Can You Prescribe Controlled Substances via Telehealth? The Honest Answer

The short answer: It depends. And the nuance is what separates a brand that grows for years from one that gets shut down in month two.

If you're building a D2C telehealth brand, the question of controlled substances is probably keeping you up at night. You're not alone. I've talked to dozens of founders who either avoided launching certain treatment areas entirely because they were afraid of the legal implications, or worse — launched without understanding the rules and received a cease-and-desist that ended their business before it really began.

This post is your "I wish someone had told me this" guide. We're going to break down what the law actually says about prescribing controlled substances via telehealth, why it matters for your business, and what you can do right now to build a compliant brand that doesn't live in constant fear of the DEA showing up at your door.

What Are Controlled Substances, Anyway?

Before we get into the prescribing rules, let's make sure we're on the same page about what we're actually talking about. The DEA classifies drugs into five schedules based on their potential for abuse and medical utility:

• Schedule I: Heroin, LSD, marijuana (no accepted medical use - you can't prescribe these ever)
• Schedule II: Oxycodone, fentanyl, methamphetamine (high abuse potential - strictest controls)
• Schedule III-V: Lower abuse potential drugs like buprenorphine, codeine combinations, testosterone, and certain anxiety medications

For most D2C telehealth brands, the controlled substances you'll encounter fall into Schedule III and IV: things like testosterone replacement therapy, clonazepam for anxiety, phentermine for weight loss, and Ambien for sleep. These aren't the headline-making opioids that make the news, but they're still regulated and getting them wrong carries real consequences.

The Ryan Haight Act: The Rule That Started It All

Here's where most founders get confused. The Ryan Haight Act is the federal law that governs telehealth prescribing of controlled substances. And here's the part that trips people up: it requires an in-person medical evaluation before a provider can prescribe a controlled substance via telehealth — with some very specific exceptions.

But here's what actually matters for your business: the law has been significantly relaxed, especially following the COVID-19 public health emergency. The DEA now waives the in-person requirement for many controlled substances under certain conditions, and states have their own rules that can be more permissive than federal law.

The key insight: You don't need to avoid controlled substances entirely. But you need to understand exactly which ones you can prescribe, under what conditions, and in which states.

What You CAN Prescribe Via Telehealth (Under the Right Conditions)

Here's where it gets practical. The DEA has established specific circumstances where telehealth prescribing of controlled substances is permitted:

The DEA's Special Registration

The DEA created a special registration pathway that allows providers to prescribe controlled substances via telehealth without an in-person visit. However, this registration has specific requirements:

• The provider must be licensed in the state where the patient is located
• The prescribing must be within the provider's scope of practice
• The provider must follow state-specific regulations
• Certain substances and conditions are excluded

As of early 2025, this pathway is still being implemented, and the rules continue to evolve. The most practical approach for most D2C brands is to work with provider networks that already hold the appropriate registrations and understand these nuances.

State-Specific Telemedicine Exceptions

Here's the part that most founders completely overlook: states have their own rules, and many are more flexible than federal law. Some states explicitly allow telemedicine prescribing of controlled substances for certain conditions without an in-person visit:

• California: Allows telemedicine prescribing of many controlled substances with appropriate documentation
• Texas: Permits telemedicine prescribing for Schedule III-V substances with proper patient evaluation
• Florida: Allows telehealth prescribing of controlled substances for qualifying conditions
• New York: Has specific provisions for telemedicine prescribing including for pain management and behavioral health

The point is this: you can't treat telehealth prescribing as a single federal rule. Your compliance strategy needs to account for the specific states where your patients are located.

What You CANNOT Do (The Traps That Kill Brands)

Now let's talk about the red lines you absolutely cannot cross. These are the mistakes that lead to license revocation, fines, and in extreme cases, criminal charges.

Prescribing Schedule I or II Opioids via Telehealth

This is the big one. You cannot prescribe Schedule I substances via telehealth, ever. For Schedule II substances (the strong opioids like oxycodone), the in-person requirement largely still applies, with very narrow exceptions for hospice patients and long-term care facilities.

If your telehealth brand is thinking about offering any kind of opioid pain management via telehealth, stop. Right now. This is where the DEA focuses most of its enforcement, and the penalties are severe.

Skipping Proper Patient Evaluation

Even for substances where telehealth prescribing is allowed, you can't just write a prescription based on a patient filling out a form. The law requires a valid doctor-patient relationship that includes:

• Proper medical history review
• Physical examination (which can be done via telehealth for many conditions, but must be documented)
• Appropriate diagnostic testing where indicated
• Follow-up care planning

I've seen brands get in trouble because their provider intake process was too superficial. The DEA looks for evidence that a real medical evaluation occurred, not just a prescription being generated from a questionnaire.

Ignoring State-by-State Variations

This is where many well-intentioned founders mess up. They set up their provider network and prescribing protocols based on one state's rules, then start getting patients from states with different requirements. Each state's medical board has its own telemedicine prescribing rules, and what works in California might get your provider's license suspended in Ohio.

Why LegitScript Certification Matters (Beyond Just Advertising)

If you've read about telehealth marketing, you've probably heard of LegitScript certification. It's often presented as something you need for Facebook and Google ads, which is true. But here's what most founders don't realize: LegitScript certification is increasingly becoming a de facto compliance standard.

LegitScript reviews your entire business model, not just your advertising. They look at:

• Your provider credentialing and supervision processes
• Your patient intake and evaluation procedures
• Your prescribing protocols and controlled substance handling
• Your pharmacy relationships and fulfillment processes

Getting LegitScript certified forces you to document and justify your prescribing practices. And while it's not a legal requirement (yet), more platforms and advertising channels are requiring it. More importantly, going through the certification process helps you identify compliance gaps before the DEA does.

Practical tip: If you're serious about building a telehealth brand that lasts, treat LegitScript certification as a compliance exercise first and an advertising requirement second.

Building a Compliant Prescribing Strategy

Alright, let's bring this all together. Here's how to build a prescribing strategy that keeps you compliant without killing your business opportunity:

1. Choose Your Treatment Areas Strategically

Not all treatment areas carry the same regulatory risk. Here's a quick breakdown:

If you're just starting out, weight loss and men's health offer the best combination of market opportunity and regulatory manageability.

2. Work With Provider Networks That Handle Compliance

This is where platforms like Rimo Health add real value. Your provider network should:

• Hold appropriate licenses in all states you operate in
• Have clear prescribing protocols that meet both federal and state requirements
• Maintain proper documentation for every prescription
• Handle the DEA registration process

Don't try to build this infrastructure yourself if you're not a healthcare lawyer. Partner with networks that already have it figured out.

3. Implement Robust Patient Evaluation Processes

Your intake process needs to go beyond a simple questionnaire. Consider:

• Video consultations for initial visits (required in many states for controlled substances)
• Required lab work or physical examination evidence
• Prescription drug monitoring program (PDMP) checks in every state where required
• Clear exclusion criteria for patients who aren't appropriate for telehealth

4. Build Audit Trails

Every prescribing decision should be documented. If the DEA ever audits you, you'll need to show:

• When and how the patient was evaluated
• What diagnostic information was used to make the prescribing decision
• Follow-up care plans
• Any contraindications that were considered

The Bottom Line

Can you prescribe controlled substances via telehealth? Yes, in many cases, you can. But the rules are nuanced, they vary by state, and they continue to evolve. The founders who succeed in this space don't avoid controlled substances out of fear — they build proper compliance infrastructure and work with provider networks that understand the regulations.

The biggest risk isn't actually prescribing controlled substances — it's prescribing without understanding the rules. Most enforcement actions happen not because founders were trying to do something illegal, but because they didn't realize they were violating regulations.

Your next step: Before you launch any treatment area that involves controlled substances, have your legal team (or your provider network's compliance team) walk through the specific regulations for each state where you plan to operate. Document everything. And when in doubt, err on the side of caution.

This post is for educational purposes and should not be taken as legal advice. Telehealth regulations vary by state and change frequently. Consult with a healthcare attorney before launching your brand.