The short answer: a legit vendor is one whose vials keep testing as labeled, whose customers say so in detail, and who answers when something goes wrong. Everything else is noise.
I'm not going to name or rank vendors. What I can do is show you the three checks I'd run on any seller, and the popular "red flags" that tell you much less than people claim.
Status as of October 21, 2026: research-use-only peptides are not approved for human use. This is a vetting guide, not an endorsement of buying, and nothing here is medical advice.
The checklist
Check | What good looks like | Worth a second look |
|---|---|---|
Researcher reviews | Detailed reports from people with a history in the community, including their own test results | Only short five-star posts, nothing about specific batches |
Third-party testing | Recent results from an independent lab, ideally on samples customers bought | Only reports the vendor supplied, or results more than a few batches old |
COA batch match | The batch on the COA matches the batch on your vial | A generic COA with no batch number |
COA detail | Named lab, HPLC chromatogram, mass spec | A purity number with no graph or lab behind it |
Endotoxin | An endotoxin result on the report | Never tested |
Customer service | A real person replies to a pre-sale question within a day or two | No contact route, or silence |
Problem handling | Public record of replacing or refunding a bad batch | Deleting complaints instead of answering them |
What actually makes a peptide vendor legit?
Three things, in this order:
Researcher reviews. The people who've ordered, tested and posted about it over months.
Third-party testing. Independent lab results that match what's on the label.
Customer service you can reach. Because even good vendors ship a bad batch eventually, and what they do next is the real test.
On the legal side, research peptides are sold for research use only, and that label has limits. More on what RUO actually means is in this explainer. This guide is about the practical question: is the vial what the label says, and will the seller stand behind it?
How do you read researcher reviews?
Weight them by how much detail they give, not by how many stars.
Look for batch-level detail. "Batch X tested at Y% at an independent lab" is worth more than ten posts saying "great vendor."
Check the reviewer's history. Someone who's posted about the same vendor across several orders, good and bad, has skin in the game. A brand-new account with one glowing post doesn't.
Read the complaints too. Every vendor with real volume has some. What matters is whether the complaints are about one bad batch that got fixed, or the same problem over and over.
Watch for patterns across communities. If researchers on different forums and Discords are reporting the same experience, good or bad, that's signal.
A discount code on a review doesn't make it wrong. It means you should look for the test results behind it.
Does third-party testing prove a vendor is good?
It's the strongest evidence you can get, as long as you read it right. A test is a snapshot of one vial from one batch.
The market needs it. The biggest dataset so far is a preprint that looked at 6,441 samples from Finnrick's public testing database across 14 compounds. Depending on which quality standard they applied, "41.6% to 71.1% of samples failed to meet basic quality criteria, and measurable endotoxin contamination was present in 15% of samples" (Mendias and Awan, Preprints.org, April 2026). It hasn't been peer reviewed. We covered what that dataset means in the Pete Davidson post.
Journalists found the same spread. RTÉ bought four products in Ireland and had Maynooth University test them. Three had "significant impurities." A sample sold as retatrutide was 65% pure, and "A 5mg sample actually only contained 2.2mg" (RTÉ Prime Time, Oct 15, 2026).
That spread is exactly why testing separates vendors. How to get the most out of it:
Recent beats old. A good result last spring says little about this month's batch. Look for vendors with a steady stream of results, not one great test.
Customer-bought samples count most. Under one Finnrick program, a vendor submits its own samples and can choose whether to publish the results (Krysia, Sept 19, 2026). Results from vials the public bought show you what actually ships.
More than one lab is better. The same interview reported most of Finnrick's tests ran through one lab, and its CEO said that "could be a fair criticism." Results that hold up across labs are stronger.
More on how the tests work is in how to test peptides for purity.
How do you check a peptide COA?
Match it to your vial, then check that it shows the work. A COA is only evidence about the batch it names.
Batch match. The batch or lot on the COA should match the one on your vial. A COA for some other batch tells you about some other batch.
Named lab. You should be able to see which lab ran it, and ideally look the report up on the lab's own site or email them the report number.
Chromatogram. HPLC purity comes from a graph of peaks. A report that gives "99%" with no graph is a number, not data.
Mass spec. HPLC tells you how pure something is. Mass spec tells you what it is. You want the measured mass to match the peptide's known molecular weight.
Endotoxin. Endotoxin is debris from the outer membrane of certain bacteria, and in injected products it's a fever-causing contaminant (Toxins, 2018). Approved injectables are tested for it under USP <85> (FDA, March 2026). A purity number doesn't measure it.
The full walkthrough is in how to read a peptide COA.
How do you test a vendor's customer service?
Before you order, not after something goes wrong.
Ask a question first. Email or message them about a specific product. Something like "can you send the COA for the batch you're shipping now?" A good vendor answers, and answers that question.
Time the reply. A day or two is normal. A week of silence before you've paid is what you'll get after you've paid.
See how they handle problems in public. Search the communities for "[vendor] reship," "[vendor] refund" or "[vendor] bad batch." You're looking for vendors who replaced the product or pulled the batch, not ones who argued or went quiet.
Which "red flags" don't tell you much?
A lot of vendor checklists online focus on things that say more about the seller's business setup than about what's in the vial.
How they take payment. Card processing in this market is under outside pressure. Lilly has publicly asked "credit card companies, payment processors and shipping and logistics carriers" to drop sellers in this market (Lilly, Aug 12, 2026). So the payment options on a site tell you which processors will work with it this month, not whether the vial is pure.
What's on the website. FDA's August warning letters were based on "evidence obtained from your website" (FDA, Aug 24, 2026), not on testing anyone's product. A calculator or a guide on a product page is a legal choice, not a quality signal. Our breakdown of the five letters has the details.
Where it ships from. A return address doesn't tell you what's in the vial. A test result does.
None of these are reasons to buy from a vendor. They just aren't reasons to skip one that tests well and has a strong researcher track record.
The short version
Researcher reviews with batch-level detail are your first filter.
Third-party tests are your best evidence. Prefer recent results on customer-bought vials, from more than one lab.
A COA counts only if it matches your batch and shows the chromatogram, the mass spec and the lab.
Message the vendor before you order. How they answer is how they'll handle a problem.
Payment methods, website copy and shipping origin tell you about the business, not the vial.
BHN has affiliate relationships elsewhere on the site; this page contains no affiliate links and recommends no vendors, on purpose.
If you've had a vendor make a bad batch right, or go quiet when it mattered, reply and tell me what happened. That's the data nobody publishes.