Advertising Controlled-Substance Telehealth: The Rules of Engagement for Modafinil, Testosterone, and ADHD

Last updated: October 27, 2026 · By Jason Garrett, Founder, Coast Studio. Not legal advice — review claims with counsel.

Short answer: it is permitted for certified providers with the platform's authorization, inside each platform's conditions on countries, age, disclaimers, and destination review. Meta and Google both allow certified telehealth providers to advertise, including for Schedule II–IV medications, and the DEA telemedicine flexibilities that allow prescribing without a prior in-person visit run through December 31, 2026, with conditions. The problems we see come from three places: advertising before certification, naming a drug without authorization or telling the viewer they have the condition, and a funnel that sells the drug instead of the evaluation. The rules below are what we hand clients before launch. Three rule sets apply, and they are owned by different people: the platform's policy team, the certifier, and your counsel.

The three rule sets

1. Platform policy. Meta's Prescription Drugs standard permits ads that name or promote prescription drugs only with written permission, granted to online pharmacies, telehealth providers, and manufacturers, targeted 18+ in the US, Canada, and New Zealand, with a consult-a-licensed-professional disclaimer. Telehealth providers must hold LegitScript certification before applying. Meta's Drugs and Pharmaceuticals standard exempts ads that promote telehealth services generally. That is an exemption for the service, not for every ad that omits a drug name: an ad offering a treatment and a destination that sells a prescription can still be read as promoting prescription drugs, and the landing page is reviewed as part of the ad. Google's Healthcare and medicines policy requires telemedicine providers to hold LegitScript telemedicine certification plus Google's own certification before advertising at all, and Google looks at the business and its site, not only the ad text. Google's Restricted Drug Terms rule (enforced from October 29, 2025) lets prescription drug terms appear in ad text and landing pages for campaigns targeting the US, Canada, and New Zealand, but keyword-targeting them requires certification, and a telemedicine provider needs certification regardless. Neither platform has a separate section for controlled substances. The schedule changes the law you must follow and how closely reviewers read you.

2. Certification. LegitScript's healthcare certification standards for telehealth ask for licensure by state, a telemedicine compliance file with per-jurisdiction citations, the DEA registration number if you prescribe controlled substances, diversion-prevention procedures, a sample prescription label where the business dispenses, and disciplinary and litigation history going back ten years. The published fee is a $975 application plus $2,150 per year, per website. LegitScript states that certification does not guarantee approval by any ad platform. LegitScript gives no timeline; plan on weeks. Advertising in apparent violation of a platform's terms before certification can be grounds for denial.

3. Law. The DEA's fourth extension of the telemedicine flexibilities lets DEA-registered practitioners prescribe Schedule II–V medications without a prior in-person visit through December 31, 2026 (DEA, December 2025). The conditions still apply: a real-time audio-video encounter, a prescription issued for a legitimate medical purpose in the usual course of practice, and compliance with federal and state law. An online questionnaire alone does not qualify. The special-registration rule that would replace it has been under OMB review since August 2026 and was unpublished when we last checked on October 23, 2026, so recheck before relying on this section; the proposed version treats Schedule II (stimulants) more strictly than Schedule III–V (testosterone, modafinil). State telehealth and prescribing rules sit on top. This page is not legal advice; your counsel owns this layer.

Why these providers get more scrutiny

The Done Global case is the one every compliance-cautious co-founder raises on the first call, and reviewers know it too. The government alleged that Done spent over $40 million on social ads designed to convince viewers they had ADHD, plus search ads aimed at people seeking Adderall without a prescription; the jury convicted on conspiracy to distribute controlled substances and health care fraud, and the founder was sentenced in July 2026 (DEA press release). The case was a wider prescribing, fraud, and obstruction scheme, and the verdict did not turn on two ad patterns. For a growth lead the lesson is still narrow: ads that diagnose the viewer and ads that sell the drug were part of the fact pattern. Everything below is built to avoid them.

Our creative and funnel rules for this category

These are Coast's conservative rules, built from the cases we have handled. Some go further than platform policy requires, and each one says which it is.

1. Telling the viewer they have the condition. A men's clinic we audited had its Page suspended after ads that said "low T" and "ED." Meta's personal attributes rule bars implying the viewer has a condition; naming a condition is not itself the violation. The fix is copy that describes the condition without assigning it to the reader: "Testosterone levels can decline with age. A blood test and a provider visit tell you whether treatment is appropriate."
2. Naming the drug without the authorization. "Modafinil" in an ad from a provider without Meta's written permission is a rejection, and repeated rejections are the pattern we have seen before Page actions.
3. Selling the drug instead of the evaluation. "Delivered, no visit," "diagnosis in 30 minutes," "auto-refills," "Adderall alternative." Each one tells the reviewer the prescription is the product.
4. Productivity and enhancement framing. "Focus pill," "stay alert on long shifts," "better than coffee." There is no on-label indication behind them, We do not write them because they promote use without a diagnosis. For that audience we run only a sleep-evaluation ad that names no drug.
5. A storefront funnel. A prescription telehealth Page we audited was disabled repeatedly. The notices did not state a cause; the funnel had a price and a buy button ahead of intake, and ad claims that did not match the landing page. Neither platform publishes a "no price before the consult" rule. In that account, moving intake and provider review ahead of pricing was our recommendation, because the funnel read as a pharmacy, and it is the funnel order we recommend for controlled-substance providers generally.

The messaging grid, worked for modafinil

We write every ad against three layers that have to agree: the FDA label, who the clinic will actually prescribe for, and what the platform allows. For modafinil the label is wakefulness in adults with excessive sleepiness from narcolepsy, obstructive sleep apnea, or shift work disorder. That gives three audiences and three indication-based starting points for review. None of them clears an ad on its own; claims, targeting, authorization, and the destination still decide it.

• Shift workers. "Shift work disorder is a recognized medical condition with FDA-approved treatment, prescribed after a sleep evaluation." Night-shift nurses and long-haul drivers are where to find them, but working nights is not the same as having shift work disorder, so the ad promises the evaluation and nothing more.
• Treated sleep apnea, still sleepy. "Residual sleepiness despite CPAP is treatable." The ad never says modafinil treats apnea; it treats the sleepiness associated with it, not the obstruction.
• Diagnosed narcolepsy. The on-label indication, stated as the label states it.

Borderline lines we review with the client and counsel before running: "wakefulness medication for night-shift workers" (an audience description is not permission to target an inferred condition), and "non-stimulant alternative" (implies ADHD use). Lines that never run: "Do you have narcolepsy?", "smart drug," "treats sleep apnea," "safe with birth control." The same grid exists for testosterone (diagnosed hypogonadism vs. the "optimization" audience, which only gets the public-service frame) and for ADHD (our conservative approach is evaluation-only ads, never a drug name, never "can't focus?", even where authorization would permit more).

What we put on the landing page

• Intake and provider review ahead of pricing (our recommendation, see above).
• Prescriber credentials and state licensing visible.
• No drug-purchase call to action anywhere in the paid path (our rule).
• Prescription stated as an outcome the provider decides, never guaranteed.
• A tracking review before launch. Intake answers are health data, and whether HIPAA, state privacy law, or platform terms govern each data flow depends on who you are and where the data goes.
• Subscription terms disclosed before the card field (see the subscription checkout review).

Google vs. Meta

In our experience Google's weight sits at the gate: certification per country, and a ban on promoting prescription opioid painkillers with no telehealth carve-out outside certified addiction treatment. An "Eligible (limited)" status on Google is often the expected state for a properly certified healthcare ad; Google says such ads serve only in permitted locations, ages, and devices (Google Ads, ad approval statuses). Read the policy name on the status before treating it as a problem. Meta's weight, in our experience, lands after the gate: enforcement reaches the Page, and the data-source category can restrict your conversion events even when every ad clears. Neither platform's enforcement reduces to that comparison; plan for both.

FAQ

Can I bid on the drug name?
On Google, only with certification; as a telemedicine provider you need it for any ad. On Meta, keywords are not the mechanism; naming the drug in the ad is what requires permission.

Can I run ads before LegitScript clears?
On Google, no: telemedicine providers need LegitScript and Google certification before advertising, whatever the ad says. On Meta, the exemption covers ads that promote the telehealth service itself. Whether an ad qualifies depends on what it promotes and where it lands: an ad for a consultation with a destination that describes the service qualifies; an ad that offers a treatment and lands on a prescription purchase does not, with or without the drug's name. Drug-named ads before certification risk the Page and the certification itself.

Does a controlled substance change the Meta data-source tier?
Not directly. The tier comes from how Meta categorizes the website or app, and telehealth sites are commonly categorized as health and wellness. Plan the tracking layer before launch.

What did Done Global do wrong in its advertising?
Ads built to convince viewers they had ADHD and search ads aimed at people seeking Adderall without a prescription, alongside a prescribing operation the jury found was a conspiracy to distribute.

Not legal advice. Review claims with counsel.

Get the pre-launch review

We review your certification status, your ads, and your landing pages against the three rule sets above and deliver the messaging grid for your drug and audiences, the creative and landing-page fixes, and the certification checklist. Platform approval is Meta's and Google's call; the review is what puts you in the best position to get it.

Book a Consultation