Do You Need LegitScript Certification to Run Google Ads?

A few months back an addiction treatment center called us on a Monday, frustrated. They had spent a weekend building out a Google Ads campaign, keywords, landing page, the works, turned it on, and by Sunday night every ad was disapproved and the account was suspended. Nothing about the ads was dishonest. They just did not know that their entire category is locked behind a certification most doctors have never heard of. That certification is called LegitScript, and if you are in the wrong slice of healthcare, it is the difference between ads that run and an account that gets shut off.

This is one of the most confusing corners of healthcare marketing, partly because the rule only applies to some practices and partly because Google does not spell it out until your ads are already rejected. So let us make it plain: what LegitScript is, who actually needs it, who is worrying over nothing, and what it costs you to get it wrong.

What LegitScript certification actually is

LegitScript is an independent company that vets healthcare and other high risk businesses to confirm they are legitimate, licensed, and operating within the law. Google does not run this check itself. Instead, for certain healthcare categories, Google requires you to be certified by LegitScript before it will show your ads at all. LegitScript verifies your licensing, your ownership, your prescribing practices, and how you handle patients, then issues the certification that lets you advertise.

Think of it as a background check for advertisers in the parts of healthcare that have historically attracted bad actors. Google leaned on LegitScript specifically because those categories, addiction treatment above all, were flooded with scams and predatory operators years ago. The certification is Google's way of keeping the shady players out while still letting real, licensed providers advertise.

The three categories that actually need it

Here is the part that matters most, because it is where owners either panic without cause or skip a step that gets them suspended. As of 2026, LegitScript certification is required for Google Ads in three main areas:

• Addiction and substance use treatment. This is the big one. Any center advertising drug or alcohol rehab, detox, or substance use programs must be certified. Google and Meta both require it because of past abuse in the industry, and enforcement here is strict.
• Telemedicine that prescribes. If you run a telehealth service that prescribes medication, weight loss drugs, hormone therapy, and similar, you fall into the certified category. A telehealth practice that only offers consults and does not prescribe is treated differently, but the moment prescribing enters the picture, certification is on the table.
• Online and mail order pharmacies. Anyone dispensing or selling prescription medication online is a core certified category and has been for years.

There is also a fourth thing worth naming even though it is not LegitScript: in the United States, advertisers of health and medical insurance must be certified directly by Google, and CBD sellers face their own certification path in select markets. Different program, same headache if you skip it.

Who does not need it, and can stop worrying

Most medical practices do not need LegitScript certification, and it is worth saying that clearly because the fear spreads faster than the facts. If you are a dentist, a dermatologist, a chiropractor, a physical therapist, an optometrist, a med spa doing aesthetics, a general or family practice, or an OB GYN, you can almost certainly advertise on Google without ever touching LegitScript. You still have to follow Google's healthcare and medicines policy, and you still have to pass advertiser verification, but the LegitScript layer is not yours to carry.

Talk therapy and counseling are the ones that trip people up. A mental health practice offering therapy and counseling generally does not need certification. The trigger is addiction and substance use treatment specifically. So a counseling office is fine, but the day it starts marketing a substance use recovery program, it crosses into the category that does require certification. The line is the service you advertise, not the license on your wall.

What it costs to guess wrong

If certification applies to you and you advertise anyway, the outcome is not a gentle nudge. Your ads get disapproved, and your Google Ads account can be suspended. Healthcare is the most heavily regulated vertical on the platform, which means the systems watching it are aggressive, and a restricted service running without its certification is one of the fastest routes to a shutdown.

The suspension is the real pain. Getting an account reinstated is not a given. Google reinstates in what it calls compelling circumstances, and the appeal process is slow, thorough, and stacked against you if you actually broke the rule. Meanwhile your competitors keep advertising and you are locked out, sometimes for weeks. We have watched practices lose a full quarter of new patient flow while an account sat frozen. It is worth noting that a suspended ad account is a separate problem from a suspended Google Business Profile, so if you are dealing with the profile side, our guide on why a Google Business Profile gets suspended covers that instead.

The math is simple. The cost of getting certified before you launch is a few weeks and a manageable fee. The cost of skipping it is a dead account and the traffic you lose while you fight to bring it back. Prevention wins every time.

How the certification actually works

If you are in a category that needs it, the path looks like this. You apply to LegitScript, submit your licensing and ownership documents, and go through their review of how your practice operates. There is an application fee plus an ongoing monitoring fee, and the total depends on your category and how many locations or providers you run, so budget for a four figure yearly cost in most cases. The review usually takes a few weeks. Once LegitScript issues your certification, you then apply for the matching certification inside your Google Ads account, and only after Google approves that can your ads go live.

Two layers, in other words: LegitScript certifies the business, then Google certifies the account to advertise the certified service. Miss either one and the ads sit disapproved. It is not hard, but it is procedural, and it does not forgive shortcuts.

Where this fits in a real ad strategy

Certification is the gate, not the goal. Getting through it just earns you the right to compete, and healthcare is one of the priciest and most tightly policed places to run ads. Once you are cleared, the campaign still has to be built to survive the healthcare and medicines policy, which restricts how you word claims, what you can promise, and how you target. This is exactly why we handle Google Ads as one piece of a full patient acquisition system instead of a standalone project. The certification, the policy compliant ad copy, the landing page, and the follow up all have to line up, or you are paying for clicks that go nowhere.

For the categories that need certification, we treat it as step zero. When we take on an addiction treatment center or a prescribing telehealth practice, we get the LegitScript and Google certifications sorted before a dollar of budget moves, so the launch is clean and the account stays healthy. It is far less glamorous than the campaign itself, and it is the part that keeps the whole thing from collapsing.

If you want the bigger picture on the money side, we broke down what Google Ads management costs for a medical practice, and for the trickier verticals we wrote about how to market sensitive medical services without tripping every policy in the book.

Our honest take

LegitScript feels like a hurdle, and for the practices it applies to, it is. But it is a hurdle worth being grateful for. The reason your category is locked behind a background check is that it used to be full of operators who preyed on desperate patients, and the certification is what separates you from them in Google's eyes. When you are the licensed, legitimate provider, a system that filters out the scammers is working in your favor, not against you. Our advice is boring and it is right: find out today which side of the line your practice sits on. If you need certification, start it now, before you build a single ad. If you do not, stop letting the fear keep you off a channel where your patients are actively searching for exactly what you do.