Arizona Med Spa Advertising Rules 2026: AMB, FTC & Before/After Photo Requirements

Most med spa owners in Arizona think advertising is a marketing problem. It isn't. In Arizona, advertising is a licensure problem.

Because med spa services are the practice of medicine, every Instagram post, Google ad, before-and-after, and "free consultation" sign is a regulated communication subject to physician advertising rules — not just consumer protection law. A misleading Reel doesn't just annoy a competitor in Scottsdale or Phoenix. It opens a file at the Arizona Medical Board (or AZBOMEX, if your supervising physician is a DO) and, in parallel, hands the FTC a textbook deceptive-practices case.

This guide covers the two regulatory layers, the specific Arizona statutes and rules that apply, what's required on before-and-after photos and testimonials, the most common complaint triggers, and what compliant ad copy actually looks like for an Arizona med spa.

The Two Layers of Arizona Med Spa Advertising Oversight

One med spa ad. Two regulatory regimes that can act on it. You need to satisfy both simultaneously — there's no "FTC compliance" workaround for an AMB rule, and no AMB loophole that lets you skip the FTC. And because Arizona splits physician licensure between MDs and DOs, you need to know which board is yours.

Layer 1: Arizona Medical Board and AZBOMEX — The State Lever

Arizona is one of a handful of states that maintains two separate physician licensing boards. The Arizona Medical Board (AMB) licenses and disciplines MDs under ARS Title 32, Chapter 13, with the Arizona Administrative Code Title 4, Chapter 16 spelling out the operational rules. The Arizona Board of Osteopathic Examiners (AZBOMEX) licenses DOs under ARS Title 32, Chapter 17 with parallel rules.

For advertising, the operative provisions are:

• ARS §32-1401 — the unprofessional conduct statute, which lists "false, fraudulent, deceptive or misleading advertising by a doctor of medicine" as grounds for license action. The statute reaches not just direct false statements but anything a reasonable consumer would find misleading, including by omission.
• AAC R4-16-401 — the AMB's advertising rule, which operationalizes §32-1401 with specific prohibitions on guaranteed-results language, undisclosed material conditions, and credential claims that aren't substantiated.
• ARS §32-1854 — the parallel DO unprofessional conduct catalog, with similar advertising provisions enforced by AZBOMEX.

The practical reach of these rules is broader than it sounds. Under §32-1401, "false, fraudulent, deceptive or misleading advertising" covers:

• Direct false statements of fact
• Implied claims a reasonable consumer would draw from the ad
• Guarantees of results, cures, or specific outcomes
• Testimonials that are not from real patients with real, typical results
• Comparisons of skill, cost, or quality that can't be objectively substantiated
• Use of bait-and-switch promotions
• Failure to disclose material terms of an offer
• Credential or specialty claims the physician can't actually back up

Because med spas operate under physician supervision, ads run by the practice are imputed to the supervising physician. Their license is the one on the line.

Layer 2: The FTC — Federal Floor

The Federal Trade Commission enforces the FTC Act's prohibition on "unfair or deceptive acts or practices in commerce." For med spas, the operative document is the FTC Endorsement Guides, which apply to every paid post, gifted treatment, employee review, and influencer collaboration.

FTC compliance is a federal floor, not a ceiling. Disclosing a paid post does not automatically make it compliant under ARS §32-1401. But failing to disclose a paid post is automatically a problem under both regimes.

The Consumer Fraud Act Wildcard

Arizona has one extra lever that often catches med spa marketers off guard: the Arizona Consumer Fraud Act (ARS §44-1521 et seq.). The Attorney General's Consumer Protection section can pursue civil penalties for deceptive advertising independent of any AMB or FTC action. For aggressive marketing patterns — fake countdowns, undisclosed conditions, phantom strikethrough prices — a CFA claim is often the first to land. Restitution and civil penalties under §44-1531 can dwarf a board fine.

Before-and-After Photo Rules in Arizona

Before-and-after photos are the single most common compliance failure in med spa marketing — and the single most common complaint trigger. Arizona treats them as a special category because they function as visual testimonials and as protected health information at the same time.

What Patient Authorization Must Cover

Before any patient photo appears in marketing, you need a written authorization that satisfies HIPAA and Arizona's medical records statute, ARS §12-2293, which governs the disclosure of patient records. A generic consent buried in your intake forms will not cut it. The authorization must:

1. Specifically describe the photos being taken (areas of the body, conditions captured)
2. Identify the specific uses authorized — website, Instagram, Facebook, paid ads, print, etc.
3. Specify whether the photos may be cropped, edited, or shown with or without identifying features
4. State a duration and a clear right to revoke, with the practical limits on revocation explained
5. Be signed by the patient, separately from the general consent to treatment
6. Be retained in the medical record for the period required by Arizona recordkeeping rules (six years from the last date of service for adult records under ARS §12-2297)

A separate, marketing-specific authorization is the standard. If a patient revokes consent, you need to be able to find every place the photo appeared and pull it down — including ads served programmatically that you may not directly control.

Photo Standards That Withstand Scrutiny

AMB and FTC complaints around before-and-afters almost always allege that the photos are misleading even when consent exists. The standard the regulators apply is whether the photos fairly represent typical results.

• Same lighting and angle — Different lighting between the "before" and "after" is the most common deceptive-photo finding
• No makeup change — A bare-faced "before" and a contoured "after" is not a fair representation
• No retouching — Filters, smoothing, or color correction on the after photo is per se deceptive
• Time interval clearly stated — "Results after 12 weeks" is required context
• Number of treatments stated — A photo after six sessions implied to be after one is misleading
• Typical-results disclosure — If the photo represents an outlier, the FTC requires a "results not typical" disclosure that's clear, conspicuous, and near the photo (not buried in a footer)

What "Clear and Conspicuous" Actually Means

The FTC has been explicit that fine print at the bottom of an Instagram caption is not "clear and conspicuous." A disclosure must be:

• In the same language as the ad
• Visible without having to click "more" or scroll
• In a font size and color that's actually readable
• Placed near the claim it modifies, not at the end of unrelated content

Testimonials, Reviews, and Influencer Marketing

If photos are the most common visual violation, testimonials are the most common written one. Arizona applies all three regulatory layers — state board, FTC, and Consumer Fraud Act — at once.

The Patient Testimonial Rule

Under ARS §32-1401 and AAC R4-16-401, a testimonial must come from a real patient describing their actual experience and typical outcome. Implied testimonials count — a video reel of a patient saying "I love this place!" is a testimonial whether or not it's labeled one.

What this rules out:

• Composite or fictional testimonials, even if "based on real experiences"
• Testimonials from patients who received treatment for free or at a discount, without disclosing that material connection
• Testimonials describing atypical results without a "results not typical" disclosure
• Ghost-written reviews on Google, Yelp, RealSelf, or anywhere else
• Reviews written by employees, family members, or friends of the practice without disclosure

Influencer and Paid Endorsement Rules

The FTC Endorsement Guides require disclosure of any "material connection" between an endorser and the brand. For Arizona med spa influencers, the connections that always require disclosure include:

• Cash payment for posting
• Free treatment in exchange for posting
• Discounted treatment in exchange for posting
• Affiliate revenue or commission from referred patients
• Gift cards, products, or other in-kind compensation
• Family or employment relationships

Acceptable disclosure language is short, plain, and unambiguous: #ad, #sponsored, or "Paid partnership with [Practice Name]." Buried hashtags after a wall of #beauty #skincare #love do not qualify. The Instagram "Paid partnership" tag is the cleanest implementation; pair it with verbal disclosure in video content.

Employee and Owner Reviews

An employee posting a five-star Google review without disclosing they work there is a textbook FTC violation, an ARS §32-1401 issue, and arguably a Consumer Fraud Act violation in Arizona. If you ask staff to write reviews, they must disclose the relationship — and most platforms ban the practice outright. The cleaner answer is to not ask.

Physician Identification and Practice Disclosures

Arizona treats med spas as the practice of medicine, period. That has direct consequences for how you advertise.

The Supervising Physician Must Be Identifiable

Med spa marketing in Arizona must not obscure the fact that a licensed physician is responsible for clinical care. AMB enforcement summaries have repeatedly flagged ads that present a med spa as a "spa" while delivering medical procedures — the omission of the medical relationship itself is treated as misleading.

Standards that hold up:

• The supervising MD or DO is named on the website's About or Team page, with their Arizona license status visible
• The practice's legal entity (typically a Professional Corporation or PLLC) appears in footers, terms of service, and consent documents
• Social media bios identify the practice, not just a personal brand of an unlicensed owner
• If the supervising physician changes, the website is updated promptly — not on a quarterly schedule

For more on the underlying physician oversight requirements, see our Arizona medical director requirements guide and who can own a med spa in Arizona.

Credential Claims and Specialty Language

Under ARS §32-1401, implying a specialty or credential the physician doesn't hold is misconduct — and Arizona enforcement has been notably aggressive on cosmetic-surgeon claims in particular. Practical applications:

• Don't call the supervising physician a "cosmetic surgeon" if they're not a board-certified plastic surgeon or dermatologist
• Don't use "specialist in [procedure]" unless the physician is genuinely board-certified or credentialed in that specialty
• "Expert," "leading," and "top" all require objective substantiation under AAC R4-16-401
• Don't list certifications that have lapsed or were never completed
• If the supervising physician is a DO, the marketing should reflect that — using "MD" generically when the physician is a DO is itself a misrepresentation

Scope-of-Practice Implications in Ads

An ad that pictures only RNs or aestheticians performing injections — without acknowledging physician oversight — implies independent practice that may exceed scope under Arizona law. See our guide to who can inject Botox in Arizona for the actual scope rules. Marketing has to match the legal reality.

"Free Consultation" and Pricing Promotions

Free consultation copy is everywhere in Arizona med spa marketing, and most of it is fine. The problems start when "free" isn't actually free, when the offer triggers ARS §32-1401, or when the ad runs afoul of the Consumer Fraud Act.

Rules for "Free" Offers

• The consultation must actually be free, with no exam fee, photography fee, or "discovery fee"
• It cannot be conditioned on purchasing a treatment
• Material conditions (e.g., "new patients only," "Scottsdale location only," "expires 12/31") must be disclosed clearly and conspicuously, near the offer
• If the "free consultation" is functionally a sales pitch, the ad's framing matters — calling it a consultation when no medical assessment occurs has been called out as misleading

Discount and Package Promotions

Arizona enforcement — both AMB and the AG's Consumer Protection section — has historically focused on three patterns:

• Strikethrough pricing without a basis — Showing "$1,200 $499" requires that the $1,200 price actually existed and was charged in good faith
• Countdown urgency that resets — A "48-hour sale" that runs every week is deceptive under the Consumer Fraud Act
• Bundle obscurity — Advertising a treatment price that excludes mandatory injection fees, consult fees, or product surcharges

Referral and Affiliate Arrangements

Arizona doesn't have New York's broad fee-splitting statute, but ARS §32-1401 and the federal Anti-Kickback Statute (where any federal payer is involved) still constrain how referral incentives can be structured. In an advertising context, that affects:

• Affiliate marketing programs that pay per converted patient (versus per click or per impression)
• "Refer a friend" credits where the credit is contingent on a paid treatment
• Influencer compensation tied to actual treatment purchases rather than a flat content fee

None of these are categorically banned in Arizona, but they all need legal review before launch — and the FTC disclosure layer applies on top.

Common Arizona Medical Board Complaint Triggers

The Arizona Medical Board publishes disciplinary actions monthly, and AZBOMEX does the same for DOs. Reviewing those summaries shows recurring patterns in med spa advertising cases.

The Top Recurring Patterns

1. Mismatched before-and-afters — Different lighting, makeup, retouching, or time periods between photos
2. Result guarantees — "Lose 30 pounds guaranteed," "Wrinkle-free in one visit," any "guaranteed" outcome language
3. Undisclosed paid endorsements — Influencer posts and patient testimonials without disclosure of the financial or in-kind relationship
4. Ghost-written or fake reviews — Employee, owner, or fictional reviews on Google, Yelp, RealSelf, or Healthgrades
5. Hidden physician supervision — Marketing that presents as a non-medical "spa" while delivering medical procedures
6. Implied specialties — "Cosmetic surgeon," "weight loss specialist," "hormone expert" without actual board certification
7. FDA off-label claims in ads — Promoting compounded GLP-1s, peptides, or off-label injectables with disease-treatment language
8. Bait-and-switch pricing — Advertised price not actually offered, or only offered with significant undisclosed conditions

For weight loss specifically — currently the highest-complaint subcategory in Arizona — see our Arizona GLP-1 compliance guide, which covers FDA labeling rules for compounded products and the advertising language that draws the most scrutiny.

How Complaints Get Started

Most AMB and AZBOMEX complaints don't come from regulators trolling Instagram. They come from:

• Competitors who screenshot the ad and file the complaint themselves
• Disappointed patients who didn't get the result the ad implied
• Patients whose photos were used without authorization
• Former employees with a grievance
• State agency cross-referrals (FTC enforcement triggering AMB follow-up, or vice versa)
• Consumer Fraud Act referrals from the AG's office to the licensing board after a deceptive-practice finding

The competitor screenshot is the single most common starting point. Your advertising is being read by the practice across the parking lot in Old Town Scottsdale or Camelback, and they have an incentive to file. Compliance is your only defense.

Building an Advertising Compliance Process

Compliance is a process, not a one-time review. Practices that stay clean run their marketing through a repeatable sequence before anything goes live.

The Pre-Publish Checklist

1. Truth check — Every factual claim has a source. Outcome claims have a substantiation file.
2. Photo provenance — Every patient image has a written marketing authorization on file. Stock images are licensed and labeled as illustrative.
3. Disclosure check — Every endorsement has a clear, conspicuous, near-the-claim disclosure of any material connection.
4. Physician check — The supervising physician is identified, and the credentials and specialties claimed are accurate and current with AMB or AZBOMEX records.
5. Pricing check — All material conditions on offers are disclosed clearly. Strikethrough pricing reflects actual former pricing.
6. Scope check — The ad does not depict or imply procedures by providers outside their Arizona scope.
7. Compounded product check — Any reference to compounded medications complies with FDA and Arizona pharmacy rules; no disease-treatment claims for off-label use.

Documentation That Saves You

If a complaint lands, the practices that survive are the ones with documentation. Maintain:

• A signed marketing authorization for every patient image, with date, scope, and patient signature
• A substantiation file for every outcome or comparative claim, with the data source and date
• An archive of every ad run, with the platform, run dates, and creative
• A log of disclosures used and where they appeared
• Endorser agreements with every influencer, including disclosure obligations and content approval rights

For the broader compliance stack — protocols, recordkeeping, supervision documentation, and HIPAA — see our Arizona compliance checklist and the Arizona med spa launch guide.

Summary

1. Arizona med spa advertising is governed by two main layers: state board rules (ARS §32-1401 and AAC R4-16-401 for MDs at the AMB; ARS Title 32, Chapter 17 for DOs at AZBOMEX) and the federal FTC Act with its Endorsement Guides
2. The Arizona Consumer Fraud Act (ARS §44-1521) is a third lever — the Attorney General can pursue deceptive-advertising claims independent of any board action
3. Every patient photo requires a separate, written, HIPAA-compliant marketing authorization consistent with ARS §12-2293 — and the photos must fairly represent typical results under consistent conditions
4. Testimonials and influencer content require clear, conspicuous disclosure of every material connection, placed near the claim — not buried
5. The supervising physician must be identifiable in marketing; ads that obscure the medical nature of the practice are misleading by omission
6. Implied credentials (especially "cosmetic surgeon"), guarantees of results, and bait-and-switch pricing are the most common §32-1401 complaint triggers
7. AMB and AZBOMEX complaints most often come from competitors, disappointed patients, and former employees — not random regulators
8. Run every ad through a pre-publish checklist and keep substantiation files; documentation is what defeats a complaint

Disclaimer: This article is for educational purposes only and does not constitute legal advice. Med spa advertising compliance involves overlapping state, federal, and platform-specific rules that change frequently. Consult with an Arizona healthcare attorney and a marketing-experienced FTC compliance counsel before publishing campaigns.