Short answer: verify state-specific licensure for the clinician treating you, understand how controlled-substance (including testosterone) rules apply, and require real identity/credential transparency — website polish is not a substitute.
Men's Health telehealth has grown fast, and not every provider operates the same way. Some of what separates a legitimate provider from a risky one comes down to specific, checkable regulatory requirements — not just vibes or website polish. Here's what actually matters.
Licensure: Where the Doctor Is Licensed Matters More Than Where They're Based
Under state medical practice law, treatment is considered to happen wherever the patient is physically located — not where the physician lives or where the company is headquartered. That means a physician treating you by telehealth has to be licensed (or specifically authorized) in your state, not just any state.[1]The Federation of State Medical Boards confirms this is universal across states: every state medical board requires telehealth physicians to be licensed in the patient's state, or registered there if the state maintains a special interstate telehealth registry.[2]
A legitimate provider should be able to confirm the specific physician or nurse practitioner treating you holds an active license in your state. Prescribing or diagnosing across state lines without that license is a real violation of state medical practice law, not a technicality.[3]
Controlled Substances Play by Different Rules
Most oral ED medications and routine TRT monitoring visits don't require an in-person exam under federal law — as long as the licensure and standard-of-care requirements above are met.[4] But this changes for controlled substances. Testosterone is a Schedule III controlled substance, and the Ryan Haight Online Pharmacy Consumer Protection Act of 2008 generally requires at least one in-person medical evaluation before a Schedule II–V substance can be prescribed via telemedicine, subject to specific statutory exceptions.[6] Failing to conduct that required in-person evaluation, when no exception applies, is a per se violation of the Controlled Substances Act — and can carry civil and criminal penalties for the prescriber.[4]
This rule has been in flux since 2020. DEA and HHS have repeatedly extended temporary flexibilities allowing DEA-registered practitioners to prescribe controlled substances via telemedicine without a prior in-person visit — the most recent extension covers prescriptions issued through December 31, 2026.[5]Separately, the DEA has proposed a longer-term "special registration" framework that would create a standing pathway for this instead of repeated temporary extensions, though it remained a proposed rule as of the most recent published review.[7]Given the regulatory uncertainty, it's worth checking current status rather than assuming last year's rule still applies.
Red Flags the FDA Specifically Warns About
The FDA publishes explicit guidance on identifying unsafe online pharmacies. Warning signs include a site that offers prescription drugs without requiring any prescription at all, sells drugs of unknown origin or safety, or fails to provide required consumer warnings about the medication's health risks.[8]On the other side, the FDA states a legitimate online pharmacy will always require a doctor's prescription, provide a real U.S. address and phone number, employ a licensed pharmacist available to answer questions, and be licensed with a state board of pharmacy — all things a patient should be able to verify before signing up.[8]
What Real Transparency Looks Like
The Federation of State Medical Boards' telemedicine policy framework spells out what a physician owes a patient before rendering care remotely: fully verifying the patient's identity and location, disclosing and validating the provider's own identity, location, and credentials, and obtaining informed consent about the specific treatment model and its limitations.[3]In practice, that means a legitimate provider should clearly disclose — before or during signup — the treating clinician's name, professional credentials (MD, DO, NP, PA), and state license. A vague claim of "licensed providers" with no way to verify an individual credential falls short of that standard.[3]
Before signing up, confirm that a provider:
- Confirms your specific provider is licensed in your state
- Names the treating clinician and their credentials — not just "our medical team"
- Discloses whether medications are FDA-approved products or compounded
- For controlled substances, is transparent about how the current in-person evaluation rules apply to your treatment
- Provides a real address, phone number, and pharmacist access
- Publishes a clear cancellation and refund policy
The Bottom Line
Legitimacy in this space isn't about brand recognition or how polished a website looks — it comes down to specific, verifiable things: state-specific licensure, correct handling of controlled substance rules, and real transparency about who's actually treating you. Most legitimate providers will answer these questions directly without hesitation. If a provider is vague or evasive about any of these points, that's worth taking seriously.
Comparing how different Men's Health providers handle licensure disclosure and provider transparency on RENVA's hub is a reasonable first filter before choosing one.
Sources
- Licensure & Telehealth — American Medical Association ama-assn.org
- Telemedicine Policies Board-by-Board Overview — Federation of State Medical Boards fsmb.org
- The Appropriate Use of Telemedicine Technologies in the Practice of Medicine — Federation of State Medical Boards fsmb.org
- Prescribing Controlled Substances via DEA Statutory Telemedicine Exceptions — U.S. Department of Justice justice.gov
- DEA/HHS Telemedicine Controlled Substance Rule — U.S. Drug Enforcement Administration / U.S. Department of Health and Human Services dea.gov
- Online Prescribing of Controlled Substances (Ryan Haight Act overview) — American Psychiatric Association Telepsychiatry Toolkit psychiatry.org
- Telemedicine Special Registrations for Controlled Substances — JAMA Health Forum jamanetwork.com
- Internet Pharmacy Warning Letters — U.S. Food and Drug Administration fda.gov
Frequently Asked Questions
Does my telehealth doctor need to be licensed in my state specifically?
Yes. Medical practice law treats treatment as occurring where the patient is located, so the treating physician must be licensed (or specifically authorized) in your state, not just wherever they're based.[1]
Can I get TRT prescribed without an in-person visit?
It depends on current DEA/HHS telemedicine flexibilities, since testosterone is a controlled substance. These rules have changed repeatedly since 2020 — the most recent extension runs through December 31, 2026 — so it's worth confirming current status with any provider.[5]
What are the clearest red flags of an illegitimate telehealth provider?
Per FDA guidance: offering prescription drugs without requiring any prescription, drugs of unknown origin, missing consumer safety warnings, no verifiable pharmacist or physical address, and no state pharmacy board licensing.[8]
What should a provider disclose about who's treating me?
The treating clinician's name, professional credentials, and state license — a generic claim of "licensed providers" without any way to verify individual credentials falls short of the transparency standard set by state medical board guidance.[3]