Telehealth Payments in California: Cards, HSA/FSA, and Chargebacks

California telehealth payment processing sits at the intersection of three sets of rules that rarely talk to each other: card-network underwriting, health-benefit account eligibility, and California's own consumer and medical-consent laws. A virtual practice serving patients from San Diego to Redding has to satisfy all three at once, and the mistakes are expensive: a misconfigured HSA setup, a membership that violates the Automatic Renewal Law, or a dispute ratio that gets the account frozen. This guide walks through each layer as it applies to a California-licensed provider.

How underwriters actually see telehealth

There is no "telehealth" MCC. A physician-led practice is typically coded 8011 (doctors), a therapy practice 8099 or a related health code, and the underwriter's questions are about what you deliver and how you charge. Behavioral health, primary care and dermatology with per-visit billing are generally straightforward. Programs involving GLP-1 weight-loss medications, hormone therapy, hair loss, or anything with a subscription-plus-pharmacy model get more scrutiny, because those categories have higher dispute rates and closer network attention. If you dispense or ship medication, expect questions about the pharmacy relationship, and see the guide on Best Payment Processor for Telemedicine Providers for how those models are structured.

Have ready: your California medical or behavioral license numbers, your Medical Board or Board of Behavioral Sciences standing, your business entity documents, your intake and consent forms, and your refund policy. Providers serving patients in multiple states will be asked about licensure in each.

HSA and FSA: the part everyone gets wrong

Patients want to pay with their benefit card, and telehealth visits are generally qualified medical expenses. The mechanics depend on how you are coded.

• If your account carries a healthcare provider MCC, most benefit-card issuers will approve the transaction without item-level verification, and the patient may be asked for a receipt later.
• If you sell products (supplements, devices, skincare) alongside visits, those may not qualify, and mixing them on one transaction can cause a decline or a later substantiation problem for the patient.
• Retail-style sales of eligible products require an IIAS-compliant inventory system; most practices avoid this by keeping products on a separate account.

Confirm your MCC and your benefit-card handling with your processor before you put "We accept HSA/FSA" on the website. A wrong claim leads to declines at the worst moment and to disputes when a patient's plan later rejects the expense.

Memberships and California's Automatic Renewal Law

Many virtual practices bill a monthly membership. California requires that renewal terms be presented clearly before consent, that the patient receive an acknowledgment they can keep, and that cancellation be at least as easy as enrollment (online sign-up means online cancellation). Free or discounted first months converting to full price need advance notice. Set up recurring billing with those disclosures built into the enrollment step and with cancellation available in the patient portal. Beyond the legal exposure, a membership someone cannot cancel is the most common source of "I did not authorize this" disputes in the category.

SB 478 also applies: a $79 plan plus a mandatory $10 "platform fee" must be advertised as $89.

Consent, privacy and the payment record

California's telehealth statute requires verbal or written consent to receive care by telehealth, documented in the record. The Confidentiality of Medical Information Act governs patient data, and HIPAA applies on top for covered entities. Your payment system should never be where clinical data lives. Use tokenization so card details are stored as references, keep clinical notes in the EHR, and make sure your processor signs the agreements your compliance program requires. Descriptors matter here too: a discreet but recognizable billing name protects privacy without generating "unrecognized charge" disputes.

Chargebacks in virtual care

Disputes in telehealth cluster around four causes: the patient did not recognize the descriptor, the membership renewed unexpectedly, the visit was cancelled or the provider was unavailable, or the medication never arrived. Each has a specific defense.

1. Descriptor: use the practice name patients know.
2. Renewals: send a reminder before each charge and keep the consent record.
3. Cancellations: apply a written, acknowledged policy and refund within it promptly.
4. Shipments: keep pharmacy tracking tied to the order.

Keep the dispute ratio well under the 0.9%-1% range where network monitoring begins. Enrolling in pre-dispute alerts lets you refund a contested visit before it counts against you.

Settlement and the practice's cash flow

Card funds settle in 1-2 business days, ACH in 1-3. Practices that collect larger self-pay balances or corporate wellness contracts often add ACH for those invoices. Some also accept stablecoin payments, which settle instantly to the merchant wallet; that is a niche today but relevant for practices with international cash-pay patients.

Telehealth in California is a mature, regulated field, and its payments should look like it: a correctly coded account, honest HSA/FSA claims, a membership flow that satisfies the Automatic Renewal Law, and a dispute process that starts at intake. Get the framework right and the practice can grow across the state without rebuilding its billing every year.