In April 2024, the FDA confirmed that counterfeit Botox had been administered to patients in multiple U.S. states. The CDC reported 22 people affected across 11 states, with 11 hospitalizations. The counterfeit vials mimicked authentic Allergan packaging closely enough to fool staff who were not specifically trained to spot the differences. Two years later, in April 2026, the FDA issued a warning letter to a Texas medical spa after inspectors found it had dispensed far more Botox than it had purchased from AbbVie — the only authorized U.S. supplier — raising concerns that additional product had come from unauthorized sources.
These are not isolated events. They are the enforcement consequences of a supply chain that many aesthetic practices treat casually. Every med spa that purchases and administers prescription injectables is a dispenser under federal drug supply chain law. That status carries specific obligations, and the gap between "we order from a distributor" and "we can prove this vial's chain of custody from manufacturer to patient" is where counterfeit and diverted product enters.
This article is for clinic owners, medical directors, and operations managers who need to verify that every injectable product in their inventory is authentic, properly stored, and legally sourced — and who need the documentation to prove it.
How Counterfeit and Diverted Product Enters the Aesthetic Supply Chain
Counterfeit and diverted injectables reach clinics through several channels:
- Gray-market distributors that are not authorized trading partners under the Drug Supply Chain Security Act (DSCSA). These intermediaries purchase product from overseas, from other clinics liquidating inventory, or from sources that cannot demonstrate legitimate chain of custody.
- Online marketplaces and social media sellers offering Botox, Dysport, and fillers at below-wholesale prices, often shipped from outside the United States without cold-chain controls.
- Product diversion, where authentic product purchased by one licensed entity is resold to another entity outside authorized distribution channels. The product may be genuine but may have been stored improperly, may be expired, or may have been relabeled.
- Direct counterfeiting, where vials and packaging are manufactured to imitate the authentic product. The 2024 FDA alert identified counterfeit Botox with 150-unit labeling — a vial size that genuine Botox has never been sold in — along with missing holograms and incorrect active ingredient naming.
In 2025, the UK Health Security Agency (UKHSA) reported an outbreak of iatrogenic botulism linked to an unlicensed botulinum toxin product imported from South Korea. Testing found the product contained approximately 370 units per vial despite being labeled as 200 units. This case illustrates that potency inconsistencies in counterfeit product create real clinical danger, not just regulatory exposure.
Federal Law: The Drug Supply Chain Security Act
The Drug Supply Chain Security Act (DSCSA), enacted in 2013 as part of the Drug Quality and Security Act, establishes a national framework for tracing prescription drugs through the U.S. supply chain. Its requirements apply to manufacturers, repackagers, wholesale distributors, and dispensers — and med spas that purchase and administer Botox, dermal fillers, and other prescription injectables are dispensers under this law.
Key DSCSA obligations for med spas
Authorized trading partners. Dispensers may only purchase prescription drugs from authorized trading partners. For Botox and Botox Cosmetic, AbbVie/Allergan Aesthetics is the sole authorized supplier in the United States. For other neuromodulators and fillers, the manufacturer or their authorized wholesale distributors are the legitimate sources. A distributor that cannot verify its authorized trading partner status is a legal liability.
Transaction documentation. Every transaction must include transaction information (product name, NDC, lot number, expiration date, quantity), transaction history (a record of each prior sale), and a transaction statement (confirming the seller is authorized). These records must be retained for six years.
Product verification. Dispensers must be able to verify the product identifier — the standardized numerical identifier (serial number), lot number, and expiration date — at the package level when requested by the FDA, a trading partner, or during a suspect product investigation.
Suspect and illegitimate product procedures. If a clinic identifies or is notified of a suspect product, it must quarantine the product, investigate in cooperation with trading partners and the FDA, and notify the FDA and immediate trading partners if the product is confirmed illegitimate.
Current compliance timeline
The DSCSA's enhanced drug distribution security requirements — fully interoperable electronic tracing at the package level — took effect on November 27, 2024, after a one-year stabilization period. The FDA granted exemptions to certain trading partners who demonstrated documented efforts but still faced data exchange challenges. For small dispensers (25 or fewer pharmacists/technicians), exemptions extend through November 27, 2026. After that date, all dispensers must have systems capable of receiving and storing serialized, electronic product tracing data.
Even during the exemption period, small dispensers must still purchase from authorized trading partners, identify and quarantine suspect products, and maintain transaction records. The exemption only delays the requirement for electronic interoperability — it does not waive the core obligations.
How to Verify Every Product You Purchase
Step 1: Confirm your supplier is an authorized trading partner
Before placing an order, verify that your distributor is authorized. This means:
- For Botox/Botox Cosmetic: Only AbbVie/Allergan Aesthetics and its authorized wholesale distributors (such as McKesson, Cardinal Health, or Henry Schein) are legitimate sources. Allergan Aesthetics states explicitly that they are "the only authorized suppliers of Botox and Botox Cosmetic in the United States."
- For other injectables: Check the manufacturer's website for their authorized distributor list. Galderma (Dysport, Restylane), Merz (Xeomin, Radiesse, Belotero), Evolus (Jeuveau), Revance (Daxxify), and HA Filler manufacturers each publish authorized channel information.
- Ask your distributor for their DSCSA trading partner verification. Legitimate distributors will provide this without hesitation.
Step 2: Inspect every shipment on arrival
When product arrives, verify before it goes into storage:
- Lot number and expiration date match the packing slip and the transaction documentation.
- Packaging is intact — tamper-evident seals are unbroken, shrink wrap is present where expected.
- Product identifier (serial number, lot, expiration) on the outer carton matches the vial or syringe inside.
- Cold chain integrity — neuromodulators and many fillers require refrigeration. If the shipping container shows evidence of temperature abuse (warm to the touch, no cold packs, condensation inside the packaging), do not accept the shipment.
Step 3: Check for known counterfeit indicators
The FDA's April 2024 alert provided specific identifiers for counterfeit Botox:
- Authentic Botox displays the active ingredient as "OnabotulinumtoxinA" on both the outer carton and the vial label.
- Authentic vials carry a hologram of the word "Allergan" on the vial label.
- Botox is sold in 50-unit and 100-unit vials (Botox Cosmetic) and 100-unit and 200-unit vials (Botox therapeutic). A 150-unit vial labeled as Botox is counterfeit — this presentation has never existed.
- Counterfeit packaging may show "Botulinum Toxin Type A" as the product description instead of the proper established name.
Allergan Aesthetics maintains a verification resource at their website with images of authentic product packaging for comparison.
Step 4: Maintain lot-level inventory records
Every vial or syringe that enters your inventory should be logged with:
- Date received
- Product name, strength, and presentation
- Lot number and expiration date
- Supplier name and transaction documentation reference
- Storage location and temperature log
When a product is administered to a patient, the lot number and expiration date should be recorded in the patient's chart. This creates the forward trace — if a counterfeit or recalled lot is identified, you can identify every patient who received it.
Step 5: Investigate and report suspect product
If you identify product that may be counterfeit, diverted, or otherwise suspect:
- Quarantine it immediately. Remove it from the treatment area and segregate it so it cannot be accidentally administered.
- Do not use it. Even if you are unsure, the precautionary principle applies.
- Contact the supplier and request verification of the product's chain of custody.
- Report to the FDA through MedWatch (800-551-3989 or online) or the FDA's Report Suspected Criminal Activity database.
- Notify the manufacturer. Allergan Aesthetics specifically requests that providers "tell your Allergan Aesthetics representative" about suspected counterfeit product.
- Document everything — photographs of the suspect product, transaction records, communications with the supplier, and the timeline of your investigation.
Enforcement Is Accelerating
New York regulators inspected more than 200 med spas and found potential violations at nearly 40% of inspected locations, including expired or suspected counterfeit Botox and fillers. The FDA's April 2026 warning letter to Pure Indulgence Aesthetics in Texas is part of a broader enforcement trend. DSCSA gives the FDA authority to issue warning letters, seize product, and pursue civil and criminal penalties — and the agency is using it.
The Texas Warning Letter: A Case Study in Dispensing Discrepancy
In April 2026, the FDA cited Pure Indulgence Aesthetics, a Texas medical spa, for DSCSA violations. Inspectors found the spa had administered significantly more Botox to patients than it had purchased from AbbVie, its only authorized trading partner. The discrepancy — more units dispensed than purchased — indicated the spa had acquired additional product from an unauthorized source.
This enforcement action illustrates that DSCSA compliance is not just about avoiding counterfeit product. It is about maintaining auditable purchase-to-administration records. If your purchase records from authorized sources cannot account for every unit you administer, regulators will assume the gap was filled by unauthorized product.
Building a Supply Chain Verification Protocol
A practical protocol for an aesthetic practice includes:
- Vendor qualification file. For each supplier, keep on file: their DSCSA authorized trading partner verification, business license, wholesale distributor license (if applicable), and contact information for their compliance department.
- Receiving checklist. A standardized form completed for every shipment, documenting lot numbers, expiration dates, packaging integrity, and cold-chain confirmation.
- Inventory management system. Either a dedicated pharmacy inventory system or a well-maintained spreadsheet that tracks every unit from receipt through administration.
- Staff training. Every staff member who handles injectable product — from the person who receives shipments to the injector who opens the vial — should be trained to identify counterfeit indicators and to follow the suspect-product protocol.
- Annual audit. At least once per year, reconcile purchase records against administration records. Flag any discrepancies and investigate.
What Changes After November 2026
When the small-dispenser exemption expires on November 27, 2026, med spas that qualify as small dispensers will need systems capable of exchanging serialized, electronic product tracing data with their trading partners. This means investing in pharmacy inventory software or a compliance platform that supports the EPCIS (Electronic Product Code Information Services) standard. Practices that have been maintaining paper records or basic spreadsheets will need to upgrade.
The enforcement trend is clear. FDA is actively investigating aesthetic practices, and DSCSA gives the agency the authority to issue warning letters, seize product, and pursue civil and criminal penalties. The cost of a compliance system is a fraction of the cost of an enforcement action.
Sources
- FDA, "Counterfeit Version of Botox Found in Multiple States," April 16, 2024. https://www.fda.gov/drugs/drug-alerts-and-statements/counterfeit-version-botox-found-multiple-states
- CDC, "Adverse Effects Linked to Counterfeit or Mishandled Botulinum Toxin Injections," HAN Health Advisory 00507, April 2024. https://www.cdc.gov/han/2024/han00507.html
- Allergan Aesthetics (AbbVie), "Response to Suspected Counterfeit Botox Reports." https://news.allerganaesthetics.com/media/response-to-suspected-counterfeit-botox-reports
- Regulatory Affairs Professionals Society, "FDA Warns Texas Medical Spa for Botox Dispensing Discrepancies," April 2026. https://www.raps.org/resource/fda-warns-texas-medical-spa-for-botox-dispensing-discrepancies.html
- PMC, "A Local Outbreak of Iatrogenic Botulism Associated with Cosmetic Injections of Botulinum Neurotoxin-Containing Products, England, 2025." https://pmc.ncbi.nlm.nih.gov/articles/PMC12495379
- FDA, "DSCSA Exemptions from Section 582(g)(1) and Other Requirements for Certain Trading Partners," October 9, 2024. https://www.fda.gov/media/182584/download
- McKesson, "Navigating DSCSA: Ensuring Drug Supply Security." https://www.mckesson.com/commitments/taking-the-lead/supply-chain-security
- Infinitrak, "DSCSA Requirement for Pharmacies, Distributors and Med Spas." https://infinitrak.us/dscsa-requirements
- AbbVie, "Responsible Supply Chain." https://www.abbvie.com/who-we-are/operating-with-integrity/responsible-supply-chain.html
- InfiniTrak, "DSCSA Compliance for Med Spas." https://infinitrak.us/dscsa-med-spa
- NPR, "Fake Botox Sickened Patients in Several States," April 2024. https://www.npr.org/2024/04/19/1245519732/fake-botox-tips-avoiding-illness-hospitalization
