Payment Processing for Medical Offices in 2026: Copays, HSA Cards, and HIPAA Compliance
Payment Processing for Medical Offices in 2026: Copays, HSA Cards, and HIPAA Compliance
Medical offices sit at a unique intersection of payment processing challenges. You are collecting copays that range from $20 to $75, processing patient responsibility balances that can reach $500 to $5,000, accepting HSA and FSA cards that have their own processing quirks, and navigating HIPAA requirements that add a layer of compliance most businesses never think about.
The result? Most medical offices overpay on processing by 20% to 40% compared to what they could be paying. A practice collecting $30,000 per month in patient payments might be spending $9,000 to $10,800 per year in processing fees when they could be paying $6,000 to $7,200.
This guide covers the specific payment processing challenges doctors, urgent care centers, and physical therapy practices face, and how to solve them.
Why Medical Office Payment Processing Is Uniquely Complex
The Copay Problem
Copays are low-dollar, high-frequency transactions. A busy primary care office might collect 40 to 80 copays per day ranging from $20 to $75.
On flat-rate pricing (2.6% + $0.10), a $25 copay costs $0.75 in processing fees. That sounds small, but 60 copays per day, five days per week, adds up to over $11,700 per year in processing fees on copays alone.
The real waste is that many copays are paid with debit cards. On interchange-plus pricing, that same $25 debit card copay costs approximately $0.23 in fees. The annual difference on copays alone can exceed $3,000 to $4,000.
HSA and FSA Card Complications
Health Savings Account and Flexible Spending Account cards represent a growing share of patient payments. These cards require specific merchant category codes (MCCs) to be accepted. If your MCC is not set up correctly, HSA and FSA cards will be declined at your terminal, frustrating patients and creating collection headaches.
HSA/FSA cards typically process on the Visa or Mastercard network with interchange rates similar to standard debit cards. On interchange-plus pricing, these process at low rates. On flat-rate pricing, you pay the same inflated percentage as any other card type.
Additionally, some HSA/FSA plans require IIAS (Inventory Information Approval System) compliance for retail purchases at pharmacies and medical supply stores. Medical offices collecting copays and patient balances generally do not need IIAS, but it is important to verify with your processor that your MCC is correctly set for healthcare.
Patient Responsibility Balances
The shift toward high-deductible health plans means patients owe more out of pocket than ever. A patient might owe $800 after insurance for an outpatient procedure. These larger balances are often paid by credit card, sometimes over the phone or through a patient portal.
Card-not-present transactions (phone and online) carry higher interchange rates than in-person transactions. If your office collects a significant portion of patient balances remotely, your processing costs on those transactions will be higher. Using a processor that supports secure card-on-file storage and properly codes these as recurring or stored-credential transactions can reduce the interchange rate.
HIPAA Compliance Considerations
Payment processing itself is not directly regulated by HIPAA. However, the boundaries get blurry when payment systems interact with practice management software and electronic health records (EHR).
Key considerations:
- Standalone terminals that only process payments and do not store patient health information are generally not subject to HIPAA.
- Integrated systems where payment processing is tied to patient records, appointment data, or treatment information may need to comply with HIPAA security requirements.
- Business Associate Agreements (BAAs): If your processor has access to protected health information (PHI) through its integration with your EHR or practice management system, you may need a BAA with the processor.
- Patient statements that include both treatment details and payment information must be handled in compliance with HIPAA privacy rules.
The U.S. Department of Health and Human Services provides guidance on when payment processing intersects with HIPAA requirements.
What Medical Offices Actually Pay
Here is a breakdown for a medical practice collecting $35,000 per month in patient payments:
| Pricing Model | Effective Rate | Monthly Cost | Annual Cost |
|---|---|---|---|
| Flat-rate (2.6% + $0.10) | 2.75% - 2.95% | $963 - $1,033 | $11,550 - $12,390 |
| Tiered pricing | 2.2% - 3.2% | $770 - $1,120 | $9,240 - $13,440 |
| Interchange-plus (IC + 0.20% + $0.08) | 1.75% - 2.0% | $613 - $700 | $7,350 - $8,400 |
Annual savings with interchange-plus: $3,000 to $5,000 for a practice collecting $35,000 per month.
Medical offices have a particularly favorable card mix for interchange-plus pricing because a high percentage of transactions are debit cards (copays) and HSA/FSA cards, both of which have low interchange rates that flat-rate processors ignore.
How Interchange-Plus Pricing Benefits Medical Offices
Massive Savings on Debit and HSA/FSA Transactions
This is where medical offices see the biggest benefit. When 40% to 60% of your transactions are debit cards, HSA cards, or FSA cards, the savings from actual interchange rates versus flat-rate pricing are dramatic.
On a practice collecting $35,000/month where 50% is debit/HSA/FSA:
- Flat-rate on debit/HSA portion ($17,500): approximately $455 in fees
- Interchange-plus on debit/HSA portion ($17,500): approximately $125 in fees
That is over $3,900 per year saved on the debit/HSA/FSA portion alone.
Transparency for Multi-Location Practices
Medical groups with multiple locations need clear visibility into processing costs by location. Interchange-plus pricing provides transaction-level detail that makes it easy to compare effective rates across offices and identify locations that may have processing issues (like an unusually high percentage of keyed-in transactions).
Lower Rates on In-Person Copay Collection
Copays collected in person with a chip or tap transaction qualify for the lowest card-present interchange rates. Interchange-plus passes this savings through. If your front desk collects most copays in person, you benefit from rates that can be 0.3% to 0.5% lower than card-not-present rates.
For a detailed explanation of interchange rate categories, see our interchange fees explained guide.
Common Mistakes Medical Offices Make
Mistake 1: Using the Processor Built Into Your EHR
Many EHR and practice management systems offer integrated payment processing. While integration is valuable, these built-in processors typically charge flat-rate pricing and may include additional monthly fees. Always compare the EHR's built-in rates against an independent interchange-plus option.
Mistake 2: Not Setting Up the Correct MCC
Your merchant category code determines how card networks categorize your business. An incorrect MCC can cause HSA/FSA card declines, higher interchange rates, and complications with insurance payment processing. Make sure your processor sets your MCC to the appropriate healthcare category (typically MCC 8011 for doctors, 8021 for dentists, 8031 for osteopaths, or 8099 for health services).
Mistake 3: Collecting Patient Balances by Phone Without Card-on-File
When a patient calls in to pay a balance and your front desk manually keys in the card number, you pay the highest interchange rate (card-not-present, manually keyed). If instead you store the patient's card on file securely and charge it as a stored-credential transaction, the interchange rate is significantly lower.
Mistake 4: Ignoring Patient Portal Payment Costs
If you offer online bill pay through a patient portal, understand how those transactions are processed and what fees apply. Some patient portal providers build in their own payment processing markup on top of your processor's fees. Others route payments through their own processing account, meaning you have no visibility into the interchange rates being charged.
Learn how to spot hidden fees in our hidden fees in payment processing guide.
Setting Up Payment Plans for Patients
With rising deductibles, more medical offices offer payment plans. Here is how to set them up cost-effectively:
Use automated recurring billing. Set up recurring charges on a schedule (monthly or bi-weekly) using stored card credentials. This processes at recurring transaction interchange rates, which are lower than keyed-in rates.
Offer ACH as an alternative for large balances. For patient balances over $500, offering ACH payment (direct bank transfer) saves significantly. ACH costs $0.25 to $0.50 per transaction regardless of amount, compared to $10 to $15 in credit card fees on a $500 payment.
Be transparent about payment plan options. Patients appreciate knowing their options upfront. Offering a small discount for full payment at time of service or for ACH payment can save your practice money while giving patients flexibility.
Stay compliant with billing regulations. The Consumer Financial Protection Bureau has guidelines around medical debt and payment plans. Make sure your payment plan terms comply with applicable regulations.
💰 Want to see how much you're overpaying? Use our free savings calculator to find out in 30 seconds. Or get a free statement analysis from our team.
Urgent Care and Walk-In Clinic Considerations
Urgent care centers and walk-in clinics have additional processing considerations:
Speed of checkout. High patient volume means checkout needs to be fast. A reliable terminal with tap-to-pay reduces transaction time to under three seconds compared to 10 to 15 seconds for chip insertion.
Varied copay amounts. Urgent care sees patients with dozens of different insurance plans, each with different copay amounts. Your POS or terminal should make it easy to enter variable amounts quickly.
After-hours billing. Patients seen outside normal hours may need to be billed later. Having a system that can send payment links via text or email keeps collection rates high while processing at card-not-present rates.
Physical Therapy and Recurring Visit Practices
Physical therapy, chiropractic, and other recurring-visit practices have a unique pattern: the same patient comes in multiple times per week, paying a copay each visit. This creates a very high transaction count relative to revenue.
Per-transaction fees matter here. If your processor charges $0.10 per transaction and you process 100 copays per day, that is $10 per day or $2,600 per year just in per-transaction fees. On interchange-plus, per-transaction fees are typically $0.05 to $0.08, saving $520 to $1,300 per year.
Card-on-file for repeat patients. Storing a patient's card on file and charging it automatically after each visit streamlines the checkout process and reduces front desk workload. Make sure your processor supports this securely.
💰 Want to see how much you're overpaying? Use our free savings calculator to find out in 30 seconds. Or get a free statement analysis from our team.
FAQ: Payment Processing for Medical Offices
Do medical offices need HIPAA-compliant payment processing?
If your payment system operates independently of patient health records (standalone terminal collecting copays), HIPAA generally does not apply to the payment processing itself. However, if your payment processing is integrated with your EHR or practice management system and the processor has access to protected health information, you may need a Business Associate Agreement. Consult with your compliance officer or HIPAA consultant for your specific setup.
How should medical offices handle HSA and FSA card declines?
The most common cause of HSA/FSA declines is an incorrect merchant category code. Verify with your processor that your MCC is set to the appropriate healthcare category. If the card is still declined, the issue is likely on the patient's end (insufficient funds, card expired, or the purchase does not qualify under their plan). Train front desk staff to ask patients to call their HSA/FSA administrator when a decline occurs.
What is the average processing fee for a medical office?
Medical offices on interchange-plus pricing typically see effective rates of 1.7% to 2.0% due to the high percentage of debit and HSA/FSA transactions. On flat-rate pricing, effective rates are typically 2.6% to 2.9%. For a practice collecting $30,000 per month in patient payments, this difference amounts to $3,600 to $5,400 per year.
Can medical offices charge a convenience fee for credit card payments?
Some medical offices charge a convenience fee for credit card payments, especially for phone or online payments. The legality and rules around this vary by state and by card network. Visa allows convenience fees for non-standard payment channels (like paying by phone when in-person is available), but the rules are specific. A cash discount program is often a simpler, more universally legal approach.
Should medical offices accept credit cards for large patient balances?
Yes, but consider offering ACH as a cheaper alternative for both you and the patient. For a $2,000 patient balance, credit card fees cost you $40 to $52. ACH costs $0.50. If you pass savings to the patient in the form of a small discount for ACH payment, both parties benefit.
Reduce Processing Costs While Maintaining Patient Experience
Medical offices that switch to interchange-plus pricing typically see immediate savings of 20% to 35% on processing costs, with the biggest gains coming from debit card and HSA/FSA transaction savings.
Contact Sleft Payments for a free statement analysis to see exactly how much your practice can save. We provide transparent flexible pricing options (including zero-fee processing) with no long-term contracts and full support for HSA/FSA cards, recurring billing, and practice management integration.
Check out our guide on credit card processing fees explained for more on understanding what you are paying.
The U.S. Small Business Administration and HHS HIPAA Resources provide additional guidance for healthcare businesses managing compliance and operational costs.
Related Articles
- Pci Compliance Guide Small Business
- Hidden Fees Payment Processing
- How To Read Your Merchant Statement
- Try the Sleft Payments Savings Calculator to see your potential savings