How to buy medicines online safely in the UK

Overhead view of a person’s hands typing on a laptop keyboard resting on their lap.
Illustrative photograph. PenCompare is an independent comparison platform and is not a regulator.

A legitimate UK online pharmacy is happy to be checked. It publishes its registration number, names the people responsible for your care, and refuses to sell you a prescription medicine until someone qualified has assessed you. An illegitimate one relies on you not looking. This guide is about the looking — what to check, where, and what the answers actually mean.

Disclaimer: PenCompare is an independent comparison platform. This guide is for informational purposes and does not replace professional medical advice.

On this page

Check the register before you buy

This is the single most useful thing you can do, and it takes about two minutes. Every pharmacy operating lawfully in Great Britain must be registered with the General Pharmaceutical Council. In Northern Ireland the equivalent body is the Pharmaceutical Society of Northern Ireland. Both publish searchable public registers.

  1. Find the registration number On the pharmacy’s own site, usually in the footer or under About us.
  2. Open the register yourself Type the regulator’s address into your browser. Do not follow a link from the site you are checking.
  3. Search by name or number Either will find a genuine entry.
  4. Compare what you find The registered name, trading name, and premises address should all match the site you are on.
About two minutes, and the single most useful check available to you. A logo can be copied; an entry on the register cannot.

Search the register directly rather than clicking a link on the site you are checking. A fraudulent site can link anywhere it likes, including to a convincing copy of a register page. Typing the regulator’s address yourself removes that possibility entirely.

If a site claims to be UK-regulated and you cannot find it on the register, that is not an administrative oversight. Registration is not optional.

What the logos do and do not tell you

Advice to look for a regulatory logo is now out of date for most of the UK, and it is worth being precise about why.

  • The MHRA Distance Selling Logo has not been required in Great Britain since 1 January 2021. Because of the Northern Ireland Protocol it still applies in Northern Ireland, where sellers must be registered with the MHRA and display it
  • The GPhC’s voluntary internet pharmacy logo scheme has closed, and the logo was disabled from the GPhC register at the end of December 2025
  • What has not changed is that online pharmacies must display their GPhC registration number on their website

The practical consequence is simple. A logo on a website is an image, and an image can be copied. A registration number you have checked against the register yourself is evidence. Treat the number as the test and the logo as decoration.

Prescription only medicines

A prescription-only medicine, usually shortened to POM, can be supplied only against a valid prescription written by someone with UK prescribing rights. There is no version of this rule that online sellers are exempt from, and no legitimate reason for a UK site to work around it.

Two related rules explain a lot of what you see, and what you should not see:

  • Prescription-only medicines cannot be advertised to the public in the UK. A UK home page listing POMs by brand name with prices attached is breaking that rule in plain view
  • A prescription must follow an assessment. A questionnaire that asks nothing capable of changing the answer is a checkout step wearing a clinical costume

Green flags and red flags

Most people can tell a good site from a bad one faster than they expect, once they know what they are looking at.

Green flags: how to verify a legitimate pharmacy

None of these is decisive on its own. Together they describe a pharmacy that is willing to be checked.

  • A pharmacy registration number displayed on the site, usually in the footer or the About page
  • That number matching a live entry you find yourself on the regulator’s register
  • A full registered premises address, not only a contact form or a PO box
  • A named superintendent pharmacist you can look up individually
  • A genuine consultation or questionnaire before any prescription-only medicine
  • Clear separation stated between who prescribes and who dispenses
  • Ordinary UK payment methods, and a normal-looking transaction reference
None of these is conclusive alone. Together they describe a business that expects to be checked.

Red flags: when to walk away

Any single one of these is reason enough to close the tab. Several together mean you are almost certainly not dealing with a UK-registered pharmacy.

  • A prescription-only medicine you can put in a basket and check out with no clinical questions at all
  • Prescription-only medicines advertised by name and price on the home page, which is not permitted in the UK
  • Prices far below every other UK provider you have looked at
  • No physical address anywhere on the site, or one you cannot verify
  • Payment requested in cryptocurrency, or a request that you disguise the payment reference
  • Promises such as guaranteed results, or claims that a medicine has no side effects
  • A web address built around a medicine’s brand name
  • Obvious spelling errors, pop-up adverts, and a site that generally looks improvised
Any one of these is reason enough to stop and check the register before going further.

Why falsified medicines are dangerous

Falsified medicines are the reason all of the above matters. The risk is not that you overpay. It is that what arrives is not what the box says it is.

  • No active ingredient at all, so a condition goes untreated while you believe it is being managed
  • Too much or too little active ingredient, with no way for you to tell
  • The wrong active ingredient entirely, which can interact badly with something else you take
  • Contaminants introduced by manufacturing in unregulated conditions
  • Storage and handling that no one has been accountable for at any point

Packaging is not a defence. Falsified products are often copied well enough that the box, the blister, and the leaflet all look right. This is precisely why the check happens before you buy, at the point where you can still see who you are dealing with, rather than afterwards when all you have is a parcel.

How to report a concern

Reporting takes a few minutes and is the mechanism by which unsafe sellers actually get stopped.

  • Concerns about a pharmacy registered in Great Britain go to the General Pharmaceutical Council
  • Concerns about a pharmacy in Northern Ireland go to the Pharmaceutical Society of Northern Ireland
  • Suspicious online sellers of medicines or medical devices are reported to the MHRA, which also runs a service for checking whether a website has been flagged as not recommended
  • A suspected falsified medicine, or a side effect from any medicine, is reported through the MHRA Yellow Card scheme

If you are currently unwell and think a medicine may be the cause, deal with that first. Contact your GP, a pharmacist, or NHS 111, and seek urgent help if your symptoms are severe. Reporting can wait until you are safe.

Frequently asked questions

Yes, provided the legal requirements are met. A prescriber with UK prescribing rights must assess you and issue a valid prescription, and a registered pharmacy must dispense it. What is not legal is supplying a prescription-only medicine without a prescription, or advertising prescription-only medicines to the public. The convenience of ordering online does not remove either requirement, and a site that behaves as though it does is telling you something important about itself.

No. A .co.uk domain, prices in pounds, and a London address in the footer cost nothing to put on a website and prove nothing on their own. The only claim worth relying on is one you can verify independently: find the pharmacy on the regulator’s register yourself, by searching the register directly rather than by following a link from the site you are checking. If the details on the register do not match the site, treat the mismatch as your answer.

Stop taking it and keep everything, including the packaging, the leaflet, and any remaining doses. Contact your GP or a pharmacist for advice, and call NHS 111 if you are unsure how urgent it is. If you feel seriously unwell, seek urgent medical help straight away rather than waiting for a call back. Once you are safe, report it through the MHRA Yellow Card scheme, which is how suspected falsified and harmful medicines get investigated.