Ordering medication online from Mexico, shipped to the United States.

Legal framework and FDA mail rules

Three agencies meet at a medicine parcel. FDA decides whether a drug appears admissible under the Food, Drug, and Cosmetic Act. CBP screens the mail and can detain or seize goods. DEA authority covers controlled substances, and FDA’s own personal-importation page says DEA generally decides those.

The baseline is strict. FDA states that, in most circumstances, it is illegal for individuals to import drugs for personal use, because a drug bought in another country is often unapproved for sale in the United States. A foreign version of a drug that is approved here is still an unapproved drug if FDA has not approved that specific product. FDA’s recommendation to consumers is to obtain medicine from legal U.S. sources.

International mail does not slip past that baseline. FDA staff are responsible for monitoring mail importations at International Mail Facilities. CBP sets aside parcels that appear to contain a drug, biologic, or device. FDA then audits those parcels. The addressee is the consignee, which is why a notice about the box comes to the patient rather than to a customs broker.

Personal importation discretion, including the 90-day supply

What people call the 90-day rule is FDA’s personal-importation policy, written up in Regulatory Procedures Manual Chapter 9-2 and summarized on FDA’s personal-importation page. It tells FDA staff when they may use enforcement discretion. It does not amend the statute and it does not require CBP to deliver the package.

For a U.S. citizen or resident, FDA describes a more permissive look in two situations:

• The product is not for a serious condition, and there is no known significant health risk.
• The product is for a serious condition, and every one of the following is true: effective treatment may not be available in the United States through commercial or clinical means; the product is not being commercialized or promoted to U.S. residents; the product does not represent an unreasonable risk; the buyer affirms in writing that it is for personal use; and the quantity is generally not more than a three-month supply. The person also provides the name and address of the U.S.-licensed doctor responsible for the treatment, or evidence that the treatment began in another country.

The three-month figure is a quantity cap inside that second branch. A cheaper price is not one of the criteria. A maintenance drug that is already sold at a U.S. pharmacy often fails the “effective treatment may not be available domestically” test, even when the Mexican box is a 90-day supply of a non-controlled medicine. Heavy promotion to Americans is itself a factor FDA lists against discretion. FDA’s manual says the agency puts more enforcement attention on commercial mail-order promotions than on medicine a person carries.

Non-controlled status is required and still not sufficient. Controlled substances are outside this FDA pathway. DEA decides them, and the mail answer is below.

Foreign visitors are described separately. FDA says it will allow a foreign national to bring or ship a 90-day supply, with more sent later if the stay is longer, and it suggests a visa or passport copy, a doctor’s letter, and an English prescription when the medicine is mailed. That visitor wording is not a U.S. resident’s permit to run a standing order.

FDA also says it will refuse a personal importation when the product is on an import alert, the shipment looks commercial, the product presents a serious health risk, or the product looks like a health fraud.

Controlled substances and the Ryan Haight Act

The Controlled Substances Act makes it unlawful to import controlled substances except as the statute authorizes. DEA’s 2004 Federal Register notice states the practical consequence: a person who causes a controlled substance to be brought into the United States, including by mail or a private shipping company, has imported it. Unless that person is registered with DEA as an importer and holds the required permit or authorization, the importation is a federal felony.

The Ryan Haight Online Pharmacy Consumer Protection Act of 2008 tightened the internet side of the same statute. It is illegal to deliver, distribute, or dispense a controlled substance by means of the internet except as the Act authorizes. Online pharmacies that dispense controlled substances have to be DEA-registered pharmacies with a modification that allows the online activity, and a valid prescription generally has to rest on an in-person medical evaluation, aside from defined telemedicine exceptions. A website questionnaire that produces a prescription is the pattern the Act was written to stop. A Mexican website is not a DEA-registered online pharmacy.

What sits on which schedule

• Schedule II includes drugs such as oxycodone, hydrocodone, fentanyl, morphine, amphetamine, and methylphenidate.
• Schedule III includes products such as buprenorphine combinations and anabolic steroids.
• Schedule IV includes benzodiazepines (alprazolam, clonazepam, diazepam, lorazepam), tramadol, and Z-drugs such as zolpidem, eszopiclone, and zaleplon.
• Schedule V includes certain low-dose codeine cough preparations and pregabalin.

“Sleep aid” is too broad to use as a shopping category. Diphenhydramine is not a controlled substance. Zolpidem is Schedule IV. The DEA schedule, not the website’s department name, is the legal test.

A paper prescription does not repair a mail order. DEA has said expressly that buying from a foreign pharmacy, even when a U.S. prescription is sent along, is still illegal importation if the recipient is not a registered importer. There is a separate, narrow rule for a traveler who physically carries a controlled substance that was lawfully dispensed. It is explained on the customs page. It does not apply to a parcel, and it is not an invitation to buy a supply.

What happens at an International Mail Facility

Servicio Postal Mexicano hands an export parcel into the international mail stream, and USPS is the U.S. delivery carrier if the parcel is released. Before that delivery, inbound international mail is presented at a CBP International Mail Facility. Facilities operate in cities such as New York, Miami, Chicago, Los Angeles, and San Francisco. The recipient does not pick the facility, and a box addressed to Texas may be examined somewhere else.

CBP officers screen the mail. They may X-ray a parcel and open it. Parcels that appear to contain drugs are set aside for FDA. FDA’s mail staff audit those set-asides. Tracking often stalls on a phrase such as “Inbound Into Customs” or a processed-through-facility scan while that work happens. A stall of days, and sometimes longer, is a normal part of the exam. It is not proof of seizure, and a moving scan is not proof of release.

Detention, refusal, and seizure

FDA’s International Mail Facilities page describes the mail outcomes. If the products appear to violate FDA law and do not qualify as a personal importation, FDA may detain the package and send a Notice of FDA Action marked “Detained” or “Detained / May be Destroyed.” That notice is the Notice of Detention and Hearing. It names the apparent violation and a respond-by date. FDA’s manual allows 10 business days to provide testimony; the printed notice generally allows about 20 calendar days so weekends and mail time are covered. Use the date on your notice.

The owner or consignee may respond with evidence aimed at the charge on the form. In a personal-drug case, that evidence is the material FDA’s policy already lists: a written personal-use statement, the prescription, and the U.S. prescriber’s name and address or proof that treatment started abroad. If the testimony is enough, FDA releases the parcel to USPS and issues a Notice of FDA Action saying so. If it is not enough, or if nobody answers by the respond-by date, FDA refuses admission. The refusal notice states whether a refused drug will be destroyed or returned to the sender.

A CBP Notice of Seizure is a different document. It means the goods have been taken for a forfeiture process, which is common with controlled substances and with goods that are prohibited rather than merely unapproved. The notice lists the options and the deadline that apply to that seizure. Read those, not a generic blog checklist. Storage and penalty exposure can attach to a seizure of commercial or prohibited goods. This guide cannot answer the notice for you. If the form is unclear, use the contact printed on it or a licensed attorney.

Legitimate cross-border services versus rogue pharmacies

FDA’s BeSafeRx program and the National Association of Boards of Pharmacy describe the same split that patients run into. A careful international service behaves like a pharmacy. A rogue site behaves like a checkout with a pharmacy costume. Compare the row, not the logo.

A credit card is one signal, not a verdict. Rogue sites sometimes obtain a merchant account. The prescription requirement, a verifiable license, and a refusal to mail controlled substances carry more weight. FDA does not certify online pharmacies. An “FDA approved” seal on a pharmacy website is fake. FDA approves drug applications, not storefronts.

Third parties worth using, and seals worth ignoring

Carriers, timelines, and packaging

Postal pipeline

The ordinary route is Correos de México, the public name of Servicio Postal Mexicano, into USPS. Sellers commonly quote 10 to 21 business days door to door. Some parcels move faster. An IMF exam sits outside that quote and can add days or weeks while tracking looks frozen. The destination ZIP code does not tell you which IMF will see the box.

Express couriers

DHL, FedEx, and UPS treat prescription drugs as restricted commodities. A courier may require the shipper to be an authorized business and may demand a prescription, a physician letter, and a personal-use statement before it will move the box. Controlled-substance shipments are not accepted as personal imports. Express clearance is often more formal than a postal parcel, not a way around FDA. When a courier does accept a non-controlled personal shipment and the agencies release it, transit is often a few business days, followed by an open-ended hold if FDA detains it.

Many checkout buttons labeled “express” never produce a courier shipment. The parcel enters the postal stream anyway, or the courier stops it for paperwork a consumer site cannot provide. Treat an express promise from a no-prescription website as a sales line.

Packaging a legitimate shipment uses

• The manufacturer’s sealed box, or the pharmacy’s labeled container, with the generic name and strength.
• Lot number and expiration date you can read.
• A pharmacy name and address that match the business you paid.
• An invoice that matches the prescription quantity, generally within a 90-day personal supply.

Loose tablets in a plastic bag are a counterfeit signal and a customs problem. Ask the seller to describe the package before you pay. Do not ask anyone to hide the contents, under-declare the value, or label a drug as something else. That is a false statement to customs, and it is how a questionable purchase becomes a smuggling case.

Why the big chains stay in their stores

Farmacias Guadalajara, Farmacias del Ahorro, Farmacias Benavides, Farmacia San Pablo, and Farmacias Similares are retail systems. COFEPRIS authorization covers dispensing in Mexico. A U.S. home-delivery service would be a different business: export of products FDA generally treats as unapproved, mail screening, card-network rules, and DEA exposure if a controlled drug were included. Their apps deliver inside Mexico. The full answer is in the FAQ, including the lookalike sites that rent a chain’s logo.

Insulin, biologics, and the temperature problem

Insulin and many biologics, including GLP-1 medicines such as semaglutide and tirzepatide, are labeled for refrigerated storage, typically 2–8°C (36–46°F). Freezing destroys them. Heat destroys them. Ordinary international mail is a truck, a warehouse, an aircraft hold, and a mailbox. None of those is a validated cold chain. A gel pack inside a padded envelope holds temperature for hours, not for a 10-to-21-day postal trip, and a pack that is too cold can freeze the product if it touches the carton.

Some products allow a limited room-temperature window after dispensing. That window is in the package insert, it assumes the labeled conditions, and a closed mailbox in summer exceeds it. If a cold-chain medicine arrives warm, hot, or frozen, do not use it and do not “try a dose to see.” Ask the prescriber or a pharmacist. Potency loss is not always visible, and a biologic that has aggregated is a safety problem, not just a weak dose.

Compounded injectables sold through informal online channels add a manufacturing-quality problem on top of the temperature problem. FDA has warned about compounded and illegally marketed versions of these drugs. Mail order is the wrong sourcing method for this category. A short border crossing with a cooler that matches the label is the only personal-travel version that can even be discussed, and only with a real prescription. The border-town page covers the counter. The decision tool below will sort the category.

Customs insurance and reshipment policies

Sellers fold three different promises into the words “guaranteed delivery.” Separate them before you pay.

1. Carrier or postal insurance covers loss or physical damage in the carrier’s custody, up to a declared amount, under that carrier’s rules. It does not bind CBP or FDA. Prohibited goods are a poor fit for an insurance claim, and controlled substances should not be in the parcel at all.
2. A store reship or refund policy is a private contract. Read whether “reship” means another parcel, a refund, or store credit, and read the exclusions. Common exclusions are customs refusal, a missed deadline to answer FDA, a wrong address, and controlled substances.
3. Marketing guarantees do not move an IMF. A second shipment of a drug FDA already refused is another inadmissible shipment. A reship of a controlled substance is another illegal import.

If the medicine arrives damaged, the photographs and the written policy are the whole claim. If a government notice arrives, the notice outranks the seller’s chat agent. Details are in the FAQ.

Can I order my med online?

Pick the category that matches the drug’s legal and storage status. The result states the mail rule, the risk, whether a prescription is required, and whether mail or an in-person crossing is the method that fits. It does not name a pharmacy and it does not predict a release.

Questions people ask after they order

Sources

Agency pages change. If this guide and a linked page disagree, the agency page is the one to follow. Nothing here is a personal clearance opinion, a prescription, or legal advice.

• FDA: Personal Importation
• FDA Regulatory Procedures Manual, personal importations (PDF)
• FDA: International Mail Facilities
• FDA: Detention and Hearing
• CBP: Prohibited and Restricted Items
• 21 USC § 952, importation of controlled substances
• DEA Federal Register notice on importing controlled substances (2004)
• Ryan Haight Online Pharmacy Consumer Protection Act of 2008
• 21 CFR § 1301.26, personal medical use when traveling
• CIPA: Verify a website
• PharmacyChecker verification portal
• NABP: Buy Safely
• FDA BeSafeRx for consumers
• COFEPRIS