Med Spa Inspectors Are Now Showing Up Unannounced: How a State Board Visit Becomes a Federal Criminal Investigation

Two people walk into your clinic without an appointment, show state credentials, and ask who mixed the IV bags, where the semaglutide came from, and which physician signed off on the patient seen an hour ago. Nobody reads you rights. Nobody says the word criminal. It feels like a licensing matter, so the owner answers everything. That visit is the most dangerous ninety minutes most med spa owners will ever experience.

State medical boards have started unannounced site visits at med spas, IV hydration clinics, and wellness practices. What inspectors write down does not stay with the board.

Key Takeaways

• State medical boards have begun unannounced med spa and IV clinic inspections, and their findings are routinely referred to federal agencies.
• Unlawful on-site compounding and unapproved drug sourcing implicate 21 U.S.C. 331 and 21 U.S.C. 333, felonies once intent to defraud is alleged.
• Billing insurers for services rendered outside a provider's lawful scope can be charged as health care fraud under 18 U.S.C. 1347.
• Florida has the highest med spa concentration in the country and no registration statute, so the pressure arrives as federal enforcement.

What Actually Happened

The Georgia Composite Medical Board has started unannounced site visits at med spas, IV hydration clinics, and wellness practices statewide. The Board's executive director confirmed publicly that inspectors have already visited practices, that the visits continue, and that the Board will seek legislation adding registration requirements.

What inspectors reported finding is the part worth reading twice. Medical services delivered by unlicensed workers. Medications compounded on site without authority. Staff outside their lawful scope. Clinics with no physician oversight and no good faith examination. Chiropractors administering weight loss and testosterone injections in a state that bars them from prescribing or injecting.

Practitioner guidance published in early August lists what inspectors press on: physician supervision, chart review for APRNs and PAs, scope of practice, DEA registration and testosterone handling, product sourcing, and adverse event tracking. That is not a licensing checklist. That is the outline of a federal charging document.

Why a Board Inspection Is Not a Closed Loop

Owners assume a board finding produces a board consequence: a citation, a fine, maybe a consent order. Sometimes it does. But boards do not sit inside a wall. Unlicensed injectors, drugs of unknown provenance, and on-site sterile compounding get referred to the state attorney general, DEA Diversion Control, HHS-OIG, and in the peptide space, the FDA Office of Criminal Investigations.

Inspectors do not need a confession. Sourcing invoices, medication logs, and the gaps in a supervision record tell the story on their own, and those documents travel to the federal agency that gets the referral.

The federal side is already leaning in. FDA has extended supply chain enforcement down to dispensing practices, including med spas, and issued a wave of warning letters to telehealth companies over compounded GLP-1 marketing. A warning letter is not a charge. It is a dated record that the government told you the conduct was unlawful, and it converts everything afterward into knowing conduct.

For a Florida operator this matters more, not less. SB 1728, which would have created a Medical Spa Prescription Drug Oversight Act with registration and Board of Pharmacy oversight, died in committee on March 13, 2026. Florida enforcement stays complaint driven. A state that does not license the industry does not stop caring about it. The exposure just arrives from a federal grand jury instead of a licensing panel.

The Statutes That Actually Apply

Three bodies of federal law reach the same clinic at once, and none require proof of patient injury.

Drug law. Compounding a sterile IV formulation without qualifying under 21 U.S.C. 353a, or dispensing a peptide from a research chemical supplier, violates 21 U.S.C. 331. A first violation is a misdemeanor under 21 U.S.C. 333(a)(1). Once the government alleges intent to defraud, it becomes a three year felony per count under 333(a)(2), and that allegation is easy to make when the product was sold as approved therapy. Supply chain records under 21 U.S.C. 360eee prove sourcing without an agent entering the clinic.

Controlled substance law. Testosterone is Schedule III. Administering it outside a valid DEA registration, or through a practitioner who never examined the patient, implicates 21 U.S.C. 841 and 21 U.S.C. 843. Every physician, nurse practitioner, and pharmacist at the clinic becomes a DEA registrant defense problem, and a doctor controlled substance defense case rarely stays civil.

Fraud law. If any of this was billed to Medicare, Medicaid, TRICARE, or a private insurer, the charge is health care fraud under 18 U.S.C. 1347, with conspiracy under 18 U.S.C. 1349 carrying the same maximum. Wire fraud under 18 U.S.C. 1343 carries twenty years and reaches cash pay clinics through marketing. Paying for federally reimbursable referrals violates the Anti-Kickback Statute at 42 U.S.C. 1320a-7b(b). Florida adds Medicaid provider fraud at Fla. Stat. 409.920, and unlicensed practice of medicine is a third degree felony under Fla. Stat. 458.327.

A board finding does not stay with the board. Unlicensed injectors, unknown drug provenance, and on-site sterile compounding are the three findings that generate federal referrals most reliably.

The Mistakes That Get Made in the First Forty Eight Hours

Answering substantive questions on the spot. Statements to a state inspector are not privileged and not off the record. They go into a report a federal agent reads months later. A wrong answer about who performed an injection is a false statement under 18 U.S.C. 1001, and 18 U.S.C. 1035 makes false statements in health care matters their own offense.

Touching the charts afterward. Backdating a good faith examination, adding a supervising physician signature, or cleaning up a medication log after an inspection is obstruction under 18 U.S.C. 1519, which carries twenty years. It also destroys the best defense these clients have, that the recordkeeping was sloppy, not fraudulent.

Calling everyone in the chain. Phoning the medical director, the compounding pharmacy, and the injector to align the story hands the government a conspiracy theory it did not have. And assuming silence means safety. No citation and no follow up usually means the file moved elsewhere. By the time a federal target letter arrives, the charging structure has been set for months.

What Effective Defense Work Looks Like Here

The work that changes outcomes here happens before anyone is charged. Treat the inspection as the opening of a federal file. From the day of the visit, preserve everything, issue a written litigation hold, take custody of the medication logs and sourcing invoices, and stop informal communication about the visit. Pre-indictment defense work is only possible while the record is recoverable.

"Reconstruct the sourcing chain before the government does. Where the product came from decides whether this is a licensing problem or a felony, and it is usually provable from records the client already holds."— Aaron M. Cohen, AMC Defense Law

Separate the individuals. A medical director who signed protocols he never enforced, an injector who followed instructions, and an owner who chose the supplier occupy three different positions. Building that separation early keeps people out of the conspiracy count, and every professional needs independent counsel, because the clinic's lawyer is not their lawyer.

Engage before the referral hardens. A physician federal investigation defense that opens with a documented corrective record is a conversation about civil resolution. After indictment it is only a sentencing argument.

Why the Timing Matters Right Now

Enforcement here is moving from complaint driven to program driven. Georgia inspects on a schedule and is drafting legislation, and other boards watch what works. Florida has the country's largest concentration of these practices and no registration bill alive this session.

That is the worst combination for an owner. No state framework defines compliance or caps the consequence, and the Southern District of Florida prosecutes health care fraud at higher volume than almost any district in the country. When the state has no clean way to resolve the conduct, the file goes federal.

If you run a med spa, IV hydration practice, hormone or peptide clinic, or telehealth prescribing operation in Florida, the useful question this week is not whether your postings are current. It is whether you can prove from your own records where every product in your refrigerator came from and which licensed person examined each patient before it went in.

Common Questions

Under Investigation Over a Med Spa or Peptide Practice in Florida?

AMC Defense Law is a federal criminal defense and white collar defense firm. We represent clinic owners, physicians, nurse practitioners, pharmacists, and medical directors in federal investigations involving compounded and peptide drug enforcement, controlled substances, Anti-Kickback Statute matters, and health care fraud, in Florida and nationwide. If a board has inspected your practice, or you have received a federal grand jury subpoena or target letter, the work that matters is available now, not after an indictment. Consultations are confidential. Call 561-542-5494.

Engage before the referral hardens. A defense that opens with a documented corrective record is a conversation about civil resolution. After indictment it is only a sentencing argument.

If you or your loved ones have been arrested or are under federal investigation over a med spa, IV hydration, or peptide practice, call Aaron M. Cohen, 24 hours a day to get help. Confidential consultation.

This article is provided for general informational purposes only and does not constitute legal advice. Reading it does not create an attorney-client relationship with AMC Defense Law. Regulatory requirements vary by state and change frequently, and outcomes depend on the facts of each matter. No result is guaranteed. Consult a licensed attorney before acting on any information here.

About the author: Aaron M. Cohen is the founder of AMC Defense Law, a federal and state criminal defense firm in Boca Raton, Florida. He is admitted to practice in New York and Florida and before the United States District Courts for the Southern District of New York and the Southern District of Florida. The firm represents clients in federal investigations and prosecutions involving healthcare fraud, Anti-Kickback Statute matters, peptide and compounded drug enforcement, controlled substances, financial crimes, and complex federal litigation, in Florida and nationwide.