Processor Holding Med Spa Funds: What to Do About Reserves and Payout

If a processor is holding med spa funds, the merchant agreement and account-specific risk review usually determine whether the issue is a reserve, delayed settlement, suspended payout, or termination holdback. No approved federal source establishes a universal holding period, reserve percentage, or payout deadline for med spas.

Processor holding med spa funds at a glance

Why is my processor holding med spa funds?

A processor may delay settlement, impose a reserve, suspend payouts, or begin a termination holdback when its agreement and risk controls identify potential chargeback, refund, fraud, verification, fulfillment, regulatory, or unusual-activity risk.

The held balance may involve completed services, future appointments, prepaid treatment packages, memberships, deposits, or undelivered products. Those categories affect the processor’s assessment of possible refunds and disputes.

Separate three questions:

1. 1Contract: What does the merchant-processing agreement permit?
2. 2Payment: Were transactions accurately described, authorized, and refundable as promised?
3. 3Healthcare and regulatory operations: Are the underlying service, advertising, privacy, and billing practices lawful?

A payout delay does not automatically establish a HIPAA, FTC Act, FDA, or healthcare-billing violation. It also does not resolve whether the underlying business practices comply with applicable law.

How long can a merchant account hold med spa funds?

No approved federal source identified for this article establishes a universal maximum holding period, reserve percentage, or mandatory payout deadline for med spas, telehealth businesses, pharmacies, or card-not-present medication merchants.

Request the date the review began and the expected next review date, but do not treat an estimate as a guaranteed release date. Card-network thresholds, reserve formulas, assessment fees, monitoring-program triggers, and processor-specific deadlines were not verified. Ask the acquirer for the contractual basis of the hold and any current account-specific requirements.

Is a reserve the same as a payout delay?

No. A payout delay postpones settlement, while a reserve withholds funds under the processor’s risk structure. A settlement suspension may affect a broader group of transactions, and a termination-related holdback may apply during a controlled wind-down.

Ask the processor to identify whether the account is subject to a reserve, delayed settlement, suspended settlement, offset, or termination hold, and which transactions and dates are included.

What should I document before challenging a held settlement?

Build a consistent transaction file before escalating. Preserve:

• The merchant-processing agreement and incorporated operating rules.
• Processing statements, settlement reports, payout notices, and bank reconciliations.
• The amount held, transaction dates, categories, and stated release schedule.
• Appointment records, receipts, consent forms, fulfillment evidence, and service dates.
• Refund logs, cancellation requests, chargeback correspondence, and customer communications.
• Verification requests, underwriting messages, and processor responses.
• Evidence supporting website claims, testimonials, before-and-after content, and incentives.

Identify whether the funds relate to completed services, unused packages, recurring memberships, deposits, or undelivered products. Do not provide contradictory explanations for the same transactions.

Can recurring memberships increase payment risk?

Yes. Recurring billing creates disclosure, consent, and cancellation obligations under the Restore Online Shoppers’ Confidence Act. The FTC’s 2024 amended Negative Option Rule would have added more, but the U.S. Court of Appeals for the Eighth Circuit vacated it on July 8, 2025.

The FTC announced the final rule on October 16, 2024. Confirm the operative text and compliance dates for the specific arrangement. The rule addresses material disclosures, express informed consent, misrepresentations, and cancellation of negative-option features.

Retain the offer shown before payment, billing and renewal terms, affirmative consent, cancellation requests and timestamps, the date charges stopped, and refund or credit decisions. Do not classify every prepaid package as a subscription; assess its actual billing and cancellation structure.

Can advertising affect a processor’s risk review?

Yes. Advertising can affect disputes, refunds, complaints, and underwriting risk, although a questionable advertisement does not by itself prove that a reserve is legally justified.

The FTC’s Guides Concerning the Use of Endorsements and Testimonials in Advertising, 16 C.F.R. Part 255, state that advertisers remain responsible for claims communicated through endorsements and testimonials. The FTC also addresses substantiation for health-related performance claims and deceptive reviews, including undisclosed insider relationships and fabricated or manipulated testimonials. Its consumer reviews and testimonials rule became effective October 21, 2024.

Keep substantiation for objective claims, records of incentivized testimonials, material-connection disclosures, image permissions, accurate descriptions of typical results and limitations, and evidence that reviews were not fabricated, purchased, or manipulated.

Does HIPAA determine whether a processor can release funds?

No. HIPAA does not create a universal processor-release deadline. It may still affect how a business handles information shared with payment, booking, billing, gateway, or other vendors.

The HIPAA Privacy Rule, including 45 C.F.R. § 164.502, applies to covered entities and business associates within its scope. The HIPAA Security Rule, 45 C.F.R. Part 164, Subpart C, requires appropriate safeguards for electronic protected health information. A payment vendor is not automatically a business associate merely because it processes a payment; review the information it receives and the functions it performs.

If unsecured protected health information is breached, the HIPAA Breach Notification Rule, 45 C.F.R. §§ 164.400–414, generally requires individual notice without unreasonable delay and no later than 60 days after discovery. The FTC’s Health Breach Notification Rule, 16 C.F.R. Part 318, may apply to certain personal health record vendors and related entities outside HIPAA. Its 2024 amendments became effective July 29, 2024.

What do I do if my processor is holding med spa funds?

Use this sequence to address the payment issue, customer obligations, and compliance questions separately:

1. 1Pause avoidable exposure. Consider stopping new promotions, recurring-plan launches, or unusually high-volume campaigns until the hold is understood.
2. 2Confirm the balance. Determine whether it consists of card proceeds, payer reimbursement, memberships, deposits, products, or another payment channel.
3. 3Request the written basis. Ask for the exact contract clause, amount held, transaction range, stated reason, review-start date, next review date, and release terms.
4. 4Classify the control. Ask whether it is a reserve, delayed settlement, suspended settlement, offset, or termination holdback.
5. 5Match transactions to records. Connect held transactions to customers, service dates, authorizations, receipts, refund terms, fulfillment records, and dispute status.
6. 6Separate future obligations. Identify unused packages, memberships, deposits, and undelivered products.
7. 7Audit recurring billing and advertising. Review consent, disclosures, cancellation handling, testimonials, reviews, and objective claims.
8. 8Submit a formal appeal. Provide consistent records and ask what remediation evidence the processor requires.
9. 9Review material disputes with counsel. Obtain advice on the agreement, governing law, healthcare obligations, and state-specific issues before asserting that a hold violates law.
10. 10Plan continuity. Forecast payroll, rent, taxes, refunds, supplies, and service delivery without assuming another account will bypass a processor’s risk decision.

MDLaunchr, the brand behind WhiteLabelClinic.com, helps qualified businesses evaluate technology, operational, compliance, clinical-network, and fulfillment relationships. It is not a processor, bank, law firm, clinician, or guarantor of fund recovery.

Request an emergency processing review if the hold is disrupting essential operations. A review is not a promise that funds will be released.

What should I ask the processor?

1. 1Which exact agreement section authorizes this hold, reserve, delayed settlement, suspension, or termination holdback?
2. 2What transaction dates, types, and amounts are currently being held?
3. 3What risk, verification, chargeback, refund, fulfillment, or compliance issue is under review?
4. 4When did the review begin, what is the next review date, and what documents are required?
5. 5What amount or release schedule applies, and which contract provision governs changes?
6. 6Does the account remain open for new transactions, and what conditions apply to a controlled wind-down?
7. 7What is the formal appeal or reconsideration process?

MDLaunchr is the brand behind WhiteLabelClinic.com, a white-label telehealth infrastructure platform designed to help qualified businesses evaluate and coordinate launch relationships. Clinical decisions belong to appropriately licensed clinicians following an individual evaluation.

Related reading: Vagaro Payments Alternatives for Prescribing Practices, Boulevard Payments Alternatives for Prescribing Practices.