Payment Processing for Hormone Clinics: Eligibility and Underwriting

Hormone clinics can seek card-payment acceptance, but eligibility is decided case by case by a processor, payment facilitator, or acquiring bank—not by a universal federal approval category. Underwriting may consider telehealth, card-not-present transactions, prescriptions, recurring billing, health claims, data practices, fulfillment relationships, and state requirements.

Payment processing for hormone clinic at a glance

Approval does not establish that a clinic complies with medical-practice, pharmacy, advertising, telehealth, privacy, or state requirements.

Can hormone clinics accept card payments?

Yes. The reviewed federal sources do not identify a blanket federal prohibition on card payments for hormone clinics. The specific business model must still pass private underwriting and comply with applicable law.

Additional questions may arise when a clinic combines remote care, card-not-present transactions, prescription-related services, controlled substances, compounded products, memberships, automatic renewals, or health claims. These are potential review factors—not universal classifications or automatic grounds for rejection.

Why do hormone clinics receive underwriting questions?

Payment providers generally need to understand how the clinic actually operates before evaluating the account. Be prepared to explain:

• Where patients are located and how clinician authorization is checked.
• Whether the business provides consultations, memberships, prescriptions, fulfillment coordination, or pharmacy services.
• Whether charges are one-time, recurring, introductory, deferred, or bundled.
• Which pharmacy, laboratory, platform, call center, or fulfillment company performs each function.
• What health claims and testimonials appear in advertising.
• Which payment, billing, analytics, intake, or support vendors receive health information.

For controlled-substance telehealth, the DEA’s December 31, 2025 announcement describes certain temporary flexibilities through December 31, 2026, subject to DEA requirements and federal and state law. That extension is not payment-processing approval. Clinical decisions belong to independently licensed clinicians.

What documents does a hormone clinic need for underwriting?

A clinic should prepare entity, licensing, operational, billing, advertising, privacy, and fulfillment records. The exact list varies by provider. The documents a telehealth merchant account application asks for are substantially the same set, so assembling them once covers both.

• Legal-entity and ownership documents.
• Provider licenses and service states.
• A description of in-person, virtual, and hybrid services.
• Pharmacy, laboratory, fulfillment, and shipping relationships.
• Billing authorizations, refund, cancellation, and complaint policies.
• Sample checkout, membership, renewal, and cancellation flows.
• Advertising samples and substantiation for objective health claims.
• HIPAA privacy and security documentation, including business-associate agreements where applicable.
• Expected volume, average ticket, recurring-billing percentage, and fulfillment timing.
• Chargeback-prevention, customer-support, and incident-response procedures.

The application, website, checkout flow, and fulfillment description should tell the same operational story.

How do recurring memberships affect eligibility?

Recurring memberships can receive additional underwriting scrutiny because clear disclosures, informed consent, and accessible cancellation are central federal consumer-protection concerns. The FTC’s Negative Option Rule materials and business guidance address disclosure of material terms, consent, cancellation, and retaining proof of consent.

The operative status of provisions, effective dates, litigation, and enforcement should be verified against current official FTC materials before publication or launch. The FTC’s March 11, 2026 request for comment concerning possible amendments is a rulemaking development, not itself a new final obligation.

Operationally, disclose the amount and frequency of charges, trial or promotional terms, renewal dates, cancellation deadlines, and material limitations before collecting billing information. Do not call a membership “free,” “one-time,” or “no obligation” if it automatically becomes recurring. ROSCA may also be relevant to online negative-option transactions; FTC materials concerning the Chegg enforcement action emphasize disclosure, consent, and simple cancellation.

What advertising issues can affect a hormone clinic’s account?

Unsupported health claims can create regulatory and underwriting concerns. FTC advertising guidance states that health and safety claims generally require competent and reliable scientific evidence.

Do not advertise guaranteed body-composition results or unsupported claims that hormone therapy reverses aging, prevents cancer, treats Alzheimer’s disease, or cures fatigue. Testimonials do not replace objective substantiation. The FTC’s Consumer Reviews and Testimonials Rule took effect October 21, 2024 and addresses deceptive reviews and testimonials.

For compounded products, FDA guidance warns against describing a compounded drug as FDA-approved, equivalent to an FDA-approved drug, or reviewed by FDA for safety or effectiveness. FDA also states that it does not approve or license compounding facilities. Its FY 2025 report states that 58 warning letters went to telehealth companies selling misbranded compounded products.

Does HIPAA apply to payment processing?

HIPAA applies to a clinic or vendor when the relevant entity and activity fall within HIPAA’s covered-entity or business-associate rules; ordinary consumer card processing by a financial institution is generally not enough by itself to make that institution a business associate. HHS explains that billing, customer-support, analytics, intake, CRM, or software companies may require a written business-associate agreement when they create, receive, maintain, or transmit protected health information for a covered entity.

Apply the minimum-necessary standard under 45 C.F.R. §§ 164.502(b) and 164.514(d). Avoid putting diagnosis, medication, or treatment details in payment descriptors, metadata, or support tickets unless necessary and permitted.

What breach rules apply to hormone-clinic payment data?

HIPAA-covered entities must notify affected individuals after a breach of unsecured protected health information, without unreasonable delay and no later than 60 days after discovery. Breaches affecting 500 or more individuals must also be reported to HHS within that 60-day window; smaller breaches are logged and reported to HHS within 60 days after the end of the calendar year.

Businesses outside HIPAA may still fall under the FTC Health Breach Notification Rule, 16 C.F.R. Part 318. The FTC’s 2024 amendments became effective July 29, 2024. For breaches involving 500 or more people, FTC materials state that notice to affected individuals and the FTC is due without unreasonable delay and no later than 60 calendar days after discovery.

What state rules must a hormone clinic check?

A hormone clinic must review the rules of each state where patients are located and where providers practice; federal sources do not establish a nationwide operating rule for every clinic model. Review:

1. 1Medical-practice and telehealth authorization.
2. 2Professional licensing.
3. 3Corporate-practice-of-medicine and ownership restrictions.
4. 4Prescription, pharmacy, dispensing, shipping, and compounding rules.
5. 5Controlled-substance registration, monitoring, and visit requirements.
6. 6Automatic-renewal, cancellation, and subscription statutes.
7. 7State privacy and breach-notification requirements.
8. 8Professional-board advertising and testimonial rules.
9. 9Sales-tax and fee treatment for consultations, memberships, medication, or bundled services.

Use the relevant state medical board, pharmacy board, licensing authority, health department, attorney general, and controlled-substance authority, with qualified counsel where appropriate. Federal sources cannot establish that a particular clinic structure is lawful nationwide.

What should applicants do before applying?

1. 1Map consultations, memberships, fulfillment, refunds, renewals, and separate pharmacy charges.
2. 2Identify every patient and provider state requiring licensing, pharmacy, ownership, and subscription review.
3. 3Document who provides care, who prescribes, who fulfills, and which entity owns each responsibility.
4. 4Review advertising, testimonials, compounded-product language, and substantiation.
5. 5Map health-information transfers and identify possible business-associate relationships.
6. 6Assemble entity records, licenses, policies, agreements, billing flows, expected volume, and chargeback procedures.
7. 7Ask the acquirer for its current prohibited-business list, documentation requirements, reserve policy, and rules for telehealth, prescriptions, compounded products, and recurring billing.
8. 8Reconcile the approved business description with the website, checkout, descriptors, fulfillment, and support workflow.

MDLaunchr is the brand behind WhiteLabelClinic.com, a white-label telehealth infrastructure platform. It is one platform in this category—not a processor, regulator, clinician, pharmacy, or guarantor of approval. Explore compliance-first telehealth launch support as you check whether your business model can be underwritten.

Can hormone clinics use Stripe or Square?

Hormone clinics may be able to use Stripe or Square, but current eligibility and internal policies must be confirmed directly with the named processor. The approved federal sources do not verify approval, current prohibited-business rules, reserves, rates, or coverage for either provider.

Evaluate each provider against its current terms, underwriting process, and the clinic’s actual model. Named processors are included as search terms, not as recommendations or representations made on their behalf.

Is a hormone clinic automatically high risk?

No. The approved federal sources do not establish a universal “high-risk hormone clinic” classification, reserve, rate, or approval rule. A processor or acquirer may apply its own standards.

Are compounded products automatically prohibited for card payments?

No blanket federal card-payment prohibition was identified. FDA does restrict misleading promotion, including claims that compounded products are FDA-approved or reviewed for safety and effectiveness. Confirm payment terms directly with the acquirer.

Are rolling reserves required for hormone clinics?

No universal reserve requirement was identified in the approved federal sources. Reserve, payout, monitoring, and volume terms are private processor or acquirer decisions.

Can a declined account prove the clinic is illegal?

No. A decline, reserve, payout delay, or termination is not by itself a legal determination, and it does not guarantee another provider will approve the model.

Related reading: payment-processing resources.

Related reading: Vagaro Payments Alternatives for Prescribing Practices.