The quiet referee deciding which online merchants the internet's biggest platforms are willing to trust.
LegitScript is a compliance company that answers one deceptively hard question at internet scale: is this merchant, product, or website legitimate - or is it a front for something dangerous or illegal? Founded in 2007 to fight rogue online pharmacies, it now certifies businesses in high-risk sectors and continuously monitors merchants, ad platforms, marketplaces, and social media across more than 60 high-risk categories.
The work sits in an unglamorous but essential corner of the web. When a pharmacy, telehealth provider, addiction-treatment center, or CBD seller wants to advertise on Google or accept card payments, someone has to verify that the business is real, licensed, and playing by the rules. LegitScript is the party many of the largest platforms and payment companies have chosen to make that call.
Its method blends three ingredients: artificial intelligence to scan the web at volume, human analysts to apply judgment where machines fall short, and a large product-classification database that maps items by type, safety profile, and legality. Certification is not a one-time stamp - certified sites and products are watched on an ongoing basis, because a merchant that looks clean at onboarding can turn dirty later.
Beyond certification, LegitScript performs merchant risk detection for banks and payment providers, platform monitoring for search engines and marketplaces, brand-infringement detection, and investigative analysis on cybercrime for government agencies. It is, in effect, trust infrastructure for parts of the internet where the stakes - counterfeit medicine, transaction laundering, illegal goods - are unusually high.
LegitScript's customers cluster on two sides of the same marketplace. On one side are the gatekeepers: payment facilitators, ISOs, and acquiring banks that need to know which merchants are safe to onboard, plus the search engines, marketplaces, and social platforms that need to police the ads and listings running across their surfaces. On the other side are the merchants themselves - businesses in tightly regulated categories that need a credible certification to unlock advertising and payments.
The problem underneath is scale versus trust. The internet made it trivial to spin up a professional-looking storefront selling anything, including things that are counterfeit, unlicensed, or outright illegal. Platforms and banks cannot manually vet millions of merchants, and they cannot afford to host the bad ones. LegitScript exists to close that gap - separating legitimate businesses from bad actors, and doing it continuously rather than once.
This acquisition represents a major step forward in our mission to make the internet and payments ecosystem safer.
Relied on by
Verifies pharmacies, telehealth, addiction treatment, and CBD businesses so they can advertise on major platforms and accept payments.
Risk detection, onboarding, and continuous monitoring for payment facilitators, ISOs, and acquiring banks across the merchant lifecycle.
Monitors online ads, product listings, and user-generated content for search engines, marketplaces, and social media.
A large database that classifies products by type, safety, and legality, with lookups to verify healthcare products and websites.
Detects intellectual-property infringement and rogue sellers misusing brands online.
Compliance orchestration with automated underwriting and full-lifecycle workflows for banks and financial-services providers.
Plenty of firms sell fraud scoring or compliance software. LegitScript's edge is that it operates in the high-risk verticals most vendors avoid, and it pairs proprietary data with human analysts rather than leaning on models alone. Its long track record with regulators and platforms gives its certification something competitors struggle to manufacture quickly: institutional credibility. When Google or Meta accepts a LegitScript seal, that trust took years to earn.
The 2025 acquisition of Kompliant sharpened that position. LegitScript already knew which merchants were risky; Kompliant added the automated onboarding and underwriting workflow that banks use to bring merchants aboard. Owning both the risk intelligence and the pipe that acts on it moves the company from data provider toward end-to-end platform.
In the wider market it sits among merchant-risk and trust-and-safety players such as G2 Risk Solutions, Sift, and ComplyAdvantage, and it competes with the internal teams inside payment processors. Its defensibility comes less from any single feature than from depth in categories - counterfeit pharma, transaction laundering, controlled substances - where being wrong is expensive.
Illustrative reach across LegitScript's work (relative emphasis)
Directional, based on public descriptions of LegitScript's focus areas - not a financial breakdown.
The model is B2B and recurring. High-risk merchants pay ongoing fees for certification and re-verification. Payment providers, banks, marketplaces, ad platforms, and social networks buy risk-intelligence data, monitoring, and compliance software on subscription and enterprise contracts. That mix - merchant fees on one side, platform contracts on the other - is what makes LegitScript hard to displace: remove it and both sides lose a shared source of truth.
A former White House drug-policy aide (2002-2007) who started LegitScript in 2007 and now serves as Executive Chairman.
SaaS veteran who previously led Jama Software and held roles at Salesforce, ExactTarget, and Return Path.
Private-equity investors funding LegitScript's expansion from healthcare compliance into broader payments risk.
John Horton starts the company in Portland to combat counterfeit and illegal online pharmacies.
Works with domain registrars to take down rogue pharmacy sites - hundreds in the first push.
Publishes research on 7,000+ websites using forged pharmacy licenses.
Reports involvement in shutting down more than 35,000 rogue online pharmacy websites.
Named to the list of fastest-growing U.S. companies.
PSG invests to fuel expansion beyond healthcare into merchant and platform risk.
Scott Roth becomes CEO; founder John Horton moves into Executive Chairman and strategy roles.
Buys the compliance-orchestration platform to build an end-to-end merchant risk and underwriting suite.
Topics
compliancemerchant monitoringrisk intelligencecertificationpayments compliancetransaction launderingonline pharmacy certificationplatform monitoringai risk detectiontrust and safetyProfile compiled from public sources including LegitScript, Wikipedia, BusinessWire, PE Hub, PitchBook, and Crunchbase. Figures such as revenue and headcount are third-party estimates and approximate. Last reviewed July 2026.