Short answer: A telehealth merchant account lets your digital clinic accept card payments for consultations, memberships and prescription treatments. Because card networks classify card-not-present pharmaceutical sales as high risk, most telehealth brands need a processor that specializes in high risk payment processing, a complete underwriting package, provider and pharmacy agreements, compliant billing and refund policies and, in most cases, LegitScript certification.
Getting a telehealth merchant account is one of the steps founders most often underestimate. You can have a beautiful website, a licensed provider network and a pharmacy partner ready to ship, and still be unable to take a single payment. Mainstream online checkout tools often restrict or decline prescription and telehealth businesses, and accounts opened without proper underwriting can be frozen after launch.
This guide explains why telehealth is treated as high risk, what card networks and processors look for, how to choose a payment processor for telehealth and how to keep your account healthy once you are live.
What is a telehealth merchant account?
A merchant account is the arrangement that lets a business accept card payments and receive the funds. It involves several parties: an acquiring bank that sponsors you on the card networks, a processor that moves transaction data, a payment gateway that connects your checkout to the processor, and the card networks themselves, such as Visa and Mastercard, which set the rules everyone follows.
A telehealth merchant account is simply a merchant account that has been underwritten for a healthcare business model. That matters because the acquiring bank takes on financial risk for your transactions. If patients dispute charges and your business cannot cover refunds, the bank can be left responsible. So it studies your model carefully before approving you and monitors your activity afterward.
Why telehealth is considered high risk payment processing
According to LegitScript, Visa and Mastercard require merchants who facilitate card-not-present sales of pharmaceuticals, such as pharmacies and telemedicine providers, to register as high-risk merchants under merchant category codes (MCC) 5122 and 5912. The expectation is that these merchants are continuously verified and monitored for compliance.
Visa’s Integrity Risk Program, which replaced its Global Brand Protection Program in 2023, sets stricter underwriting, due diligence and monitoring expectations for high-integrity-risk categories, and pharmaceutical sales fall within that group. In a white paper written with a payments company, LegitScript lists the reasons healthcare and telehealth are treated as high risk:
- Chargeback risk. Disputes over services, subscriptions or billing can lead to excessive chargebacks.
- Regulatory compliance. Healthcare is heavily regulated to protect patient safety and privacy.
- Fraud risk. Medical products and patient data attract fraud and cyberattacks.
- Recurring payments. Subscription billing raises the risk of disputes when patients forget or misunderstand charges.
- Reputational risk. Banks want to avoid merchants tied to illegal online pharmacies or regulatory violations.
High risk does not mean you cannot get approved. It means you should expect deeper underwriting, possibly a reserve, and ongoing monitoring. Founders who prepare for that up front get through faster.
What processors look for in a telehealth merchant account application
LegitScript notes that payment companies vet high-risk merchants through underwriting, risk assessment, compliance verification, processing history, background and credit checks and overall financial health. For telehealth, they also want evidence that the business can legally prescribe and dispense, which means medical licenses and pharmacy agreements. Expect to provide most of the following.
Business and ownership documents
- Entity formation documents, EIN confirmation and business bank account details.
- Government-issued identification for owners, as part of Know Your Customer (KYC) verification.
- An ownership structure showing everyone with a significant stake.
- Processing statements from any prior merchant accounts, if you have them.
Clinical and pharmacy documents
- Your provider network agreement and evidence that providers are licensed in the states you serve.
- Pharmacy agreements and license information for each partner pharmacy.
- A description of your care model, including how a licensed provider evaluates each patient before any prescription.
- LegitScript certification, or proof that your application is in progress. See how to get LegitScript certification for telehealth.
Website and billing documents
- A live or near-final website with product descriptions, pricing, the states you serve and business contact details.
- Terms of service, privacy policy, refund and cancellation policy and shipping policy.
- Clear subscription terms, including billing frequency and how to cancel.
- Your expected monthly volume, average order value and refund estimates.
How to get a merchant account for a telehealth business: step by step
- Finalize your legal structure. Your entity, ownership and provider relationships should be set with a healthcare attorney before you apply. Processors review who owns what.
- Lock your care model and product list. Underwriters want to know exactly what you sell, whether any items are compounded or controlled and which states you serve.
- Start LegitScript early. Many high risk payment processors for telehealth ask for LegitScript certification or evidence that it is underway.
- Publish compliant policies. Refund, cancellation, shipping and subscription terms should be visible on your site and easy to understand.
- Prepare your underwriting package. Gather the documents above in one folder so you can respond quickly.
- Apply with processors experienced in telehealth. Ask directly whether they board MCC 5122 or 5912 merchants and handle card network registration.
- Answer underwriting questions fast. Delays usually come from missing documents or unclear answers about the care model.
- Review the agreement carefully. Look at reserves, fees, termination terms and chargeback thresholds before you sign, ideally with your attorney.
- Test before launch. Run test transactions, refunds and subscription renewals end to end so the first real patient has a clean checkout.
Timing and approval are never guaranteed, so build this into your launch plan early. Our telehealth business launch checklist shows how payments fit alongside the rest of the build.
Payment processor for telehealth: dedicated merchant account vs aggregator
There are two broad ways to accept payments, and the difference matters more for telehealth than for most industries.
| Feature | Dedicated high risk merchant account | Payment aggregator or all-in-one checkout |
|---|---|---|
| Underwriting | Full review before approval | Fast signup, with review often happening later |
| Fit for prescription sales | Built for regulated, high-risk categories | Many restrict or prohibit prescription and telehealth sales in their terms |
| Risk of sudden freeze | Lower, because risk was assessed up front | Higher if the business is later flagged as restricted |
| Reserves | Often required, with terms negotiated at signup | Can be imposed suddenly after a review |
| Card network registration | Handled as part of boarding a high-risk merchant | May not support registration for pharmaceutical categories |
An aggregator can feel easier at first, but read its restricted business list carefully. Launching on a tool that prohibits your category is one of the most common ways new telehealth brands end up with held funds and interrupted refills.
Subscriptions, refills and recurring billing rules
Many digital clinics bill monthly for memberships or refills. Recurring billing is a major source of chargebacks, so processors and regulators pay close attention to it.
In the U.S., the Restore Online Shoppers’ Confidence Act (ROSCA), enforced by the FTC, requires online sellers using negative option or automatic renewal billing to clearly disclose all material terms before collecting billing information, obtain the consumer’s express informed consent before charging, and provide a simple way to stop recurring charges. Many states have their own automatic renewal laws with additional requirements.
Good practice for telehealth subscriptions includes:
- Showing the recurring amount, billing frequency and cancellation method right next to the checkout button.
- Using a separate, unchecked consent box for recurring billing.
- Sending a confirmation email with the terms and a clear cancellation path.
- Sending reminders before renewals, especially for longer billing intervals.
- Making cancellation as easy as signup, online and without obstacles.
- Using a billing descriptor patients will recognize on their statements.
Remember that a prescription is never automatic. If a licensed provider decides a treatment is not appropriate, your billing flow should handle refunds or holds cleanly. Charging before a provider has made a decision, without clear disclosure, invites disputes.
Chargebacks, monitoring programs and reserves
Card network monitoring
Visa and Mastercard both run programs that monitor merchants whose dispute or fraud levels exceed set thresholds. Visa consolidated its dispute and fraud monitoring into the Visa Acquirer Monitoring Program (VAMP), and Mastercard operates its Excessive Chargeback Program. Merchants that exceed thresholds can face fees, remediation plans and, ultimately, loss of processing. Thresholds change over time, so ask your processor for the current numbers.
Reserves
A reserve is money your processor holds back to cover future refunds and chargebacks. A rolling reserve holds a percentage of each day’s sales for a set period before releasing it. For a new high-risk merchant with no processing history, a reserve is common. Plan your cash flow around it rather than being surprised.
The MATCH list
If an acquirer terminates a merchant for reasons such as excessive chargebacks or fraud, the business and its principals can be added to Mastercard’s MATCH list, which other acquirers check when underwriting. Being listed can make it very difficult to get a new account, which is why protecting your first merchant account matters so much.
How to reduce chargebacks
- Set clear expectations on shipping times, provider review and what happens if a prescription is not issued.
- Make support easy to reach, so patients contact you before contacting their bank.
- Refund quickly when a refund is fair.
- Avoid marketing that overpromises results, which the FTC also prohibits.
- Keep records of consent, order history and shipping confirmation for every order.
Questions to ask a payment processor for telehealth
- Do you board telehealth and pharmaceutical merchants under MCC 5122 or 5912 today?
- Do you require LegitScript certification, and at what stage?
- What reserve do you expect for a new merchant, and when is it reviewed?
- What are your chargeback and dispute thresholds, and what happens if we approach them?
- Do you support subscriptions, card updating and refunds through our platform?
- What billing descriptor will patients see?
- How quickly are funds settled to our bank account?
- What are the termination terms, and how much notice do you give before holding funds?
- Are you and your gateway PCI DSS compliant, and how is card data kept out of our systems?
Payments also connect to your data and privacy obligations. Card data is covered by PCI DSS, while patient health information falls under HIPAA and related laws. Our guide to what makes a telehealth platform HIPAA compliant explains the difference, and our startup cost guide shows where processing costs sit in your budget.
How WellieMD helps
WellieMD is a white-label telehealth platform designed around the way processors and card networks review telehealth businesses. We build it with you: branded intake, a licensed provider network, licensed 503A pharmacy routing, payments and subscriptions, refills, labs and wearables, HIPAA safeguards with a business associate agreement, and LegitScript-ready builds. That gives you the provider and pharmacy documentation, clear subscription flows and compliant site structure underwriters ask about. Approval decisions always rest with the processor and acquiring bank, and we help you prepare a clean application. To see how payments fit your plan, book a demo with WellieMD.
Frequently asked questions
Why is telehealth considered high risk for payment processing?
Visa and Mastercard treat card-not-present pharmaceutical sales as high risk and expect those merchants to be registered and monitored. Telehealth also involves recurring billing, regulatory exposure and fraud risk. That leads processors to use deeper underwriting and ongoing monitoring.
Do I need LegitScript certification to get a telehealth merchant account?
Many processors that board telehealth merchants ask for LegitScript certification or proof that your application is underway. LegitScript notes that certification supports payment processing with Visa and Mastercard. Requirements vary by processor, so ask each one directly.
Can I use a standard online checkout tool for a telehealth business?
Some aggregators restrict or prohibit prescription and telehealth sales in their terms. Launching on a tool that does not support your category can lead to frozen funds later. Read the restricted business list and confirm in writing before you build on it.
What is a rolling reserve?
A rolling reserve is a percentage of each day’s sales that your processor holds for a set period to cover future refunds and chargebacks, then releases. It is common for new high-risk merchants. Negotiate and understand the terms before you sign.
How can a telehealth brand keep chargebacks low?
Disclose subscription terms clearly, get express consent, make cancellation simple and use a recognizable billing descriptor. Set honest expectations about provider review and shipping, and make support easy to reach. Quick, fair refunds prevent many disputes.
This guide is general information, not legal or financial advice. Talk with a healthcare attorney about your specific model and agreements. Prescription products require evaluation by a licensed provider.
Sources
- LegitScript: Compliance Tips for Healthcare and Telehealth Payment Processing
- LegitScript: What You Need to Know About the Visa Integrity Risk Program
- LegitScript: Certification for Telemedicine Providers
- Visa: Visa Acquirer Monitoring Program Fact Sheet
- Federal Trade Commission: Restore Online Shoppers’ Confidence Act