If you run an online pharmacy, a telehealth service, or another regulated healthcare business, LegitScript certification and NABP pharmacy accreditation can decide whether you get to advertise and accept card payments at all. These programs are not a simple trust badge. For many merchants, they are the line between a stable payment account and a sudden shutdown.
This guide explains what LegitScript certification and NABP pharmacy accreditation mean in 2026, who needs them, and how they connect to payment processing. You will also see what happened to VIPPS, since the program you may be searching for now goes by a new name.
What Is LegitScript Certification?
LegitScript is a third-party company that checks whether healthcare and other high-risk merchants operate legally and openly. It has done this work since 2007. When a business earns LegitScript certification, it signals banks, card networks, and ad platforms that the merchant meets a baseline set of compliance standards.
LegitScript certification covers a wide group of businesses, including:
- Online, mail-order, and brick-and-mortar pharmacies
- Telemedicine and telehealth providers that facilitate prescribing
- Addiction treatment services
- CBD products and websites
- Certain supplements, such as peptides
Major platforms lean on this program. Google has required LegitScript Healthcare Merchant Certification for online pharmacy ads since 2020. Meta and Bing recognize it as well. LegitScript certification is also part of the approval process for card-not-present transactions with Visa and Mastercard.
What Is NABP Digital Pharmacy Accreditation?
NABP, the National Association of Boards of Pharmacy, runs the main accreditation program for US online pharmacies. It launched this program in 1999 as VIPPS, short for Verified Internet Pharmacy Practice Sites. In 2020, NABP renamed it Digital Pharmacy Accreditation. The label changed, but the purpose stayed the same. It confirms that a pharmacy:
- Holds valid state licenses
- Dispenses FDA-approved medications
- Protects patient data
- Follows federal and state pharmacy laws
Digital Pharmacy Accreditation lasts three years, applies only to US pharmacies, and is recognized or required by more than 20 state boards of pharmacy. So, if you still hear the term “VIPPS,” know that it now points to this program.
Where Healthcare Merchant Accreditation Fits
NABP also runs a separate program called Healthcare Merchant Accreditation. This one is not the same as Digital Pharmacy Accreditation. Instead, it usually comes first. A licensed pharmacy must earn and maintain Healthcare Merchant Accreditation for each website before it can qualify for Digital Pharmacy Accreditation.
Healthcare Merchant Accreditation also carries weight with payment and ad systems. It helps meet advertising rules on platforms like Google and Bing, and it satisfies Visa and Mastercard certification steps for card-not-present pharmacy and telemedicine merchants.
Who Needs LegitScript Certification and NABP Pharmacy Accreditation?
Not every business needs both programs. In general, these credentials apply to merchants under heightened regulatory review.
Online Pharmacies and Telemedicine Providers
Businesses that offer online consultations, write prescriptions, or fill medications must meet strict requirements before they can advertise or process payments smoothly.
Regulated Healthcare Products
Merchants that sell products under close regulatory watch, such as certain supplements or CBD, often need certification to advertise or keep a stable account.
High-Risk Healthcare Merchants
Healthcare businesses in complex or closely monitored categories need certification to reduce the chance of account closures.
Why LegitScript Certification Matters for Payment Processing
For regulated healthcare businesses, LegitScript acts more like a gate than a gold star. If you cannot pass the gate, many doors stay locked. Here is why it matters so much:
- Advertising access. Major ad platforms require LegitScript certification before pharmacy and telemedicine ads can run.
- Merchant account approval. Many banks and processors decline or close accounts without proper certification.
- Ongoing monitoring. Continuous review helps lower the risk of sudden shutdowns tied to compliance problems.
- Regulatory credibility. Certification shows that a business follows healthcare and consumer protection rules.
For businesses that want to accept online card payments for prescriptions, LegitScript certification and the right NABP accreditation are usually not optional.
LegitScript vs NABP Accreditation: Key Differences
Merchants often ask which program they need. The short answer is that the two serve different roles, and some businesses need both. This table breaks down the main differences.
| Feature | LegitScript Certification | NABP Digital Pharmacy Accreditation |
| Scope | Broad: pharmacies, telemedicine, addiction treatment, CBD, supplements, and more | Focused on US pharmacies with an interactive online practice |
| Geography | US and several international markets | US pharmacies only |
| Recognized by | Google, Meta, Bing, plus Visa and Mastercard processes | Visa, Mastercard, and 20+ US state pharmacy boards |
| Best fit | Merchants that advertise across major ad platforms | Licensed US pharmacies seeking state and card-network recognition |
| Renewal | Ongoing monitoring with periodic renewal | 3-year accreditation with annual reviews |
For card-not-present pharmacy sales, processors generally want third-party certification on top of state licensing. A state pharmacy license by itself is not enough to qualify for online payment approvals. You can read more about how gateways handle these transactions in our guide to payment gateways.
How to Get Certified: A Step-by-Step Framework
Certification takes planning. The timeline can run from several weeks to a few months, depending on your documents and licenses. Here is a clear path to follow.
- Confirm your business type and licensing. Know exactly what you sell and where your patients live. Your state licenses need to match your operations.
- Gather your documentation. Collect licenses, ownership records, and written policies and procedures. Missing paperwork is a common cause of delays.
- Choose the right path. Decide whether you need LegitScript certification, NABP accreditation, or both. Your model and target platforms will guide this choice.
- Apply and pay the required fees. The certifying body sets these fees. Expect an application cost plus ongoing monitoring fee.
- Complete the review. LegitScript reviews your documents and monitors your site. NABP accreditation may include an on-site survey.
- Apply to ad platforms separately. After you hold industry certification, you still need to apply to platforms like Google for their own approval. This is a separate step.
- Maintain compliance and renewal on time. Certification is not one-and-done. Keep your records current and renew before anything lapses.
Common Mistakes and Compliance Issues to Avoid
Even certified businesses run into trouble. Watch out for these frequent problems.
- Treating certification as a one-time task. Certified merchants face continuous monitoring, and violations can lead to suspension.
- Licensing does not match operations. Reviewers often flag businesses whose state licenses do not line up with where they serve patients.
- Letting certification lapse. An expired or lapsed certification can disrupt advertising or payments right away.
- Assuming certification approves your ads. Certification is required, but your ad content still has to follow each platform’s rules.
- Waiting too long to start. Starting the process only after an account closes puts your revenue at risk.
To understand why the type of partner you choose also matters, see our comparison of an ISO versus a traditional bank for payment processing.
How to Verify NABP Accreditation
If a business claims to be NABP accredited, you can check it yourself. Here is how:
- Search NABP’s public safe site and accredited pharmacy listings.
- Review NABP’s accredited healthcare merchant rosters.
- Confirm an active dot pharmacy domain tied to the business website.
If a business does not appear in NABP listings, treat its accreditation as unverified until you can confirm it.
Understanding the “NABP Number”
When people mention a “NABP number,” they usually mean one of two identifiers.
An NCPDP Provider ID is a 7-digit pharmacy billing number created by the National Council for Prescription Drug Programs. Pharmacies obtain it directly, and it is accessible through NCPDP tools rather than a single free public lookup.
An NABP e-Profile ID is an account identifier tied to a NABP profile. It is separate from billing or claims numbers.
How AllayPay Helps Regulated Healthcare Merchants
We work as an ISO, which means we help merchants connect with the acquiring banks and payment processors that support regulated healthcare and pharmacy businesses. We do not process payments ourselves. Instead, we partner with the right players, so you land in the right place.
Our team helps you understand certification requirements and compliance expectations, and we work to reduce the risk of account disruption. Our goal is to guide healthcare merchants through the full process, so payments stay stable while you meet regulatory standards.
Ready to simplify payments and get on the right path to accreditation? Contact us today to review your certification needs and get matched with a compliant payment processing solution built for regulated healthcare businesses.
Frequently Asked Questions
What happened to VIPPS certification?
VIPPS stood for Verified Internet Pharmacy Practice Sites. NABP created it in 1999 and renamed it Digital Pharmacy Accreditation in 2020. The name changed, but the goal did not. It still verifies that a US online pharmacy is licensed, follows the law, and protects patients. So if someone says they need “VIPPS,” they now mean NABP Digital Pharmacy Accreditation.
Is LegitScript certification legally required?
No. LegitScript is a private certification company, not a government agency, and no federal law requires every healthcare merchant to be certified. However, LegitScript certification is often a practical requirement for online pharmacies, telemedicine providers, and other regulated healthcare businesses that need digital advertising or payment processing. Without certification, healthcare merchants may have difficulty advertising online, accepting credit cards, or maintaining a stable merchant account.
What is the difference between LegitScript and NABP accreditation?
LegitScript is a private certification that covers a wide range of merchants, including pharmacies, telemedicine, addiction treatment, and CBD, RUO peptides, and other industries across the US and some other countries. NABP Digital Pharmacy Accreditation is a US-only program built for pharmacies with an online practice. LegitScript opens more ad platforms, while NABP accreditation carries weight with state pharmacy boards. Many online pharmacies pursue both.
Do I need both LegitScript certification and NABP accreditation?
Usually, not. Most online pharmacies and telemedicine providers need one recognized healthcare certification, depending on their business model, payment processor, advertising platforms, and state licensing requirements. LegitScript or NABP Healthcare Merchant Accreditation may satisfy payment processing requirements, although some banks and processors specifically require LegitScript. For advertising, Google accepts either LegitScript or qualifying NABP accreditation for online pharmacies but generally requires LegitScript for telemedicine providers. You can get a processing account with just one of the two with AllayPay.
How long does it take to get certified?
Plan for several weeks to a few months. The biggest factors are how complete your paperwork is and whether your licenses match where you serve patients. NABP accreditation can also include an on-site survey, which adds time.
How much does LegitScript certification and NABP accreditation cost?
Standard LegitScript Healthcare Certification costs $975 to apply plus $2,150 annually per website, for a first-year total of approximately $3,125. Expedited review costs an additional $2,500. Merchants may also hire an independent LegitScript consultant to manage the application, review compliance documents, and correct website issues. These optional consulting and remediation services generally add approximately $3,000 to $30,000+, depending on the complexity of the business.
NABP Healthcare Merchant Accreditation costs $1,075 for the first year and $1,075 annually thereafter, plus approximately $1,000 per year for the required dot pharmacy domain. Therefore, NABP generally costs about $2,075 per year for one website. Actual costs may increase for multiple websites, complex business models, legal reviews, or extensive compliance changes.
Which platforms require LegitScript certification?
Google, Meta, and Bing all recognize or require it for many healthcare and pharmacy advertisers. LegitScript certification also supports the card-not-present approval steps used by Visa and Mastercard, so it affects both advertising and payments.
Will certification get my ads approved?
Not on its own. Certification makes you eligible to apply, but each platform still reviews your actual ad copy and landing pages. If your content breaks a platform rule, your ads can be paused or rejected even when you are certified. Think of certification as the key that unlocks the door, not a pass that skips the review.
Can LegitScript or NABP certification be taken away?
Yes. Both programs monitor merchants after approval. Misleading ads, licensing gaps, or other compliance problems can lead to suspension or removal. Staying certified means keeping your records and practices current.
Can I get a healthcare merchant account without certification?
For most regulated pharmacy and telemedicine businesses, no. Banks and processors tend to decline or close accounts that lack the right certification, because these categories carry more risk.
What is the MCC code for online pharmacies?
A Merchant Category Code (MCC) is a four-digit code that tells card networks what kind of business you run. Online pharmacies usually fall under one of two codes. MCC 5912 covers drug stores and pharmacies, including many online pharmacies, and it is treated as a lower-risk retail category. MCC 5122 covers drugs and druggist sundries, and some online pharmaceutical sellers land here, where processors often apply extra scrutiny. Your acquiring bank assigns the code based on your business and on Visa and Mastercard guidelines, so the right code can depend on your model. Getting it right matters, since the code affects approvals, monitoring, and your processing costs.
How do I verify if an eCommerce Healthcare company is LegitScript certified?
LegitScript makes it very easy by simply searching the company’s website using this link, https://www.legitscript.com/certification/website-certification-status/.
How do I verify if a pharmacy is NABP accredited?
Search NABP’s public safe site and accredited pharmacy listings, review its accredited merchant rosters, and confirm an active dot pharmacy domain tied to the business. If the pharmacy does not show up in those listings, treat the accreditation claim as unverified until you can confirm it.
Is LegitScript the same as a merchant account?
No. LegitScript is a certification that shows your business is compliant. A merchant account is the tool that lets you accept card payments. You often need the certification first to qualify for and keep the account.
