Verticals / Supplements & Nutraceuticals
Supplements & Nutraceuticals
Legal everywhere, welcome almost nowhere: growth infrastructure for supplement brands operating under conditional channel access.
Supplements occupy a strange middle ground in commerce. The products are legal in all fifty states, sold in every grocery store, and consumed by more than half of American adults. Yet the operating environment looks like a restricted category: ad platforms admit you conditionally and then police every sentence of your creative, the FTC expects clinical-trial-grade evidence behind your claims, the FDA reads your entire website when deciding whether your product is an unapproved drug, and payment processors classify the category by its dispute exposure rather than its legality.
The category is not banned the way cannabis is — and in some ways that makes it harder to operate in, not easier. Conditional access means the rules shift under you, enforcement is automated, and one problem cascades into the next. A single flagged ingredient can disapprove an ad account. A single over-eager blog post can convert a lawful supplement into an unapproved drug in the FDA's eyes. A single FTC warning letter is, under Google's current policy, grounds for losing paid search entirely — Google prohibits promoting products that have been subject to government or regulatory action or warnings.
This page maps the current state of the channel landscape for supplement and nutraceutical operators: what Google, Meta, and TikTok actually permit as of 2026, what FTC substantiation and FDA claim rules mean for the words on your site, and how card networks and processors price the category. Every claim below is sourced. None of it is legal advice — verify anything you act on with counsel.
Where the ad platforms stand
General dietary supplements can be advertised without certification, but Google's Unapproved substances policy carves out hard prohibitions: ephedra, hCG promoted for weight loss, DHEA outside US-targeted campaigns, supplements containing active pharmaceutical or dangerous ingredients, products whose marketing implies they are as effective as prescription drugs, and — critically — any product that has been subject to government or regulatory action or warnings. That last clause means an FDA or FTC warning letter can end your paid search program, independent of how the letter itself resolves. Google maintains a non-exhaustive list of unapproved pharmaceuticals and supplements, and enforcement includes account suspension with at least seven days' warning.
policy source →Meta's Health and Wellness ad standard permits dietary supplement and weight-management ads only to audiences 18 and older, and prohibits disease claims, side-by-side weight loss comparisons, imagery like close-ups of pinched fat, and any messaging that generates negative self-perception. A separate prohibition covers 'unsafe substances, products or supplements, as determined by Meta at its sole discretion' — discretion being the operative word. Beyond creative policy, since January 2025 Meta restricts mid- and lower-funnel event sharing (Purchase, Add to Cart) for ad accounts whose domains it categorizes as health and wellness, degrading conversion optimization even for fully approved advertisers, whether events arrive by pixel or Conversions API.
policy source →TikTok's Weight Management policy permits weight-loss supplements and meal replacements only in a short list of markets (Australia, New Zealand, and parts of Southeast Asia and the Middle East among them) — US targeting for weight-management supplements is effectively off the table. Where health-related products are allowed, all weight loss or muscle gain claims must target 18+, and TikTok prohibits exaggerated claims, any suggestion the product works without diet and exercise, 'easy or guaranteed' framing, and content promoting disordered eating. General supplements face pre-approval and documentation requirements (cGMP certification, Supplement Facts labels) on the commerce side of the platform.
policy source →What closed paid channels do to the economics
Conditional channel access changes the arithmetic of customer acquisition even when your ads run. Creative constraints (no before/after, no outcome guarantees, no disease language) reduce ad efficiency relative to unrestricted categories competing in the same auctions. Meta's 2025 data-sharing restrictions compound this: a health-categorized domain optimizing on ViewContent instead of Purchase is running a materially blunter campaign at the same CPM. Add account instability — one ingredient flag or warning letter away from disapproval — and paid acquisition carries a variance cost that most supplement P&Ls never price in. The honest conclusion is that paid channels for this category are a supplement to durable acquisition, not the foundation of it.
The processing side has its own tax. Mastercard classifies negative-option billing merchants selling physical products — a rule written with nutraceutical free-trial offers explicitly in view — as high-risk, requiring registration in the Mastercard Registration Program at a pass-through fee of roughly $500 per year, on top of the elevated rates and rolling reserves that high-risk acquirers charge. Visa's Acquirer Monitoring Program (VAMP), effective April 2025, consolidated its dispute programs into a single ratio — TC40 risk reports plus TC15 disputes over settled transactions — with a merchant 'excessive' threshold of 1.5% that tightens to 0.9% in 2026. For a subscription supplement brand, that makes the dispute ratio a hard operating constraint: the same recurring-billing model you need to amortize expensive acquisition is the model that draws network scrutiny, so LTV math has to absorb both the acquisition premium and the cost of keeping disputes low — reminders, easy cancellation, generous refunds.
Compliance is site architecture
Structure/function claims only — with the disclaimer and the FDA notification
Under DSHEA, a supplement can describe a nutrient's role in normal structure or function ('supports immune health') but not diagnose, treat, cure, or prevent disease. Structure/function claims trigger the mandatory bold disclaimer under 21 CFR 101.93 — 'This statement has not been evaluated by the Food and Drug Administration...' — and a notification to FDA within 30 days of first marketing under section 403(r)(6) of the FD&C Act. Product pages, not just labels, need to be built with this claim taxonomy in mind.
Disease-claim leakage anywhere on the site converts the product
FDA reads intended use from the whole property: blog posts, metadata, testimonials, category names, even which studies you link. An 'immune support' product page is compliant on its own; the same page internally linked from a blog post about treating infections creates an implied disease claim, and an implied disease claim makes the product an unapproved drug. Content architecture — what links to what, and in what words — is a regulatory surface, not just an SEO decision.
Substantiation must exist before the claim is published
The FTC's Health Products Compliance Guidance (December 2022, replacing the 1998 supplement guide) requires 'competent and reliable scientific evidence' for health-related claims, which the agency says will generally mean randomized, controlled human clinical testing. Traditional-use framing ('used for centuries') does not lower the bar. Operationally this means a claims inventory: every claim on the site mapped to the evidence behind it, maintained like any other asset.
Testimonials and creators carry the same burden as your own copy
Under the same FTC guidance, an endorsement cannot make a claim the brand could not substantiate itself, and atypical results need clear context. Review widgets, UGC embeds, and affiliate content are the common leak: a five-star review saying the product cured a condition is a disease claim you published. Moderation policy for user content belongs in the compliance stack.
Subscription flows must satisfy ROSCA and card-network rules — not the vacated FTC rule
The FTC's expanded Negative Option ('click-to-cancel') Rule was vacated by the Eighth Circuit on July 8, 2025 on procedural grounds, but ROSCA, state autorenewal statutes, and FTC Act Section 5 all still apply: clear disclosure of terms before checkout, express informed consent, and a simple cancellation mechanism. Mastercard adds its own layer for trial offers — explicit consent before the first post-trial charge, notice at least seven days before it, and a direct cancellation link on the site.
Payment infrastructure
Stripe: prohibited-category language plus automated screening
Stripe's restricted businesses list places 'pseudo-pharmaceuticals or nutraceuticals that are not safe or make harmful claims' under Prohibited Businesses. The qualifier sounds narrow, but the screening that enforces it is automated and category-based, and supplement merchants with clean claims still report account actions. Building a supplement business with Stripe as the only rail is a single point of failure you do not control.
PayPal: acceptable-use pre-approval and marketing-based screening
PayPal's Acceptable Use Policy requires pre-approval for certain product categories and restricts transactions involving products marketed to act like prescription drugs, recalled or banned substances, and unapproved drugs. As with Stripe, how the product is marketed matters as much as what it is — the same ingredient with different copy can land on either side of the line.
Square: no blanket supplement ban, but onboarding is not underwriting
Square's prohibited goods list targets internet/mail/telephone-order pharmacies and pharmaceutical re-importation rather than supplements as a category. That makes Square a workable point-of-sale and early e-commerce rail for straightforward retail supplements — with the caveat that aggregator risk models still act on nutra-pattern signals (trials, continuity billing, spiking volume), and instant onboarding means the real underwriting decision happens after you have revenue flowing.
Card-network classification: Mastercard MRP and the Visa VAMP ratio
If you sell physical products on negative-option billing — free trials converting to subscriptions, or standard subscribe-and-save mechanics depending on your acquirer's reading — Mastercard requires high-risk registration through the Mastercard Registration Program (about $500/year pass-through) and imposes trial-offer rules: consent before the first post-trial charge, seven days' advance notice, and an accessible cancellation link. Visa's VAMP (effective April 2025) measures TC40 risk reports plus disputes against settled transactions, with the merchant 'excessive' line at 1.5% now and 0.9% from 2026. These are network rules; no processor can waive them.
The durable setup: a dedicated high-risk merchant account with real underwriting
The stable configuration for a scaling supplement brand is a dedicated merchant account through an acquirer that underwrites nutraceuticals knowingly — full documentation, claims review, higher rates and often a rolling reserve — plus operational dispute hygiene: recognizable billing descriptors, pre-renewal reminders, frictionless cancellation, and fast refunds. A backup MID is standard practice in the category. The goal is not the cheapest rate; it is a processor that has already priced your category and will not discover it later.
The zsty approach
zsty builds for the constraint instead of pretending it isn't there. The method was developed on our own properties in the hardest version of this problem: zsty's founder operates Big Moose Hemp, a DTC hemp brand that lives under total ad prohibition — no Google Ads, no Meta, at any budget. Everything a supplement brand faces conditionally, a hemp brand faces absolutely. When paid channels are simply gone, you learn what actually moves revenue: search architecture, content that earns rankings without crossing claim lines, owned audiences, and checkout flows that survive processor scrutiny. zsty.us itself ranks and acquires organically, without ads — the agency runs on the same engine it builds.
Applied to supplements, that means building the site so that three different readers each find what they need: the ad-platform policy reviewer sees claim-safe creative and landing pages that pass automated checks; the regulator sees structure/function claims with disclaimers in place, a substantiation file behind every statement, and educational content that never drifts into disease territory; the underwriter sees transparent billing terms, honest subscription mechanics, and the dispute-prevention plumbing that keeps VAMP ratios low. Most supplement sites are built by whoever optimized for conversion last quarter — the compliance retrofitting comes after the first account action, which is the expensive order of operations.
The channel strategy follows from the economics above: organic search and owned channels (email and SMS with proper consent capture) as the foundation, because they cannot be disapproved; paid channels layered on top where policy permits, structured to survive an account review rather than maximize a single quarter. That is the discipline an ad-prohibited operator brings to a merely ad-restricted category — and it is proven on our own properties, which is the only proof we will claim.
Questions operators ask
- Can supplement brands run Google Ads at all in 2026?
- Yes, for most products, and without a certification requirement for general supplements. The practical risks are the edges: Google's Unapproved substances policy bans specific ingredients outright (ephedra, hCG for weight loss, DHEA outside US targeting, anything with active pharmaceutical ingredients), bans marketing that implies prescription-drug equivalence, and bans products subject to government or regulatory action or warnings. That last item is the one operators underestimate — an FTC or FDA warning letter about your marketing can take down your Google account even while you negotiate the letter itself. Disapprovals are frequently ingredient-level and automated, so a compliant catalog can still trip on one SKU.
- What is the actual line between a legal claim and an illegal one on my product pages?
- The line is disease. 'Supports healthy joints' is a structure/function claim — legal under DSHEA if it is truthful, substantiated, accompanied by the 21 CFR 101.93 disclaimer, and notified to FDA within 30 days of first marketing. 'Relieves arthritis pain' is a disease claim, which makes the product an unapproved drug regardless of what is in the bottle. The FTC adds a second, independent test: whatever you claim, you need competent and reliable scientific evidence — generally randomized controlled human trials — in hand before publishing. Both agencies read your whole site, including blog content and testimonials, not just the label. Not legal advice — run your claim set past counsel.
- Why do processors treat supplements as high risk when the products are completely legal?
- Because processors price behavior, not legality. The category's historical reliance on free-trial and continuity billing produced elevated dispute rates, which is why Mastercard's negative-option rules — written with nutraceutical trial offers explicitly in mind — force high-risk registration for physical-goods subscription merchants, and why Stripe's prohibited list names pseudo-pharmaceuticals and nutraceuticals making unsafe or harmful claims. Add regulatory overhang (an FTC action against a merchant mid-portfolio is an acquirer's problem too) and the category prices as high-risk even for clean operators. The response that works is operational: transparent billing, reminders before renewals, easy cancellation, fast refunds, and a dispute ratio you manage like a KPI.
- The click-to-cancel rule was struck down — can I simplify my subscription flow now?
- No. The Eighth Circuit vacated the FTC's expanded Negative Option Rule on July 8, 2025, but on procedural grounds — the agency skipped a required preliminary regulatory analysis — not because the substance was rejected, and the FTC has signaled interest in reviving it. Meanwhile ROSCA still requires clear disclosure, express informed consent, and simple cancellation for online negative-option sales; state autorenewal laws (California's among the strictest) still apply; and Mastercard's trial-offer rules — consent before the first post-trial charge, seven days' notice, accessible cancellation link — are contract terms with your acquirer that no court ruling touched. The vacatur changed your federal rulemaking exposure, not your operating requirements.
zsty buys no ads. It ranks organically — and did so for itself first.
If paid acquisition is closed in your vertical, the owned layer is the whole game. That's the layer we build.
Sources
- Healthcare and medicines — Advertising Policies Help — Google
- Unapproved substances — Advertising Policies Help — Google
- Health and Wellness — Ad Standards, Transparency Center — Meta
- Drugs and Pharmaceuticals — Ad Standards, Transparency Center — Meta
- Understanding the Meta Data Sharing Restrictions — WITHIN
- Weight Management — TikTok Advertising Policies — TikTok
- Health Products Compliance Guidance — Federal Trade Commission
- Structure/Function Claims — U.S. Food and Drug Administration
- Notifications for Structure/Function and Related Claims in Dietary Supplement Labeling — U.S. Food and Drug Administration
- 21 CFR 101.93 — Certain types of statements for dietary supplements — eCFR
- Prohibited and Restricted Businesses — Stripe
- Acceptable Use Policy — PayPal
- Prohibited goods and services with Square — Square
- Subscription, Recurring Payments and Negative Option Billing Merchants (PDF) — Mastercard
- Mastercard High-Risk Negative Option Billing Program — Qualpay
- Visa Acquirer Monitoring Program Fact Sheet 2025 (PDF) — Visa
- Eighth Circuit Vacates FTC Click-to-Cancel Rule Days Before Compliance Deadline — Latham & Watkins
Regulatory and platform policies change frequently. This page is operational analysis, not legal advice — verify current rules with counsel before acting.