Skip to content
The Cash-Pay Practice Handbook

A Credit Card on File Policy That Actually Collects

A step-by-step card-on-file policy for private practice: when to charge, the script for a declined card, and the paperwork that wins a dispute.

Sina Hartung· August 6, 2026· 8 min read

Reviewed by David Cohen, CPA, JD

On this page

In a cash-pay practice, the card on file is the whole billing system. The policy that makes it work has four parts: capture a card and a signed authorization before the first visit, decide once when you charge relative to the appointment, script the declined-card conversation so it never turns into a collections call, and keep the paperwork that wins a dispute if a charge gets reversed months later. Practices that run this consistently report collections at or near 100 percent, with no invoices, no aging balances, and no monthly billing cycle to run at all.

That gap is real and it is measured. In the Medical Group Management Association's 2022 benchmarking data, the median practice collected only 39 percent of patient-owed balances at the time of service, even after years of billing-software investment aimed at that exact number. A card-on-file policy, enforced without exceptions, closes most of that gap, because collection no longer depends on the patient remembering to pay you.

This post covers the six pieces of a policy that actually works, with the scripts for each one.

1. Require a card on file before you see anyone

Card-on-file is a condition of care here, the only path in. Capture it at intake with the rest of your paperwork, alongside a signed authorization naming your fee schedule and stating that the card will be charged automatically per policy, including no-show and late-cancellation fees. A patient unwilling to provide a card is telling you something: they want the option of not paying you. Decline and refer elsewhere rather than make the one exception that costs a five-figure unpaid balance over a year, the version of this mistake we hear about most often.

Whatever software runs this needs three things: a card captured at scheduling, a signed authorization the patient can see again later, and an automatic charge that fires every time without a click from you. Eureka requires a card at booking and auto-charges according to your fee policy; the discipline matters more than which system enforces it.

2. Decide when you charge: before the visit or after

There is no wrong answer here, only an unmade decision, which is the actual failure mode. Pick one and apply it to everyone.

TimingHow it worksMain advantageMain tradeoff
At booking, full prepaymentCard charged the moment the appointment is scheduledDeclines surface days in advance; some practices report zero no-showsWaiving a fee later means issuing a refund
One to eight hours before the visitCard charged automatically ahead of the session, most commonly around two hours outDeclines surface before you're both on the call; waivers still don't require a refundNeeds a system able to auto-charge on a schedule rather than only at booking
At the cancellation deadline (24 to 48 hours out)Charge coincides with your no-show policy's cutoffOne rule covers both billing and cancellationsDeclines surface a day or two out rather than minutes before
After the appointmentCharge fires once the visit is marked completeEasiest to waive a fee with no refund stepDeclines surface after the fact; a vanished patient becomes a write-off

The pattern worth naming: practices we've watched settle on a pre-visit charge, most often two to eight hours before the appointment, describe it as the single change that stopped balance-chasing entirely. A card that fails shows up before the patient logs on, gets fixed in the first minute with a plain "I noticed a card issue, is there another one you'd like to use," and never turns into an email thread three weeks later. Charging at booking goes further still, and several practices report it eliminated no-shows outright, at the cost of handling waivers as refunds instead of simply skipping the charge. Charging after the visit is the version that lets the accounts-receivable problem rebuild itself, one vanished patient at a time.

3. Script the declined-card conversation before it happens

A decline says nothing about the patient's character. Treat it as routine administrative work and handle it the same sequence every time:

  1. Check payment status before the session starts. If your system shows the charge failed, you already know before the patient logs on.
  2. Say it plainly in the first minute. "I noticed your card on file didn't go through today, is there another one you'd like to use?" Nothing apologetic, nothing accusatory.
  3. Send a separate follow-up message if it's still unresolved, never mixed into a clinical email. Something close to: "Your payment method for [date] needs an update. You can add a new card in the patient portal before we meet next, or we can take care of it at the start of the session." Never ask for card details by email.
  4. Hold the next appointment if the balance is still open. Do not let a second visit happen on top of an unresolved first one. A signed, unenforced policy is not a policy.
  5. Write it off and move on if the patient goes fully unresponsive. Chasing a vanished patient by phone and text costs more in time than the balance is worth, and it rarely works.

Whether a decline is "can't pay" or "won't pay" is worth noticing clinically, but administratively the response is identical either way: resolve it before the next session, or don't hold the next session.

4. Auto-charge no-shows and late cancellations the same policy

The fee for a missed appointment lives in the signed policy and every reminder email, so charging it needs no warning and no apology. Waive it only from choice, for a genuinely good reason, an ankle fracture, an ER visit, never for "I forgot" in a practice that also sends same-day reminder emails. A useful middle option is waiving half the fee: it reads as fair without training patients that missed visits are free. What it should never be is routine. Waiving every first missed appointment as a courtesy is a real cost over a full patient panel, and it puts the stress of a missed visit on you instead of on the person who missed it.

Fairness runs in both directions. If you cancel on a patient last-minute, for your own emergency, comp the visit you would have charged them for missing. The policy is symmetric, which is exactly why it survives being enforced without guilt.

5. Keep the paperwork that wins a chargeback

A card-on-file charge can be disputed by the cardholder for up to 120 days after the transaction under Visa's dispute rules (Mastercard runs on a similar window), longer in some fraud categories, so the paperwork needs to survive that whole window. Keep four things on file for every patient, from day one: the signed credit card authorization, the signed office policy including your fee schedule, a copy of their ID, and the dates of service tied to each charge. That packet is what you submit if a charge is disputed, and it puts you in a materially stronger position than a typical merchant, because you can show a signed treatment agreement rather than a bare receipt.

One asymmetry is worth knowing before it matters: a physical chip-card swipe triggers an automatic liability shift protecting the merchant, but a virtual, card-on-file charge gets no such protection, so documentation carries the whole dispute. If one happens, contact the patient directly first; providers who do this report it resolves more chargebacks than the bank process itself, since most disputes trace back to confusion or a family conflict rather than genuine fraud. Notify your malpractice carrier proactively if a dispute arises alongside anything contentious, a custody fight, a report you filed. And never withhold an active prescription to pressure payment on an unpaid balance; stopping a medication over a billing dispute risks an abandonment claim, so call your carrier first.

None of this touches a patient's ability to get reimbursed by their own insurer. Charge the full fee on the card as normal, then give the patient a superbill to file for out-of-network reimbursement on their own timeline. Card-on-file billing and insurance reimbursement are separate systems that shouldn't be tangled together; Eureka generates the superbill automatically once a visit is charged, so the policy and a patient's reimbursement path never compete for your attention.

6. Frame the policy for patients before they ever push back

The instinct to feel guilty about this policy is common, and worth addressing directly, because an apologetic doctor undermines their own billing system. A card charged on schedule is more predictable for a patient than an invoice that shows up whenever you get around to sending it, and far kinder than a surprise balance that grows for three months before anyone mentions it. Say that plainly at intake: "I keep a card on file and bill automatically according to the fee schedule you're signing today, so you'll never get an unexpected bill from this practice. If anything about a charge looks wrong, tell me and we'll sort it out." Framed as protection against surprise rather than suspicion of nonpayment, the policy rarely draws an objection.

Read the actual complaints that come in, too. A fee dispute from a patient who already knew and signed your fee schedule is rarely about the money. It is more often dissatisfaction with the course of treatment, a boundary being tested, or in family-paid cases, a parent withholding payment to control an adult child's care. Handle the real issue directly; paying for someone's treatment has never entitled anyone to control it, and that boundary belongs in the same conversation as the payment one.

Quick policy checklist

  • Card on file plus signed authorization required before the first visit, no exceptions
  • One charge timing chosen and applied to every patient, ideally one to eight hours before the visit
  • A written decline script your practice follows the same way every time
  • No-show and late-cancellation fees auto-charged per the signed policy, waived only from choice
  • Signed authorization, signed policy, patient ID, and dates of service kept on file for every patient
  • A plain-language explanation of the policy given at intake, framed as protection from surprise billing

Run this way, card-on-file lets both sides stop thinking about money between appointments, which is the point of going cash-pay at all. For the fee schedule this policy gets applied to, see how much to charge in private practice; for the missed-appointment side of it, see the no-show policy template; and for billing calls, letters, and forms between visits, see charging for paperwork and calls.

Frequently asked questions

Can you use Venmo, Zelle, or PayPal to collect payments from patients?
No. None of the three offer a HIPAA business associate agreement, so running patient payments through them exposes protected health information (a name tied to a mental health visit) on a platform with no compliance coverage. Use a processor built into your EHR or a HIPAA-compliant merchant account instead.
What if a patient refuses to leave a card on file?
Treat it as information. A patient unwilling to authorize a card is often a patient planning to skip paying, and every experienced cash-pay practice we've watched treats a card on file as a requirement for being seen, never as a request. Decline politely and refer out rather than making an exception you will regret at the first missed payment.
Do you need a new signature every time you charge a card on file?
No. A single signed authorization at intake, naming the practice's fee schedule and billing policy, covers every future charge that follows that policy, including no-show fees and rate changes you've disclosed in writing. Keep that signed page on file indefinitely; it is also your primary defense if a charge is ever disputed.

Related guides

Sina Hartung

Sina Hartung is co-founder and chief operating officer of Eureka. She studied at Harvard Medical School and ran the day-to-day operations of a working medical practice on Eureka's own platform before the company had its first customer outside the founding team. The workflows she writes about are ones she has run from inside a real practice.

This guide is for general information, not medical, legal, or financial advice. Rules vary by state; confirm specifics with your attorney, accountant, or licensing board.

For physicians

The fastest way to launch a private practice.

Scheduling, billing, intake, and malpractice handled for you, so you can focus on patients.

See how Eureka works

Nurse practitioner? Eureka is not open to NPs yet. Join the waitlist and we will tell you when that changes.