Sovereign Nations. Different Laws. One Complicated Payments System.
Sovereign Nations. Different Laws. One Complicated Payments System. On Indigenous Peoples' Day, it's time to examine why tribal gaming, ...
Peptides have moved from a niche scientific category into one of the fastest-growing areas of health, wellness, performance, longevity and medical commerce.
Some are well-established prescription therapies.
Others are being compounded.
Others are sold strictly for legitimate laboratory and research purposes.
And still others are being marketed as “research use only” while their websites, advertising, product bundles or customer experience suggest something very different.
For payment processors, that distinction is everything.
The opportunity is growing rapidly.
So is the risk.
And right now, far too much of the industry's response is simply:
Decline the merchant.
I think that is going to become increasingly difficult to justify economically.
Not because every peptide merchant should be accepted.
They shouldn't.
But because this market is becoming too large to treat every business the same way.
The winners will be the payment companies that can answer a much harder question:
That is a very different operating model.
The broader peptide therapeutics market is already enormous.
Grand View Research estimates that the U.S. peptide therapeutics market generated approximately $80.8 billion in revenue in 2025, with an estimated $95.8 billion in 2026, and projects the U.S. market to reach about $186.3 billion by 2033, representing roughly 10% annual growth.
Another recent market estimate places the U.S. market at roughly $78.5 billion in 2026 and projects it to exceed $150 billion by 2035.
Those numbers are dominated by legitimate pharmaceutical therapeutics, including major metabolic drugs. They should not be confused with the addressable payment-processing market for independent research-peptide merchants.
But they illustrate something bigger:
Peptides are becoming mainstream commerce.
And the growth is not limited to traditional pharmaceuticals.
Reuters reported in August that analysts estimate the emerging peptide-treatment market outside the established blockbuster-drug category at roughly $2.2 billion to $3.3 billion, while also noting that a significant amount of peptide demand currently operates through gray or unauthorized channels.
The Financial Times recently went even further, citing an estimated $80 billion annual U.S. sales potential for a next generation of peptides associated with areas such as recovery, anti-aging and consumer health—although that figure is a long-term potential estimate rather than current research-peptide revenue.
Whatever number ultimately proves correct, the direction is difficult to miss.
The category is accelerating.
LegitScript's own monitoring data shows just how quickly peptide commerce is expanding online.
Its analysis of 2020 through 2025 found:
Those figures do not represent legitimate-market revenue, and they should not be interpreted that way.
But they are exceptionally important for payments.
They tell us that the volume of peptide-related commerce processors must identify, classify and make decisions about is increasing rapidly.
And that's happening regardless of whether payment companies are prepared for it.
At a high level, the market can be divided into two very different payment-risk models.
The first is traditional prescription healthcare.
These merchants may involve:
The regulatory structure is complicated, but the underlying model is familiar.
There are prescriptions.
Licensed healthcare providers.
Pharmacies.
Drug regulations.
Healthcare certification requirements.
Established card-brand rules.
LegitScript Healthcare Certification, for example, specifically covers businesses involved in online prescription-drug sales, prescribing, facilitation and payment processing.
Payment organizations have frameworks for this.
The much more difficult issue is what comes next.
A legitimate research-chemical supplier may sell peptides specifically for:
Laboratory research.
Analytical testing.
Scientific investigation.
Non-clinical research.
Those activities are fundamentally different from selling drugs for human consumption.
And LegitScript itself makes an interesting distinction.
Its Healthcare Merchant Certification FAQ explicitly states that research-use-only chemical businesses, including peptides, are generally not eligible for Healthcare Certification because they are outside the scope of that certification program.
That creates an important issue for processors.
A legitimate research-only peptide merchant may not belong in the traditional healthcare-certification framework.
But processors still need a way to determine whether it is actually operating as a research-only business.
That's where the problem begins.
The phrase:
“For Research Use Only — Not for Human Consumption”
is not a magic shield.
FDA enforcement actions make that very clear.
In March 2026, FDA issued a warning letter to Gram Peptides after determining that, despite research-use-only and not-for-human-consumption disclaimers, the company's website contained evidence indicating products were intended as drugs for human use.
FDA made similar findings against Wholesale Peptide in June 2026.
And in August, FDA issued additional warning letters involving peptide businesses where research-only language appeared alongside website content indicating human-use intent. In one case, FDA specifically pointed to the sale of bacteriostatic water alongside peptide products as part of the evidence supporting its conclusion.
That should matter enormously to payment processors.
Because the question isn't:
Does the website contain a research-only disclaimer?
The real question is:
Does the entire merchant ecosystem behave consistently with a legitimate research-only business?
A processor trying to support this category responsibly needs to understand a combination of factors.
That can include:
And importantly:
This has to be monitored continuously.
A merchant can be completely supportable on Monday and change its risk profile on Friday.
LegitScript has played an extremely important role in merchant monitoring for the payments ecosystem and remains deeply embedded in card-brand and acquiring compliance infrastructure.
Its classifications, risk intelligence and merchant-monitoring services are valuable, and LegitScript is actively highlighting peptide risk itself.
But the peptide category exposes a broader limitation of traditional monitoring models.
Historically, merchant monitoring has primarily answered questions such as:
Is this merchant problematic?
Is prohibited content present?
Does the merchant appear to violate policy?
Those are important questions.
But research-only peptides increasingly require something deeper:
That's Product Intelligence.
And it's different from simply categorizing a website.
This is where I believe payments has a major opportunity.
Today, a processor may look at a merchant selling BPC-157, TB-500, CJC-1295, Ipamorelin or other research peptides and conclude:
Too complicated. Decline.
That is certainly safer than blindly accepting them.
But it also creates a false binary:
Accept everything.
or
Accept nothing.
There is another possibility.
Accept merchants that satisfy a clearly defined research-only program and continuously monitor them against that program.
That requires policy.
It requires technology.
It requires evidence.
And it requires real-time or near-real-time monitoring.
But it is possible.
A sponsor bank or processor could define explicit criteria for supportability.
For example, depending on legal counsel, bank policy and applicable regulation, a program might require controls around:
The processor then isn't pretending the merchant has no risk.
It is defining the risk and building controls around it.
That is exactly what modern risk management should do.
Let's assume the merchant passes underwriting.
Everything is perfect.
The website clearly states research-use only.
No therapeutic claims.
Product pages comply with policy.
COAs are available.
Products are documented.
Merchant approved.
Then three weeks later somebody updates the website.
A new blog post discusses injury recovery.
An affiliate begins promoting BPC-157 to athletes.
A peptide calculator appears.
The merchant adds bacteriostatic water.
A new product appears.
A testimonial describes a human-use outcome.
The merchant hasn't changed its legal name.
The MCC hasn't changed.
Transaction patterns may look completely normal.
But the risk profile just changed.
That's why annual or periodic monitoring is insufficient for this category.
Peptide compliance has to be treated as a continuous condition.
At Qredible, this is one of the reasons we've invested so heavily in product-level intelligence through Q-Trust™.
The goal isn't simply to determine whether a merchant's website belongs to a high-risk category.
It is to understand:
Merchant → Product → Evidence → Claim → Regulation → Bank Policy → Compliance Status
and continue monitoring those relationships over time.
For a research-peptide program, that means technology can help:
The human compliance team still determines policy and handles meaningful exceptions.
The technology performs the continuous discovery.
That's a very different operating model.
This is where things get interesting.
There is no high-quality public dataset I could find that isolates U.S. research-use-only peptide merchant sales specifically.
That's important to acknowledge.
These merchants sit across private companies, research suppliers, wellness-adjacent businesses and a substantial gray market. Public research tends to combine categories or focus on therapeutics rather than payment volume.
So instead of pretending we have a precise number, we can build a reasonable scenario from the data we do have.
Reuters reports analyst estimates of approximately $2.2 billion to $3.3 billion for the emerging peptide-treatment market.
That gives us a useful current-market reference point.
If even a significant portion of that commerce moves through card-not-present payment channels, the processing opportunity is already meaningful.
Current illustrative addressable TPV
Using the $2.2B–$3.3B range:
$2.2B–$3.3B in annual peptide commerce
At a hypothetical blended merchant pricing yield of:
3%: approximately $66M–$99M in annual processing revenue
4%: approximately $88M–$132M
5%: approximately $110M–$165M
Those are illustrative processor gross-revenue calculations, not published industry forecasts, and they do not account for interchange, assessments, reserves, chargebacks, partner splits or operating costs.
But they demonstrate the scale.
A category does not need to be a $100 billion payment market to become economically significant.
Because there is no reliable published CAGR specifically for research-only peptide commerce, I would avoid presenting a single forecast as fact.
Instead, let's model three scenarios.
If a $2.2B–$3.3B market grows at 20% annually, then in three years it would represent approximately:
$3.8B–$5.7B in annual sales.
At 30% annual growth:
$4.8B–$7.3B.
At 40% annual growth:
$6.0B–$9.1B.
Those growth scenarios are illustrative, but the aggressive cases do not look absurd when compared with LegitScript's observed increases in online advertisements, marketplace listings and social-media activity.
At the middle 30% scenario, a $4.8B–$7.3B annual TPV opportunity could produce roughly:
Again, those are modeled gross-processing economics, not market-research forecasts.
And they exclude the much larger prescription peptide economy.
Processing revenue is only one part of it.
Research-peptide merchants are typically willing to pay more because their alternative is frequently:
No account at all.
Processors capable of responsibly supporting the market may also create revenue through:
Higher-risk merchant pricing.
Monthly compliance technology fees.
Monitoring services.
Product compliance services.
Reserve economics where justified.
Banking and treasury services.
Merchant retention.
Cross-selling other services.
Specialized ISO and agent programs.
And this is where the MyCOA / Q-Trust model becomes particularly interesting.
Instead of charging a merchant an arbitrary “high-risk compliance fee”, give them actual compliance infrastructure.
Help the merchant maintain its products.
Maintain its COAs.
Understand documentation.
Manage regulatory evidence.
Identify problems before the processor finds them.
Give the processor visibility into the information it is authorized to evaluate.
Now the compliance fee provides utility.
And the processor can participate in recurring software revenue.
The peptide category is already here.
FDA enforcement confirms that.
LegitScript's monitoring confirms that.
Marketplace activity confirms that.
Social media confirms that.
Merchant-account applications confirm that.
And consumer demand confirms it.
The question for payment companies isn't whether peptides exist.
It's whether the institution chooses to:
Ignore the category.
Decline the category.
or
Learn how to understand the category.
There will absolutely be peptide merchants that no responsible bank should support.
There will be merchants presenting research products as thinly disguised consumer drugs.
There will be misleading claims.
There will be bad actors.
There will be products outside institutional appetite.
Decline them.
But don't confuse:
“This merchant violates our policy”
with:
“Our technology cannot determine whether this merchant violates our policy.”
Those are completely different problems.
This deserves emphasis.
Nothing about this article should be interpreted as suggesting that putting “research only” on a website makes peptide commerce lawful or safe.
FDA's recent enforcement activity demonstrates exactly the opposite.
Intent matters.
Marketing matters.
Product presentation matters.
Ancillary products matter.
Claims matter.
The overall customer experience matters.
Research-only peptide processing should therefore require more intelligence, not less.
But greater complexity does not automatically mean an industry is impossible to support.
It means the controls need to match the complexity.
There is another side of this that rarely gets discussed.
Processors cannot build serious peptide programs without sponsor banks willing to establish a well-defined risk appetite.
Imagine the competitive positioning of a bank capable of saying:
That is significantly more sophisticated than:
“No peptides.”
Banks that develop expertise around emerging regulated commerce can potentially enable entire acquiring programs competitors cannot support.
That's a strategic capability.
Not simply a compliance exception.
We've watched emerging industries go through this cycle repeatedly.
E-commerce itself was once viewed as unusually risky.
CBD went through it.
Telemedicine went through it.
Online gaming went through it.
Crypto went through it.
Every new category creates uncertainty.
The industry's first instinct is often:
Avoid it.
Then somebody develops the infrastructure necessary to understand it.
Standards emerge.
Programs emerge.
Technology improves.
Banks become more comfortable.
Competition enters.
And what was once considered impossible becomes another payment vertical.
I believe peptides may be entering that phase now.
The broader peptide market is already demonstrating that.
The better questions for payments executives are:
If those questions can be answered, the conversation changes from:
to:
That's a far better question.
Peptides are becoming one of the clearest examples of the challenge payments is going to face across modern regulated commerce.
The market moves faster than policy.
The merchant moves faster than underwriting.
Products move faster than merchant classifications.
Marketing moves faster than periodic monitoring.
And regulation operates at a level far more granular than an MCC.
The legacy response is simple:
Decline everything complicated.
The modern response should be:
Understand it. Define the policy. Build the controls. Monitor continuously. Decline what falls outside the rules. Support what doesn't.
That isn't greater risk tolerance.
That's greater risk precision.
And the payment organizations capable of achieving greater risk precision may find themselves staring at one of the more interesting emerging merchant-acquisition opportunities of the next several years.
The peptide industry doesn't necessarily need another processor willing to “take the risk.”
It needs processors and banks capable of understanding the risk.
Those are two very different things.
And that's where I believe the opportunity begins.
Qredible is redefining merchant underwriting through Merchant Risk Intelligence (MRI)—a product-first approach that continuously analyzes what businesses sell, how they market those products, and the evidence required to support compliant payment acceptance. By moving beyond static industry classifications, Qredible helps banks, payment processors, ISOs, and sponsor banks make faster, more informed, and more defensible underwriting decisions while reducing manual effort and strengthening ongoing portfolio oversight. Learn more about Qredible's product-first automated compliance management platform for regulated industries →
