Med spa referral programs that stay compliant: what you can reward, what you can't, and the ask that works at the mirror

By Benjamin Chua·Published October 18, 2026·18 min read

A museum membership comes with a few guest passes. Members feel proud walking a friend into "their" museum, the friend gets a good afternoon, and the museum gets a shot at a new member. Nobody got paid to bring anyone. That is the shape of a referral program a med spa can run without a lawyer wincing: guest passes for aesthetic care, sized small and written down.

Most clinics sit at one of two extremes. Either a laminated sign at the desk says "$50 off for every friend you send", which is the structure that draws regulator attention, or there is no program at all and the injector hopes people talk. Word of mouth is the one channel that compounds, because each happy patient can bring one or two more without you buying another lead (Hormozi, $100M Leads, p. 175). The job is to make the ask systematic and keep the thank-you clean. This guide covers the law as far as official pages state it, the rewards we would and would not use, the exact script for the moment of result, and the paperwork that lets you prove the program is what you say it is.

Can a med spa pay patients for referrals?

Start with what the federal pages say, because they set the vocabulary every state borrows. The federal Anti-Kickback Statute makes it a crime to knowingly and willfully offer or pay "any remuneration (including any kickback, bribe, or rebate)", "in cash or in kind", to induce someone to refer an individual for an item or service payable "in whole or in part under a Federal health care program" (42 U.S.C. 1320a-7b(b)). The HHS Office of Inspector General's own explainer adds two lines worth taping to the wall: "Remuneration includes anything of value and can take many forms besides cash", and "The kickback prohibition applies to all sources of referrals, even patients."

The hook in that statute is the federal health care program. A clinic whose injectables, facials and lasers are 100 percent self-pay is, on the face of the statute, outside it. The catch is the word "ever". If your medical director bills Medicare anywhere, if you take insurance for a single medical dermatology line, or if a referred patient later gets a covered service from the same practice, the clean line blurs. OIG's page also notes that the government does not need to prove patient harm or financial loss. So the working rule is simple: build the program as if a regulator will read it, and keep every thank-you away from anything an insurer or federal program pays for.

There is a second federal rule most owners have never heard of. The beneficiary inducement provision (section 1128A(a)(5) of the Social Security Act) exposes anyone who gives a Medicare or Medicaid beneficiary something "likely to influence the beneficiary's selection of a particular provider" to civil penalties. OIG's December 7, 2016 policy statement says inexpensive gifts are fine and defines "nominal value" as "a retail value of no more than $15 per item or $75 in the aggregate per patient on an annual basis", and that "the items may not be cash or cash equivalents." Those two numbers are the only ones a federal regulator has written down for patient gifts, which is why we borrow them below.

Then the states. Federal law is where the big penalties live, but state law is where a cash-pay clinic actually gets caught, because many state rules do not care who paid for the service. Florida is the clear example. Fla. Stat. 456.054 makes it unlawful for a health care provider "to offer, pay, solicit, or receive a kickback, directly or indirectly, overtly or covertly", defines a kickback as remuneration or payment "by or on behalf of a provider of health care services or items" for referring patients, and states that "Violations of this section shall be considered patient brokering." Nothing in that section is limited to Medicare patients. Other states fold the same idea into fee-splitting bans inside the medical practice act or nursing rules. We have not read every state's statute, so treat this as the pattern and check your own medical board, nursing board and any patient-brokering statute by name.

What can you reward, and what should you leave alone?

Here is how we sort the common options. The middle column is our reading of the pages above, not a legal opinion. Where we say "with counsel", we mean a real review of the actual card and script, not a quick yes on the phone.

One honest note on where we land versus the Acquisition.com playbook material we used as the spine for this guide. ACQ's version of this program pays the referrer $40 of clinic credit and gives the friend a $20 facial credit, capped at 10 percent of the average new self-pay visit and three rewarded referrals a year, on self-pay services only. That is far lower risk than cash and many clinics run something like it. We still stopped short of it. A credit toward a procedure is remuneration tied to a referral, the federal nominal-value statement excludes cash equivalents, and Florida's statute reaches cash-pay practices. So we swapped the credits for gifts and perks and kept ACQ's caps and paperwork. If your counsel clears a small credit in your state, that is a decision you can make with them. We would not make it from a blog post.

How big can a thank-you be?

Three working rules, all borrowed and all conservative. First, $15 retail per item and $75 per patient per year. Those are OIG's nominal-value numbers for Medicare and Medicaid beneficiaries. They bind only in that setting, and we adopt them as the ceiling for every patient because they are the one line a regulator has drawn. Second, thank no more than three referrals per patient per year (ACQ working rule). Third, nothing with a cash value on a service. Perks are access and time, gifts are products.

If that feels too small to motivate anyone, you have the mechanism backwards. The reason a patient refers is the result and the way they were treated. The thank-you is manners. Hormozi's value equation makes the same point from the other side: you raise the odds someone acts by making it easy (forward one text) and by removing the sacrifice (no awkward sales pitch), far more than by raising the prize ($100M Offers, p. 59 and p. 63).

What does the program look like on paper?

ACQ calls it "Glow Together". Call it a patient appreciation program if you prefer; the name on the card matters less than the rules behind it. Put these in writing in your compliance folder and in a shorter version on your website.

• Who can refer: existing adult patients of record.
• Who counts as referred: new adult self-pay patients who name the friend at booking or intake.
• Which services: injectables, facials, peels, laser, body contouring and retail skincare. Nothing insured, nothing medically necessary, no medical evaluation.
• What the referrer receives: a nominal-value gift under $15 retail, a handwritten note, and first access to new openings. Never cash, never a card that spends elsewhere, never a credit toward a service.
• What the friend receives: a welcome sample under $15 retail and a longer first consult. Not a discount.
• The same thank-you whether or not the patient posts, reviews or says anything about you.
• Caps: three thanked referrals per patient per year. Written exceptions need the medical director's sign-off.
• Disclosure: every card and text tells the friend that the referrer receives a small thank-you.
• Review: counsel signs off before launch and on any change. The medical director and office manager audit the log monthly.

The moment-of-result ask script

The ask lives in one place: the mirror. The patient has just seen the result, or the two-week photos, or the healed follow-up, and they are happy. Asking at checkout feels like a sale. Asking at the mirror feels like a shared win. Train every injector on these four lines and have them say them out loud in a huddle until they sound like their own. The wording below is ACQ's, edited for brand names and for the reward swap.

1. 1

   Line 1, anchor the result

   "Jane, I'm glad you're loving how soft this looks and that it still feels like you."

2. 2

   Line 2, make referring normal

   "Most of our patients find us because a friend shared their experience."

3. 3

   Line 3, permission and offer

   "If you have a friend who'd appreciate a result like this, would you feel comfortable mentioning us? We have a small card you can text them. When they come in as a new guest they get a longer first visit and a welcome kit, and we send you a little thank-you."

4. 4

   Line 4, hand off

   "I'll have the front desk give you the card and the text link on your way out so you don't have to remember anything."

Then the injector stops talking. If the answer is "sure", the front desk does the rest. If the answer is anything else, the injector says "no problem at all" and moves on, and the patient is never asked again on that visit. One ask, one time, at the moment it makes sense.

“Jane, here's your card and the text link. If a friend books as a new guest and tells us you sent them, they'll get a longer first visit with [Injector] and a welcome kit, and we'll send you a small thank-you. No pressure at all. It's just our way of saying thanks if you ever choose to share.”

“Hi Jane, it's [Clinic]. Great seeing you yesterday. If a friend ever asks where you go, here's your personal link: [short link]. New guests get a welcome kit and a longer first visit, and we send you a small thank-you. No obligation. Reply STOP to opt out.”

“I go to [Clinic Name] for my treatments. If you book as a new guest and mention my name, they'll give you a welcome kit and a longer first visit, and they send me a small thank-you. Phone: [clinic number] or book here: [link]. No pressure, I just really like them.”

Keep the physical card plain. Front: the program name and "New guest? Mention the friend who gave you this card when you book." Back, in small readable print: new self-pay guests receive a welcome kit and a longer first visit when they name the friend who referred them; that friend receives a small thank-you gift once the first visit is complete; not valid on insured or medically necessary services; up to three thanked referrals per patient per year; program subject to change. Print 250 to 500 and keep them at the mirror station and the desk.

Does the FTC care about a thank-you gift?

Yes, once the patient talks about you. The FTC Endorsement Guides (16 CFR Part 255) say "Material connections can include a business, family, or personal relationship" and can include "monetary payment or the provision of free or discounted products". A patient who texts a friend "go here" after you gave her a skincare kit has a material connection, and the disclosure "must clearly communicate the nature of the connection sufficiently for consumers to evaluate its significance." The FTC's Q&A adds that "Even an incentive with no financial value might affect the weight or credibility of an endorsement", which is why the patient-forward text above says "they send me a small thank-you" every time. Leave that line in.

The second FTC rule is the one that trips up clinics that bundle referrals with reviews. From the same Q&A: "You can't condition an incentive, for example, a discount, on a review being positive." So the thank-you never depends on a Google review, a five-star rating or a flattering post. If you want more reviews, run that as its own ask with no reward attached; the Google Business Profile guide has the wording. Keep the two programs in separate conversations.

How do you track referrals so you can prove the program is clean?

The point of the log is that if your medical board, a payer or a journalist asks, you can show every thank-you, its value and the service it touched in ten minutes. Add three fields to intake for every new patient: "How did you hear about us?" as a dropdown (friend or family, Instagram, Google, ads, other), "If a friend told you, who should we thank?" as free text that the desk maps to an existing patient record, and a "referral program eligible" box that is only ticked when the first visit is self-pay aesthetic.

1. 1Referrer name and patient ID
2. 2Referred patient name and patient ID
3. 3First-visit date
4. 4Service type on the first visit (must be self-pay aesthetic)
5. 5Thank-you type (gift, perk, event)
6. 6Retail value of the thank-you
7. 7Date the thank-you was given
8. 8Running count of thanked referrals for this referrer this year
9. 9Notes and any exception, with who approved it

The same intake field does double duty for marketing. Once "who should we thank" is filled on every new patient, you can see referrals as a source next to ads, Google and Instagram, and you will know whether the injector is actually asking. Count asks per week as a number in its own right. A referral program that nobody asks about is a sign at the desk.

The 30-day launch plan

1. 1

   Days 1 to 3, design and send to counsel

   Sort services into the two columns. Choose the thank-you items and perks, set the $15 and three-per-year caps, draft the internal policy and the patient-facing summary. Send all of it, including the card text and scripts, to a healthcare attorney in your state for a one-time review.

2. 2

   Days 4 to 7, build

   Add the three intake fields and a referral report in your EMR or CRM. Design the card, load the follow-up text into your texting platform with the opt-out line, and write a one-page staff SOP: who asks, when, exact words.

3. 3

   Days 8 to 14, train and soft launch

   Thirty-minute huddle. Walk the guardrails (no cash, no credit, nothing insured, disclose the thank-you), then roleplay the mirror script and the checkout line until nobody reads from the page. Soft launch on wrinkle-relaxer follow-up visits and on facial patients who rate their visit 9 or 10 out of 10.

4. 4

   Days 15 to 21, tighten

   Check the intake fields are filled on every new patient. Run the first referral report. Fix missed "who should we thank" questions and any thank-you that went out against the rules.

5. 5

   Days 22 to 30, widen

   Mention the program in the new-patient welcome email, the aftercare email and the checkout signage. Debrief on asks per week, new patients from referrals and any concern raised by counsel or the medical director. Then lock it and let the reps do the work.

The five mistakes that cost the most

• Cash or credit per referred patient. It looks like buying patients because, structurally, it is. Swap to nominal gifts and perks on self-pay services, write down the caps, and get the swap reviewed.
• Letting a thank-you touch an insured or medically necessary service. That ties a benefit to a reimbursed service, which is the exact thing the federal statute describes. One policy line fixes it: thank-yous and perks apply to elective self-pay aesthetic services and retail only.
• Oversized or unlimited rewards. Margin disappears, the clinic starts to feel like a coupon shop, and the best patients drift to the practice that does not discount. Hormozi's branding playbook makes the same point: word of mouth compounds a brand, cheap discounting repels the people you most want (Acquisition.com Branding playbook, p. 33).
• No script, so nobody asks. A program on paper and zero referrals in the log. Train the four lines, roleplay monthly, and track asks per week.
• No log. If you cannot show which service each thank-you touched and what it was worth, you cannot defend the program. Three intake fields, one spreadsheet, thirty minutes a month.

What the playbooks say about referrals

The structure here follows $100M Leads, which treats referrals as one of the four ways to get leads others bring you and lays out one-sided and two-sided referral programs for local businesses (Hormozi, $100M Leads, p. 187, p. 189 and p. 190). ACQ's AI resized those for a med spa: a small thank-you to the referrer, a welcome for the friend. We kept the two-sided shape and changed what each side receives.

Two more ideas from the Acquisition.com playbooks sit underneath the whole thing. Referrals ride on retention. When the experience is good and patients stay, they send friends without being asked, and the program only adds a nudge and a thank-you on top (Acquisition.com Retention playbook, p. 14). And lifetime value compounds: a patient who comes back and brings a friend is worth more, which pays for better service and better content, which raises loyalty again (Acquisition.com Lifetime Value playbook, p. 6 and p. 16). If your consult show rate or follow-up is leaking, fix that first; the no-show fix guide is the place to start, because a patient who did not come back cannot refer anyone.

The last piece is what the friend finds when they look you up. A referral gets you a name typed into Instagram or Google. If the first thing that friend sees is the injector explaining a treatment on camera, the referral converts; if it is a logo and an empty grid, it stalls. The Reels to booked consults guide covers that side, and the free 12-month content plan at /free-plan gives you the posting calendar to keep the grid warm.

Where this comes from

• 42 U.S.C. 1320a-7b(b), the federal Anti-Kickback Statute, read on law.cornell.edu on 2026-10-18 ("in cash or in kind", "in whole or in part under a Federal health care program").
• HHS Office of Inspector General, Fraud and Abuse Laws (oig.hhs.gov), fetched 2026-10-18, for "Remuneration includes anything of value" and "applies to all sources of referrals, even patients."
• HHS OIG Policy Statement Regarding Gifts of Nominal Value to Medicare and Medicaid Beneficiaries, December 7, 2016, read in full on 2026-10-18, for the $15 per item and $75 per year figures and the exclusion of cash and cash equivalents. Those figures bind only for federal program beneficiaries; applying them to every patient is our working rule.
• Florida Statutes 456.054, Kickbacks prohibited, fetched 2026-10-18, as one state example of a rule that is not limited to federal-program patients. We did not read every state's statute; check your own.
• FTC Endorsement Guides, 16 CFR Part 255 (eCFR), and the FTC's Endorsement Guides Q&A page, both fetched 2026-10-18, for material connections, disclosure and the rule against conditioning an incentive on a positive review.
• Program shape, scripts, caps, log columns, audit and 30-day plan via ACQ AI from Hormozi, $100M Leads (p. 175, 187, 189, 190), $100M Offers (p. 59, 63), and the Acquisition.com Retention (p. 14), Branding (p. 33) and Lifetime Value (p. 6, 16) playbooks. ACQ's version rewards with clinic credit; the switch to nominal gifts and perks is ours.
• Working rules, not published standards: three thanked referrals per patient per year, the six-year retention of audit notes, the 30-minute monthly audit, the 24 to 48 hour follow-up text, and the use of OIG's $15 and $75 figures for all patients. The $600 visit figure is illustrative.
• The reward table's "Our read" column and every "with counsel" note are our interpretation, not legal advice. ACQ's suggested 2002 OIG Special Advisory Bulletin on gifts to beneficiaries did not load at the URL we tried; the 2016 policy statement above updates its dollar figures.

Questions owners ask

Written by Benjamin Chua

Founder of Trueframe and Med Spa Launch. Nine years building video systems for founders and clinics, including a Melbourne plastic surgeon whose account went from 12,043 to 36,236 followers in ten weeks.