Credit Card Processing for Medical and Dental Practices in DFW
Most payment advice for medical and dental practices skips the thing that decides everything. Your participation agreement with each payer sets the allowed amount and splits it into the plan's share and the patient's share, and those agreements generally prohibit balance billing. So adding a card differential on top of an insured copay or coinsurance can read as collecting above your contracted amount, whatever the card brands permit. Card brand permission is not payer permission. Posted cash and card prices fit your self-pay and elective balances, which in dental and cosmetic work is a large share of collections. The insured side has to be checked against your own agreements and your billing company first.
Everything else about credit card processing for medical practices is ordinary small-business payments. You take cards at the front desk, you key them over the phone, and you keep a card on file so the $140 that surfaces six weeks after the visit doesn't become three paper statements and a write-off.
The part that isn't ordinary is who else has a say in what you charge a patient.
Start with your payer contracts, not with your processor
What a participation agreement controls
When you join a commercial plan's network you sign a participation agreement. It sets an allowed amount per code, divides that into what the plan pays and what the patient owes, and in most cases states that you accept the allowed amount as payment in full. Patient responsibility is the copay, the coinsurance and the deductible. Billing the patient past that is balance billing, and these agreements generally forbid it.
A card differential sits on top of patient responsibility. If the patient owes $85 in coinsurance and your terminal collects $87.55, you've collected more than the contracted patient amount.
Whether a payer treats that as balance billing, as a prohibited extra patient charge, or as nothing worth a letter, depends on that specific contract. I haven't read your contracts. Neither had the vendor whose blog post told you practices can surcharge patients.
Medicare and Medicaid are tighter
Medicare and Medicaid provider agreements add their own limits on what a beneficiary can be charged, and the room to put anything extra on that bill is narrower than on the commercial side.
If a real share of your collections comes from either, treat a card differential there as off the table until somebody who has read your provider agreement says otherwise.
Card brand permission is not payer permission
Visa's rules and Mastercard's rules govern what a merchant may do with their cards. They say nothing about your contract with a health plan. Two separate rulebooks.
Clearing one doesn't clear the other. The payer contract is the one with a recoupment process attached.
What to do before you decide anything
Ask your billing company, in writing, whether any payer in your mix prohibits adding a card-related amount to patient responsibility. They see payer policy daily.
Then open the agreements and search three phrases: payment in full, balance billing, patient charges. That's usually where the answer sits.
If it comes back no for insured balances, and often it will, the program still works on everything else you collect.
Where dual pricing does fit
Self-pay and elective is not a small slice
In dentistry: crowns, implants, ortho, aligners, and every treatment plan balance running past the annual maximum (which at $1,500 a year is most of them). On the medical side: cosmetic and aesthetic work, med spa services, concierge fees, cash-pay labs, uninsured patients.
In a general dental practice that can be half of collections. You set those prices yourself. No allowed amount, no adjudication, nobody's contract defining what the patient owes.
That's where a cash price and a card price belong.
What makes it a real cash price
Dual pricing means two posted prices. A treatment plan at $1,200 cash and $1,248 card, with both numbers on the plan the patient signs, on the sign at the front desk, and on the receipt.
What it cannot be is a percentage the terminal tacks on at the end. If the extra amount only appears after the card is run, you're surcharging whatever the program is called, and you inherit the caps and the signage rules. We laid the two side by side in cash discount vs surcharge.
The caps, since you'll be told there aren't any
Cash discounting carries no network percentage cap. That's the sentence every sales rep leads with, and it holds only for a genuine posted cash price.
Surcharging has caps. Visa limits a credit card surcharge to 3% of the transaction, cut from 4% in April 2023. Mastercard publishes 4%. Both are also capped at your cost of acceptance, so a practice whose all-in cost is 2.6% cannot add 3%.
Surcharging is prohibited on debit and prepaid cards. All of them, including a debit card run as signature over the credit rails, which trips people up because the terminal makes that look like credit.
You owe your acquirer 30 days' written notice first. Disclosure goes at the point of entry, again at the point of sale, and the amount itemized on the receipt.
Those are card brand rules, not statutes. Some states restrict or prohibit surcharging and that list has changed more than once. Which brings up the question every practice asks.
"Is it illegal to charge a 3% credit card fee?"
I'm not answering the legal version of that, because the answer varies by where you sit and it keeps moving. Anyone giving you a flat yes or no is guessing.
The answerable question is a compliance one. Do the brand rules permit what you're doing. Have you given the notice. Is the signage at the entrance and the register. Is the amount on the receipt. Have you kept debit and prepaid out of it.
Then, for a practice only: does your payer contract permit it on this balance. For an insured copay, assume not. Our Visa cash discount rules piece covers the brand side.
Split pricing
Our standard cash discount is 4%, with the card price sitting 4% above the cash price. Split pricing is available too, where the practice and the patient each absorb part, as long as the parts total 4%.
A practice uneasy about the optics of a full differential on a $4,800 implant case usually lands here. Interchange-plus with no differential at all is the third option.
Card on file, and the six weeks after the visit
Why practices bother
Fee-for-service means you bill per service rendered. The claim goes out, the payer adjudicates, and only then does anyone know what the patient owes. That's weeks. By then the patient has left and you're mailing statements at roughly a dollar a go for a balance that might be $34.
The flow that replaces it is short. The patient signs a card-on-file authorization at check-in stating a dollar cap, how long it lasts and how to revoke it. The card gets tokenized and stored against the account. The claim adjudicates, the EOB comes back with patient responsibility, and you charge up to the cap and send a receipt showing what the plan paid.
That authorization isn't paperwork for its own sake. You need the patient's stored consent before charging a stored card, and it's the document that wins a chargeback when they forget they signed it.
Tokenization
Tokenization swaps the stored card number for a token, so the record in your practice management system holds the token and not the PAN.
Breach that system and there's no card number to steal. The data never sat in your office either, which pulls a large part of your PCI scope out of the picture.
What patients want, and the caveat
You'll see these figures everywhere: 78% of patients prefer card-on-file payments, 28.9% paid a medical bill online in the prior year, 28% want to pay healthcare bills with a mobile wallet.
Every one traces back to a single software vendor's 2024 blog post, with a second vendor repeating it. "The prior year" is never defined. Marketing numbers, cited at each other until they look like research.
Your own are better. Statements mailed per month, days patient AR sits, share of balances written off.
Phone, online and in person
Each channel prices differently. Card present at the desk is cheapest. Keyed phone payments cost more because the card isn't there. A hosted online bill pay page sits between the two and takes the chasing off your staff.
Digital wallets ride the same rails. Apple Pay tapped at the front desk prices like any card-present tap; the same wallet on your bill pay page prices as card not present.
HSA and FSA cards
Your merchant category decides this, not your processor
HSA and FSA cards are issued on the card networks and restricted by merchant category. The issuer reads the merchant category code on the authorization and approves health-eligible categories only.
A practice boarded under a generic MCC will watch health benefit cards decline while ordinary credit cards go through on the same device, five seconds apart. Staff conclude the card is empty. It isn't.
Nobody sells a feature that fixes that. It's a boarding question. Find the MCC on your merchant paperwork and ask your provider to confirm it fits what you do.
When the card won't cover the balance
An $1,800 treatment plan against $600 left in the FSA is routine. Whether the patient can split it across the health card and a personal card depends on the issuer and on how your terminal handles partial authorization.
Test it with a real card before your treatment coordinator promises it'll work.
December
Dental practices see a wave of FSA spending in the last weeks of the year, because unused balances disappear on 31 December. Have this working in November.
HIPAA, BAAs and PCI
The BAA question, which is where vendors overreach
You'll find plenty of pages telling you your payment processor must sign a Business Associate Agreement. Notice who's saying it. The vendors making that claim are mostly selling one.
HIPAA generally excludes financial institutions acting only to authorize, process, clear or settle payment transactions from business associate status. A processor doing nothing more than moving a transaction often isn't a business associate at all. That changes when a vendor does more: sitting inside your practice management system, holding patient balance data, handling protected information for billing.
So treat it as a question, not a checkbox. Ask each vendor what patient information it touches, in writing, and take that to whoever handles your compliance. A signed BAA is not proof one was needed.
PCI, and what the penalties really are
PCI DSS applies to any practice that accepts cards. That means an annual self-assessment questionnaire, plus a network scan if you have card systems reachable from the internet.
The penalties are contractual. The card brands assess them and your acquirer passes them through. No government agency is involved, and the pages describing PCI fines as regulatory enforcement have it wrong. The expensive part of a breach at a small practice is the forensic investigation and card reissuance. Our PCI compliance guide covers the practical version.
One more thing. A "PCI non-compliance fee" on your statement is not a penalty. It's a monthly charge some processors apply when your SAQ isn't on file, and it keeps running after you've filed unless somebody notices. We don't charge monthly fees of any kind.
What processing costs a practice, and how to see it
Your transaction mix is unusual
You run a high count of small copays alongside a low count of very large tickets. A $30 copay and a $4,200 implant case land on the same statement.
Per-transaction fees do the damage on the copays. Percentage markup does it on the big cases. A structure that looks fine on one looks terrible on the other, which is why a blended rate quote tells you nothing about a practice.
Interchange-plus, and the effective rate
Interchange-plus shows interchange, network assessments and the processor's markup as three separate things. Blended pricing hides all three in one number.
The arithmetic that beats any quote: total fees divided by total volume. That's your effective rate.
A practice running $90,000 a month across 1,100 transactions and paying $2,790 in fees is at 3.1%. For volume that's mostly card-present consumer cards, the cost side generally lands well under 2.5%, so anything over 3% is worth a hard look at where the rest went. The effective rate calculator does the division, and how to read a merchant statement shows where each number lives.
Two things to look for while you're in there. Whether keyed and card-present volume are broken out, because blending phone payments in with front-desk taps hides what that channel costs. And downgrades, transactions that missed their best interchange category.
The change-of-terms clause
Almost every processing agreement has one. It lets the processor amend the agreement after you signed, with notice delivered as a statement stuffer nobody opens.
That's how a competitive rate becomes an uncompetitive one around month 14. Equipment leases are the worst product in this industry and change-of-terms clauses are a close second, because the first locks you in and the second makes the lock worth having.
Our program is month to month. No contract, no early termination fee, cancel whenever at no cost. That takes the teeth out of the clause.
Line items that shouldn't be there
Statement fee. Annual fee. Monthly minimum. Batch fee. "Regulatory compliance" fee. IRS reporting fee. PCI non-compliance fee.
None exist on our program. There are no monthly fees of any kind.
Practice management integration
An integrated flow posts the payment back to the patient ledger automatically instead of somebody typing it twice, which saves front-desk time and kills a reconciliation error. Automated balance reminders raise collection rates for the same reason text reminders cut no-shows: the patient forgot, not refused.
The catch is what your software vendor does with it.
Most practice management vendors now bundle payment processing and the rate is whatever they set. No negotiation, often no interchange detail, and switching means arguing with the people who control your clinical software. Integration is worth paying for. Pricing you aren't allowed to examine is not. Ask them for a statement showing interchange separately from their markup, and notice if they can't.
The two mistakes that cost the most
Taking a sales rep's word that practices can surcharge patients. The rep is describing card brand rules and has no idea what your payer agreements say.
Running a 4% add-on at the terminal and calling it a cash discount. That's a surcharge, and now you need the signage, the notice and the caps.
Where we come into it
We're an independent sales organisation. We don't run a processing platform and we're not owned by any one processor, which is why we can shop an account to whichever partner fits it instead of defending a single product. Our contribution is the hands-on part: one named contact, not a queue.
For practices, the useful thing we do is read the statement with you and say what the numbers mean, including which parts of the dual pricing question we can't answer. The payer contract part isn't ours to decide. It goes to your billing company, and we'd rather say so than sell you a program your payers can take back.
Approval can land in as little as 24 hours with three months of statements up front. Hardware runs from the Valor VL550 through the Clover range, and the first terminal is free for most businesses. We never quote a lease, because you shouldn't sign one.
Send a statement
Get a free savings analysis. Three months is all we need.
You'll get back your effective rate, every monthly line item, and whether a posted cash price fits your self-pay and elective balances.
If your pricing is already good, we'll say so and leave you alone. That happens often enough that we've stopped being surprised.
