1. The numbers, plainly
As published by LegitScript and current as of August 2026:
| Fee | Amount | Basis |
|---|---|---|
| Application fee | $975 | One-time, per website, non-refundable |
| Certification & monitoring | $2,150 | Per website, per year |
| Probationary monitoring | around $3,995 | Per website, per year, where past compliance issues apply |
So a single-domain clinic should budget roughly $3,125 in year one and about $2,150 a year thereafter, before any processor fees at all.
Per website is the part that bites. Each domain is certified and priced separately. If you run a main site plus a separate booking or storefront domain, that is two certifications and two annual fees — not one. Confirm the live schedule with LegitScript before budgeting; they revise it periodically.
2. What it actually is
LegitScript is a third-party verification service. Card networks and acquiring banks use its certification as evidence that a merchant selling regulated healthcare products is legitimate — properly licensed, accurately describing what it sells, and not doing the things that generate the fraud and chargeback rates the category is known for.
It is not a government programme and it is not a licence to practise. It certifies the merchant, which is why it is the payment side of your business that demands it, not your board.
Certification is also not a one-time event. Certified merchants are subject to ongoing monitoring, and remaining certified is a condition of keeping it. The annual fee is buying the monitoring, not just the badge.
3. Who needs it — and who does not
The trigger is selling or facilitating the sale of prescription products online. In practice, if you prescribe and take payment for medication through a website, assume you need it.
Clinics that generally do not need it: purely aesthetic practices with no prescribing arm, wellness and IV businesses selling non-prescription services, and practices that take payment only in person on a terminal with no online transaction at all.
That last case is worth pausing on. Certification attaches to online commerce. A small practice that collects medication payments exclusively on an in-clinic terminal may avoid the requirement entirely — at the cost of the convenience an online payment gives the patient. For a solo practice weighing $3,125 in year one, that trade is worth doing the arithmetic on rather than assuming.
4. How long it takes
Budget weeks, not days. The application is a substantial questionnaire covering ownership, licensure, clinical protocols, supply chain, and the claims made on your website. Expect to supply documentation rather than just answers.
The realistic sequence for a clinic starting from nothing is: certification first, then the merchant account application, then bank underwriting. Certification is the long pole, and it gates everything downstream. A clinic that discovers this the week it planned to start taking payment has a problem that money cannot compress.
If you are already certified and only changing processors, you skip the long part entirely — underwriting alone is comparatively quick.
5. How to think about it in the P&L
Certification is a fixed cost, which means it lands hardest on the smallest practices. On a clinic doing $30,000 a month in medication revenue it is a rounding error. On a solo practice doing $4,000 a month it is a material share of margin, and it arrives before the first dollar is processed.
Two practical consequences. First, consolidate domains where you reasonably can — every additional certified website is another annual fee for the life of the business. Second, if you are pre-revenue, sequence it: certification is not the first cheque to write when the patient volume that justifies it does not exist yet.
Some processors negotiate discounted certification pricing for merchants they refer. It is a fair question to ask during your first conversation with one, and the answer occasionally moves the number meaningfully.
This is not legal advice. It is what we have learned building software for prescribing clinics, written down plainly because almost nobody publishes it. Fee schedules and federal rules change — every figure here was checked on 6 August 2026 and linked to its source. Confirm the live position with the regulator, the vendor, or your own counsel before you act on it.
6. Frequently asked questions
How much is LegitScript certification?
$975 as a one-time application fee per website, plus $2,150 per website per year for certification and monitoring, as published for 2026. Merchants on probationary monitoring pay around $3,995 per website per year. Each domain is priced separately.
Is LegitScript a one-time cost?
No. The application fee is one-time, but certification carries ongoing monitoring and an annual fee. Budget it as a recurring line, not a launch cost.
Do I need it if I only take payment in person?
Usually not — the requirement attaches to online sale of prescription products. A practice collecting medication payments solely on an in-clinic terminal often falls outside it. Confirm with your processor, since their underwriting rules can be stricter than the baseline.
Does one certification cover all my websites?
No. Each website is certified and priced separately. Two domains means two application fees and two annual fees.
How long does certification take?
Weeks rather than days, and it involves a detailed questionnaire plus documentation. Sequence it first — merchant account underwriting comes after, and cannot start meaningfully without it.
Is it required by law?
No. It is a private certification that card networks, acquiring banks and processors rely on. It is not a government requirement, but for practical purposes it is a requirement to get paid.