Guide

Card processing: healthcare quirks, fees, and the HSA question

Summary

A practice's card processor should be evaluated on healthcare-appropriate interchange pricing, HSA/FSA card acceptance without extra substantiation steps, and a contract free of long equipment leases or steep early-termination fees — not just the advertised rate. Open the merchant account under the practice's own EIN rather than the owner's Social Security number, and fold monthly card fees into the same startup-cost worksheet used for every other recurring vendor bill.

By Gale Editorial · Updated 2026-07-27. Every figure cited to a dated source. How we write.

How do I choose a card processor for a practice?

Choosing a card processor for a solo practice comes down to four checks: healthcare-coded interchange pricing rather than a flat retail rate, straightforward HSA/FSA card acceptance, PCI-compliant terminals or a compliant online payment page, and a contract with no multi-year equipment lease or steep early-termination fee. Open the merchant account under the practice's own EIN rather than the owner's Social Security number, since payer enrollment paperwork and vendor contracts already expect that identifier 1Ref 1Internal Revenue Service (2026).Apply for an Employer Identification Number (EIN) online.That an EIN is issued free, online, immediately, and is the identifier a practice uses on vendor contracts and payer paperwork instead of the owner's SSN..

A generic retail processor sold through a big-box terminal kiosk usually prices a healthcare practice the same way it prices a coffee shop, missing the interchange categories card networks reserve for certain provider transaction types. Asking a candidate processor directly whether it applies healthcare-specific interchange categories, rather than a blended or tiered rate, is the fastest way to separate a processor built for medical offices from one repackaging a generic retail product.

Why HSA and FSA cards need their own check

A patient's HSA or FSA card runs on the same card networks as any debit card, but many plan administrators still require the underlying purchase to qualify as a medical expense, which means a processor or point-of-sale system that can't produce an itemized receipt showing service dates and descriptions leaves the patient stuck substantiating the charge manually later. Ask any processor candidate whether its receipts carry enough detail for hsa/fsa cards: substantiation and refund quirks before signing, not after the first denied reimbursement claim comes back to the front desk.

This is a different question from whether the card simply "runs" — nearly every HSA/FSA card processes as a standard Visa or Mastercard transaction, so it will authorize even through a processor with no healthcare features at all. The gap only shows up afterward, when the patient's plan administrator asks for documentation the receipt never captured.

Reading the fee structure past the advertised rate

The advertised rate on a processor's homepage almost never describes what a specific practice will actually pay once monthly minimums, PCI-compliance fees, batch fees, and card-type surcharges for rewards or corporate cards are added back in. Interchange-plus pricing — the wholesale interchange rate plus a fixed markup — is generally easier to audit against a monthly statement than a flat or tiered rate that bundles the card network's actual cost into one opaque number.

Line-item card fees into your fee schedule planning the same way rent, EHR cost, and malpractice premiums get budgeted, so the true monthly cost is visible rather than surfacing only on the statement 2Ref 2U.S. Small Business Administration (2026).Calculate your startup costs.SBA's method for itemizing and totaling startup costs, applied here to line-item budgeting monthly card processing fees alongside other recurring vendor bills.. Requesting a sample monthly statement from a candidate processor, showing a real breakdown by card type and category rather than a single blended average, makes the comparison across two or three candidates far more concrete than comparing advertised rates alone. A processor quoting a rate meaningfully below competitors on a sales call is worth a second look at the contract's early-termination and equipment-lease clauses, since a below-market headline rate is a common way an unfavorable multi-year contract gets sold.

Card-on-file, no-show fees, and card surcharges

Charging a card on file for a missed appointment or an outstanding balance is standard in most solo practices, but it depends on the processor supporting tokenized card storage rather than the practice keeping card numbers in a spreadsheet or a note — which is both a security liability and, for most processors, a contract violation. The same practice-sized cybersecurity discipline HHS's 405(d) program lays out for sensitive practice data generally applies just as well to how card information gets stored and accessed 3Ref 3HHS 405(d) Program (2026).HHS 405(d) — Aligning Health Care Industry Security Approaches.That HHS's 405(d) program publishes a small-practice-sized cybersecurity baseline, applied here to how card and payment data should be stored and accessed.. Confirm before signing that card-on-file billing is a supported feature, not an add-on charged separately per transaction.

Card surcharges for patients paying by credit card are legal in some states and restricted or banned in others, so a national default of "surcharge everywhere" is the wrong assumption to build a fee policy on; the practice's own state rule controls, and it's worth confirming before advertising a surcharge on an intake form or receipt.

Chargebacks and what a processor actually does when one lands

A patient dispute through their card issuer becomes one of the chargebacks the processor has to respond to on the practice's behalf, and processors vary widely in how much documentation support and response time they actually provide once a dispute is filed — a detail almost never covered on a sales call. Asking a candidate processor to walk through its chargeback process before signing, including how much time the practice gets to respond and what proof it needs on file, is worth the extra ten minutes.

The frozen merchant account is the practical nightmare version of a chargeback dispute: a processor that freezes the entire account's payouts pending review, rather than withholding only the disputed amount, can strand weeks of unrelated deposits over one contested charge — a risk worth asking about directly, since it rarely appears in the marketing materials.

Financing equipment and smoothing the payout gap

A card terminal, a point-of-sale tablet, or the deposit-timing gap between when a patient's card is charged and when funds actually land in the practice's bank account can strain cash flow in the first months of a new practice more than the processing fees themselves. SBA-guaranteed loans, including 7(a) and microloan programs, are a standard financing path for practice startups when equipment or a short working-capital gap needs bridging rather than absorbing out of pocket 4Ref 4U.S. Small Business Administration (2026).Loans.That SBA 7(a) and microloan programs guarantee small-business lending, a standard financing path for equipment purchases or working-capital gaps around card processing..

Weighing total cost of ownership over the first year or two — equipment cost, monthly fees, and any early-termination exposure combined — gives a more honest comparison between candidate processors than looking at any single line item in isolation. None of this changes the core evaluation: healthcare-appropriate pricing, HSA/FSA readiness, a contract without a punitive exit, and a processor that has clearly handled a medical practice's transactions before rather than learning on the practice's account.

Common questions

Compare the full interchange-plus structure and contract terms, not just the headline number — a lower-looking rate paired with a multi-year equipment lease or a steep early-termination fee is often more expensive over the life of the contract than the current setup.

Usually yes, since HSA/FSA cards run on the same major card networks as any debit card and will authorize through nearly any processor. The distinguishing feature isn't whether the card authorizes but whether the receipt carries enough itemized detail — service dates, descriptions — for the patient's plan administrator to accept it as substantiation later.

Most processors ask for a tax identifier either way, and using the practice's own EIN keeps the account off the owner's personal Social Security number, matching what payer enrollment paperwork and other vendor contracts already expect from the practice regardless of entity structure.

Dispute windows vary by card network and issuer, and processors differ in how much time and documentation support they provide once a chargeback is filed. Asking a candidate processor about its specific chargeback process before signing avoids an unpleasant surprise later.

Only through the processor's tokenized card-on-file feature, never as a saved number in a spreadsheet, a sticky note, or an unencrypted file. Storing raw card numbers outside a tokenized system bypasses PCI security expectations, violates most processors' own contract terms, and creates exactly the kind of liability a practice can avoid for free.

Run your practice on Gale

The software is free. Gale earns one flat 3.5% all-in per paid transaction — only on transactions that actually pay. No subscription, no setup fee, no network cut.

Start or manage a practice →

References

1.Internal Revenue Service (2026). Apply for an Employer Identification Number (EIN) online. Internal Revenue Service. link ✓That an EIN is issued free, online, immediately, and is the identifier a practice uses on vendor contracts and payer paperwork instead of the owner's SSN.
2.U.S. Small Business Administration (2026). Calculate your startup costs. U.S. Small Business Administration. link ✓SBA's method for itemizing and totaling startup costs, applied here to line-item budgeting monthly card processing fees alongside other recurring vendor bills.
3.HHS 405(d) Program (2026). HHS 405(d) — Aligning Health Care Industry Security Approaches. U.S. Department of Health and Human Services. linkThat HHS's 405(d) program publishes a small-practice-sized cybersecurity baseline, applied here to how card and payment data should be stored and accessed.
4.U.S. Small Business Administration (2026). Loans. U.S. Small Business Administration. link ✓That SBA 7(a) and microloan programs guarantee small-business lending, a standard financing path for equipment purchases or working-capital gaps around card processing.

https://www.gale.care/for-providers/spc-payment-processor-choice · 4 sources. Competitor details are cited to dated public sources and maintained as they change; figures are estimates, not commitments. Synthetic demonstration.

← Back to for providers