Spas and MedSpas Safety Checklist: Red Flags and What to Verify [2026]

Medical Disclaimer: This article is for informational purposes only and does not constitute medical advice. Always consult a board-certified physician or dermatologist before undergoing any medical spa procedure. Individual results vary, and all treatments carry some degree of risk.

Affiliate Disclosure: SpaLens may earn a commission from products linked in this article at no extra cost to you. We only recommend products we've independently vetted.

Quick Answer: Before booking any medspa treatment, verify three things: (1) a named, board-certified medical director who actively supervises the facility, (2) proper state licensing for both the business and every provider who'll touch your skin, and (3) transparent pricing with a thorough consultation before any procedure. If any of those are missing, walk away. The American Medical Association reports that 36 states still lack meaningful regulatory oversight of med spas — which means the burden of verification falls squarely on you.

Why a Safety Checklist Matters More Than Ever in 2026

The medical spa industry has exploded. Market projections place the U.S. medspa sector above $28 billion by the end of 2026, with new locations opening at roughly 12-15% year-over-year growth. That's a lot of Botox, laser resurfacing, and body contouring happening in strip malls, luxury hotels, and standalone clinics across the country. And while reputable operators like Hotel Bel-Air Spa and Radiance Laser & Cosmetic Center maintain rigorous standards, the reality is that not every facility calling itself a "medspa" deserves your trust.

Here's the uncomfortable truth: the regulatory framework hasn't kept pace with the boom. According to the American Medical Association, 36 states lack adequate regulatory oversight specifically tailored to medical spas. That's not a typo. More than two-thirds of states don't have medspa-specific rules on the books. The procedures happening inside these facilities — injectable neurotoxins, prescription-strength chemical peels, laser treatments that can burn through skin layers — are medical procedures. But the oversight often treats them like they're facials.

New York became one of the first states to introduce comprehensive medspa regulations effective in 2026, requiring stricter physician oversight, mandatory adverse event reporting, and clearer scope-of-practice boundaries. But that's one state. If you live in the other 49, you're probably navigating a patchwork of rules that vary wildly — some strong, some basically nonexistent.

The FDA has also ramped up enforcement around counterfeit injectables. In 2025 alone, the agency issued multiple warnings about fake Botox products entering the U.S. supply chain, with at least 22 people hospitalized from counterfeit botulinum toxin injections. These weren't back-alley operations. Some were licensed facilities that unknowingly (or knowingly) purchased discount products from unauthorized distributors.

This is why a personal safety checklist isn't optional anymore. It's essential. Whether you're booking your first-ever medspa appointment or you're a regular who's been getting treatments for years, the landscape has shifted. New providers, new products, new regulations in some states but not others. You need a systematic way to evaluate any facility before you let someone inject, laser, or peel your skin.

If you're brand new to the spa world, start with our Spa Beginners Guide for foundational knowledge. But even experienced spa-goers should treat this checklist as a refresh. The stakes are real — complications from improperly performed medspa procedures include nerve damage, scarring, infections, and in rare cases, vascular occlusion from filler that can cause blindness or tissue death.

Let's break down exactly what to verify, what red flags should send you running, and how to protect yourself in an industry where not everyone playing doctor actually is one.

Red Flag #1: No Named Medical Director or Physician Oversight

This is the single biggest red flag. Full stop.

A legitimate medical spa operates under the supervision of a licensed physician — typically a board-certified dermatologist, plastic surgeon, or physician trained in aesthetic medicine. This person is the medical director. Their name should be public. Their credentials should be verifiable. And they should be actively involved in the clinical operations of the facility, not just lending their license to a business owner in exchange for a monthly fee.

That last scenario has a name: it's called a "Management Services Organization" (MSO) arrangement, and while the structure itself can be legal, it's frequently abused. In the worst cases, the medical director has never set foot in the facility. They signed paperwork, cashed a check, and have zero involvement in patient care, protocol development, or provider supervision. This is illegal in most states, but enforcement is spotty.

What to verify:

Ask for the medical director's name before your appointment. If the front desk can't tell you, that's a problem. If they say "we have one but they're not here," dig deeper. How often are they on-site? Do they review treatment plans? Are they available for emergencies?
Look up their credentials. Every state medical board has a public license verification tool. Search the doctor's name, confirm their license is active, and check for any disciplinary actions. This takes about three minutes.
Check their board certification. "Board-certified" means they passed rigorous specialty exams through a recognized board (ABMS-member boards in the U.S.). "Board-eligible" is not the same thing. Neither is a certificate from a weekend training course.
Ask about their involvement. A good medical director establishes treatment protocols, reviews complex cases, trains and supervises mid-level providers, and is available (at minimum by phone) during all operating hours.

According to Holt Law's compliance checklist, the medical director should have documented protocols for every procedure offered, including emergency response plans for adverse reactions. If a medspa can't produce written protocols, they're operating on vibes. That's not medicine.

Facilities like Radiance Laser & Cosmetic Center make their physician credentials front and center — on their website, in their consultation rooms, and in their marketing. That transparency is a baseline, not a bonus.

The bottom line: If you can't identify the medical director, verify their credentials, or confirm their active involvement, do not proceed with any medical-grade treatment at that facility. Period. Traditional day spas offering only facials and massages don't require physician oversight — but any place doing injectables, lasers, or prescription-strength treatments absolutely does. Not sure about the difference? Read our breakdown of Day Spa vs Medical Spa.

Red Flag #2: Unlicensed or Undertrained Providers

Even with a stellar medical director, the person actually performing your treatment matters enormously. And this is where the medspa industry gets murky.

State scope-of-practice laws determine who can legally perform which procedures. These laws vary dramatically. In some states, a registered nurse can independently administer Botox injections. In others, that same nurse needs direct physician supervision — meaning the doctor must be physically present in the facility. In a handful of states, aestheticians with advanced certifications can perform certain laser treatments. In others, only physicians or physician assistants can operate medical-grade lasers.

The problem? Many consumers don't know to ask. And some medspas count on that.

What to verify about your provider:

Their specific license type. RN, NP, PA, MD/DO, licensed aesthetician — each has a different scope of what they can legally do. Ask what license they hold and verify it with your state's licensing board.
Their training and experience with your specific procedure. A nurse practitioner with 10 years of filler experience is very different from one who took a weekend course last month. Ask how many times they've performed the exact procedure you're considering.
Certification in specific technologies. Laser devices, for example, often require manufacturer-specific training. Ask if the provider is certified on the exact device they'll be using on you.
Continuing education. Aesthetic medicine evolves fast. New techniques, new products, updated safety protocols. Providers should be regularly attending conferences, completing CME credits, and staying current.

A 2024 study published in the Aesthetic Surgery Journal found that approximately 25% of complications from injectable treatments occurred at facilities where the injector had less than two years of experience. Experience isn't everything, but it's a strong predictor of outcomes — especially for complex procedures like jawline filler or liquid rhinoplasty where vascular anatomy knowledge is critical.

Red flags specific to providers:

They can't answer questions about contraindications for your procedure
They haven't asked about your medical history, medications, or allergies
They dismiss your concerns or questions as unnecessary
They claim to be "certified" but can't specify by whom
They suggest aggressive treatment plans without discussing alternatives or risks

Reputable medspas — places like dermani MEDSPA® Ballantyne — list their providers' credentials publicly and welcome questions about training and experience. If asking about qualifications makes a provider defensive, that tells you everything you need to know.

For more on what can actually go wrong when undertrained providers perform medical procedures, see our deep dive on Spa Side Effects.

Red Flag #3: High-Pressure Sales Tactics and Suspicious Pricing

Medicine and hard sales don't mix. They never have. When a facility pushes packages, memberships, and upsells before you've even had a proper consultation, they're prioritizing revenue over your safety.

Sales tactics that should concern you:

"This price is only available today." Legitimate medical procedures don't work like mattress sales. If they're pressuring you to commit on the spot, ask yourself why. A confident, reputable provider knows you'll come back after doing your research.
"Buy 3 syringes, get 1 free." Volume discounts on filler raise questions. Are they using a single syringe across multiple patients (illegal and dangerous)? Are they pushing more product than you need? Is the product authentic? Deals that seem too good to be true in medical aesthetics usually are.
Consultations that feel like sales pitches. A proper consultation should involve a thorough assessment of your skin, health history, realistic goal-setting, and honest conversation about what a procedure can and can't do. If the consultation is 80% pricing and 20% medicine, the priorities are inverted.
"Sign up for our membership and save." Memberships aren't inherently bad. Some well-run medspas offer them for maintenance treatments like monthly facials or quarterly Botox. But if the membership locks you into treatments you haven't yet been evaluated for, or if cancellation is difficult, proceed with caution.

Pricing red flags:

Botox averages $12-18 per unit nationally in 2026. If someone is offering it at $6 per unit, one of three things is happening: they're using counterfeit product, they're diluting the product beyond manufacturer specifications, or they're a loss leader trying to hook you for expensive upsells. None of those scenarios are good for your face.

The same applies to filler. Juvederm and Restylane products wholesale for hundreds of dollars per syringe. A facility charging $200 for a full syringe of name-brand filler either isn't using name-brand filler or is losing money on every injection — and making it up somewhere else.

What legitimate pricing transparency looks like:

Per-unit pricing for neurotoxins (Botox, Dysport, Xeomin), clearly posted or readily available
Per-syringe pricing for fillers, with the specific product name listed
Separate consultation fees (many good medspas charge $50-150 for initial consultations, often applied toward treatment)
Written treatment plans with itemized costs before any procedure begins
No pressure to decide during the consultation

A facility like Hotel Bel-Air Spa exemplifies the opposite of high-pressure sales. Luxury doesn't just mean expensive — it means the experience respects your autonomy and gives you space to make informed decisions. But you don't need a luxury price tag to find ethical practices. Plenty of mid-range medspas operate with complete pricing transparency and zero-pressure consultations.

The rule of thumb: If you feel rushed, pressured, or confused about what you're paying for, leave. You can always schedule at a different facility. You can't undo a botched procedure performed by a place that valued your wallet over your wellbeing.

The Complete Pre-Visit Verification Checklist

Before you book, before you pay a deposit, before you walk through the door — run through this checklist. Print it out. Screenshot it. Whatever works. Every single item matters.

Facility Verification

Business license displayed or available upon request. Every state requires medical facilities to maintain proper business licensing. It should be current, not expired.
State medical board registration. Medical spas must be registered with or licensed by the state's medical board or health department in most states. Verify this through your state's online database.
OSHA compliance. Medical spas fall under OSHA's jurisdiction and must maintain bloodborne pathogen exposure control plans, proper sharps disposal, laser safety protocols, and employee training records. You can ask to see their OSHA compliance documentation.
Clean facility inspection record. Many states conduct periodic health inspections of medical facilities. Ask when the last inspection occurred and whether there were any violations.
Malpractice insurance. The facility and its providers should carry malpractice/liability insurance. This protects you if something goes wrong. Ask about it directly — reputable facilities won't hesitate to confirm coverage.

Provider Verification

Medical director identified by name, with active and unrestricted medical license
Your specific provider's license verified through state board website
Provider's experience level with your specific procedure (ask for approximate number of procedures performed)
Device-specific certifications for any laser or energy-based treatment
Provider's approach to complications (ask: "What happens if something goes wrong?")

Product Verification

Brand-name products used (Allergan, Galderma, Merz, etc.) — ask to see the packaging
Products sourced from authorized U.S. distributors (not gray market or international sources)
Lot numbers and expiration dates visible on all injectable products
Sealed vials opened in front of you (never pre-drawn syringes from unmarked containers)
FDA-cleared devices with visible manufacturer labels and service records

Consultation Quality

Thorough medical history taken (including medications, supplements, allergies, prior procedures)
Realistic expectations discussed openly
Alternative treatment options mentioned
Risks and potential side effects explained clearly
Written informed consent provided (not just a verbal overview)
Before-and-after photos of the provider's actual patients (not stock images)
Clear aftercare instructions given in writing

Administrative Safeguards

HIPAA compliance (privacy policy, secure patient records)
Emergency protocols in place (ask what they'd do if you had an allergic reaction)
Follow-up appointment policy (what's included if you need a touch-up or have a concern?)
Cancellation and refund policies in writing
Complaint process clearly defined

This isn't paranoia. This is due diligence. A well-run medspa will welcome every single one of these questions because they've already done the work. The ones that bristle, deflect, or give vague answers are telling you something important.

How to Verify Credentials and Licenses: A Step-by-Step Guide

Knowing you should verify credentials is one thing. Actually doing it is another. Here's the exact process, step by step, so there's no excuse to skip it.

Step 1: Identify the Medical Director

Call the facility or check their website. Get the full legal name of the medical director. If they won't provide it, stop here. You have your answer.

Step 2: Verify Their Medical License

Every state has a medical board with an online license verification tool. Here are the key ones:

California: Medical Board of California — mbc.ca.gov/breeze
New York: NYDOH Office of the Professions — op.nysed.gov
Texas: Texas Medical Board — tmb.state.tx.us
Florida: Florida Department of Health — flhealthsource.gov
For other states: Google "[your state] medical board license verification"

Search by the physician's name. You're looking for: license status (active/inactive), license type (MD, DO), issue date, expiration date, and any disciplinary actions. A single disciplinary action doesn't automatically disqualify someone — context matters. But multiple actions, license restrictions, or anything involving patient harm should give you serious pause.

Step 3: Check Board Certification

Go to certificationmatters.org, which is run by the American Board of Medical Specialties (ABMS). Search the doctor's name. Look for certification in dermatology, plastic surgery, facial plastic surgery, or a related specialty. Board certification in family medicine or internal medicine doesn't mean the doctor has specialized aesthetic training — but it's not disqualifying if they've pursued additional fellowship training.

Step 4: Verify Your Specific Provider

If your procedure will be performed by a nurse practitioner, physician assistant, or RN, verify their license through your state's nursing board or PA licensing board. These are separate from the medical board. For aestheticians, check with your state's cosmetology or aesthetics licensing board.

Step 5: Check for Complaints and Reviews

State medical board complaint records (public in most states)
Better Business Bureau (bbb.org) — check for unresolved complaints
RealSelf — procedure-specific reviews with verified patients
Google Reviews — look for patterns, not individual complaints. Every business gets an occasional negative review. But if multiple reviews mention similar issues (burns, infections, rude dismissal of concerns), pay attention.
State attorney general's office — some maintain databases of consumer complaints against health-related businesses

Step 6: Verify the Facility Itself

Look up the facility's business registration with your state's secretary of state. Confirm the business entity is active and in good standing. For facilities that are part of a chain, verify the specific location — corporate compliance doesn't automatically extend to every franchise.

This entire process takes 15-30 minutes. That's a trivial investment of time compared to the hours you'll spend in the treatment chair and the weeks or months you'll spend living with the results. Do the homework.

What to Do If Something Goes Wrong: Reporting and Recourse

Nobody plans for a complication. But knowing what to do if one happens — and where to report a facility that's operating unsafely — is part of being an informed consumer.

Immediate Medical Concerns

If you experience a severe reaction during or after a medspa treatment — difficulty breathing, signs of vascular compromise (sudden vision changes, severe pain, skin blanching or discoloration), signs of infection (rapidly spreading redness, fever, pus) — seek emergency medical care immediately. Call 911 or go to the nearest emergency room. Do not wait for the medspa to return your call.

For less acute concerns — unexpected bruising, asymmetry, lumps, prolonged swelling — contact the medspa first. A responsible facility will have a follow-up protocol and should see you promptly. If they dismiss your concerns, refuse to see you, or become unreachable, that itself becomes reportable.

Where to File Complaints

Your state medical board. This is the most impactful complaint you can file. Medical boards can investigate, discipline providers, restrict licenses, and in severe cases, revoke them. File online through your state medical board's website.
Your state health department. Many states require medical facilities to report adverse events. If the facility didn't report your complication, the health department needs to know.
The FDA. If you suspect counterfeit products were used, file a report through the FDA's MedWatch program (fda.gov/medwatch). This is critical for protecting other consumers.
Your state attorney general's consumer protection division. Especially relevant for deceptive advertising, bait-and-switch pricing, or refusal to honor refund policies.
The Federal Trade Commission (FTC). For false advertising claims — "guaranteed results," misleading before-and-after photos, or unsubstantiated health claims.

Document Everything

From the moment something seems off, start documenting:

Photographs of the affected area, with timestamps (your phone camera does this automatically)
Written timeline of events — when the procedure was performed, when symptoms appeared, when you contacted the facility, their response
All communications — save texts, emails, voicemails
Financial records — receipts, credit card statements, consent forms, treatment plans
Medical records — request your complete medical record from the medspa (you're legally entitled to it under HIPAA)

If you seek care from another provider to address complications, have them document the condition they're treating and their professional assessment of what may have caused it.

Legal Considerations

Medical malpractice cases involving medspas are increasing. If you've suffered significant harm, consult an attorney who specializes in medical malpractice or personal injury. Many offer free initial consultations. Be aware that most states have statutes of limitations for medical malpractice claims — typically 1-3 years from the date of injury or discovery — so don't delay.

For a detailed look at specific risks and side effects by procedure type, see our comprehensive guide on Spa Side Effects.

State-by-State Regulatory Landscape: Know Your Protections

Not all states are created equal when it comes to medspa regulation. Understanding your state's framework helps you calibrate your level of scrutiny.

States With Stronger Oversight (2026)

New York leads the pack with new regulations effective in 2026 that require mandatory adverse event reporting, stricter medical director involvement standards, and enhanced scope-of-practice enforcement. Florida has long required that medical spas register with the Department of Health and maintain a medical director who performs regular on-site visits. California requires comprehensive informed consent and has aggressive medical board enforcement.

States With Weaker Oversight

According to the AMA, the majority of states — 36 out of 50 — lack medspa-specific regulatory frameworks. In these states, medspas may be regulated only under general medical practice laws, which weren't designed for the unique business model of aesthetic medicine. This creates gaps: a physician can lend their license to a medspa they rarely visit, mid-level providers may perform procedures with minimal supervision, and facilities may not face regular inspections.

What This Means for You

If you live in a state with weaker oversight, your personal due diligence matters even more. The checklist in this article isn't optional — it's your primary line of defense. In stronger-oversight states, you have regulatory backup, but you should still verify independently. No state's system catches everything.

The 2026 spa and medspa licensing requirements continue to evolve, and several states have legislation pending that would tighten oversight. Stay informed about your state's specific rules — your state medical board's website is the definitive source.

The Corporate Practice of Medicine Doctrine

Most states have some version of this doctrine, which prohibits non-physicians from owning or controlling medical practices. In theory, this means a business entrepreneur without a medical license can't open a medspa and hire doctors to work under them. In practice, MSO arrangements often circumvent this doctrine through complex corporate structures. Some states (like Texas) have been cracking down on these arrangements; others remain permissive.

Why does this matter to you as a consumer? Because when the business decisions are made by non-medical owners, clinical judgment sometimes takes a back seat to revenue targets. That's when you get undertrained providers, aggressive upselling, and corners cut on product sourcing.

Frequently Asked Questions

How do I find out if a medspa has had complaints filed against it? Start with your state medical board's website — most have searchable databases of complaints and disciplinary actions against both individual providers and facilities. You can also check the Better Business Bureau (bbb.org), your state attorney general's consumer complaint database, and review platforms like RealSelf and Google Reviews. No single source catches everything, so checking multiple databases gives you the most complete picture.

Can an aesthetician legally perform Botox injections? In most states, no. Botox (botulinum toxin) is a prescription medication, and administering injectable prescriptions typically requires a medical license — MD, DO, NP, PA, or in some states an RN under direct physician supervision. Aestheticians in most states are limited to non-invasive treatments like facials, chemical peels below a certain concentration, and some laser treatments (varies by state). Always check your specific state's scope-of-practice laws, because there are exceptions and gray areas.

What should I do if a medspa refuses to show me their medical director's credentials? Leave. A legitimate medspa will readily share their medical director's name, credentials, and level of involvement. Refusal is a significant red flag that suggests either the medical director arrangement is improper, the director's credentials wouldn't withstand scrutiny, or the facility doesn't prioritize transparency. There are too many reputable options available to take a risk on one that won't answer basic questions.

Are before-and-after photos reliable indicators of a medspa's quality? They can be, but with caveats. Ask whether the photos are of the provider's own patients (not stock images or manufacturer-provided examples). Look for consistent lighting, angles, and timing across the photos. Be wary of heavily filtered or edited images. The best medspas show a range of results — including subtle improvements — rather than only dramatic transformations. Photos taken at standardized intervals (2 weeks post, 1 month post, etc.) indicate a professional approach to documentation.

How often should I expect a medspa to update its safety protocols? At minimum annually, and more frequently when new FDA guidance, products, or devices are introduced. Protocols should be reviewed and signed off by the medical director. Ask when their protocols were last updated — if the answer is "I'm not sure" or "a few years ago," that's a concern. Reputable facilities like dermani MEDSPA® Ballantyne maintain living compliance documents that evolve with industry standards and regulatory changes.