Is the LegitScript application fee refundable if my application is denied?

No. LegitScript states that the application fee is nonrefundable regardless of the outcome. The one narrow exception in its FAQ is a withdrawal, where it may refund the application fee if you ask before an analyst has started reviewing your file. Annual fees are also nonrefundable and are not pro-rated if you cancel partway through the year.

Does one LegitScript certification cover more than one website?

Healthcare Certification is priced per root domain, and subdomains and subpages of a certified domain are generally covered. So shop.example.com sits under a certified example.com. A second brand on a second root domain needs its own application fee and its own annual fee, although several sites under common ownership can be handled in a single application.

Can a supplement or research peptide seller get LegitScript certified?

Generally no. LegitScript lists businesses whose products consist solely of dietary supplements, and research-use-only chemical businesses including peptides, among those that are not eligible for Healthcare Certification. Those categories are underwritten on other evidence instead, such as licensing, product testing records, and how the site presents its claims.

Is LegitScript certification the same thing as being certified with Google?

No, and mixing them up costs advertisers weeks. In the United States, Google's healthcare policy requires online pharmacies to hold LegitScript or NABP accreditation and requires telemedicine providers to hold LegitScript accreditation. The policy then adds that advertisers must also be certified with Google itself, which is a separate application on Google's side.

Will LegitScript certification on its own get my merchant account approved?

It removes a large objection rather than settling the decision. Card networks and processors recognize the certificate, so it shortens a conversation that would otherwise stall. Underwriting still reads your state licenses, how prescriptions are verified, your billing and refill model, and your dispute history before pricing the account.

LegitScript Certification Cost and Process Explained

LegitScript Healthcare Certification costs $975 to apply and $2,150 a year once you are approved. Both fees are charged per root domain, and those are the figures LegitScript published on its own pricing page and certification FAQ as of October 1, 2026. So a single-site pharmacy or telehealth business should budget $3,125 for year one and $2,150 for every year after. The fee is the easy part. What decides the outcome is whether your business model qualifies at all, and whether your paperwork holds up in a review with no published end date.

Key takeaways

Healthcare Certification is $975 to apply, plus $2,150 a year after approval, priced per root domain (LegitScript, October 2026).

Rush processing costs an extra $2,500. It only starts your review sooner. LegitScript says plainly that it does not make the review itself shorter.

LegitScript will not estimate how long the process takes, because volume and your own answers both move the date.

Several categories cannot apply at all, including supplement-only sellers, research-use-only chemical sellers, and marijuana businesses.

The certificate opens doors with ad platforms and card networks. A processor still reviews your licenses, your prescription workflow, and your dispute history.

How much does LegitScript certification cost?

Healthcare Certification has two standard fees, plus a third if you are in a hurry. Here is what LegitScript lists as of October 1, 2026.

Application fee, $975 per root domain. Paying it is what starts the process, and it is not refundable. A root domain is your main web address, so example.com rather than shop.example.com.
Annual certification fee, $2,150 per root domain. It is due only after you are approved. Paying it is what finalizes the certificate.
Rush processing, an extra $2,500 per application. It only means your review starts within two business days of clearing screening.
Probationary certification, $975 to apply and $3,995 a year. This tier covers businesses that meet the standards but, in LegitScript’s words, need more in-depth and frequent monitoring to oversee continued compliance. The review decides that, not you.

Per-domain pricing is the detail that changes budgets. Subpages and subdomains of a certified root domain are generally covered. One fee handles your store, your help center, and your blog. A second brand on a second root domain means a second set of fees. Sites under common ownership can share one application, and each root domain is still billed on its own. One useful wrinkle sits in the FAQ. Get an added website approved within six months of your renewal date and its first annual fee drops by half. Adding one means emailing LegitScript, clearing a compliance review, and paying that site’s application fee, so start it early.

Refunds are tight. The application fee is not refundable, whatever the outcome. LegitScript says it may return that fee if you pull out before a reviewer has started. Annual fees are not refundable either, there is no credit for unused months, and your certificate ends the day you cancel.

What do the other LegitScript programs cost?

Each program is priced by a different unit. That is why the quotes you see in forums rarely match. Healthcare is priced per root domain. Addiction Treatment is priced per physical facility. CBD splits into a fee per product and a separate fee per website.

Program	Priced by	Application fee	Annual fee
Healthcare Certification	Root domain	$975	$2,150
Addiction Treatment Certification	Unique facility	$1,395 to $1,595	$2,550 to $3,095
CBD Website Certification	Root domain	$800	$1,600
CBD Product Certification	Product	$500 to $650	$750 to $1,000

Two notes on those ranges. Addiction Treatment fees drop as your facility count rises, and LegitScript’s page for that program also lists a solo practitioner tier at $535 to apply and $1,070 a year. CBD product fees work the same way. They run $650 for one to five products and fall to $500 once you pass 100. A CBD seller normally needs both its products and its website certified before the big platforms will run its ads.

If your business touches hemp, read the category risk before you spend anything. The payment problem and the certificate are two separate problems, and what the Farm Bill actually says about CBD covers the first one.

Who can apply, and who cannot?

Healthcare Certification is built for businesses that sell, prescribe, or take payment for prescription medicine online. LegitScript’s list includes online, retail, mail-order, veterinary, compounding, and over-the-counter pharmacies. It also covers telemedicine providers whose visits can end in a prescription. Drug makers, wholesalers, and distributors qualify. So do brokers and facilitators that send patients to partner pharmacies or clinicians, along with prescription price and discount sites.

The exclusions catch more businesses than the inclusions do. This is where most wasted applications start. LegitScript says these are generally not eligible:

Businesses that only sell dietary supplements
Research-use-only chemical sellers, including peptides
Medical device businesses and homeopathic-only businesses
Businesses offering medical or recreational marijuana
In-person-only clinics and med spas that neither prescribe online nor take online payment for prescription drugs
Most software platforms, unless they hold a healthcare license, contract with providers or pharmacies, take payment for prescription drugs, or deal with patients directly

That list matters, because many merchants reach for this certificate as a payments fix. A supplement brand or a research peptide seller cannot buy its way out of a processing problem here. The program generally will not take the application, unless the business also performs an in-scope healthcare activity alongside it. Those sellers get reviewed on different evidence, starting with lab testing records and how the site words its claims. We cover that in why a processor asks for a certificate of analysis.

How does the application work?

The steps are simple and the paperwork is not. You open an account in LegitScript’s portal, pick your program, fill in an enrollment form, pay the application fee, then finish and submit the application. Expect to hand over licenses for every state you work in, your clinical and website policies, and ownership details. LegitScript publishes a checklist and a standards document for each program. Reading them before you start is the cheapest hour you will spend.

Two things about the review help to know up front. It runs as a back and forth rather than pass or fail, so a missing file brings a request from a reviewer instead of a quick denial. And fees you have already paid are still honored even if you submit later, though once more than a year has passed you may be asked to complete the current version of the application first.

The certificate also creates a reporting duty, and that is what the annual fee pays for. LegitScript asks you to report changes in ownership, operations, or partners. It also wants to hear about major website updates, new services, new states, license changes, and any action a regulator takes against your business or its owners. That monitoring is what gives the certificate weight with a bank, so treat the reporting as part of the product.

How long does LegitScript certification take?

LegitScript does not publish an estimate, and it says so directly. Its FAQ states that every application is different, so the company is unable to give an estimated timeline. It names four things that move the date. How complex your business is, how complete your file is, how fast you answer questions, and how many applications are in front of yours. You cannot see your place in the queue either, because the portal does not show it.

That silence is the most useful fact in this article. Two of those four factors are yours to control. A complete first submission and same-day answers are the only real levers you have. The $2,500 rush option buys a start date and nothing else. LegitScript states that it moves up the beginning of your review and does not shorten the review itself.

So treat this as a project with an unknown end date, and start it well before you need it. Be skeptical of any service that advertises guaranteed certification on a fixed timeline. It is promising something LegitScript itself will not put in writing.

Does certification get you approved for payments?

Certification removes a large objection. It does not settle the decision by itself. Those are two different things, and merchants get caught out by the gap. LegitScript’s healthcare FAQ calls certification a necessary part of the approval process for online transactions with Visa and Mastercard. It also lists recognition by payment providers and banks as a benefit that smooths high-risk merchant registration. It also says the certificate may be required to advertise on a platform, while the platform still decides on your ads itself.

The advertising side has a second step most applicants miss. In the United States, Google’s healthcare policy allows online pharmacies accredited by LegitScript or by the National Association of Boards of Pharmacy. It allows telemedicine providers accredited by LegitScript. The same policy then adds that advertisers must also be certified with Google, which is a separate application on Google’s side.

On the payments side, the certificate starts a conversation rather than ending one. Published processor policies still treat this category carefully. On the lists we captured in August 2026, Braintree prohibits online and other non-face-to-face pharmacies and pharmacy referral services. Square prohibits internet, mail order, and telephone order pharmacies and pharmacy referral services, where medication is fulfilled on an internet or telephone consultation without a physical visit. Stripe takes a different route and holds online pharmacies, prescription-only products sold online, prescription-only and regulated medical devices, prescription delivery, and telemedicine in its restricted tier rather than its prohibited one. PayPal treats prescription items and telemedicine as restricted, and Adyen restricts prescription medicine and medical devices for direct merchants, with separate statuses for platform and marketplace businesses.

Restricted is the tier that decides most outcomes here. A restricted business can get onboarded, process cleanly for months, then get flagged once volume grows and a risk team takes a closer look. That is the pattern behind why a platform flags a business as high risk. You can check any category against the published lists with our prohibited businesses lookup.

A reviewer weighing an online pharmacy merchant account reads the certificate next to the rest of your file. That means your state pharmacy licenses, both where you fill and where your customers live. It means how a prescription is checked before anything ships. It means your refill and billing model, how a patient cancels, and your dispute history. If a telehealth front end writes the prescriptions, the Ryan Haight Act rules shape that review too. How patient data moves through checkout raises its own questions, which we cover in HIPAA compliant payment processing.

Budgeting for certification without guessing

Run the math on root domains, not on businesses. One certified site costs $3,125 in year one and $2,150 every year after. Each extra root domain repeats both numbers. Add $2,500 only if an earlier start is worth that to you, and treat the probationary tier as a possible outcome rather than a plan. Check LegitScript’s current fees before you commit. These figures are what the company published on October 1, 2026, and they have moved before.

Then plan for the part the fee does not cover. Get your licenses, policies, and prescription workflow documented before you pay anything, because a complete file is the one lever that reliably speeds up a review. Start the application ahead of the launch or the ad campaign that depends on it. And open the payments conversation in parallel. A processor that underwrites your category will read an in-progress certification as evidence, rather than waiting for the certificate to land.