How to Get BPC-157 Online in 2026: Prescription, 503A Pharmacy, Red Flags

Under a draft HHS enforcement policy announced October 28, 2026, HHS says it does not intend to take action against 503A pharmacies that compound BPC-157 under ten conditions^[1]. The policy is not final and is not binding on HHS or the public, and written comments are open until November 13, 2026^[9]. That leaves one route HHS says it will not take enforcement action against: a prescription written for you by a licensed clinician, filled by a State-licensed 503A compounding pharmacy (or compounded by a licensed physician), as a single-ingredient product that meets all ten conditions^[1]. BPC-157 is still not FDA-approved, and the policy does not make research-chemical websites a legal source for human use. This guide covers who can prescribe and compound it now, what to ask the pharmacy, the red flags that mean you are buying a research chemical, and what the human evidence actually shows.

The short answer

• You need a prescription. The policy keeps section 503A’s patient-specific prescription requirement^[1]. A website that sells BPC-157 to anyone who pays is not operating under this policy.
• It must come from a 503A compounder. The policy covers a State-licensed pharmacy, a Federal facility or a licensed physician. It does not cover 503B outsourcing facilities^[1][2].
• It must be BPC-157 alone, by an allowed route. Appendix B allows BPC-157 acetate as a subcutaneous, intramuscular, oral or topical product, made from bulk powder with a qualifying certificate of analysis^[1]. Blends with TB-500 or other peptides are not covered.
• It is still not approved. HHS states that compounded drugs are not FDA-approved and that FDA does not review their safety, effectiveness or quality before they are marketed^[1].
• The evidence is thin. A 2026 systematic review found three human studies with 30 participants in total, all of poor quality, and rated the certainty of evidence very low^[4].

What changed on October 28, 2026

Appendix B of the HHS policy gives the history: BPC-157 (free base) and BPC-157 acetate were in FDA’s Category 2 from September 2023 until April 22, 2026. FDA’s drug center (CDER) recommended against adding either form to the 503A bulks list, and the Pharmacy Compounding Advisory Committee voted in favor^[1]. On October 28, 2026, HHS announced a draft policy saying that, until a final rule decides whether BPC-157 belongs on the 503A bulks list, it does not intend to take enforcement action against a 503A compounder that uses it when all ten conditions are met^[1].

Four points matter for anyone trying to buy it. First, this is enforcement discretion, not a change in BPC-157’s approval status. Second, it is a draft: the Federal Register notice says it is not binding on HHS or the public and creates no rights^[9]. Third, it is interim: HHS says it may revisit the policy, in whole or in part, if a safety signal or product quality issue arises^[1]. Fourth, it is narrow. It reaches 503A pharmacies and physicians only, not the larger 503B outsourcing facilities^[2]. Background on the two types is in our glossary entries for 503A pharmacies and 503A vs 503B. Our news report covers the announcement, and we will post updates there.

Step 1: Get a prescription from a licensed clinician

The policy requires that the product be compounded in compliance with section 503A’s patient-specific prescription requirement^[1]. In practice that means a clinician licensed in your state evaluates you and writes a prescription for you by name. Telehealth visits can work where state rules allow them, but a checkout page with no clinical intake is not a prescription.

Expect a careful clinician to ask why you want it, what else you take, and about your medical history. Two topics deserve a direct conversation. BPC-157 promotes blood-vessel growth in animal studies, which is a theoretical concern for anyone with a current or past cancer; our BPC-157 safety review covers it. And competitive athletes face anti-doping restrictions, which a 2026 orthopedic review advises clinicians to raise with patients^[6].

Step 2: Confirm the pharmacy is a State-licensed 503A pharmacy

Ask the prescriber which pharmacy will compound and ship the product, then check that pharmacy’s license with the board of pharmacy in its state and in yours. Our pharmacy legitimacy lookup can help with that check. A licensed pharmacy that is new to peptides may need time: the president of a Florida compounding company told NPR his business would likely make only one of the six peptides at first and needed to prepare its facility, and that he did not think all the 503A pharmacies in the country could meet demand^[2].

Step 3: What to ask before you pay

These questions map directly to the policy’s conditions. A pharmacy that works under the policy should be able to answer each one without hesitation.

If you are considering capsules, read our comparison of oral BPC-157 vs injection first. The policy allows oral forms, but only with documented human oral bioavailability for the specific formulation^[1], and no published human study has measured how much oral BPC-157 is absorbed.

Red flags: signs you are buying a research chemical

HHS describes the policy as a way to discourage widespread use of research-use-only peptides from foreign manufacturers by offering a more controlled alternative^[1]. Those products did not become legal on October 28. Walk away if you see any of the following:

• “For research use only” or “not for human consumption” labels. FDA warning letters to online peptide sellers have stated that, despite such labels, evidence from the sellers’ own websites showed the products were intended as drugs for human use^[3].
• No prescription and no clinician. If you can add BPC-157 to a cart and check out, the seller is not following the policy.
• Bacteriostatic water, dosing calculators or “protocols” sold alongside the vial. FDA’s letters cite bacteriostatic water sold as a solvent for reconstitution, along with peptide guides and calculators, as evidence that research-labeled products were meant for people^[3].
• Blends. Products that combine BPC-157 with TB-500 (often sold as a “Wolverine” stack) or with GHK-Cu and KPV (sold as KLOW) fail the single-ingredient condition^[1].
• No COA, or a COA with no manufacturer address. The policy requires the original manufacturer’s physical location on the COA^[1].
• A route the policy does not list. BPC-157 is covered only as a subcutaneous, intramuscular, oral or topical product^[1]. A BPC-157 nasal spray, for example, falls outside it.
• Pens, cartridges or autoinjectors. The only device the policy allows in the package is a 510(k)-cleared syringe^[1].
• “FDA-approved” or “FDA-cleared” BPC-157. No such product exists.

FDA posts its warning letters publicly, and we track them in our FDA warning letter database. For the broader legal picture, see Are peptides legal?

Who sells it, and what it costs

Because the policy is days old, the compliant market is still forming. Bulk suppliers have to produce lots with the required COA, and pharmacies have to verify them before they can dispense; the head of the Alliance for Pharmacy Compounding told NPR this could take some time^[2]. When we checked the websites of the telehealth providers in our catalog on October 30, 2026, 16 had BPC-157 available to order on a prescription basis, and none sold it as a research-use-only product. Prices shown before intake ranged from $80 for a single 15 mg vial to $320, with most offers between about $140 and $250 per month or per vial. Being on a prescription is not the same as meeting the policy, though. Several of those offers were blends with TB-500 or other peptides, one was a BPC-157 nasal spray (a route Appendix B does not list), and one sold capsules described as a supplement. Our BPC-157 provider page lists every seller we confirmed sells BPC-157 as a single-ingredient product, shows the form each one sells, and labels forms the policy does not cover, such as the nasal spray. Blends are left off. A listing does not confirm that the pharmacy meets the policy’s other conditions, so work through the questions in Step 3 yourself: a certificate of analysis, a single active ingredient, the “compounded drug product, not for resale” label line, an allowed route, a 510(k)-cleared syringe as the only device, and a State-licensed 503A pharmacy. Treat a very low price or instant availability as a reason for more questions, not fewer.

Before you start: what the evidence shows

BPC-157 has a large animal literature and very little human data. The 2026 systematic review by Poolton and colleagues found a retrospective series of knee injections (16 people), a retrospective pilot of bladder instillations for interstitial cystitis (12 people) and a two-person intravenous safety pilot. All reported symptom improvement in most participants without treatment-related adverse events, but all were judged to be of poor methodological quality, and the authors concluded that BPC-157 should not be used clinically outside ethically approved, high-quality trials^[4]. A 2026 pharmaceutical review notes there is no approved formulation, no validated dosing regimen and no completed Phase II trial^[5]. A 2026 orthopedic review concluded that routine clinical use cannot currently be recommended^[6].

Our BPC-157 guide summarizes the research, and the BPC-157 dosage page explains why no evidence-based dose exists. The HHS policy does not set a dose either^[1].

If something goes wrong

Under the policy, the compounder must report serious adverse events to FDA’s MedWatch program whether or not they seem drug-related, and the product labeling should tell you how to report problems^[1]. You can also report directly: MedWatch accepts reports from the public^[7]. FDA defines a serious adverse event by outcome, including death, a life-threatening event, hospitalization, disability or permanent damage, and a birth defect^[8]. These reports are how HHS would detect the kind of safety signal that could end the policy.

Bottom line

The route HHS says it will not take enforcement action against is narrow, and the policy behind it is still a draft: a clinician’s prescription, a State-licensed 503A pharmacy, BPC-157 as the only active ingredient, an allowed route, a full COA from an FDA-registered manufacturer, and the required label^[1]. Anything sold without a prescription, labeled for research use, or mixed with other peptides sits outside that route. Getting it this way also does not change what is known about it: a small, low-quality human evidence base and no established dose^[4][5].