How to Verify a Legitimate Canadian Online Pharmacy

Start with CIPA’s website verifier

Open CIPA’s Verify a Website tool by typing the address yourself. Copy only the domain from the pharmacy’s address bar—for example, example.com—and search it. Do not click a seal on the seller’s site, because a counterfeit seal can link to a counterfeit validation page.

Check that the returned domain exactly matches. Hyphens, added words, alternate top-level domains and subdomains matter. trustedpharmacy.com and trusted-pharmacy.net are unrelated addresses unless the registry explicitly lists both.

CIPA says authorized members must require valid prescriptions, collect medical and medication history, provide access to a licensed pharmacist, and protect personal information. Certification is useful evidence, but it is not FDA approval and does not guarantee U.S. admissibility.

Confirm the provincial pharmacy license

Ask for the pharmacy’s legal name, physical address, pharmacist-in-charge and provincial license number. Then use the relevant provincial college of pharmacists’ public register. Confirm that the status is active and that the address and business name match.

Some referral sites arrange fulfillment through pharmacies in more than one country. Ask which pharmacy will dispense the specific drug and where it will ship from. “Canadian company” does not necessarily mean “dispensed in Canada.” Verify every disclosed dispensing location with its local regulator.

A legitimate ordering process

A credible pharmacy should:

• require a valid prescription for prescription-only medicine;
• request relevant health, allergy and medication information;
• make a licensed pharmacist available for questions;
• disclose its legal identity, location and contact methods;
• explain price, currency, shipping and refund terms before payment;
• identify the actual dispensing country;
• use secure checkout and a clear privacy policy; and
• provide medicine name, strength, directions, lot or traceability information and appropriate packaging.

The site should not diagnose a condition through a trivial questionnaire merely to generate a prescription. It should not pressure a patient to replace clinician advice.

Red flags

Leave the site if it offers prescription medicine without a prescription, sells controlled substances for easy international delivery, hides its location, refuses pharmacist contact, or demands payment through cryptocurrency, gift cards or wire transfer only.

Other warning signs include prices implausibly below every competitor, unsolicited email or text advertising, spelling-heavy copied pages, countdown timers, claims of “FDA approved pharmacy” without an official basis, and a seal that cannot be independently verified.

A browser padlock only means the connection is encrypted. It does not prove the seller is a pharmacy. Search ads and high search-engine placement are not credentials either.

Check the medicine when it arrives

Before using it, compare the package with the order and prescription. Check the drug name, strength, dosage form, quantity, expiration date, manufacturer, dispensing pharmacy and storage condition. Do not use a package that is open, wet, crushed, unusually hot or cold, or missing identifying information.

Appearance can legitimately differ across markets, but unexplained differences warrant a pharmacist’s review. Do not identify tablets solely from color or shape. For a temperature-sensitive medicine, ask in advance how the shipper validates the cold chain and what to do after a delay.

Report suspected counterfeit or adverse events to the appropriate regulator and seek medical help for urgent symptoms. Preserve packaging, invoices and photographs.

Verification cannot answer the legal question

CIPA is an industry association, not the FDA or a U.S. customs authority. A CIPA-listed site may meet the association’s standards while an individual shipment remains prohibited or subject to refusal in the United States. Conversely, the absence of CIPA membership does not by itself prove fraud, because a legitimate Canadian pharmacy serving local patients may not join the association.

Use verification as one layer: registry status, prescription process, product traceability, payment security, prescriber review and legal status all matter. The complete overview of prescription drugs from Canada explains how these layers fit together.

Verify the domain, not just the business name

Scammers frequently register an address that differs from a real pharmacy by one character. Others copy the name, street address and license number of a legitimate business while directing payments to an unrelated operator. This is why matching a business name in a search result is insufficient.

Read the full hostname in the browser. Ignore everything after the first slash when checking the core address, and be wary of a familiar pharmacy name placed before an unrelated domain. A link such as realpharmacy.example-scam.com belongs to example-scam.com, not to the business named in the first part.

Use contact information from the provincial register—not only the website—to ask whether the domain belongs to the licensee. If a site recently changed addresses, look for confirmation from both the regulator or certification body and the established pharmacy contact.

Understand referral and fulfillment models

Some online services are referral businesses rather than the pharmacy that physically dispenses every order. They may transmit a prescription to a partner in Canada or another country. This structure is not automatically fraudulent, but it creates more entities to verify and more questions about which regulator, privacy rules and product standards apply.

Before ordering, request the legal names and countries of the referral service, dispensing pharmacy and payment recipient. Ask whether the origin can change after payment and whether the customer can decline a substitution of country, manufacturer or product. The invoice and package should identify the actual dispenser.

Do not assume “Health Canada approved” means the item was dispensed in Canada or approved by the FDA. Health Canada and FDA authorizations are jurisdiction-specific. A product sourced through another country needs verification under that country’s system as well.

Protect medical and payment information

A pharmacy needs enough health information to screen a prescription, which makes privacy practices important. Check whether the site explains who receives the data, where it is stored and how a patient can correct or delete an account. Avoid sending prescriptions, passport copies or payment details through an unverified email address or messaging account.

Credit cards generally provide more dispute options than wire transfers, cryptocurrency or gift cards. Before payment, save the product page, refund terms and order confirmation. Use a unique password and enable account security features when offered.

Unsolicited calls asking for refills, payment or identity documents should be verified through a known telephone number. Caller ID and email sender names can be spoofed. A legitimate prior order does not make every later message genuine.

Coordinate with the prescriber and pharmacist

Give the treating clinician and local pharmacist the exact product and dispensing information. They can check dosage, interactions, duplicate therapy and monitoring requirements. A foreign seller may not have access to the patient’s complete U.S. medication record.

If packaging or tablet appearance changes, pause and ask a pharmacist before use. Do not rely on an online image search to authenticate medicine. Suspected counterfeit products should be retained in their packaging and reported; they should not be returned through informal mail without instructions.

Recheck before every refill

Verification is not permanent. Domains can expire, businesses can change ownership, licenses can lapse and fraudulent operators can imitate a pharmacy that was legitimate when the first order was placed. Recheck the exact domain and license status before a large refill, after any unexpected website redirect, or when payment instructions change.

Treat a request to send money to a new personal account as a new transaction requiring fresh verification. Contact the pharmacy using the number in the regulator’s register or a previously trusted record, not the contact details in the suspicious message.

Also review whether the dispensing country or manufacturer changed. A refill can look like a repeat purchase while using a different supply chain. Ask the prescriber or pharmacist whether the replacement is appropriate before use, particularly for modified-release or narrow-therapeutic-index medicine.

Frequently Asked Questions

Is the CIPA seal enough?

No. Search the exact domain in CIPA’s own verifier because seals can be copied.

Does “Canada” in the domain prove anything?

No. Names, flags and maple-leaf graphics are marketing elements, not licenses.

Should an online pharmacy require a prescription?

Yes for prescription-only medication. Offering it without one is a major warning sign.

How do I verify the pharmacist?

Use the public register maintained by the pharmacy’s provincial regulator and match name, address and status.

Is a CIPA pharmacy legal for U.S. importation?

Certification does not determine U.S. import legality. It addresses seller standards, not border admission.

What if the parcel ships from outside Canada?

Ask why and verify the disclosed dispensing pharmacy with the regulator in that country. Decide whether the change is acceptable before paying.

Are very low prices proof of a scam?

Not alone, but an implausible price combined with hidden identity, no prescription or irreversible payment is a strong warning.

Sources

• CIPA: Verify a Website
• CIPA: Beware of Rogues
• FDA: BeSafeRx
• National Association of Boards of Pharmacy: Safe Pharmacy

This page provides general safety and verification information as of September 21, 2026. It is not legal or medical advice. Credentials, websites and regulations can change; confirm current records with the relevant regulator and consult a qualified professional.