Payment Processing for Med Spas Selling Peptides

the most common mistake we see when a med spa goes online with peptides: they call their existing processor — the one running the terminal at the front desk — and ask to add ecommerce. sometimes the rep says yes. that yes is the beginning of a problem, because the account was underwritten for card-present services performed in a clinic, and you are about to run card-not-present product sales through it.

when the acquirer's monitoring catches the shift, you do not just lose the online channel. you risk the clinic account that processes your in-person treatments, your memberships, and your packages. that is your core business. do not put it in the blast radius.

why the two accounts are genuinely different

• —card-present clinic transactions carry low fraud risk and low chargeback rates because the customer is physically there and signs. rates are correspondingly low.
• —card-not-present ecommerce carries higher fraud, higher dispute rates, and shipment risk. it is priced and reserved accordingly.
• —the MCC is different. medical and health services versus retail/ecommerce product sales are not interchangeable, and using the wrong MCC is a misrepresentation issue.
• —the product is different. selling a peptide protocol administered in-clinic under a provider relationship is a different transaction from shipping a product to a customer's house.
• —the underwriting file is different — the ecommerce account requires website review, policies, fulfillment method, and COAs that your clinic account never needed.

two accounts is not a workaround. it is the accurate structure. each account is underwritten for what it actually does.

how to structure it

1. 1.decide with your attorney and CPA whether the online product business runs inside the existing entity or as a separate one. there are real reasons to separate — liability, licensure, accounting clarity — and this is a professional advice question, not a payments one.
2. 2.whatever you decide, disclose it accurately. if the ecommerce entity is affiliated with the clinic, say so on the application. underwriters are fine with affiliated entities; they are not fine with discovering one.
3. 3.open a dedicated business bank account for the ecommerce side so settlements and reserves do not commingle with clinic revenue.
4. 4.apply for a high-risk ecommerce MID with full disclosure of the peptide product, the fulfillment method, and the claims on the site.
5. 5.keep the clinic's existing card-present account exactly as is, processing only in-person services.
6. 6.if you also sell products at the front desk, ask your clinic processor how they want that handled — often it is fine under the existing MCC, but ask rather than assume.

the entity question is genuinely important and genuinely a legal question. the line you cannot cross is using a separate entity to conceal the product from an underwriter. an affiliated entity you disclose is normal corporate structure. a shell created so a bank does not learn what you sell is fraud. not legal advice — talk to your attorney.

what the ecommerce underwriter will ask that your clinic never did

clinic underwriting was mostly about the entity and the location. ecommerce underwriting is about the website and the fulfillment chain.

• —the live URL, reviewed by a human who will click through your checkout
• —terms of service, privacy policy, refund policy, and shipping policy — all published, all specific
• —who fulfills, from where, and in what time frame. 3PL name and relationship.
• —certificates of analysis and supplier documentation
• —whether any product requires a provider relationship, and how that is verified before shipment
• —your projected monthly volume and average order value, and whether you run subscriptions
• —how customer support is staffed and reachable

med spas usually have an advantage here. you have a real physical location, a licensed provider on staff, an existing patient base, and years of clean card-present history. that is a materially stronger file than a dropshipper with a two-week-old domain, and it should translate into better terms. make sure your ISO puts it in front of the underwriter.

the patient-to-customer transition

your existing patients are the best possible launch audience and also the segment most likely to generate 'unrecognized charge' disputes, because they know your clinic name and not your ecommerce brand name. handle this deliberately.

1. 1.make the ecommerce descriptor recognizable and related to the clinic brand the patient already knows
2. 2.tell patients in advance that the online store is launching, under what name, and what the charge will look like
3. 3.put the descriptor text on the confirmation email and the thank-you page
4. 4.brief front desk staff so they can answer 'what is this charge on my statement' without the patient calling their bank
5. 5.keep the same support phone number across clinic and ecommerce if you can — familiarity prevents disputes

cash flow differences you should plan for

clinic revenue settles fast and predictably. ecommerce high-risk revenue does not, and med spa operators are frequently surprised by this.

• —expect a reserve on the ecommerce MID — 5-10% held for 90-180 days is normal
• —settlement may be T+2 or slower versus the near-daily rhythm you are used to
• —you will be paying for inventory, 3PL, and ad spend before the corresponding revenue fully clears
• —do not fund ecommerce inventory purchases out of clinic operating cash without modeling the gap first

the online channel looks like free upside until you realize you are financing 180 days of reserve and 60 days of inventory before the first release hits.

keeping both accounts healthy

1. 1.never let online product sales touch the clinic MID, even temporarily during an outage — that is exactly the scenario that costs you both
2. 2.build a second ecommerce MID by month three so an outage has a legitimate destination
3. 3.keep the ecommerce site's claims consistent with what you disclosed, and remember that clinic marketing and ecommerce marketing are now reviewed by different parties with different standards
4. 4.watch the ecommerce chargeback ratio weekly; clinic ratios are near zero and will not warn you about anything
5. 5.keep separate books so an ecommerce audit never requires opening the clinic's records

done right, the med spa becomes the strongest kind of peptide operator: real credibility, real providers, real compliance posture, and a payments structure that reflects the business accurately. that is a position most online-only brands cannot buy.