Most medspas do not need LegitScript certification to run Google Ads. You only need it if your ads or landing pages promote specific restricted healthcare products, and for a typical aesthetic clinic running Botox, filler, laser, and facials, none of those trigger the requirement.
I’m Mandeep Singh, founder of Sprout Sage Solutions, and I manage paid search for US medspa and aesthetic clients. The confusion is worth clearing up, because I have watched owners spend est. $1,995 a year on a certification they never needed, and I have watched others get their whole Google Ads account suspended because they skipped one they did need. The line between those two outcomes is narrow and specific. This article shows you exactly where it falls.
What LegitScript Certification Actually Is
LegitScript is a third-party company Google uses to vet advertisers in high-risk healthcare and pharmacy categories. Google does not check these advertisers itself. It outsources the review. If your business falls into a restricted category, Google requires the LegitScript badge before it will show your ads at all.
The certification is not a one-time form. LegitScript reviews your website, your business licenses, your provider credentials, and your compliance with US telehealth and pharmacy rules. Once approved, you certify with Google, and the two systems talk to each other.
Cost matters here because it drives the whole decision. As of 2026, LegitScript’s fee for this type of certification runs at roughly est. $1,995 per year for a single location, and multi-location groups pay more. The application itself can take several weeks. So this is not a checkbox you tick the morning your campaign launches. It is a project.
The Services That Actually Trip Google’s Healthcare Approval
This is the part most articles get wrong. They tell you “healthcare needs certification” and leave you guessing. Here is the real map, based on what actually gets flagged in medspa accounts.
GLP-1 weight loss (semaglutide, tirzepatide) — almost always triggers it
If you advertise compounded semaglutide, tirzepatide, or any prescription weight-loss injection, you are in the restricted zone. Google treats prescription drug promotion as pharmacy activity, and pharmacy activity requires LegitScript certification in the US. This is the single biggest reason a medspa gets pulled into the certification process.
The trigger is not just the ad text. It is the landing page too. If someone clicks your “IV Therapy” ad and lands on a page that also sells a “Semaglutide Program” in the sidebar, Google’s crawler sees the drug content and can flag the whole domain. I have seen this exact scenario suspend an account whose ads never mentioned GLP-1 at all.
IV therapy — depends entirely on how you frame it
IV therapy is the gray zone. A hydration or vitamin drip marketed as a wellness service usually does not require certification. But the moment your page names prescription components, adds NAD+ claims tied to medical outcomes, or reads like a telehealth pharmacy, you drift toward the restricted side.
My rule of thumb: if the drip requires a prescriber’s order and you advertise the prescription drug by name as the selling point, treat it as risky. If you advertise “hydration and recovery drips” as a spa service, you are usually fine. The framing is doing the work.
Prescription (Rx) skincare — often triggers it
Tretinoin, prescription-strength hydroquinone, and compounded Rx skincare fall under prescription drug rules. If your ads or pages sell these products directly, especially with online ordering, you are promoting pharmacy content and Google will likely require certification. Advertising a “medical-grade skincare consultation” without naming and selling the prescription drug is a different, safer situation.
What does NOT trigger it
For clarity, here are the common medspa services that on their own do not require LegitScript certification: Botox and neurotoxin treatments, dermal fillers, laser hair removal, microneedling, chemical peels, facials, body contouring like CoolSculpting, and PRP marketed as a procedure. These are medical services, not prescription drug sales. Google’s healthcare rules do have separate restrictions on some of these (more below), but they do not route through LegitScript.
The Decision: Certify or Restructure the Offer
Here is the judgment call that actually saves money. When a restricted service shows up in your account, you have two paths.
Path A — Get certified. You keep GLP-1, Rx skincare, or prescription IV drips as advertised offers and you pay the est. $1,995/yr plus the weeks of application work.
Path B — Restructure the offer so the restricted product is no longer the advertised thing. You still deliver GLP-1 in the clinic; you just do not put the drug at the center of the ad funnel.
The math is simpler than it looks. Run it against what those services actually earn you.
Break-even formula: Annual profit from restricted-service leads that ONLY come through Google Ads minus est. $1,995 certification minus est. 15–30 hours of application and compliance time = your real return on certifying.
If GLP-1 is a core revenue line and Google Ads is a real channel for it, certification pays for itself fast. One GLP-1 patient on a monthly program can cover the annual fee. In that case, certify without hesitation. You can pressure-test the numbers with my medspa PPC cost calculator before you commit.
If GLP-1 is a small add-on and most of your ad budget drives Botox and laser leads, restructuring is almost always the smarter move. Here is what restructuring looks like in practice:
- Split the funnel. Advertise your certification-free services (Botox, filler, laser, facials) on Google Ads. Keep those campaigns pointed at landing pages that contain zero prescription drug content.
- Move restricted offers off the ad path. Promote GLP-1 and Rx skincare to existing patients through email, SMS, and in-clinic conversations — channels that Google’s healthcare policy does not govern.
- Scrub the landing pages. Any page an ad points to must not name or sell prescription drugs. No “Semaglutide” in the nav, no Rx product in the sidebar, no online drug checkout on that domain path.
- Use a clean subdomain or separate site for the ad-driven services if your main site is drug-heavy and you do not want to certify the whole thing.
I walk clients through this exact split in my medspa ad compliance guide, which covers the page-level rules in more depth than I can fit here.
A Common, Expensive Mistake
The most costly error I see is running GLP-1 ads without certification and hoping they slip through. They might run for a week. Then Google’s automated review catches the prescription drug content, disapproves the ads, and — if it decides you deliberately promoted restricted content — suspends the entire account.
Account suspension is not a one-day problem. Appeals take time, and while you wait, your compliant Botox and laser campaigns are dark too. You lose the leads that had nothing to do with GLP-1. That is why I treat this as a structural decision made before launch, not a fix applied after a disapproval.
Beyond LegitScript: The Other Google Healthcare Rules
Certification is not the only healthcare gate. Google also restricts and limits certain personalized health advertising and prescription-drug ad formats independent of LegitScript. Even fully compliant, certification-free medspa services need clean claims: no guaranteed outcomes, no before/after imagery that violates personalized-health-advertising rules, and no misleading medical promises. Getting certified does not exempt you from those; skipping certification does not excuse you from them either. Both live in the same compliance layer.
How I Decide for a New Client
When a medspa comes to me, I run the same three-step check every time:
- Inventory the offers. List every service the site sells and flag the three triggers: GLP-1, prescription IV components, and Rx skincare.
- Trace the ad-to-page path. Confirm that every page an ad could point to is clean of prescription drug content, or accept that we are going the certification route.
- Run the break-even. Decide certify vs. restructure using the formula above, based on that clinic’s real revenue mix.
That check takes an afternoon and it settles the question with numbers instead of guesswork. If you want me to run it against your account, book a free consultation and I’ll map your specific services to Google’s rules on the call. You can also reach me directly at tel:+919729712388.
FAQ
Do all medspas need LegitScript certification for Google Ads?
No. Most do not. Certification is only required if your ads or landing pages promote restricted content such as prescription weight-loss drugs (GLP-1), prescription IV therapy, or Rx skincare. Standard aesthetic services like Botox, filler, laser, and facials do not require it.
How much does LegitScript certification cost for a medspa?
As of 2026 it runs at roughly est. $1,995 per year for a single location, with higher fees for multi-location groups. The application also takes several weeks and requires your business licenses and provider credentials, so budget time as well as money.
Will advertising GLP-1 (semaglutide) without certification get my account banned?
It can. Google’s automated review flags prescription drug content, disapproves the ads, and may suspend the entire account if it judges the promotion deliberate. That takes your compliant campaigns down too. Certify first, or keep GLP-1 off the ad funnel entirely.
Can I run Google Ads for Botox and laser but not for GLP-1?
Yes, and this is often the smartest setup. Advertise your certification-free services on Google Ads with clean landing pages, and promote GLP-1 and Rx skincare through email, SMS, and in-clinic channels that Google’s healthcare policy does not govern. This avoids the est. $1,995/yr fee while keeping your ad account safe.
