How to start a peptide company - the operator's playbook, not the blogger's

Here is the honest version: starting a peptide company in 2026 is a compliance and payments problem wearing an e-commerce costume. Sourcing product is easy. Building a Shopify-looking storefront is easy. Staying online and getting paid for it is the entire game, and the operators who lose usually lose in the first 90 days - to a processor freeze or a platform takedown, not to a competitor.

The three lanes: pick one before you spend a dollar

Every peptide business in the US sits in one of three regulatory lanes, and mixing them is how companies end up in FDA warning letters.

• Research-use-only (RUO). You sell reference materials to researchers, labeled not for human consumption, with no dosing, no health claims, no "wellness" framing anywhere on the site. This is the lane most new operators mean when they say "peptide company," and it is the lane this guide covers. Legal to operate - if the totality of your site actually supports the research framing. More on that below, and in our full breakdown of whether you can legally sell peptides online.
• Compounding / telehealth. Licensed pharmacies (503A/503B) dispensing against prescriptions through physician networks. Real medicine, real licensure, seven-figure startup costs, and its own 2026 problems - the FDA's compounding lists have been in flux all year. If you don't already hold pharmacy licensure, this is not your entry point.
• Cosmetic. Topical products with peptide ingredients sold as cosmetics under cosmetic labeling rules. A legitimate lane with easier payments, but a different business - closer to skincare than to the research market, and it cannot share a storefront with an RUO catalog.

Pick one lane and build for it completely. A site that is 90% research store and 10% wellness blog is not 90% compliant - it is 100% a human-use seller in the FDA's read.

Read the 2026 enforcement wave before you write a business plan

On March 31, 2026, the FDA sent warning letters to seven research-peptide vendors in one coordinated sweep. The pattern in those letters is the syllabus for your whole business, because the agency spelled out exactly how it decides an "RUO" store is really selling unapproved drugs:

• Intended use is judged by the totality of the site - product copy, blog posts, FAQs, testimonials, social accounts, even imagery. A disclaimer in the footer does not outweigh a "benefits" section above it.
• Code names don't work. Letters pierced compound aliases; renaming a restricted compound to a catalog number changed nothing about its status.
• Certain compounds draw fire on sight. GLP-1 class compounds (semaglutide, tirzepatide, retatrutide) and growth hormone appeared by name across the 2026 letters. A new store listing them is volunteering for the next sweep.

None of that killed the category. Compliant research stores kept operating through the wave. What it killed is the old approach of copying a competitor's site and assuming their copy is safe - a lot of the sites people copy are the ones getting the letters.

Step 1: supplier, COAs, and the paper trail

Your supplier decision is really three decisions: who synthesizes it, who verifies it, and what paper trail you can show a customer or a bank.

• Third-party testing on every lot, published on the site. Independent labs like Janoshik are the market standard for purity and mass-spec verification; serious buyers check for lot-matched COAs before they check price. A store without a COA page is dead on arrival with the exact customers you want.
• White label vs raw sourcing. Most first-time operators should buy finished, labeled, tested product from a domestic white-label supplier rather than importing raw material and filling vials. We wrote up the trade-offs, typical minimums, and what a real supplier relationship looks like in the white-label peptides guide.
• Dropshipping mostly does not work here. The suppliers willing to dropship are usually the ones you least want your brand attached to, and you inherit their compliance failures with none of their margin. The full reasoning is in our peptide dropshipping breakdown.

Keep everything - invoices, COAs, lot numbers, correspondence. When a processor underwrites you or a customer disputes a charge, the operator with a paper trail wins.

Step 2: the storefront - why compliance has to be built in, not bolted on

Shopify's acceptable-use policy prohibits research peptides; stores get built, run for a few weeks, and get taken down with checkout disabled mid-month. WooCommerce and other self-hosted stacks keep you online, but they enforce nothing - every product description, every email, every blog post is a compliance surface that someone has to get right, forever, by memory.

That's the actual argument for compliance in code rather than in a checklist. On our platform, a do-not-list guardrail rejects restricted compounds at product creation - an admin literally cannot list a GLP-1, whatever it's renamed to. A copy linter blocks human-use, dosing, and benefit language on every text surface including emails. The RUO banner, FDA disclaimers, and a qualified-researcher gate render on every page from the shared layout, so nobody can forget them. Compliance you can't forget, because it's in the code - then a real person reviews the store monthly as the rules move.

Whether you build with us or not, hold your stack to that standard. Our comparison of the realistic options - Shopify, WooCommerce, custom - is in the peptide website builder guide. And before you launch anything, it's worth seeing what an FDA-style read-through actually flags: run any live competitor's domain through our free 60-second compliance audit and look at what comes back. Takes about a minute - grade on screen, report in your inbox.

Step 3: payments - solve this before launch, not after the freeze

This is where most new peptide companies actually die. Stripe, PayPal, and Square all classify research peptides as prohibited. They will onboard you instantly, process for weeks, then freeze the account - typically holding funds 90 to 180 days - and a termination can put you on the MATCH list, which follows you to every future merchant application for five years.

The workable path is a high-risk merchant account through a processor that has seen your category and underwritten it knowingly: expect a rolling reserve, a chargeback cap around 1.5%, and rates well above the 2.9% you're used to. Manual rails (ACH, e-check, crypto) are a legitimate supplement and a common bridge while underwriting completes. The full landscape is in our payment processor guide. The rule that matters: have your real processing relationship signed before your first ad runs, because applying after a freeze means applying with a termination on your record.

Step 4: launch, first customers, and the channels that actually work

Paid acquisition is mostly closed to this category - Meta rejects the ads, and Google works only for narrow non-product intent. What actually moves product in 2026:

• SEO on compound and COA pages. Research buyers search specifically, and they convert on proof - published lot-matched COAs are your best sales page.
• Organic short-form content about the business and testing side of the space - not product claims - builds the audience that paid channels can't reach.
• Email. Owned list, opt-in at checkout, transactional flows that actually send. The cheapest repeat-purchase channel you will ever run, and one of the first things platforms take from you in a takedown - another reason to own your stack.
• Referral and word of mouth. This market is small and talks. Ship fast, publish COAs, answer email, and the group chats do the rest.

The budget, honestly

Rough shape for a lean, done-right RUO launch: $2,000-$5,000 opening inventory with lot testing, $500-$1,500 in legal-adjacent setup (entity, policies, agreements), payments reserve you shouldn't touch, and the storefront - which is $53,500 if you assemble the equivalent team separately, or from $4,900 as a build on an existing compliant platform. The line-by-line version, including the costs bloggers skip, is in what it really costs to start a peptide business. Plan for the boring number: most operators who fail didn't run out of money for inventory, they ran out while their funds sat frozen.

The 14-day path from assets-in to live

Our own build guarantee, in writing: live and taking payments within 14 days of your assets reaching us, or you don't pay the balance. No moving goalposts - "assets in" is a specific checklist we hand you before you pay anything, so the clock can't move on you. The sequence, whoever builds it:

1. Days 1-2: assets in - logo, product list, COAs, entity details. Catalog passes the restricted-compound guardrail before anything else happens.
2. Days 3-7: storefront build on the compliant platform - copy through the linter, COA pages wired to lots, RUO gating on every page.
3. Days 5-10 (parallel): payments underwriting and rails configured, tested with real transactions.
4. Days 11-14: domain, email deliverability, tracking, launch checklist, live.

Questions, answered straight

This guide is general information for store operators, not legal advice. Nothing here is a substitute for counsel familiar with your business.