In January 2026, the New York Department of State issued a consumer warning based on the results of a statewide investigation into medical spa service providers. The numbers were unusually blunt: over 200 inspections conducted, resulting in suspensions, revocations, and fines. Violations were found at every inspected business.
Separately, the New York City Council's Oversight and Investigations Division (OID), working with the State Department of Health, the State Education Department, and the Department of State, published a detailed report on inspections of 15 medspas across all five boroughs. That report documented a specific catalog of violations — not abstractions about regulatory gaps, but concrete findings about what investigators saw when they walked through the doors.
The findings are not unique to New York. They reflect conditions that exist wherever medspas operate with limited oversight — which, per the AMA's 2026 report, is most of the country.
What the investigators found
The violations documented across the inspected medspas fell into consistent categories.
Unlicensed medical procedures. Staff performed medical procedures — injections, laser treatments, and other services constituting the practice of medicine — without holding the required licenses. In some cases, aestheticians were performing procedures restricted to physicians, nurse practitioners, or registered nurses under supervision. The licensing requirements exist to ensure that the person injecting a substance into your face has the training to manage complications if they occur.
Absence of meaningful physician oversight. Multiple inspected medspas lacked a properly designated medical director, or the designated medical director had no substantive involvement with the facility's operations. This is the "ghost medical director" problem — a physician's license on the wall, but no physician involved in patient care.
Unlabeled and suspect products. Investigators found products without proper labeling, products that could not be traced to an authorized distributor, and products stored improperly. New York Secretary of State Brendan Mosley specifically warned about "dirty needles, expired or counterfeit Botox and fillers" as hazards documented during the investigations. When a product can't be traced to its manufacturer through an authorized supply chain, there is no way to verify what's in it, whether it's expired, or whether it's genuine.
Missing liability insurance. Some inspected medspas had no professional liability insurance — meaning that if a patient were injured during a procedure, there would be no insurance coverage to compensate for the harm. For the patient, this means that even a successful malpractice claim may be uncollectible if the business lacks the financial capacity to pay.
Unsanitary conditions and equipment. Inspectors documented hygiene failures including inadequate sterilization of equipment and unsanitary treatment environments. For procedures that break the skin — injections, microneedling, laser treatments — these conditions create infection risks that a patient cannot evaluate from the reception area.
Failure to display licenses. A basic regulatory requirement in New York is that licensed businesses display their licenses visibly. Multiple inspected medspas failed to do so — a minor violation on its own, but an indicator of broader compliance failures. If a business can't manage the simplest regulatory requirement, the more complex ones are likely unmanaged too.
Why this matters outside New York
New York's investigation was unusual not because of what it found, but because it happened at all. Most states conduct little or no proactive inspection of medspas — enforcement is complaint-driven, meaning regulators investigate only after a patient reports a problem. The AMA's 2026 report found that 36 states have no medspa-specific regulations, and 44 states lack medspa-specific patient-protection requirements.
New York's findings provide a rare look at what proactive inspection reveals. The 100% violation rate across inspected businesses does not necessarily mean every medspa in New York is noncompliant — the investigation may have targeted businesses with prior complaints or risk indicators. But it does demonstrate that violations are not rare or isolated; they're common enough that a structured investigation found them at every location it examined.
In states without New York's inspection infrastructure, the same conditions likely exist without detection. The regulatory gap documented by the AMA means that patients in most states cannot rely on their state government to have inspected or certified the medspa they're considering.
What to look for
The New York investigation provides a practical checklist derived from what investigators actually found, rather than from theoretical risk categories.
Are licenses displayed? Walk in and look. The business license and the individual licenses of every provider performing medical procedures should be visible and current. If they're not displayed, ask to see them. A legitimate practice will produce them without hesitation.
Can the staff identify the medical director by name and describe their involvement? Not "we have a medical director" — who is it, when were they last on-site, and what is their role in treatment planning? A pause, a deflection, or a vague answer is meaningful information.
Can they tell you exactly what product they're using and where it came from? For any injectable — neurotoxins, fillers, or anything else — ask the brand name, lot number, and whether it's sourced from an authorized distributor. Legitimate products come with traceable packaging. A provider who opens a product in front of you, shows you the packaging, and can answer sourcing questions is demonstrating the kind of transparency that the New York investigators found missing.
Is the treatment area clean, and is equipment sterilized between patients? You can observe this directly. Single-use items should be opened from sealed packaging in front of you. Treatment surfaces should be cleaned between patients. If the environment doesn't look clinical, it may not be operating at clinical standards.
Does the practice carry liability insurance? You have every right to ask, and a legitimate medical practice will carry it. The answer protects both you and the practice — and a medspa that doesn't carry it is telling you something about how it assesses its own risk.
The bottom line
New York's investigation quantified a problem that patient-safety advocates have long described in qualitative terms. The 100% violation rate, documented across hundreds of inspections, converted anecdotal concern into regulatory evidence. The specific violations — unlicensed procedures, absent medical directors, untraceable products, missing insurance, unsanitary conditions — are not unique to New York. They're what happens when a rapidly growing industry operates ahead of the regulatory framework designed to oversee it. As a patient, you can't control whether your state inspects its medspas. You can control whether you inspect the one you're about to let treat you.
Looking for a consumer protection provider?