Research Peptide Supplier Red Flags: Eight Signals We Record and Why
Eight supplier red flags we record: gated certificates, no lab named, no address, health claims, irreversible-only payments, lookalike domains, FDA letters.
Every supplier record in our dataset has a red_flags list. The entries are short, factual and drawn from the supplier’s own pages or from public records. This guide explains the eight signals that appear most often, what each one looks like on a website, why it matters when evaluating a supplier as a business, and how it affects the score. None of these is a verdict on its own. Several together usually are.
1. Certificates behind a login or a purchase
The supplier says products are tested and certificates are available, but the certificate page requires an account, or the document is only sent with an order. Sometimes a product page shows a thumbnail that does not open.
Why it matters: a certificate that cannot be read before buying cannot be checked before buying. It also cannot be compared across lots or with other suppliers. In our records coa_public is false for these suppliers, and the testing factor scores them as not public even when testing is claimed. A supplier can clear this flag by publishing the library, and several have. Open libraries are listed at public COAs.
2. No laboratory named
Certificates carry the supplier’s logo, a purity figure and perhaps a chromatogram, but no laboratory name, address or report number. The site may say “third-party tested” without saying by whom.
Why it matters: a certificate from an unnamed laboratory cannot be verified with anyone. It may be real, it may be in-house, it may be edited. In the record, labs_named is empty and the testing factor loses the points for a named laboratory and for accreditation. Our guide to reading a certificate covers what a complete header looks like.
3. No physical address
The contact page offers a form, an email or a chat widget, and nothing else. No street address, no registered company name, no phone number. Sometimes the footer shows a city with no street.
Why it matters: a business with no stated location has no stated jurisdiction, no way to be served with a complaint and no way to be matched against a registry. It also makes the shipping origin unverifiable. contact.address is null in our record and the transparency factor loses the address points.
4. Health claims on product pages
Product listings for research materials carry health claims, or link to articles that do. Some sites carry a research-use-only disclaimer in the footer and contradictory language in the listing above it.
Why it matters: we note this strictly as a compliance observation. Materials sold for laboratory research carry research-use labeling for a reason, and listings that make health claims about them are the pattern most often cited in regulatory letters in this category. We record “health claims on product pages” in red_flags and do not repeat the claims. We also record whether a research-use-only disclaimer is present at all (ruo_disclaimer_present).
5. Irreversible-only payments
Checkout accepts cryptocurrency, bank wire, Zelle, Venmo or CashApp, and no card. Sometimes card payment is listed but fails at checkout, or is routed through a third-party processor under a different name.
Why it matters: card payments carry a chargeback route; the methods above do not. Card acceptance in this category is hard to maintain, so its absence is common and not by itself damning. The flag is raised when every available method is irreversible, because the buyer then has no recourse through the payment system. The payments field lists what the site states, and the ordering factor gives points for card acceptance and for the number of methods.
6. Removed or missing trust profiles
The supplier linked a Trustpilot or similar profile in the past and the link now returns a removal notice, or the profile shows a notice from the platform. In other cases a supplier with years of operation has no profile anywhere.
Why it matters: review platforms remove profiles for reasons that range from a supplier’s own request to policy enforcement, and we do not infer which. We record the removal as a fact. In the track record factor a removed profile contributes nothing, and the record says so plainly. We never collect reviews ourselves; see the editorial policy.
7. Lookalike domains
A domain that resembles a known supplier with a word added or a letter changed: an “inc”, “usa”, “shop” or “official” suffix, a different top-level domain, or a transposed character. The pattern is most common after a well-known supplier closes, when new domains appear using its name.
Why it matters: a lookalike domain may be a clone with no relationship to the original, or the original relaunched under a new company. Either way the history of the old name does not transfer. We record alternate names in the aka field and note domain changes in the record; a closed supplier keeps its own page with status: closed, and a relaunch on a new domain is a new record with no inherited track record.
8. FDA warning letters
The U.S. Food and Drug Administration has issued a warning letter to the company, available in its public database. Letters in this category typically concern marketing and labeling of products sold online.
Why it matters: a warning letter is a public regulatory record naming the company. We record the date and URL in trust.fda_warning_letter, set status to fda_warning, and apply a heavy penalty in the track record factor. Every page for an affected supplier states the letter date and links to it. Our guide to checking an FDA warning letter explains how to search the database yourself, and the warnings page lists the affected suppliers in our dataset.
Summary table
| Signal | Where to look | Dataset field | Factor affected |
|---|---|---|---|
| Login-gated certificates | Certificate or product page | testing.coa_public |
Testing |
| No laboratory named | Certificate header | testing.labs_named |
Testing |
| No physical address | Contact page, footer, terms | contact.address |
Transparency |
| Health claims on listings | Product pages, blog | trust.red_flags, ruo_disclaimer_present |
Transparency, track record |
| Irreversible-only payments | Checkout, FAQ, payment page | payments |
Ordering and service |
| Removed trust profile | Trustpilot link, platform notice | trust.trustpilot_url, trust.red_flags |
Track record |
| Lookalike domain | Address bar vs documents and social accounts | aka, notes |
Track record |
| FDA warning letter | fda.gov warning letter database | trust.fda_warning_letter, status |
Track record (heavy penalty) |
What is not on this list
Price is not a red flag. Low prices are common across the category and say nothing on their own. A small catalog is not a red flag. Shipping from outside the United States is recorded but not flagged. A new company is not flagged for being new; it simply has fewer years in the track record factor. The signals above were chosen because each one is either a verifiable absence on the supplier’s own site or a public record, and because each one speaks to whether the supplier’s claims can be checked.
How to use this list
Read a supplier’s page on this site, then open its website and run the eight checks in the order above. The first three take under five minutes and account for most of the gap between well-scored and poorly-scored suppliers in the rankings. If you find a signal we have missed or recorded wrongly, the correction route is on the methodology page.
Frequently asked questions
What are the biggest red flags for a research peptide supplier?
The ones we weight most are certificates that cannot be opened without a login or purchase, no laboratory named on any certificate, no physical address, and a public FDA warning letter. Each is a verifiable absence or record, not an opinion.
Is crypto-only payment a red flag?
On its own it is a business signal, not proof of anything. A supplier that accepts only irreversible methods (crypto, wire, peer-to-peer transfers) removes the buyer's chargeback route. We record it in the ordering factor and list it as a red flag when it is the only option.
What does a removed Trustpilot profile mean?
It means the profile existed and no longer does. Trust sites remove profiles for several reasons, including policy violations and supplier requests. We record the removal as a fact and do not infer the reason.
How do I check for a lookalike domain?
Compare the domain in the address bar with the one on the supplier's own documents, certificates and social accounts. Look for added words (inc, usa, shop), swapped letters, or a different ending. A supplier that closed and reappeared on a near-identical domain is recorded with both names in our data.
Related: /warnings/ · /guides/how-to-check-an-fda-warning-letter/ · /guides/how-to-read-a-certificate-of-analysis/ · /guides/what-iso-17025-accreditation-means/ · /methodology/ · /rankings/