A peer support community, independent and not for sale. Since February 2024.

GLP CircleA peer support community

sourcing · how-to

Spotting a bad source

A working method for telling apart the signals that feel reassuring from the ones that actually carry information — and an honest account of what diligence cannot rule out.

10 min read1.1k wordsUpdated 15 May 2026Reviewed by Sunil

What this guide is not

It is not a ranking, it is not a shortlist, and it will not name a supplier we think is fine, because we do not think that about any of them and we would be lying if we implied otherwise. What it is: a way of noticing that something is wrong, assembled from what members in the sourcing and quality circles have got right and — more usefully — from what they got wrong first.

The framing that has helped people most is to stop asking "is this one good" and start asking "what would this seller have to do for me to catch them out". Almost every reassurance in this market is cheap to fabricate. The few that are expensive to fabricate are the ones worth your attention, and there are not many of them.

Everything here applies to the supplier’s conduct. None of it can tell you what is in a vial. Those are separate questions and conflating them is the commonest mistake we see.

Signals that feel informative and are not

Members have been burned by every item on this list, usually while feeling careful.

  • Photographs of a laboratory. Stock imagery, or a real facility belonging to somebody else. A photograph of a clean room is not evidence that your powder passed through one.
  • A large review count. On a site the seller controls, this is a design decision. On a site the seller does not control, it is still a self-selected population of people who received a parcel and not of people who tested its contents.
  • Company registration details. Registration establishes that a company exists. It says nothing about what it manufactures, whether it manufactures at all, or whether it is a trading front for somebody else.
  • Superlative purity figures. A row of near-identical high nines across an entire catalogue is a marketing artefact, not a manufacturing achievement. Real analytical results scatter.
  • Corporate name resemblance. Trading under a name that resembles a large listed group is not an association with it. If a relationship cannot be checked, it should carry no weight at all.
  • Urgency. Countdown discounts, bundle pricing that expires, "last batch of this lot". Pressure to decide quickly is not a quality signal in any market and is a warning in this one.

Signals that are worth something

Thin list, deliberately. These are the things that cost a dishonest seller real effort.

A specific answer to a specific question. Ask which lot your vials will ship from and ask for the report for that lot. A supplier who can produce lot-level documentation is doing something operationally different from one who re-sends the catalogue certificate. Members report that the second response is far more common, and it is itself the answer.

Consistency across independent surfaces. When published analysis, member reports over a period of years, and results commissioned by people with no relationship to the seller all point the same way, that is weak evidence rather than none. When they disagree, believe the unflattering one.

Willingness to say no. A supplier who will state plainly that nothing has been tested for endotoxin or sterility is telling you the truth about a limitation. That is more informative than one who implies coverage nobody has.

Behaviour when something goes wrong. The parcel that arrived short, the cracked stopper, the seizure — what actually happened next, as reported by more than one member, over more than one incident. This is the only part of a supplier’s conduct you can observe rather than infer.

Document forensics without a chemistry degree

You do not need to read a chromatogram to spot the usual problems on an analysis document. You need to read the boring parts.

Check that the sample identifier on the certificate matches the lot you are being offered, and that both appear somewhere other than the certificate. Check the dates: a report dated before the synthesis date, or a synthesis date years before the shipment, both mean something. Check that the client named on the report is the company you are dealing with, because a report commissioned by a third party for a different batch is a document about somebody else’s material. Check that the method section exists at all — a certificate with a purity number and no stated method, column, wavelength or instrument is a claim, not a result.

Then check the file itself. A photograph of a screen, a re-flattened image with a different font on one line, a page count that does not match, missing page numbers, a signature block with no analyst name. Alteration is usually clumsy. Reading a COA line by line is the long version of this paragraph and it is the guide members say changed how they look at these documents.

What diligence cannot rule out

Here is the part that sellers never write. You can do every check in this guide, get satisfactory answers to all of them, and still be exposed to the things that matter most.

None of it establishes sterility or endotoxin load. None of it establishes that your vial came from the tested lot. None of it establishes chain of custody — who synthesised the material, where it was repackaged, how many hands it passed through, or whether the company you are talking to has ever seen the inside of the building it came from. None of it establishes batch-to-batch consistency, which is precisely what fails when a supplier that was fine for two years quietly changes its own supplier. And none of it gives you a remedy.

Sunil’s formulation, repeated until members can say it back to him: diligence can lower your chance of dealing with an obvious fraud. It cannot make an unregulated injectable into a regulated one. If you find yourself feeling safe at the end of a checklist, the checklist has done something it was not designed to do.

Walking away is a result

The single most useful behaviour we have seen in the sourcing circle is the member who stopped. A woman in Ireland had two orders six months apart behave differently once reconstituted and decided not to spend a year diagnosing it. Several people thought that was the sensible response, and it is worth saying why: she had no analytical capability, no leverage, and no way to escalate, so investigating further would only have produced a more elaborate guess.

You do not owe a supplier the benefit of the doubt. You are not obliged to complete a purchase because you have spent an evening researching it — the research is a sunk cost and the parcel is not. And "I could not get a straight answer about the lot, so I did not order" is a complete and respectable reason, which our circle hears roughly once a fortnight and applauds every time.

If you want the recorded member experience rather than a checklist, the reference pages at vendors set out what has been reported and what has never been established, and the sourcing-safely circle is where the conversation happens.

The steps, in order

Your product leaflet and the person who prescribed for you override anything on this page.

  1. Write down what would change your mindBefore you look at anything, decide what evidence would make you not order. People who skip this step reliably find reasons to proceed, because the search itself creates momentum.
  2. Separate the two questionsKeep "is this seller behaving honestly" apart from "what is in the vial". A trustworthy-seeming seller can ship poor material and a shambolic one can ship good material. Answering one does not answer the other.
  3. Ask the batch question firstAsk which specific lot your order will ship from, what date it was synthesised, what date the sample was tested, and whether the tested sample came from that lot or from a reference batch. Ask it before you ask about anything else.
  4. Read the reply for evasion, not for tonePoliteness is not an answer. Note whether you received the catalogue certificate again, a new document, or a non-answer. A second polite non-answer to the same question is a result and you should treat it as one.
  5. Check the boring fields on any documentSample identifier, client name, dates, method section, analyst signature, page numbers. Compare the identifier with the lot you were quoted. Mismatches here are the commonest fault and require no chemistry to see.
  6. Look for an unflattering result somewhereSearch the independent testing programmes for any result on this supplier that the supplier would not have chosen to publish. A supplier with only favourable coverage has either been lucky or has only been tested by people it paid.
  7. Read the member record over time, not the latest postGo to the vendors reference pages and read the mixed and negative reports specifically. What matters is whether problems recur and what happened afterwards, not whether the most recent parcel arrived.
  8. Write down what remains unknownList the things you still cannot establish: sterility, endotoxin, provenance, whether your vial is from the tested lot, and what happens if it is wrong. This list will not get shorter, and it is the actual decision you are making.
  9. Decide with the unknowns in front of youThen either proceed with your eyes open or walk away. Both are legitimate. What is not legitimate, as Sunil puts it, is finishing a checklist and mistaking that feeling for safety.

Sources

  1. World Health Organization. Substandard and falsified medical products — fact sheet and surveillance reports.
  2. ISO/IEC 17025:2017. General requirements for the competence of testing and calibration laboratories.
  3. European Medicines Agency and national regulators. Public statements on falsified GLP-1 products entering legitimate and illegitimate supply chains, 2023–2024.

We name the trial, the journal and the year, because vague confidence is how people get hurt.

Read next

sourcing

Sourcing outside a prescription: the honest risks

The page we would rather you read than a seller’s FAQ — what buying outside a prescription actually exposes you to, said plainly and without a sales pitch.

11 min · reviewed by Sunil · updated 8 May 2026

sourcinghow-to

Reading a certificate of analysis, line by line

A field method for reading an analysis document properly — which fields carry information, which are decoration, and the checks that need no chemistry at all.

10 min · reviewed by Sunil · updated 21 May 2026

sourcing

What purity actually means

A purity figure is a statement about one sample, measured one way, against one detector — here is what it covers, what it silently omits, and why content is a different question.

11 min · reviewed by Sunil · updated 30 Apr 2026

sourcing

Third-party testing: who does what

What an independent laboratory contributes, how the testing and publishing programmes members cite differ from one another, and why who commissioned a test changes what it means.

10 min · reviewed by Sunil · updated 2 May 2026

sourcing

Compounded and brand: what differs

Three different things get called the same medicine — a licensed product, a pharmacy-compounded preparation, and research-use-only material — and the differences are not marketing.

11 min · reviewed by Mira · updated 19 May 2026