How to Handle Unannounced Visitors at Your Office

Unannounced visitors are anyone who arrives at your building without a booking, an invitation or a named host expecting them. The way to handle them is simple to describe and hard to do consistently: greet everyone the same way, establish who they are and who they want before they get past reception, and give your front desk a small set of scripts so nobody has to improvise under pressure. Every unannounced visitor should either become a logged, badged, hosted visitor or leave politely. There is no third category.

That standard only holds if three things are in place. First, a physical layout where a stranger cannot drift past the desk while the receptionist is on the phone. Second, agreed scripts for the common cases: couriers, sales reps, candidates who arrive early, ex-employees and the occasional agitated visitor. Third, a clear escalation path so front of house staff know exactly when a situation stops being theirs to manage. This article covers all three, with wording you can lift straight into your reception handbook.

Why do unannounced visitors matter so much?

Because reception is the one point where your security policy meets a live human being. A tailgater at a rear door is a hardware problem. An unannounced visitor at the front desk is a judgement call, made in seconds, by whoever happens to be sitting there. If that person has no script and no backup, the default human response is to be helpful, and helpful usually means letting people through.

There is also a duty of care angle. If someone is in your building and unaccounted for, they are invisible during an evacuation. Your fire marshals cannot sweep for people they do not know exist. If your visitor process leaks, your emergency evacuation checklist is built on incomplete data before the alarm even sounds.

What should your front desk say to a walk-in?

Give your team one universal opening line and insist on it: “Good morning, welcome. Who are you here to see today?” It is warm, it is neutral, and it immediately establishes the key fact. A legitimate visitor has an answer. Someone probing the building usually does not, or gives something vague like “I’m just here to speak to whoever handles facilities.”

From there, the rule is host-first. Reception never grants access on their own authority. The script continues: “Let me check whether they’re available. Can I take your name and company?” Then the receptionist contacts the host, not the other way round. If the host says yes, the visitor signs in, gets a badge and waits to be collected. If the host says no or cannot be reached, the script is: “I’m sorry, they’re not available today. The best route is to email them directly and arrange a time.” No apology tour, no exceptions for confident people in good suits. Confidence is not credentials.

Couriers and delivery drivers

Couriers want speed, and your process should give it to them without giving them the building. Deliveries stop at the desk or a designated drop zone. The script: “You can leave that with me, I’ll make sure it gets to them.” If a signature or ID check is needed, it happens at reception. If an item must go to a specific floor, a staff member takes it or escorts the courier. A hi-vis jacket and a parcel are the oldest social engineering props in the book precisely because they work.

Cold-calling sales reps

Sales reps who drop in are betting that a face at the desk beats an ignored email. Do not reward the bet, and do not be rude either, because today’s rep is sometimes next year’s client contact. The script: “We don’t take unscheduled meetings, but if you leave your details I’ll pass them to the right team.” Take the card, log the visit, end the interaction. Never confirm who runs a department, whether they are in, or when they are usually around. That information is exactly what a rep, or someone posing as one, came to collect.

Former employees and personal visitors

Ex-employees are the trickiest category because familiarity feels like authorisation. It is not. The moment someone leaves the company, they are a visitor like any other: signed in, badged, hosted. Brief reception on recent leavers, especially contentious exits. For personal visitors, partners and family included, the same host-first rule applies. The employee comes to reception; the visitor does not go to the employee.

When should reception escalate, and to whom?

Front of house should never be the last line. Define three levels and put them on one laminated card:

1. Level one, handled at the desk. Polite refusals, redirections, deliveries. The receptionist owns it.
2. Level two, call for backup. The visitor refuses to leave, keeps re-approaching the desk, or the receptionist simply feels uneasy. A named manager or security officer comes to the desk within minutes. Agree a discreet phrase such as “Could you check the meeting room diary for me?” so staff can summon help without announcing it.
3. Level three, remove and record. Aggression, threats, intoxication or refusal to leave after a clear request. Security or police handle it. Reception’s only jobs are to keep distance, keep other people away and preserve the visitor log entry.

Two rules underpin all three levels. Staff never physically block or touch a visitor. And “I felt uncomfortable” is always sufficient grounds to escalate. If people fear looking dramatic, they will sit on problems until the problems are serious.

How do you set a firm security posture without feeling hostile?

The trick is to make the process universal. Badges for everyone, sign-in for everyone, escorts for everyone, including the CEO’s guests and the board. When there are no exceptions, there is nothing personal about being asked to wait. A well-run front of house operation feels more welcoming than a lax one, not less, because visitors are expected, greeted by name and collected promptly.

Design helps too. Position the desk so the route past it is obvious and awkward to skip. Keep a comfortable waiting area on the public side of any access control. Review your visitor management policy at least annually, and walk the reception team through the scripts twice a year, ideally with a colleague playing the pushy visitor. Ten minutes of role-play beats ten pages of policy.

Where does visitor management software fit in?

Software does not replace the scripts, but it removes the friction that causes staff to skip them. A visitor management system lets a walk-in sign themselves in at a kiosk, notifies the host automatically, prints a badge and creates a live record of everyone in the building. That record is what your fire marshals use at the muster point, and it is what you check when something goes missing from the third floor. HybridHero’s platform covers visitor management alongside desk booking, meeting rooms and parking, is used in around 40 countries, and is ISO 27001 and GDPR ready, which matters when your visitor log contains personal data.

The end state to aim for is boring: every unannounced visitor gets the same greeting, the same question and the same process, and the awkward minority get a calm, rehearsed escalation instead of a flustered one. Write the scripts, print the card, run the drill. Your reception team will thank you, and the one time it really matters, so will everyone else in the building.