free listings versus Shopping ads — is in our note on Google Merchant Center and research peptides.
Layer 5: Payment stack
Payments are where peptide brands most often lose the business rather than just the channel. Card network and acquirer scrutiny in this category increased sharply after LegitScript published operator-facing guidance describing peptides as a growing risk for platforms and payment processors. Its companion guide for payment processors goes further, stating that “merchants offering research chemicals that prominently state that their products are not intended for human consumption are, perhaps counterintuitively, more likely to be engaged in unapproved peptides sales.” That is worth sitting with. The disclaimer that satisfies one reviewer is treated by another as a risk indicator.
- Your processor knows exactly what you sell. Written, in the application, in plain terms. Underwriting discovered later is treated as concealment and triggers reserve or termination.
- Your MCC matches the business. Misclassified MCCs are the most common cause of sudden mid-volume account closure.
- Descriptors are accurate and match the site branding. Mismatched descriptors drive chargebacks, and chargeback ratio is what actually ends most accounts.
- You have a documented refund and dispute process and you honor it. Denying returns while publishing a return policy is expressly called out under misrepresentation.
- Chargeback ratio is monitored weekly, not monthly. Know your current figure before you read the next item.
- A secondary processor exists and is live, not merely approved. Redundancy you have never run a transaction through is not redundancy.
- Crypto or alternative rails, if used, are disclosed and not the only option. Crypto-only checkout is itself an underwriting signal.
Which acquirers currently take this category, and on what terms, changes constantly; we track it in peptide payment processors.
Layer 6: Email and SMS stack
Email service providers enforce their acceptable use policies unilaterally and usually without a warning period. Because ESP terms are contractual rather than regulatory, there is no appeal process comparable to Google’s. The practical consequence is that your list is the least portable and most fragile asset you own.
- Your ESP’s acceptable use policy has been read in full and your category is not excluded. Several major providers exclude research chemicals or unapproved pharmaceuticals by name. Start with which email platforms accept peptide brands.
- You are on a paid plan with a named account contact. Free-tier accounts in this category are terminated by automated review with no human in the loop.
- Campaign copy meets the same standard as site copy. Subject lines are the most frequent violation — outcome language survives in subject lines long after it has been removed from the site.
- A full export of your list runs on a schedule and is stored outside the ESP. Weekly, minimum. Suspended accounts frequently lock export.
- Sending domains are separated from your primary domain. Subdomain sending isolates reputation damage.
- SMS is treated as higher risk than email. Carrier-level filtering for this category is aggressive and opaque; assume no appeal.
- Consent records are retained per subscriber. Timestamp, source, and IP.
Layer 7: Certification — when LegitScript is required and when it is not
This is where operators waste the most money. There is a widespread belief that LegitScript certification will unlock Google Ads for a peptide brand. For research-use-only peptide sellers, it generally will not, and understanding why saves both the application fee and several months.
Google’s healthcare and medicines advertising policy requires certification for defined merchant types: online pharmacies, telemedicine providers, pharmaceutical manufacturers, addiction treatment services, and similar. LegitScript’s own healthcare certification covers pharmacies, telemedicine providers, medical spas, digital health platforms, pharmaceutical manufacturers, and related healthcare merchants. Research chemical and RUO peptide retail is not one of the covered merchant types. Certification is a gate for categories that are otherwise restricted; it is not a waiver for categories that are prohibited.
- Confirm which merchant type you actually are. If you are a registered pharmaceutical manufacturer or an FDA-registered facility, certification is relevant and worth pursuing. If you are a reseller of imported material, it is not.
- Do not apply expecting it to resolve a Merchant Center suspension. Certification does not override the unapproved substances prohibition.
- Do not advertise “LegitScript certified” unless you hold current certification for the specific program. Misstating certification status is a misrepresentation violation in its own right.
- Treat certification as a payments asset first. Where a merchant does qualify, the strongest practical benefit is usually with acquirers rather than ad platforms. This is a practice pattern from what we see in underwriting, not a published rule.
The full decision tree, including the narrow cases where it does make sense, is in LegitScript certification for peptides.
Layer 8: Jurisdiction — what changes when selling into the UK or EU
US-centric compliance work does not transfer. The UK and EU both classify medicinal products by presentation as well as by function, which means marketing copy alone can convert your catalog into unlicensed medicines without any change to the material. Under Regulation 2 of the Human Medicines Regulations 2012, a product presented as having properties for treating or preventing disease is a medicinal product regardless of composition. The EU applies materially the same two-limb test.
| Consideration | United States | United Kingdom / EU |
|---|---|---|
| Primary classification trigger | Intended use, from totality of evidence | Presentation or function, either sufficient |
| Effect of marketing copy | Evidence of intended use | Can independently create medicinal status |
| Import handling | Import alerts and refusal | Border seizure and referral |
| Public seller listings | Warning letters published | MHRA maintains a public “not recommended” website list |
- Geo-restriction is enforced at checkout, not merely stated in terms. A shipping policy that says you do not ship to the UK, while the checkout accepts UK addresses, is worse than no policy.
- Ad and feed targeting excludes jurisdictions you cannot serve. Country-level exclusions in campaign settings and feed destinations.
- Customs documentation describes the material accurately. Under-declaring or mislabeling shipments is a separate and more serious exposure than any platform issue.
- You monitor UK enforcement activity affecting this category. MHRA has run sustained enforcement against unlicensed weight-loss medicine supply chains, which has pulled adjacent peptide sellers into scope. Our guide to MHRA notices for UK research peptide sellers tracks what has actually been issued.
The 10 things that most commonly fail an audit
- A blog post written two years ago by a freelancer. Almost every suspension we review has one. It contains dosing ranges, a comparison to an approved drug, or a paragraph about results. It ranks, it drives traffic, and nobody has read it since publication. Audit your entire content archive, including author pages, tag pages, and any PDF you have ever linked. Content you inherited from a previous owner or agency counts as yours.
- Customer reviews describing personal use. You did not write them, and that does not matter. A review saying a customer “felt great after four weeks” establishes intended use more effectively than any copy you could have written yourself, because it is testimony. Either moderate reviews pre-publication against the same standard as your own copy, or do not run reviews.
- The disclaimer is present but the imagery contradicts it. Physique photography, injection imagery, gym settings, or before-and-after grids override the text next to them. Reviewers process the page as a whole. Image alt text and filenames are also indexed and read.
- Feed titles that quietly reintroduce marketing language. The site gets cleaned; the feed does not. Titles containing potency claims, superlatives, or condition words produce item disapprovals that accumulate into account-level action. Read your feed as a flat text file, not through your platform’s preview.
- Accessory bundles. Selling bacteriostatic water, alcohol swabs, and syringes alongside peptides — particularly as a bundle or a recommended add-on — reframes the entire catalog as consumer-use supply. This is one of the clearest self-inflicted failures, and it is usually driven by average order value optimization.
- Contact and identity gaps. No phone number, a virtual office presented as a laboratory, a legal entity name that appears nowhere on the site, or terms pages carrying a different company’s name from a template. These take a reviewer seconds to establish and are handled under misrepresentation, which escalates fast. See Merchant Center health products suspensions for how these cases typically progress.
- A second storefront on the same infrastructure. Operators who lose an account often build a replacement site before fixing the underlying problem. Shared analytics IDs, shared payment descriptors, shared hosting, and shared phone numbers link them. This converts a recoverable suspension into a permanent one across all linked accounts.
- Email subject lines. The site gets audited; the ESP does not. Subject lines are the last place outcome language survives, partly because they are written quickly and partly because nobody thinks of them as site copy. They are the most common cause of ESP termination in this category.
- COAs that do not match the SKU. One generic certificate reused across the catalog, an undated document, a lot number that does not correspond to anything shipped, or a PDF that will not open. Under payment underwriting this reads as fabricated testing evidence, which is a materially worse finding than having no COAs at all.
- Carrying a high-heat compound without knowing it. GLP-1 analogs, compounds on FDA’s Category 2 list, and substances named in LegitScript’s payment-processor guidance carry elevated scrutiny across every layer simultaneously. Operators frequently add SKUs based on search demand without checking whether the compound is specifically named in enforcement literature. Check before you list, not after.
Frequently Asked Questions
Can a research peptide brand run Google Shopping ads at all?
As a general matter, no. Google’s Merchant Center healthcare and medicines policy prohibits unapproved pharmaceuticals and supplements in Shopping ads and free listings, and the associated list is explicitly non-exhaustive. Research peptides aren’t named as a category anywhere in Google’s published policy, but enforcement runs through the unapproved substances and misrepresentation lines. There is a narrower path. Some operators maintain listings for genuinely unrestricted laboratory consumables, things like glassware, filters and reference standards, while keeping peptides off the feed entirely. That’s a documented-policy-compliant approach, not a workaround.
Does a “not for human consumption” disclaimer protect me?
Not on its own, and it can work against you. FDA’s intended use framework assesses the totality of evidence, including how a product is sold and to whom. LegitScript’s guidance for payment processors states that merchants prominently displaying that language are, perhaps counterintuitively, more likely to be engaged in unapproved peptide sales. Keep the disclaimer. It’s necessary. What actually matters is whether the rest of your operation, meaning your copy, imagery, quantities, bundling and customer base, is consistent with it.
Will LegitScript certification get my ads approved?
For a typical RUO peptide reseller, no. LegitScript’s healthcare certification covers pharmacies, telemedicine providers, medical spas, digital health platforms and pharmaceutical manufacturers. Research chemical retail isn’t a covered merchant type. And certification doesn’t create an exception to a prohibition, it satisfies a gate for categories that are restricted rather than banned. Those are two different things. If you’re a registered manufacturer, the calculus differs. Otherwise the application fee is better spent on payment redundancy.
How long does a Merchant Center suspension take to resolve?
Google states that review requests take up to seven days, and that there’s a limit on how many reviews you can request. In practice the timeline depends entirely on whether you fixed the actual cause before requesting review. Requesting review with the same violation still live burns one of a finite number of attempts and hardens the case. So fix first, document the fix, then request once. Repeated failed appeals are the usual path from suspension to permanent closure.
Do I need to worry about the UK if I only ship domestically in the US?
If your checkout genuinely blocks non-US addresses and your ads exclude non-US targeting, your UK exposure is limited. The problem is what usually happens instead. Most operators state a domestic-only policy in their terms while the store still accepts international addresses and their ads still serve internationally. UK and EU law classifies medicinal products by presentation, so an accessible site with outcome-oriented copy can create exposure independently of whether you intended to sell there. Enforce it technically, not editorially.
Can I keep customer reviews if I moderate them?
Yes, with real pre-publication moderation against the same standard you apply to your own copy. Any review referencing personal use, effects, dosing or outcomes gets rejected, not edited. The real question here is operational: will you actually staff that? Most brands cannot moderate consistently at volume, and an unmoderated review section is a continuously updating liability that no one is watching. Removing reviews entirely is a legitimate and common choice in this category.
What should I do first if I am launching from scratch?
Payments and email, in that order, before you write a word of marketing copy. Both have long lead times, both can refuse you outright, and both constrain what your site can say. What happens instead is predictable: operators build the store first, then discover their processor will not underwrite the category and their ESP prohibits it. Establish the rails, read both acceptable use policies, then write copy to fit the tightest constraint among them. That sequence saves months.
Work through the eight layers above and you will have a defensible position on the items that actually decide these cases. If you are already suspended, or you want a second reader on a store before you scale spend behind it, we run a structured Merchant Center suspension audit that maps every finding to the specific policy line it falls under. None of the above is legal advice, and you should take counsel on jurisdictional questions specific to your product list. If you would rather start with a conversation, book a free 15-minute review and we will tell you plainly whether your setup is salvageable.
Sources
Every policy and regulatory claim in this article is drawn from the primary documents below, checked on 15 August 2026. Platform policies change without notice; verify against the current version before acting.
- Merchant Center account suspension process — Google
- misrepresentation policy — Google
- borderline products — MHRA / GOV.UK
- 21 CFR 201.128 — U.S. Food and Drug Administration
- restricted drug terms policy — Google
- unapproved substances policy — Google
- bulk drug substances that may present significant safety risks — U.S. Food and Drug Administration
- healthcare and medicines policy — Google
- unapproved pharmaceuticals and supplements — Google
- a growing risk for platforms and payment processors — LegitScript
- healthcare and medicines advertising policy — Google
- healthcare certification — LegitScript
- MHRA — MHRA / GOV.UK