Home / Resources

California

Payment Processing for Med Spas in San Francisco

San Francisco med spas need a processor that handles high tickets, packages, memberships and results-driven disputes without treating them like a generic salon.

Flux PaymentsOctober 20, 20254 min read

Key takeaways

  • Prepaid packages and memberships are what make med spas high-risk in a processor's eyes; describe them honestly in underwriting.
  • Medical oversight from a California-licensed physician matters both to the Medical Board and to your sponsor bank.
  • Results disputes are your main chargeback exposure; consent forms, before-and-after photos and clear refund terms win them.

Med spas payment processing in San Francisco tends to surprise owners who assumed a clinic doing Botox and laser treatments would be underwritten like a dermatology office. It is not. The prepaid treatment packages, the monthly memberships, the high average ticket and the fact that the customer is buying an outcome rather than a product put med spas in a category many processors watch closely. From Union Street in Cow Hollow to Fillmore in Pacific Heights, the Financial District lunchtime-injectable clinics and the newer spaces in Hayes Valley and Noe Valley, the businesses that keep their accounts are the ones that understand what the bank is looking at.

The business model, as an underwriter sees it

A San Francisco med spa typically sells three things: single treatments paid at the visit, prepaid packages of six or ten sessions, and a monthly membership that banks credits or discounts. The single treatment is ordinary. The package and the membership are what raise the risk score, because the spa holds the customer's money before delivering the service. If the spa closes, changes hands or the customer moves to Oakland and never uses the last four sessions, the card networks let that customer dispute the unused portion. Underwriters price that future-delivery exposure with a rolling reserve, often a small percentage held for a set number of months, and by capping how much prepaid volume they will accept relative to your history. Be precise on the application about what share of revenue is prepaid; it is the single most important number in the file.

Medical oversight and California specifics

California's Medical Board treats injectables and many energy-based treatments as the practice of medicine. That means a licensed physician or the appropriate mid-level provider under supervision, a corporate structure that respects the state's rules on the practice of medicine, and a medical director relationship that is real rather than a name on the wall. Sponsor banks ask for evidence of this because a spa that gets shut down by the state leaves a pile of prepaid packages they will have to refund. Confirm your structure with counsel; the payment side follows from the clinical side, not the other way around.

Memberships and the Automatic Renewal Law

Monthly memberships that auto-renew fall squarely under California's Automatic Renewal Law: clear disclosure of terms before the first charge, affirmative consent, an acknowledgment the customer can keep, and cancellation that is at least as easy as signup. A member who cannot cancel online will dispute the charge, and that dispute usually goes against the merchant. Run memberships on a purpose-built recurring billing platform that records consent, sends renewal notices and stores cards through tokenization, and keep the cancel path visible in the client portal.

Chargebacks that are really refund conversations

Med spa disputes are rarely fraud. They are a client in the Marina who feels the filler did not look like the Instagram reference, or a client who bought a laser package during a promotion and changed her mind. Your defense is documentation:

  1. Signed informed consent for each treatment, including the statement that results vary.
  2. Before-and-after photos with dates and consent to keep them on file.
  3. A written refund and expiration policy for packages that the client signed and that matches the website.
  4. Treatment notes showing the service was delivered as described.

Network monitoring thresholds sit around 0.9 percent to 1 percent of transactions, but a med spa with prepaid volume should aim much lower. A layer of fraud detection also helps with the smaller but real problem of stolen cards used to buy gift cards and product online.

Pricing, surcharges and SB 478

Med spa tickets are large, so percentage fees matter. Ask for interchange-plus pricing so that debit and non-rewards cards cost less than premium rewards cards rather than everything being blended at a high-risk rate. If you are thinking about a card surcharge or a "service fee," remember that SB 478 requires the advertised price to include mandatory fees; a $12 facility fee appearing only on the receipt is exactly what the law targets. Check the current rule with your processor and counsel before changing your price list.

Retail, gift cards and online booking

Skincare retail, gift cards for the holidays and online booking deposits round out the revenue. Keep card data off your booking software with hosted fields so a breach at a third-party scheduling tool does not become your PCI problem, and treat gift-card sales online with the same address and CVV checks as any card-not-present order.

A San Francisco med spa that describes its prepaid model honestly, keeps its medical structure clean and treats consent forms as part of its payment records will find processors willing to work with it and reserves that ease as the history builds.

Ready to get set up with Flux?

Cards, ACH, and stablecoins in one platform, with volume-based pricing. No setup fees or contracts.

Get Started
← Back to all posts