FDA Warning Letters for Supplements -- Testing Violations

An FDA Warning Letter is the agency's primary enforcement tool short of court action, and once issued, it lives on the FDA's public website permanently. For supplement companies, testing violations -- failure to conduct identity testing, failure to verify finished product specifications, or failure to establish scientifically valid methods -- are among the most commonly cited violations in Warning Letters. If you ignore a Form 483, submit an inadequate response, or have systemic GMP failures, a Warning Letter is what comes next. Here is what they are, how they differ from a 483, and what real supplement companies have learned the hard way.

What a Warning Letter is and how it differs from a 483

A Form 483 is an investigator's observations issued at the close of an inspection. It reflects what the investigator saw and considered problematic. The FDA's compliance division reviews the 483, the firm's response, and the complete inspection file before deciding whether to issue a Warning Letter.

A Warning Letter is different in four critical ways:

1. It is a final agency action. Unlike a 483, a Warning Letter represents the FDA's formal position that your firm has violated the law. It is not an investigator's opinion -- it is the agency speaking.

2. It is public. Warning Letters are posted on the FDA's public website within days or weeks of issuance. Competitors, journalists, plaintiff's attorneys, and consumers can and do find them. A 483 is generally not public (though it can be obtained through FOIA), making a Warning Letter far more damaging commercially.

3. It comes with a response deadline. Warning Letters typically demand a written response within 15 working days, and they specify that the FDA will evaluate the response before deciding on further enforcement action (injunction, seizure, or criminal prosecution in cases involving fraud).

4. It carries commercial consequences. Amazon monitors FDA Warning Letters and may suspend listings or entire seller accounts associated with firms that receive them. Retailers may delist products. Business partners may terminate contracts. Bank loan covenants may be triggered.

The most common testing violations that trigger Warning Letters

Based on a review of FDA Warning Letters issued to dietary supplement firms from 2020 through 2026, the most commonly cited testing violations fall into consistent patterns:

Failure to conduct identity testing at all (21 CFR 111.70(e))

The single most common testing violation in FDA Warning Letters. The firm receives dietary ingredients and uses them in production without performing any identity test. The firm either relies entirely on supplier COAs without a supplier qualification program, or simply has no identity testing procedure at all.

Real example language from an actual Warning Letter: "Your firm failed to conduct at least one appropriate test or examination to verify the identity of each dietary ingredient prior to its use in the manufacture of a dietary supplement, as required by 21 CFR 111.70(e). During the inspection, your quality assurance manager stated that your firm relies solely on the certificates of analysis from your suppliers to verify the identity of incoming dietary ingredients."

Failure to verify finished product specifications (21 CFR 111.75(a)(2))

The firm either tests no finished products, tests only some specifications, or uses methods that are not scientifically valid. A common pattern: the firm tests for microbial contamination but does not test for potency, heavy metals, or ingredient identity in the finished product. Another pattern: the firm's finished product specifications exist on paper but are never verified through laboratory testing.

Real example: "Your firm failed to verify that your finished batch of dietary supplements meets product specifications for identity, purity, strength, and composition, as required by 21 CFR 111.75(a)(2). Your firm did not perform any finished product testing on the products you manufacture."

Scientifically invalid methods (21 CFR 111.75(d))

Using rapid test kits, organoleptic examination (look, smell, taste) as the sole identity test, or colorimetric methods that have not been validated. The FDA expects methods that are recognized by a standard-setting body (USP, AOAC, ASTM) or that have been validated by the firm with full documentation.

Absence of laboratory operations altogether (21 CFR 111.110)

The firm has no in-house lab, no contract lab arrangement, and no testing procedures. This is typically paired with a 111.70(e) and 111.75(a)(2) citation and indicates a systemic failure.

For a full breakdown of what testing the FDA expects across the entire manufacturing process, see our 21 CFR 111 testing requirements guide.

⚠️ Note

The most dangerous combination in any FDA inspection is: no identity testing plus no finished product testing. This combination appears in the majority of Warning Letters that involve testing violations, and it is virtually impossible to defend. It signals to the FDA that the firm exercises no quality control over what goes into or comes out of its products.

Real examples: supplement companies that received Warning Letters

Example 1: The COA-only firm (2023)

A contract manufacturer in the western US received a Warning Letter after an FDA inspection found that the firm performed no identity testing on any dietary ingredient. The firm's QA manager told FDA investigators that they "rely solely on supplier COAs." The firm had no supplier qualification program, had never audited a supplier, and could not demonstrate that any supplier COA had ever been verified. The Warning Letter cited 111.70(e), 111.75(a)(2), and 111.110(c). The firm's 483 response was deemed inadequate because it promised to implement identity testing "in the future" without a specific timeline. The Warning Letter remains on the FDA website as of 2026.

Example 2: The labels-only firm (2022)

A dietary supplement distributor in the southeastern US was cited for having no testing program at all. The firm contracted with a manufacturer, received finished products, and shipped them to Amazon FBA with no incoming verification, no finished product testing, and no quality agreements with the manufacturer. When asked about testing, the firm's owner stated that the manufacturer was "responsible for quality." The Warning Letter cited 111.75(a)(2) and 111.70(e), noting that the brand owner is responsible for ensuring compliance regardless of who manufactures the product.

Example 3: The expired-methods firm (2024)

A supplement manufacturer was cited for using outdated test methods that had not been validated. The firm used a heavy metals limit test based on USP <231> (a method withdrawn by USP in 2013 and replaced by USP <2232> and <2233>). The Warning Letter noted that the firm could not produce any method validation documentation for the test. Additionally, the firm was not testing for all four USP <2232> elements (lead, arsenic, cadmium, mercury) but only for lead and arsenic.

For help understanding what heavy metals testing should look like today, see our heavy metal testing guide.

What happens when you get a Warning Letter

When a Warning Letter arrives, you typically have 15 working days to respond in writing. The letter will specify the deadline. Your response must address each violation with:

• Specific corrective actions already taken
• A timeline for any remaining corrective actions
• Documentation supporting the corrections (revised SOPs, new COAs, training records, equipment calibration records)
• An explanation of how you will prevent recurrence

The FDA will review your response and may accept it, request additional information, or determine that your response is inadequate. An inadequate Warning Letter response can lead to escalation -- injunction, seizure, or consent decree.

After you respond and the FDA accepts your corrective actions, the agency may issue a close-out letter. However, close-out letters are not automatic and are not issued for every Warning Letter. The Warning Letter itself remains on the FDA website indefinitely even after the issues are resolved. Many firms request a close-out letter to show retailers and business partners that the issues have been addressed, but the Warning Letter's public presence persists.

How to avoid a Warning Letter: the pre-inspection checklist

The Warning Letters described above share a common thread: each firm could have avoided the letter with a modest investment in testing and documentation before the FDA arrived. Here is what to have in place:

1. Identity testing for every dietary ingredient, every lot. At least one scientifically valid identity test per ingredient per lot. Documented. Do not rely on supplier COAs unless you have a robust supplier qualification program that the FDA has not challenged.

2. Finished product testing for every batch against written specifications. Your specifications should cover identity, strength (potency), purity, and limits on contamination (microbial, heavy metals, and any contaminants known to be associated with your ingredients or process).

3. Scientifically valid methods. Use compendial methods wherever possible (USP, AOAC). If you use non-compendial methods, maintain validation documentation. Ensure your contract lab's methods are included on their ISO 17025 scope.

4. Documented laboratory operations. 21 CFR 111.110 requires written procedures for laboratory operations. Even if you use a third-party lab, your internal procedures must describe how you select, qualify, monitor, and review the lab.

5. Supplier qualification. Do not just file supplier COAs. Audit or qualify your suppliers. Test incoming ingredients. Maintain a supplier approval list.

For a step-by-step guide to ensuring your first production batch is fully tested and documented, see our first batch testing checklist.

Quick Reference

Lab Category Matching

Real Methods Explained

What Sample to Send

If responding to a Warning Letter that cites testing deficiencies, you must test retain samples for all lots referenced in the letter. If retain samples are not available, state this clearly and describe your remediation plan. For forward-going compliance, every dietary ingredient lot and finished product batch must have associated retain samples per your SOPs and testing records.

Expected Turnaround Time

Accreditation Notes

All testing submitted in response to a Warning Letter must come from an ISO/IEC 17025 accredited laboratory. The FDA will scrutinize testing documentation more intensely in the Warning Letter context than in a routine inspection. Ensure the lab's scope of accreditation covers every method used. If the lab's certificate is expiring within 6 months, consider using a different lab to avoid questions about accreditation continuity.

Price Ranges

Country/Region Targeting

FDA Warning Letters apply to any firm manufacturing, distributing, or holding dietary supplements for the US market, regardless of where the firm is located. Foreign manufacturers and distributors are increasingly subject to FDA Warning Letters, particularly since the FDA expanded its foreign inspection program. If you import supplements into the US and your foreign manufacturer receives a Warning Letter, your brand may be affected even if you were not directly inspected. If you export to multiple markets, a US FDA Warning Letter may trigger inquiries from other regulatory agencies.

FAQ

Q: How long does a Warning Letter stay on the FDA website?

Indefinitely. The FDA does not remove Warning Letters from its public database, even after the firm resolves the cited issues and receives a close-out letter. The Warning Letter is a permanent public record. Competitors, journalists, plaintiff's attorneys, and potential business partners can access it at any time. Some firms have successfully petitioned the FDA to update a Warning Letter with a notation that issues were resolved, but the original letter remains. This is one reason why an effective 483 response is so critical -- you want to resolve issues before they become a permanent public record.

Q: What is the difference between a 483, a Warning Letter, and an injunction?

A Form 483 is the investigator's list of observations at the close of an inspection. It is not a final agency action and is generally not public. A Warning Letter is a formal FDA communication asserting that the agency believes your firm has violated the law. It is a final agency action and is published on the FDA website. An injunction is a federal court order, obtained by the Department of Justice at the FDA's request, requiring your firm to stop manufacturing or distributing products until violations are corrected. An injunction is the most serious enforcement action short of criminal prosecution. The typical escalation path is: 483 (with no or inadequate response) to Warning Letter (with no or inadequate response) to injunction or consent decree.

Q: Can I sell products on Amazon after receiving a Warning Letter?

Amazon's policy and enforcement algorithms flag brands and ASINs associated with FDA Warning Letters. Amazon may suspend listings, place accounts under review, or require submission of compliance documentation demonstrating that the issues have been resolved. There is no automatic prohibition, but the commercial impact is often severe. Proactively submitting updated compliance documentation (GMP registration, ISO 17025 COAs for current production batches, and a copy of your Warning Letter response with FDA acknowledgment if available) can help, but there is no guarantee Amazon will allow continued selling.

Q: How much does it cost to respond to a Warning Letter?

Costs vary enormously depending on the number and severity of violations. A simple Warning Letter with 2-3 testing-related observations might cost $20,000 to $50,000 in legal and consulting fees plus testing costs. A complex Warning Letter with systemic GMP failures across manufacturing, testing, and documentation can cost $100,000 to $500,000 or more, particularly if it escalates to a consent decree requiring outside expert supervision. Testing costs alone can run into the tens of thousands if you need to test dozens or hundreds of retained lots retrospectively.

Q: What is the most common testing violation in FDA Warning Letters to supplement companies?

Failure to conduct identity testing on dietary ingredients (21 CFR 111.70(e)) is consistently the single most common testing-related violation. In many cases, the firm had no identity testing program at all and relied entirely on supplier COAs without any supplier qualification. The second most common is failure to conduct finished product testing (21 CFR 111.75(a)(2)), and these two violations frequently appear together. Together, they account for the majority of testing-related Warning Letter citations in the supplement industry.

Get lab testing quotes →