If your telehealth merchant account was declined, the processor or acquiring bank usually made an internal underwriting decision based on your business model, documentation, transaction profile, and contractual risk rules. No federal source publishes one universal decline list, so ask for the specific decline category and remediation requirements rather than guessing.
Telehealth merchant account declined at a glance
| Question | What to expect | Who sets it |
|---|---|---|
| How long does approval take? | Confirm with your acquirer; timing varies by file and review. | Processor or acquirer |
| What is usually required? | Entity, ownership, service, licensing, billing, security, and financial documentation. | Processor or acquirer |
| What can trigger a problem? | Inconsistent information, unclear services, recurring billing, claims, or unresolved security concerns. | Processor underwriting |
| Does HIPAA compliance guarantee approval? | No. It can document operational readiness but does not control approval. | Processor and acquirer |
| Are reserves or thresholds universal? | No approved source here verifies formulas, ratios, fees, or thresholds. | Acquirer; confirm in writing |
| Is recurring billing allowed? | It may require clear terms, informed consent, cancellation, and retained evidence. | Applicable law and processor |
| What should I request after decline? | The decline category, code if available, and written reconsideration requirements. | Processor or acquirer |
| Can I change business details to qualify? | No. Submit consistent, truthful information; do not conceal services or split transactions. | Applicant and processor |
Why was my telehealth merchant account declined?
The processor decides, not a federal telehealth regulator, and it typically evaluates whether the entity, services, clinicians, website, billing flow, documentation, and expected transactions fit its underwriting rules. A decline is not automatically a finding that the business is illegal or impossible to operate.
Common concerns include an unclear service model; inconsistent legal names, websites, bank records, or statement descriptors; incomplete ownership or financial records; uncertain state coverage; recurring-payment exposure; unsupported health claims; privacy and security uncertainty; or a billing model that is difficult to reconcile with the application.
These are common underwriting concerns, not universal rules. The exact reason may be an internal category or threshold that the processor does not publish.
What information should match across the application?
The legal entity, assumed business name, tax records, bank account, website, invoices, refund terms, and card-statement descriptor should describe the same business. The application should also explain who provides care, which states contain patients, what services are offered, who pays, when customers are charged, and whether the business uses subscriptions or prepaid packages.
A mismatch can arise when a company describes itself as a clinical practice in one document, a marketplace in another, and a subscription service on its website. A founder should prepare one plain-language patient and payment journey before requesting reconsideration.
Can recurring billing cause a telehealth payment application denial?
Yes, recurring billing can create additional underwriting questions, particularly for memberships, automatic renewals, prepaid packages, care plans, or free-to-paid trials. The Restore Online Shoppers’ Confidence Act governs online recurring charges: it requires clear disclosure of material terms, express informed consent, and a simple way to stop the charges. The FTC’s 2024 Click-to-Cancel amendments would have added more, but the U.S. Court of Appeals for the Eighth Circuit vacated them on July 8, 2025.
The FTC announced the final rule on October 16, 2024. Its requirements should be reviewed against the operative rule and current agency or court developments, including the FTC’s recorded March 11, 2026 action concerning the rule. Do not assume every telehealth payment arrangement is covered; applicability depends on the offer structure.
Before reapplying, retain evidence of what the customer saw and agreed to, disclose material terms before collecting billing information, and give customers a simple way to stop recurring charges. State automatic-renewal and consumer-protection requirements may also need separate review.
Can health claims cause a healthcare merchant account rejection?
Yes, unsupported or misleading health claims can become an underwriting concern. Section 5 of the Federal Trade Commission Act prohibits unfair or deceptive acts or practices, and the FTC’s Health Products Compliance Guidance says health-related claims should be truthful, not misleading, and supported by appropriate scientific evidence.
The FTC Guides Concerning the Use of Endorsements and Testimonials in Advertising, 16 C.F.R. Part 255, were revised in June 2023. A testimonial cannot substitute for substantiation, a material connection should be clearly and conspicuously disclosed, and a testimonial implying typical results requires substantiation for that implication or a clear disclosure of generally expected performance.
Audit phrases such as “guaranteed,” “works for everyone,” “cures,” “clinically proven,” or “doctor-approved,” along with paid testimonials, influencer content, affiliate promotions, and incentivized reviews. Keep the substantiation file with the application materials.
Does HIPAA compliance help after a telehealth merchant account decline?
Yes, a documented HIPAA program can help explain how the business handles protected health information, but HIPAA compliance does not guarantee merchant-account approval. Under the HIPAA Privacy Rule, 45 C.F.R. §§ 164.501, 164.502, 164.502(b), 164.506, and 164.514(d) address payment-related uses and disclosures, minimum-necessary limits, and related definitions.
A payment processor, billing company, collection agency, or other vendor may be a business associate depending on its services and access. A written business-associate agreement may be required when a vendor handles PHI on behalf of a covered entity. Map what information reaches the processor, billing vendor, telehealth platform, support team, and electronic health-record system. Avoid placing diagnosis or treatment information in transaction fields unless necessary and permitted.
Also document breach readiness. Under the HIPAA Breach Notification Rule, 45 C.F.R. §§ 164.400–414, individual notice generally must be provided without unreasonable delay and no later than 60 days after discovery. Breaches affecting 500 or more individuals generally must be reported to HHS within the same outer timeframe, and business associates must notify covered entities without unreasonable delay and no later than 60 days after discovery.
Does telehealth licensing affect merchant underwriting?
Yes, licensing clarity can affect the processor’s confidence in the stated service geography, although the processor does not replace state regulators. The federal sources in this review do not resolve whether a clinician may treat a patient in a particular state, state telehealth practice rules, prescribing requirements, entity structures, or state privacy and automatic-renewal laws.
Prepare a state-by-state list showing where patients are located, which clinicians serve them, and the licensing basis for each state. Verify the relevant official medical board, licensing authority, attorney general, insurance department, Medicaid program, and other applicable agency. Do not describe the business as licensed nationwide or legal in all 50 states without current state-by-state verification.
How can billing and reimbursement inconsistencies cause a decline?
An inaccurate or incomplete payment model can create avoidable underwriting questions. State clearly whether the business accepts self-pay, commercial insurance, Medicare, Medicaid, employer payments, or a combination, and identify who submits claims and who bills the patient.
CMS’s Telehealth & Remote Monitoring, MLN901705, published in December 2025, and CMS CY 2026 materials describe billing instructions that may differ by provider type, service, place of service, modifier, and payer. They do not determine whether a private merchant account must be approved. They do mean the application, website, invoices, and billing workflow should not contradict one another.
What documents should I prepare before reapplying?
Prepare a concise file that lets the acquirer compare the business description with evidence:
- Legal-entity, ownership, tax, and beneficial-owner documents.
- A plain-language service description and patient payment journey.
- States served and the licensing basis for each state.
- Clinician licenses and professional-entity documents, where requested.
- Website, terms of service, privacy notice, refund policy, and cancellation policy.
- Recurring-payment disclosures, affirmative-consent records, and cancellation evidence.
- Sample invoices and card-statement descriptors.
- Expected monthly volume, average and maximum ticket, refund history, and billing frequency.
- A written explanation of self-pay, insurance, Medicare, Medicaid, employer, or mixed billing.
- HIPAA role mapping, applicable business-associate agreements, vendor list, and security summary.
- Incident-response process and advertising or testimonial substantiation file.
- The exact decline code and written remediation request, if supplied.
FTC security guidance recommends inventorying sensitive information, identifying access and vendors, using secure connections such as TLS when transmitting card information, reducing unnecessary collection and retention, and maintaining reasonable administrative, technical, and physical safeguards. The approved federal sources do not establish a universal PCI DSS threshold, validation level, fee, reserve formula, or card-network monitoring trigger.
What changed recently?
The rules and guidance in this article were checked against the approved official-source packet as of September 29, 2026. Notable dated developments include the FTC’s final Click-to-Cancel announcement on October 16, 2024, the Eighth Circuit’s July 8, 2025 decision vacating it, the FTC’s March 11, 2026 advance notice of proposed rulemaking on negative option marketing, the FTC’s June 2023 revision of the Endorsement Guides, and CMS’s December 2025 MLN booklet describing CY 2026 telehealth billing changes.
What do I do after a telehealth merchant account decline?
- 1Founder: Save the decline notice, code, application, underwriting emails, and the exact information submitted.
- 2Founder: Request the specific underwriting category and written documents required for reconsideration.
- 3Processor or acquirer: Ask whether the issue concerns business category, ownership, recurring billing, projected volume, documentation, or prior processing history.
- 4Founder and platform: Reconcile entity names, website language, descriptors, invoices, refund terms, and checkout disclosures.
- 5Founder and qualified counsel: Review state licensing, entity structure, recurring-payment obligations, advertising claims, and any prescribing or reimbursement issues that apply.
- 6Founder and clinical operations team: Document clinicians, patient locations, service scope, and the actual payment journey.
- 7Founder and vendors: Map PHI access, confirm applicable business-associate arrangements, and assemble security and breach-response materials.
- 8Founder: Remove or substantiate unsupported claims and preserve consent and cancellation records.
- 9Processor or acquirer: Confirm current underwriting requirements, any applicable reserve or monitoring terms, and which items are negotiable.
- 10Founder: Reapply only with truthful, consistent, materially improved documentation; never conceal services, use a misleading descriptor, split transactions, or submit inconsistent information.
MDLaunchr is the brand behind WhiteLabelClinic.com, a white-label telehealth infrastructure platform designed to help qualified businesses evaluate and coordinate technology, operational, compliance, clinical-network, and fulfillment relationships. Telehealth merchant account underwriting documents and telehealth website merchant underwriting provide related preparation points. Explore how MDLaunchr and WhiteLabelClinic.com can support a compliance-first telehealth launch.
Questions to ask your processor
- “What specific underwriting category caused the decline?”
- “Can you provide the decline code and the documents required for reconsideration?”
- “How do you classify my business: healthcare provider, telehealth platform, subscription service, marketplace, billing intermediary, or another category?”
- “Which states, clinician licenses, or professional-entity documents do you need to verify?”
- “Do you require a business-associate agreement or specific security documentation for this payment flow?”
- “Which recurring-billing disclosures, consent records, refund terms, and cancellation controls should I submit?”
- “Are any reserve, monitoring, dispute, volume, or fee terms applicable to this account, and where are they stated in writing?”
- “What must change before I submit a reconsideration request?”
Disclaimer
This article is educational business information, not legal advice, medical advice, financial advice, or a guarantee of merchant-account approval. Processors, acquiring banks, regulators, clinicians, and attorneys make separate determinations under their own rules and facts. Confirm current requirements with the relevant processor, acquirer, qualified counsel, and applicable state authorities.
Related reading: the full guide this article belongs to.
Written and reviewed by MDLaunchr's clinical and compliance team. We build white-label telehealth infrastructure for founders, creators, and healthcare operators—covering providers, pharmacy, technology, and compliance.
This article is for general informational and educational purposes only and is not medical, legal, or regulatory advice. It does not create a provider-patient relationship and should not be used to diagnose or treat any condition. Telehealth and compounding regulations vary by state and change over time—consult qualified legal, clinical, and compliance professionals before launching or operating a telehealth program.
Frequently asked questions
Why was my clinic merchant account rejected?
A clinic merchant account may be rejected because the processor could not verify the business model, ownership, licensing, billing flow, recurring-payment controls, advertising claims, security documentation, or financial profile.
Can I reapply after a telehealth payment application was denied?
Yes, you can ask about reconsideration, but submitting the same file may not address the underwriting concern. Obtain the decline category, correct documented gaps, and submit consistent information.
Does a declined merchant account mean my telehealth business is illegal?
No. A decline is a processor or acquirer underwriting decision, not a federal legal ruling. It may indicate that the submitted information did not satisfy that provider’s requirements.
Does HIPAA compliance guarantee merchant-account approval?
No. HIPAA documentation addresses privacy and security responsibilities, while the processor separately evaluates the entity, services, transaction profile, contractual rules, and other underwriting factors.
Why did the processor ask about my cancellation policy?
Recurring memberships, automatic renewals, prepaid packages, and similar offers can require clear disclosures, informed consent, and simple cancellation under the Restore Online Shoppers’ Confidence Act.
What should I do if the processor will not explain the decline?
Request the applicable decline category, reconsideration documents, and current account requirements in writing. Do not guess at hidden thresholds or alter your business description to evade review.
- Federal Trade Commission — Negative Option RuleHealth Products Compliance GuidanceStart Security Guide Business
- U.S. Department of Health & Human Services — Does the Privacy Rule Permit a Covered Entity to Communicate with Other Parties Regarding a BillBreach Notification
- Centers for Medicare & Medicaid Services — Mln901705 Telehealth Remote Monitoring
- Restore Online Shoppers’ Confidence Act (FTC)
- FTC Seeks Public Comment in Response to Advance Notice of Proposed Rulemaking Regarding Negative Option Marketing Practices (FTC)