Patient payments for medical practices.

The most reliable patient payments are the ones collected at the visit, followed by a clear way to pay the rest after insurance pays. Most practices combine payment at check-in, a card on file with written consent, online pay links and payment plans so patients can settle balances without a phone call.

This guide walks through each piece, what it takes to set up and the security basics that keep patient card data out of places it does not belong. For pricing and equipment across a practice, see our page on medical and dental card processing.

Collect what you can at the visit

Once a patient leaves, collecting gets harder and costs more. Paper statements, postage and follow-up calls add up, and some balances are never paid. The front desk is your best chance.

• Copays and known amounts. Collect at check-in. The amount is known, and patients expect it.
• Estimated patient responsibility. Many practices collect a good-faith estimate at checkout for services where the patient share is predictable.
• Past balances. A friendly reminder at check-in, with a terminal ready, clears many of them.

Make it fast. A countertop terminal with chip and contactless support at each front-desk station keeps the line moving. If your practice management software supports integrated payments, the amount flows to the terminal and the payment posts to the patient’s account automatically, so no one keys it twice.

Make the money conversation routine

Front-desk staff often avoid asking for payment because it feels awkward. A short, consistent script helps: “Your copay today is $30. Would you like to use the same card as last time?” Post your payment policy at the desk and on your website, include it in new-patient paperwork and have staff mention it when scheduling. When patients know what to expect before they arrive, fewer balances end up on a mailed statement.

Card on file and payment plans

A card on file lets you charge the patient’s remaining balance after insurance pays, without sending a statement first. It works well, but it has to be done right.

1. Get written consent. The patient agrees, in writing, that you may charge the card for balances after insurance. Spell out when you will charge and how they will be notified.
2. Store the card safely. Use tokenization through your gateway or processor, so your systems hold a token, not the card number.
3. Notify before you charge. Send the explanation of benefits or a balance notice first, then charge on the date you said you would.
4. Keep records. Keep the consent and notices with the patient’s account in case of a dispute.

For larger balances, payment plans help. Recurring billing charges the same card on a set schedule until the balance is paid. Patients get a predictable monthly amount, and your staff stops chasing. Our guide to recurring billing covers setup and what to put in the agreement.

Paying after the visit

Some balances will always be collected later. Make paying them easy:

Method	How it works	Good for
Online pay page	Patient pays on your website through a secure gateway	Patients who prefer to pay on their own time
Pay link by email	Statement or email includes a secure link to pay	Getting paid faster than mailed checks
Phone payment	Staff enters the card in a virtual terminal	Older patients, complex balances
ACH or eCheck	Payment from the patient’s bank account	Large balances, payment plans
Mailed check	Traditional statement and check	Patients who insist on paper

Online and phone payments are card-not-present transactions, which generally cost more than chip or tap at the front desk. That is another reason to collect what you can at the visit. Our guide to payment links and invoicing explains how pay links work in more detail.

HSA and FSA cards

Many patients pay with a health savings account (HSA) or flexible spending account (FSA) card. These usually run on the card networks as debit cards. Two things follow from that. First, they generally work on any standard terminal. Second, if you surcharge credit cards, surcharges are not allowed on debit or prepaid cards, so your system needs to tell them apart. Some practices skip surcharging entirely for that reason. Check current rules before adding any card fee.

Security: keep card data where it belongs

Practices handle two kinds of sensitive data: health information and card data. They have separate rules. HIPAA covers patient health information. PCI DSS, the card industry’s security standard, covers card data. Meeting one does not mean you meet the other.

Some simple habits keep card data out of trouble:

• Never write card numbers in chart notes, sticky notes or spreadsheets.
• Never ask patients to email card numbers.
• Use tokenization for cards on file, so your systems don’t store the full number.
• Use terminals that encrypt card data from the moment it is read.
• Limit who can run refunds and view payment reports.
• Complete your annual PCI self-assessment questionnaire, and keep a copy.

None of this is legal or compliance advice. It is the baseline most practices should expect from their processor. For more, see our guide to what PCI compliance is.

What PayZoom does

PayZoom works with medical and dental practices. We set up processing to fit the practice management software, gateway and terminals you already use, and we offer recurring billing, ACH, online payments and card-on-file setups. We help you meet Visa and Mastercard rules and stay PCI compliant, and we never charge a non-compliance fee. There are no early termination fees, and for Interchange-Plus merchants our margin above interchange never increases, in writing.

Send us a recent statement for a free analysis, or call 866.242.4325. A real person answers, and support is never outsourced.