Amazon's Cosmetics Restricted Products Policy: What Beauty Brands Must Test Before Listing in 2026

Most beauty brands discover Amazon’s restricted products policy the hard way — after a listing gets suppressed. By then, the damage is already done: inventory sitting in FBA warehouses, sales rank lost, and a verification queue that can stretch 3 to 6 weeks depending on the product category and how complete your first submission was.

The frustrating part is that Amazon’s requirements, while detailed, are entirely predictable. They’re not arbitrary gatekeeping. They reflect a regulatory environment that shifted significantly when the FDA’s Modernization of Cosmetics Regulation Act (MoCRA) was signed into law in December 2022 — the first substantive overhaul of US cosmetics regulation in 84 years. Once you understand why Amazon is asking for what it’s asking for, the path forward becomes much clearer.

Why Amazon’s Cosmetics Policy Tightened — and Why It Isn’t Going Away

Amazon expanded its Restricted Products program for cosmetics considerably over the past 18 months, and the timing is not coincidental. Under MoCRA, brands are now required to maintain “adequate substantiation” that their products are safe before they enter US commerce. That means documented testing data — not a formulator’s experience, not a supplier’s safety bulletin, and not a certificate that predates your most recent formula revision. Amazon’s platform compliance teams watch FDA enforcement closely, and they tend to get ahead of regulatory pressure rather than react to it.

The practical result is that Amazon’s documentation requirements now shadow MoCRA’s safety substantiation framework almost exactly. If your safety file isn’t organized enough to satisfy an FDA facility inspection, there’s a good chance it won’t satisfy Amazon’s verification team either. That’s not a coincidence. It’s a signal worth paying attention to.

What Amazon Actually Flags as a “Restricted” Cosmetic

Not every cosmetic triggers Amazon’s restricted products workflow, but the list is broader than most brands expect when they first encounter it.

OTC drug-cosmetic combinations are the most common trap. Sunscreens at SPF 2 or above, acne treatments containing benzoyl peroxide or salicylic acid, anti-dandruff shampoos, and antiperspirants are all regulated as OTC drugs under 21 CFR Part 330 — not purely as cosmetics. Amazon requires OTC monograph compliance documentation on top of standard cosmetic safety testing for every product in this category. A cosmetic-only COA won’t close the case.

Skin-lightening and brightening claims trigger manual review almost universally. Products with kojic acid, tranexamic acid, azelaic acid, or niacinamide above certain concentrations get flagged. Hydroquinone above 2% is classified as a prescription drug in the US and will not be approved for listing under any circumstances, regardless of what documentation is submitted.

Eye-area products face stricter microbial limits than standard face or body products — 100 CFU/g or mL for specified pathogen groups, versus 1,000 CFU/g for most rinse-off formulas. Amazon’s reviewers do check which standard was applied. A COA that lists the wrong limit for the product type will not pass.

Ingestible beauty and hybrid products — collagen drinks, supplement-cosmetic bundles, anything with an internal-use claim alongside topical claims — are almost always flagged for additional review, and in many cases require separate regulatory pathways for each component.

The underlying logic Amazon applies: if a product makes a drug-adjacent claim or contains an ingredient with a known risk profile, it gets scrutinized more carefully. Formulating around label language is common practice, but Amazon’s reviewers are trained to examine ingredient lists, not just the claims on the front panel.

The Testing Documentation Amazon Wants to See

When Amazon’s compliance team requests documentation, they’re looking for three things in a compliant cosmetics submission: a Certificate of Analysis from an accredited lab, a safety substantiation package, and — for OTC products — regulatory compliance documentation.

The COA from an ISO 17025-Accredited Lab

This is the non-negotiable baseline. ISO 17025 is the international standard for testing and calibration laboratory competence. It means the lab’s analytical methods have been independently assessed for technical validity, measurement uncertainty is documented, and results are fully traceable. Amazon explicitly requires ISO 17025-accredited testing; a COA from an unaccredited lab, or from your contract manufacturer’s in-house QC department, will not move through review.

A compliant cosmetic COA for Amazon typically needs to cover:

• Microbial testing per USP <61>/<62> or ISO 17516. Total aerobic microbial count, yeast and mold count, and the absence of specified pathogens — Pseudomonas aeruginosa, Staphylococcus aureus, Candida albicans, and Escherichia coli — are standard. Eye-area products require the more stringent 100 CFU/g limit for TAMC.
• Heavy metals panel covering at minimum lead, arsenic, cadmium, and mercury. FDA’s current guidance recommends a 10 ppm limit for lead in lip products and externally applied cosmetics. Mercury sits at an effective near-zero tolerance — 1 ppm in any product not intended as an eye-area preservative — and ICP-MS is the method of choice for detection at those levels, with detection limits reaching into the parts-per-trillion range.
• pH, viscosity, and identity confirmation matched to your specification sheet. These seem basic, but inconsistencies between your COA and your product listing are one of the top reasons submissions get kicked back.

Stability Data

Amazon doesn’t require this for every listing, but for sun care products and anything claiming a defined shelf life, 6-month accelerated stability data — conducted at 40°C and 75% relative humidity per ICH Q1A(R2) guidelines — meaningfully strengthens a submission and can preempt follow-up requests. Some premium beauty categories are beginning to expect it as part of the initial package.

Product Safety Assessment

MoCRA requires that a responsible person — the US-based brand or importer — maintain safety substantiation records for each product. A Product Safety Assessment (PSA) prepared by a qualified toxicologist documents ingredient-level safety data, relevant exposure estimates, and any applicable clinical literature. Amazon’s review teams in OTC-adjacent and premium categories are increasingly asking for a summary PSA alongside the COA. A one-to-two-page toxicologist sign-off referencing CIR assessments and applicable safety thresholds is often enough to satisfy the request without commissioning a full clinical dossier.

How to Build a Testing Package That Actually Passes

Getting the underlying testing right is necessary. Getting the submission organized correctly is what determines how fast you move through the queue. These are the steps that reduce resubmissions.

1. Classify your product accurately before you order any testing. Cosmetic, OTC drug, or a dual-regulated combination? That classification determines which panels apply. Getting it wrong means starting over, and on Amazon’s timelines, that costs real money.

2. Test the finished product, not the raw materials. Amazon wants data on the product as the consumer receives it in its final packaging. A COA for your preservative blend or your active ingredient is not a substitute for finished-product testing. This is the single most common misunderstanding we see from brands new to third-party testing.

3. Match the COA exactly to the ASIN and formulation. Product name, formulation version number, and lot number on the COA must correspond to what’s listed. If you’ve made any formula change since your last test — even swapping a fragrance component or adjusting a preservative level — the previous COA is no longer valid for that product.

4. Include the lab’s current accreditation certificate in your submission. Amazon’s compliance team verifies accreditation status independently, but including it in your initial upload signals organization and reduces back-and-forth. The certificate should show the specific scope of accreditation relevant to your product category.

5. For OTC products, attach your monograph compliance documentation upfront. For a sunscreen, that means demonstrating each active ingredient and its concentration falls within the approved OTC monograph framework. A one-page compliance memo from a regulatory consultant — mapping your actives to 21 CFR Part 352 requirements — saves considerably more time than waiting for Amazon to ask for it in a second request.

6. Treat your testing as a living document, not a one-time event. Testing older than 12 months raises flags during Amazon’s random compliance sweeps. If your listing was approved two years ago on data you haven’t refreshed, you’re exposed. Proactive retesting — timed to formula reviews or annual compliance cycles — is significantly cheaper than losing FBA rank during an unexpected suspension.

The Failure Patterns We See Most Often

A few mistakes come up repeatedly in submissions that get bounced.

Testing to the wrong microbial standard. A brand tests their eye cream to the standard cosmetic TAMC limit of 1,000 CFU/g instead of the eye-area limit of 100 CFU/g. The COA looks fine internally; Amazon’s reviewer knows the difference. The submission fails, and the brand has to retest — which typically takes another 2 to 3 weeks.

Submitting manufacturer-provided COAs as third-party documentation. Your contract manufacturer’s COA is an internal QC document. It has real value for your own production oversight, but it is not independent third-party verification. Amazon and FDA treat these entirely differently. Only a COA from an accredited external lab carries the evidentiary weight these programs require.

Overlooking California’s Prop 65 exposure. Amazon operates fulfillment centers throughout California, and a material share of beauty consumers live there. Lead’s maximum allowable dose level under Prop 65 for reproductive toxicity is 0.5 micrograms per day — a threshold that some lip products and certain pigmented formulas can approach at background raw material concentrations, even while staying below FDA’s 10 ppm guidance limit. If your heavy metals panel isn’t also being read through a Prop 65 lens, you may be compliant with FDA but still exposed to civil enforcement in California.

Claiming “preservative-free” without preservation efficacy data. This claim invites closer scrutiny, not less. If your formula relies on a physical preservation system — low water activity, low pH, high ethanol content — you still need challenge testing per ISO 11930 to demonstrate the system functions as intended. “Preservative-free” on the label without supporting data is a red flag that trained reviewers are specifically looking for.

---

The beauty brands that consistently move through Amazon’s verification process without disruption aren’t the ones with the simplest formulas or the fewest ingredients of concern. They’re the ones who understand the regulatory logic behind the requirements, test to the right standards before listing, and keep their documentation current. That requires building a real relationship with a qualified testing lab — not just placing an order when compliance becomes urgent.

---

Written by Nour Abochama, Vice President of Operations, Qalitex Laboratories. Learn more about our team

Talk to our team about your testing needs. Contact us

Related from our network

• FDA Regulatory Strategy for Cosmetic and OTC Drug Products — Aurora TIC’s consulting team helps brands navigate the overlap between cosmetic and OTC drug classification under MoCRA and 21 CFR.
• Cosmetic Raw Material Testing and Supplier COA Verification — Ayah Labs supports ingredient-level testing and supplier qualification for cosmetic manufacturers working toward finished-product compliance.