Send a “research peptide” vial to an independent lab and there’s roughly a one-in-three chance something is wrong with it. Not a rumour, not a scare story circulating in gym WhatsApp groups, but a documented pattern showing up across multiple analytical laboratories testing the same grey-market products flooding TikTok shops and Telegram channels.
A US testing startup called Finnrick, which lets consumers send in their peptide vials for analysis, has been quietly compiling one of the largest independent datasets on this market. Almost 30% of the peptide samples they’ve analysed were either mislabeled, underdosed, overdosed, or contaminated with toxins or bacteria. Its founder didn’t mince words when discussing the bacterial findings: “Among the thousands of tests we are doing, we do find either live or dead bacteria in a lot of the vials,” which “could lead to hospitalizations.” That’s not a fringe outlier result either. Back in 2017, USADA ran its own black-market peptide testing and found that over 20% were mislabeled or contaminated. A separate study published in the journal Drug Testing and Analysis went further, reporting that 30% of online peptides contained incorrect amino acid sequences, and 65% had endotoxin levels above safety thresholds.
Key takeaways
- What independent labs actually found when they tested ‘recovery peptides’ from TikTok vendors
- Why fake certificates of analysis look convincing but take ‘an afternoon in a PDF editor’ to create
- The hidden contamination that could cause hospitalizations—and how to spot it before buying
What’s actually floating in these vials
Contamination doesn’t mean a slightly-off dose. One consumer testing outfit, The Peptide List, sent ten commercially available peptides to a laboratory and three failed outright, including a batch of “semaglutide” that turned out to be an entirely unknown 2847 Da compound instead of the GLP-1 receptor agonist buyers expected. The same investigation found wide swings in bacterial endotoxin readings between batches from different vendors, with the worst sample containing 8.7 EU/mg, meaning a single 5mg vial contained 43.5 EU, over 12% of the daily safe limit in one injection. Anti-doping analyst Oliver Catlin summed up why this happens so bluntly it’s worth repeating in full: “It’s really a choose-your-own-adventure. It’s up to the chemical companies that are making these things to figure out quality control, good manufacturing practices, testing for COAs, verifying that there’s no contaminants, heavy metals, pesticides, whatever.”
Heavy metals turn up disturbingly often too. Clinical reviews of the recovery-peptide market describe products contaminated with the toxic heavy metals arsenic and lead, sometimes at ten times the acceptable limit for injectable drugs, alongside bacterial byproducts that can cause life-threatening sepsis. Some batches sold as 99% pure have tested with purity levels as low as 5-75%, filled with unknown chemical byproducts, and in a good chunk of samples the vial simply didn’t contain what the label claimed at all. One clinical write-up on sourcing risk put it starkly: the biggest danger with something like BPC-157 or TB-500 “might not be the peptide itself, it might be the supplier,” because FDA-regulated pharmacies cannot compound it and users are forced to buy from research chemical websites.
The paperwork trick almost nobody checks
Every dodgy vendor now ships a slick-looking Certificate of Analysis, and that’s precisely the problem. A vendor red-flag guide circulating among more sceptical peptide users notes that a COA claiming to come from an unnamed “independent laboratory” means nothing, because a real lab has a name, a website, and a reputation. Genuine testing houses like Janoshik Analytical publish results publicly, and verification requires entering the exact Task Number and case-sensitive Unique Key from the COA at their public database; if those credentials return no result, the COA is fabricated. A newsletter written by someone who has spent time inside this world put the maths on unverified certificates even more sharply: over forty percent of gray-market peptide samples fail basic purity or dose testing, and crucially, a vial can be 99% pure and still contain half the stated dose, because purity and quantity are entirely different measurements. Faking a certificate, by contrast, is trivial. As that same piece bluntly observed, sellers know “a convincing certificate of analysis takes an afternoon in a PDF editor.”
None of this exists in a legal vacuum, which matters if you’re browsing from the UK. The MHRA has been explicit about where things stand: the Medicines and Healthcare products Regulatory Agency classifies BPC-157 as an unlicensed medicine, and while it is not a controlled drug under the Misuse of Drugs Act, marketing or supplying it for human use without marketing authorisation is prohibited. In April 2026 the regulator went further, opening an investigation into peptide clinics making health claims about compounds they cannot legally sell as medicines, with BPC-157 named first, on the basis that there is little credible scientific evidence behind the claims. Across the Atlantic, an FDA advisory panel voted in July 2026 to loosen restrictions on several of these same peptides for licensed compounding pharmacies, but that vote came with a caveat that should give any gym-goer pause: FDA scientists’ own briefing materials found the available human trials, including five on BPC-157, were short in duration, small in sample size, and insufficient to establish safety or effectiveness.
What to actually check before you buy anything
If you’re going to look past the “everyone’s doing it” logic of the gym changing room, there are concrete things worth verifying rather than vague reassurance from a seller. A genuine result requires several elements together, not just a nice-looking PDF: a batch or lot number matching the physical vial in your hand, mass spectrometry confirming the molecule is what it claims to be, an HPLC purity chromatogram with actual method details rather than a rounded percentage, and separately, net peptide content in milligrams. One detailed breakdown of what proper documentation looks like insists on exactly this specificity, noting that it must come from a named, independent laboratory, using identity testing by mass spectrometry, with the observed molecular weight matching the theoretical value for that peptide sequence.
The most sobering detail from this whole investigation isn’t the arsenic or the fake certificates, it’s how quickly bad actors adapt when caught. In the Peptide List’s testing, once a vendor’s fake semaglutide result became public, the vendor’s website went offline within two weeks, though they likely reopened under a new domain. That’s the real risk profile of this market: not a one-off bad batch, but a whole supply chain built to reset itself the moment scrutiny arrives. Anyone considering these vials should talk to their GP first, particularly given how thin the human safety data still is behind the marketing claims.
Sources : wellfounded.health | pharmacytimes.com