Recurring Billing for TRT and Hormone Clinics: Eligibility Guide

Recurring billing for a TRT or hormone clinic may be commercially possible, but approval is never automatic. Payment processing is only one part of the analysis. Operators should evaluate consent, cancellation, protected health information (PHI), advertising claims, controlled-substance considerations, applicable jurisdictional requirements, and processor underwriting before accepting recurring card payments.

Start with the charge, not the payment button

A recurring plan can represent different businesses. The charge might cover a clinical membership, consultation, administrative access, laboratory services, medication, shipping, or a combination. That distinction affects website language, checkout disclosures, refunds, merchant-of-record structure, and processor review.

Before approaching an acquiring bank or processor, describe in plain language what the customer receives and when. If a charge includes multiple components, consider whether they should be described or billed separately where legally and operationally appropriate. Customers should not have to guess whether the monthly amount includes clinical services, laboratory work, medication, shipping, or only membership access.

For broader context, review the payment-processing hub for telehealth businesses and the related payment-processing eligibility guide for hormone clinics.

Build clear recurring-payment consent

Under the Restore Online Shoppers’ Confidence Act (ROSCA), certain internet transactions involving recurring charges require clear disclosure of material terms and the consumer’s express informed consent before charging the account.

Before authorization, identify:

• Amount or pricing formula
• Billing frequency and first-charge date
• Subsequent charge timing and renewal terms
• What the subscription includes
• Whether visits, laboratory services, medication, shipping, or other items cost extra
• Cancellation method and timing requirements
• Refund and failed-payment policies
• Material limitations or exclusions

Keep evidence of enrollment, such as the checkout-page version shown, terms presented, timestamp, customer identity, and authorization record. A receipt alone may not establish what the customer saw when agreeing to recurring charges.

Cancellation should be easy to find and reasonably accessible. FTC negative-option rulemaking and subscription enforcement have focused attention on whether consumers understand enrollment and can stop charges without unnecessary friction. Because rulemaking status can change through litigation or agency action, counsel should confirm the requirements in effect on the planned launch date.

Use a reviewable billing architecture

Assess each charge with four questions:

This is not a legal safe harbor. It helps identify questions before underwriting and professional review. A customer account should generally show the active plan, next billing date, amount, payment method, and cancellation instructions. Receipts should identify the merchant accurately. Document failed-payment handling, refunds, partial refunds, disputes, and chargebacks.

Protect PHI across the payment stack

Minimize health information sent into billing and marketing systems. Payment records, processor metadata, analytics tools, support tickets, and customer relationship systems should not contain unnecessary diagnoses, treatment details, laboratory results, medication information, or similar PHI.

HHS explains that providers conducting certain standard electronic healthcare transactions may be HIPAA covered entities. A vendor performing billing, practice-management, claims, or similar functions involving PHI may be a business associate. When applicable, the covered entity generally needs a written business associate agreement addressing permitted uses, safeguards, breach reporting, subcontractors, and related responsibilities.

A financial institution processing a debit or credit card transaction as a normal banking service is generally not a business associate merely because it facilitates payment. That does not resolve the status of every billing platform, patient portal, cloud service, CRM, or payment-orchestration vendor. Review each vendor’s role and data access.

A practical data-flow review should:

• Identify systems involved in enrollment, payment, support, clinical care, laboratories, fulfillment, and marketing.
• Record what each system receives and whether it includes PHI.
• Determine whether a business associate agreement is appropriate.
• Remove unnecessary clinical detail from payment fields, descriptors, tags, and support workflows.
• Define access, retention, incident-response, and offboarding procedures.

An infrastructure platform can coordinate technology and operational relationships, but it should not be presented as the treating clinician. Licensed clinicians and appropriate healthcare entities retain responsibility for clinical decision-making, subject to applicable law and professional obligations.

Review advertising separately

Payment eligibility does not cure a marketing problem. FTC guidance states that health-related advertising must be truthful, not misleading, and supported by competent and reliable scientific evidence. Objective claims about efficacy, safety, treatment, symptoms, body composition, energy, sexual function, aging, or disease outcomes require careful substantiation.

Review landing pages, membership descriptions, emails, testimonials, social posts, FAQs, and before-and-after materials—not only the checkout page. Avoid guaranteed outcomes, universal benefit statements, unsupported safety claims, and testimonials implying results the clinic cannot substantiate. Older FTC hormone-replacement-therapy warning and enforcement materials reinforce the need for evidence-based review; they do not establish a blanket prohibition on recurring billing.

Account for testosterone’s classification

The DEA identifies testosterone among examples of Schedule III controlled substances. That classification does not itself establish a blanket prohibition on recurring card payments. It does mean that a business involving testosterone may require additional review of prescribing, dispensing, recordkeeping, telehealth, pharmacy, and other controlled-substance requirements.

This article does not address prescribing protocols, dosing, product access, sourcing, administration, or patient-use instructions. Payment eligibility should be evaluated separately from whether the underlying clinical and fulfillment model is lawful.

What underwriters may examine

Processor approval is a commercial underwriting decision, not a federal certification. A proposed processor or acquiring bank may examine:

• Whether the business sells clinical services, products, or both
• Whether medication is included in the recurring charge
• Merchant-of-record identity
• Card-not-present volume and dispute history
• Refund and cancellation ratios
• Fulfillment and continuity-of-care practices
• Ownership and corporate structure
• States or jurisdictions served
• Use of controlled substances
• Website disclosures and complaint history

Rules vary by provider and acquiring relationship. Approval for one model does not necessarily transfer to another. Prepare a consistent underwriting file covering the entity, ownership, business model, recurring terms, cancellation and refund flow, projected transactions, fulfillment, jurisdictional footprint, vendors, and relevant clinical-operations documentation.

Treat jurisdictional review as a separate workstream

This article is intentionally not a state-by-state legal comparison. The supplied research does not verify individual state laws or provide current official state sources for specific state conclusions. Federal HHS telehealth guidance indicates that telehealth delivery across state lines varies according to state regulations, so operators should not infer requirements for a particular jurisdiction from federal guidance or from another jurisdiction.

Before launch or expansion, obtain current qualified review for every jurisdiction in scope, including where the patient is located when care is delivered. That review may affect the clinical entity, professional relationships, pharmacy or fulfillment model, subscription terms, privacy practices, controlled-substance operations, compensation arrangements, and consumer disclosures. These questions are separate from processor underwriting and should not be represented as resolved by payment approval.

Pre-underwriting checklist

• The recurring charge is described in plain language.
• Price, frequency, first charge, renewal, inclusions, and exclusions appear before consent.
• Enrollment evidence can be preserved.
• Cancellation is reasonably accessible and the refund policy is consistent.
• Merchant-of-record identity is accurate.
• Data flows are mapped and unnecessary PHI is removed.
• Vendor HIPAA roles and BAAs are reviewed where applicable.
• Marketing claims receive evidence-based review.
• Clinical, pharmacy, and controlled-substance workflows receive separate qualified review.
• Jurisdictional coverage and patient-location rules are documented.
• Chargeback, failed-payment, refund, and continuity procedures are written.
• The application matches the live website and agreements.

Can your business model be underwritten?

Federal sources reviewed here do not categorically ban all TRT or hormone clinics from recurring card payments. They also do not guarantee approval by any processor or acquiring bank. Test the complete model—the charge, customer journey, data flows, marketing, clinical relationships, fulfillment, ownership, and jurisdictions served—rather than submitting only a generic description of a telehealth clinic.

MDLaunchr is the brand behind WhiteLabelClinic.com, a white-label telehealth infrastructure platform designed to help qualified businesses evaluate and coordinate the technology, operational, compliance, clinical-network, and fulfillment relationships involved in launching telehealth services. Explore how MDLaunchr and WhiteLabelClinic.com can support a compliance-first telehealth launch.

FAQs

Can a TRT clinic use monthly recurring card payments?

A recurring-billing TRT clinic may be commercially eligible, but approval depends on the exact model and processor underwriting. Clear consent, cancellation, data minimization, substantiated marketing, jurisdictional review, and documented clinical and fulfillment operations are important parts of the assessment.

Should medication and clinical services be included in one subscription?

That depends on the model and applicable law. Clearly explain what the customer receives, and consider separating clinical services, membership or administrative fees, laboratory charges, medication, and shipping where legally and operationally appropriate.

Does HIPAA apply to a payment processor?

Not automatically in every payment interaction. HHS distinguishes ordinary financial-institution payment services from vendors performing billing or other functions involving PHI. Review each vendor’s role and determine whether a business associate agreement is needed.

Does testosterone’s Schedule III status prevent recurring billing?

The DEA classification does not itself establish a blanket prohibition on recurring card payments. It signals that additional clinical, prescribing, dispensing, recordkeeping, telehealth, pharmacy, and controlled-substance questions may require review.

What should an operator provide during underwriting?

Provide a consistent explanation of services, merchant of record, recurring terms, cancellation and refund processes, jurisdictional footprint, fulfillment model, ownership, vendor stack, and projected transaction profile. The application should match the live website and customer agreements.

Can a white-label platform guarantee payment approval?

No. Platform support cannot guarantee approval, processing continuity, funding, or a particular processor’s decision. Underwriting is determined by commercial providers, while legal and clinical compliance require separate review.