Telehealth Payment Processing

In a virtual care practice, the patient is at home, the clinician is somewhere else and the only 'counter' is a web page or an app. That changes the payment experience in a few ways. Every card payment is card-not-present, which carries higher interchange and more fraud scrutiny. There is no chance to swipe a card or hand over a receipt. And the patient usually expects to pay from their phone in a minute or two.

Telehealth also straddles two regulatory worlds: health privacy and payment security. They are separate sets of rules with different requirements, but both apply to the same patient relationship. A good setup keeps payment data in a payment-compliant environment and keeps clinical information in a health-compliant one.

This guide covers the payment side, from the upfront charge to memberships and refunds.

Card-not-present from end to end

Because the patient is not in the room, every transaction is keyed or entered online. Processors apply address verification and security code checks, and issuers watch card-not-present traffic closely. Collecting the billing ZIP and CVV and verifying them is basic hygiene.

Where possible, collect payment through a hosted payment page or a gateway integrated into your platform, so card numbers are entered into a secure form rather than passing through your own servers or staff. That can shrink your PCI scope considerably. Our guide on card-present versus card-not-present explains why the cost differs.

When to charge: booking, visit or after

Practices choose different moments. Some charge at booking, which reduces no-shows. Some pre-authorize the card at booking and capture after the visit, when the final amount, say after a longer-than-expected consultation, is known. Others bill after the visit, which is convenient but means chasing unpaid balances.

Say a practice schedules 200 virtual visits a month at $90 and 8% are no-shows. That is 16 missed visits or $1,440 of lost time. Requiring a card at booking, with a clear cancellation policy that patients accept, can recover much of it. Check state rules and professional guidance on cancellation fees for clinical services.

Be consistent about what happens when a session runs long or a follow-up is added. If the fee can change, say so at booking, capture the extra amount only after the patient agrees, and send an updated receipt so the final charge never comes as a surprise.

• Collect a card at booking and state the cancellation window
• Use pre-authorization when the final fee may change
• Send a receipt after every payment
• Keep the patient's consent to store the card on file

Memberships and direct care models

Many virtual practices use monthly memberships, such as direct primary care plans, mental health subscriptions or weight-management programs. These are recurring card payments, with the failure patterns of any subscription: expired cards, insufficient funds and bank fraud holds. Use stored credentials with consent, retries, account updater where available and clear reminders.

Make cancellation straightforward and the terms plain. Auto-renewal and consumer protection laws vary by state, and healthcare services may carry extra rules, so consult your attorney. See our pages on recurring billing and subscription businesses for the mechanics.

Insurance, HSA and FSA

If you bill insurance, the patient's share, such as a copay or deductible, is collected separately from the insurer's payment. Cards on file can simplify collecting patient balances after a claim is processed, provided the patient has agreed in writing.

Many patients will want to pay with an HSA or FSA card. Acceptance of those cards has specific requirements for eligibility verification at retail locations; healthcare providers have their own considerations. Talk to your processor about how your service type is classified and what is needed to accept these cards.

Privacy, security and descriptors

A payment statement descriptor appears on the patient's card statement, and for sensitive services some patients prefer a neutral name. Consider a descriptor that identifies the practice clearly enough to avoid unrecognized-charge disputes but does not reveal more than necessary about the care. Discuss options with your processor.

Do not store full card numbers in your clinical records, and keep payment data separate from health information. Tokenization lets your staff reference a stored card without seeing it. PCI compliance help is part of what MCCPS provides, and your own compliance advisor can guide the health privacy requirements.

Costs, risk and setting up

Card-not-present healthcare payments typically cost more than in-person ones. Say a practice processes $50,000 a month at a 3.2% effective rate: that is $1,600 in fees. A statement review can show whether the pricing structure suits your mix of one-time visits and recurring memberships.

Some practices ask whether they can pass fees to patients. Surcharges, convenience fees and dual pricing are regulated by state and card network, require disclosure, and may raise professional or payer-contract issues in healthcare, so verify first. MCCPS offers a free, no-obligation analysis of two months of statements, one-time and recurring payment tools, multiple gateways and free 24/7 technical support. For funding to start or expand a practice, we can refer you to Fidelity Funding; MCCPS is not a lender.

This article is general information, not legal, tax or compliance advice. Card-network and state rules change — confirm current requirements before acting. Savings depend on your individual statement analysis.