An FDA warning letter turns up in search results attached to a company name, and it lands on a reader as something between a conviction and a recall. It is neither. It is a letter, it states allegations, and the agency that writes it describes it in terms most people would find surprisingly weak. Knowing what the instrument is — and what its absence does not mean — is the difference between using a public record and being misled by one. The related question of what “not FDA-approved” means for a compounded drug is handled in the approval-status article.
What FDA says a warning letter is
The agency’s Regulatory Procedures Manual, chapter 4, is the governing document, and its language is unambiguous: “A Warning Letter is informal and advisory. It communicates the agency’s position on a matter, but it does not commit FDA to taking enforcement action. For these reasons, FDA does not consider Warning Letters to be final agency action on which it can be sued.”[1]
The same chapter explains the purpose. Warning letters are “issued to achieve voluntary compliance and to establish prior notice,” and the agency position is that they are “issued only for violations of regulatory significance,” meaning violations “that may lead to enforcement action if not promptly and adequately corrected.” A warning letter is described as the agency’s “principal means of achieving prompt voluntary compliance” with the Federal Food, Drug, and Cosmetic Act.[1]
Read those together and the shape is clear. A warning letter is a serious allegation about conditions an investigator believes violate federal law, published by the agency, addressed to a named party, and answerable. It is not a court finding, not an adjudication, and not a determination that anyone is guilty of anything. FDA’s own index page attaches a standing caveat to every letter on it: matters described “may have been subject to subsequent interaction between FDA and the letter recipient that may have changed the regulatory status of issues discussed in the letter.”[2]
What a warning letter is not
It is not a recall. A recall, in FDA’s definition, is an action taken by a firm to remove a product from the market, and may be conducted “on a firm’s own initiative, by FDA request, or by FDA order under statutory authority.” Recalls are classified by the health consequence: Class I where there is a reasonable probability of serious adverse health consequences or death, Class II where the harm is temporary or medically reversible, Class III where harm is not likely.[5] None of that is what a warning letter does. A letter asks a company to fix something; a recall removes product.
It is also not a Form FDA 483. The 483 comes first, at the close of an inspection, listing what an investigator observed. FDA’s own FAQ states the limit plainly: “The FDA Form 483 does not constitute a final Agency determination of whether any condition is in violation of the FD&C Act or any of its relevant regulations,” and it is weighed alongside the Establishment Inspection Report, the evidence collected on site, and the company’s response. The same page notes the 483 is not an all-inclusive list of deviations and “does not include observations of questionable or unknown significance at the time of the inspection.”[4] Many 483s never become warning letters.
The untitled letter is a lesser instrument, and it says so
The manual defines it by subtraction: “An Untitled Letter cites violations that do not meet the threshold for significance of regulatory significance for a Warning Letter.” The format is required to distinguish it from a warning letter in five specific ways. The letter is not titled. It does not state that FDA will advise other federal agencies of its issuance for contracting purposes. It carries no warning that failure to correct may result in enforcement action. It does not evoke a mandated follow-up. And it requests rather than requires a written response within a reasonable time. Any appropriate agency compliance official may issue one.[1]
For a reader, the practical consequence is that the two are not interchangeable and should never be reported as though they were. Untitled letters are also filed separately: general warning letters live in the main searchable database, while the untitled letters from the Office of Prescription Drug Promotion are published on their own drug marketing and advertising page.[3]
What is inside one, so you can read it yourself
The manual sets out the elements common to warning letters, and they double as a reading guide. The letter is titled “WARNING LETTER.” It is addressed to the highest known official in the corporation. It gives the dates of the inspection and a description of the violative condition, practice or product. It cites the section of the law violated, using both the FD&C Act and the U.S. Code. It requests correction and a written response, “usually fifteen (15) working days” after receipt. It carries a warning that failure to address the issues may result in regulatory or legal action. And it includes, in most cases, language inviting the recipient to supply its reasoning and supporting evidence if it believes it is not in violation.[1]
That last element is the one readers skip. The recipient is formally invited to disagree, and a letter is one side of a correspondence whose other side may not be published.
The close-out letter, and why its absence proves little
For letters issued on or after September 1, 2009, FDA may issue a close-out letter once it has evaluated the corrective actions a firm took. The bar is described as evidentiary rather than declaratory: a close-out letter “will not be issued based on representations that some action will or has been taken. The corrective actions must actually have been made and verified by FDA,” usually through a follow-up inspection.[3]
But the same page carries the caveat that undoes the obvious inference: “If the Warning Letter contains violations that by their nature are not correctable, then no close-out letter will issue.”[3] So an open letter with no close-out can mean the company never fixed it, or that FDA has not yet verified a fix, or that the violation was of a kind that cannot be closed out at all. Three states, one appearance. The database does let you filter for response letters and close-out letters, which is how you tell the first two apart.[2]
The asymmetry that matters most
A warning letter is evidence. The absence of one is evidence of almost nothing, and the manual says why. FDA “is under no legal obligation to warn individuals or firms that they or their products are in violation of the law before taking enforcement action, except in a few specifically defined areas,” and responsible individuals “should not assume that they would receive a Warning Letter, or other prior notice, before FDA initiates enforcement action.”[1]
The chapter then lists five situations in which the agency will act without necessarily issuing a letter first: a history of repeated or continual conduct of a similar nature after notice; a violation that is intentional or flagrant; a violation presenting a reasonable possibility of injury or death; intentional and willful acts under 18 U.S.C. 1001; and cases where adequate notice was given by other means and the violations continue.[1] Three of those five describe worse conduct than a typical warning letter, not better.
Add the plainest fact of all: a letter can only follow an inspection or an investigation, and most facilities in most years are not inspected. A clean search result therefore tells you that no public letter is on file for the name you searched. It does not tell you the operation is clean, and it is the single most common misreading of this record.
What the record actually looks like
Published analyses give a sense of volume and content. A content analysis of warning letters issued to compounding pharmacies for violations of current good manufacturing practice between 2017 and 2022 evaluated 141 letters, in which the leading allegations were adulterated drug products (130), misbranded drugs (103), unapproved new drug products (42), failure to report adverse events (22) and failure to report drugs (11).[6] A separate retrospective analysis of letters issued to pharmaceutical companies from 2010 to 2020 found the most common grounds were poor compliance with current good manufacturing practice and misbranding, with deficiencies in process validation, documentation and data integrity, and quality control accounting for 26%, 21% and 15% of the manufacturing letters respectively.[7]
Two things follow. Letters in this sector are usually about manufacturing and records rather than about a patient being harmed — which does not make them trivial, since the entire point of those controls is to prevent harm nobody can detect in a finished vial. And “adulterated” is a legal term of art meaning the product was prepared under conditions that do not meet the required standard, not a claim that anything was added to it. The difference between the two compounder categories, and which rules each one answers to, is set out in the 503A and 503B article.
How to check a seller yourself
Start at FDA’s warning letters database, which is searchable and filterable by issuing office, letter issue date, posted date, year, and whether a response letter or close-out letter exists.[2] Search the legal entity name, then the brand, then the brand with any qualifier stripped off. A single search string is not a screen: FDA files letters under the name on the letterhead, which is frequently a holding company or a doing-business-as that shares no words with the storefront a customer sees.
Then confirm identity on the domain. A warning letter alleging unapproved-drug or misbranding violations against an online seller normally names the website inside the letter body. That named domain, matched against the site actually taking the order, is the only reliable identification. Company-name resemblance is not: unrelated firms share words constantly, and a near-match convicts the wrong business. If the letter names no domain and the entity name is not an exact match, the honest answer is that the letter cannot be attributed.
Finally, read the letter rather than the headline about it. Note the inspection dates, the specific sections of the Act cited, whether a response or close-out letter is linked, and how old it is. FDA directs anyone wanting the current status of an issue discussed in a letter to submit a Freedom of Information request, because the published letter is a snapshot rather than a running file.[2]
How much weight to give it
A letter that names the domain you are about to buy from is a public, primary-source allegation by a federal regulator about that operation, and it deserves to change your reading of the seller. It is not a verdict, the recipient may have answered it, and the issues may since have been corrected. Treat it as disclosure: something you should know before buying, weighed alongside how the seller responded, how long ago it was, and what was alleged.
Treat a clean search as the weak signal it is. The record covers only firms FDA inspected or investigated and only what it chose to publish, which is why a letter search cannot replace the checks a buyer can make directly — who dispenses, what license they hold, and whether the seller will say. Those are set out in the pharmacy vetting article and in the red-flag article, and the limits of the private certification most sellers display instead are covered in the certification article.
One last piece of context belongs on any page like this. Compounded drugs are not FDA-approved and are not reviewed by the FDA for safety, efficacy or quality before they are dispensed, so the agency’s enforcement record is not a substitute for a premarket review that never happened. It is what exists instead of one, and it is worth reading carefully for exactly that reason. Nothing here is legal advice, and questions about a specific company or a specific letter belong with a licensed professional.