Payments · Telehealth7 min readUpdated November 2, 2026

Reducing Payment Declines for Telehealth Companies

Why telehealth payments get declined at checkout, capture and refill, how HSA and FSA cards fit, and the Visa retry rules to follow in 2026.

Nick Bonnassies, CMO at Tagada · checked against 9 sources

Article summary

TL;DR

Telehealth payments fail at three moments: checkout, capture after the clinician's review, and the refill charge. Read the decline code first: Visa forbids retrying lost, stolen or closed cards and allows up to 20 attempts in 30 days for the rest. Capture within the 7-day hold, offer a backup card next to HSA and FSA cards.

Visa's October 24, 2026 rules: category 1 codes (lost, stolen, closed, invalid, stop payment) must never be retried on that card.
Other declines allow "up to 20 attempts in 30 days"; Stripe recommends at most 8 retries per charge.
A customer-initiated online authorization stays valid 7 days on Visa and Mastercard; after that it's released.
IRS Notice 2006-69 describes FSA and HRA debit cards that work at merchants "that have merchant category codes related to health care".
A retry must not change the MCC, merchant country or ecommerce indicator of the original request.

Want to go further? Ask

On this page

This guide is part of our hub on telehealth payment processing. The general guide, for any business: credit card decline codes and what to do.

Where a telehealth payment fails

A telehealth order is paid in steps, and each step fails for its own reasons.

Moment	Typical cause	What to do
Checkout (authorization)	Generic issuer decline, wrong CVC, card blocked for a first online health purchase	Read the code; offer another card or a wallet
Checkout (your rules)	Fraud rule or state restriction blocks it before the bank sees it	Check your own logs before blaming the issuer
Capture after review	Hold expired because the review took more than 7 days3	Review faster, or ask the patient to authorize again
Refill or renewal	Card expired, funds, patient stopped payment at the bank	Update the card, retry within the rules, or stop
HSA or FSA card	Card limited to health-care merchants, balance, eligibility	Keep a second card on file

Fig. 1Where a telehealth payment can fail, step by step

approved declined or closed routing step

CheckoutIssuer decline, wrong CVC, health card limits
checked byYour rulesFraud or state rule blocks it first
held duringClinical reviewHold expires after 7 days
thenCapturedCharged once the clinician approvesApproved
laterRefillExpired card, funds, stop payment

A blocked payment never reaches the issuer; an expired hold never reaches capture.

Stripe Docs, Declines and Place a hold on a payment method; IRS Notice 2006-69.

HSA and FSA cards

Many patients reach for a health savings or flexible spending card. These cards work like debit cards with restrictions, and the restrictions cause declines.

Merchant code
The IRS describes FSA and HRA debit cards that "can only be used at merchants and service providers that have merchant category codes related to health care", or at merchants using an inventory approval system4. A care brand classified under a medical MCC, such as 8011 or 8099, fits the first case; a brand processed under a retail code may not.
Your processor's setup
Stripe accepts these cards when you provide qualified medical services under an HSA/FSA-eligible MCC, and warns that issuers "can still authorize or decline payments as they would with any other type of card"8.
Balance and setup
Insufficient funds and cards not yet activated are common reasons, per a telehealth software vendor5.
What the plan covers
Whether a consultation, a membership or a fee is an eligible expense is a tax and plan question, not a payment one. Don't promise it at checkout.

Watch out

A subscription that renews on an HSA or FSA card can fail when the balance runs out mid-year. Ask for a backup card at sign-up and say when you'll use it.

The MCC your processor assigns is its call, not yours. How the consultation and the medication can sit under different codes: consultation vs medication payments.

Read the decline code

Visa sorts every decline code into four categories, and the category decides whether you may retry1.

Category	Examples (Visa codes)	What you do
1: issuer will never approve	04, 07 pick up; 14 invalid account; 41, 43 lost, stolen; 46 closed; R0, R1, R3 stop payment	Stop. Ask for another card. On a refill, stop billing that card
2: cannot approve now	51 funds; 59 suspected fraud; 61, 65 limits; 91, 96 issuer down	Retry later, within the limit, or another method
3: data quality	54 expired card; N7 CVV2 failure	Fix the data, then retry
4: generic	05 do not honor, and all others	Retry sparingly; suggest another card

Source: Visa Core Rules, October 24, 2026, table 7-21.

Never tell a patient their card was reported lost or stolen. Stripe says to show those codes "in the same manner as generic_decline"2: the person at checkout may not be the cardholder.

Retry rules

Visa caps retries: never after category 1, up to 20 attempts in 30 days for categories 2 to 41. Stripe is stricter and recommends no more than 8 retries per charge, because issuers can read extra retries as fraud2.

Visa attempts allowed in 30 days on category 2 to 4 codes

Stripe's recommended maximum retries per charge

7 days

Before a hold expires during clinical review

Watch out

Visa forbids manipulating "any data elements from the original Authorization Request" on a retry, including the MCC, merchant country and ecommerce indicator1. It also forbids changing the acquirer to resubmit a transaction the issuer declined (section 1.7.2.1)1: a second processor can't rescue a bank decline.

Fig. 2When a second processor helps, and when it doesn't

Issuer decline, category 1

RefillCard on file
routes toProcessor ADeclined: stop paymentDeclined

Stop: never resubmit this card

Processor down

RefillCard on file
routes toProcessor ADown / timed outDeclined
falls throughProcessor BApprovedApproved

Refill paid on the next processor

The cascade answers an outage, never a no from the bank.

Illustrative example.

Tagada follows Visa and Mastercard rules and the laws that apply to payments.

Declines you cause

Some failed payments never reach the bank. When a processor blocks a payment, "it doesn't obtain authorization from the card issuer"2. In telehealth, three of your own settings cause most of them:

State and eligibility rules that stop the order where your clinicians can't treat. These are right; just show a clear message instead of "card declined".
Fraud rules set too tight for first orders from ads.
Data sent in the wrong format, such as a missing ZIP code, which fails as invalid.

How to balance fraud blocks and approvals: fraud prevention and 3D Secure for telehealth.

Refill and renewal declines

Charge when it makes sense. Billing on the day the order ships, instead of a fixed date, ties the charge to something the patient sees.
Read the code before retrying. Stop payment codes (R0, R1, R3) mean the patient cancelled at the bank: stop1.
Space the retries over several days, inside Visa's limit1.
Ask the patient to update the card by email or SMS, with a link to the portal.
Pause the treatment plan if payment doesn't come through, rather than shipping unpaid.

Recovery flows and timing: failed payment recovery for telehealth companies. The renewal rules themselves: telehealth subscriptions and checkout.

How Tagada helps

Fewer failed care plan payments

TagadaPay runs "enhanced review for regulated verticals"9 and keeps your cards portable: "Switch processors without re-onboarding customers." On declines:

Routing across TagadaPay and processors such as Stripe, NMI and Airwallex, with one logic, and a cascade to another processor when one is down or times out. Setup: Tagada routing docs 7.
Dunning, email and SMS fired by real events, so patients update their card.
Native 3DS2, so authentication runs when an issuer asks for it.

Building the whole telehealth brand? With Tagada Rx, recurring treatments rebill "the day the pharmacy ships", "not on an arbitrary calendar date", and "declined, cancelled, and errored cases never rebill"6. US patients only, by selection.

Apply for processing

Updated on November 2, 2026

Nick Bonnassies

CMO at Tagada

CMO at Tagada. Before Tagada, Nick built direct-to-consumer brands that generated over $115M in sales, raised over $25M in crowdfunding and sold two of them. He also works as a fractional CMO on marketing operations and AI systems.

Frequently asked questions

Why was a patient's HSA or FSA card declined?

Most often the balance, an inactive card, or a card limited to health-care merchants. The IRS describes FSA and HRA cards that work at merchants with health-care merchant category codes or an inventory approval system. Even with the right setup, the issuer decides. Offer a regular card as backup.

What does "do not honor" mean on a telehealth payment?

It's code 05, a generic decline: the issuer refused without a reason. Visa puts it in category 4, so a retry is allowed within 20 attempts in 30 days. Check CVC and address results, retry sparingly and suggest another card.

How many times can I retry a declined refill payment?

Never after a category 1 code such as lost, stolen, closed or stop payment. For other codes, Visa allows up to 20 attempts in 30 days; Stripe recommends at most 8 retries per charge. Space them out and ask the patient to update the card.

What happens if I capture after the authorization expires?

The capture fails. On Stripe, an expired authorization is released and the payment is canceled; an online customer-initiated hold lasts 7 days on Visa and Mastercard. Finish the clinical review within that window or authorize again.

Can a backup processor approve a card the first one declined?

Not when the patient's bank declined it: Visa forbids changing the acquirer, MCC or merchant country to resubmit a transaction the issuer declined. A backup helps when the first processor is down or times out, not after its fraud rules block a payment.

Sources

Checked November 2, 2026

TagadaPay

Fewer declined care plans, at checkout and at refill

Tell us what you sell and how you sell it. Each application is underwritten, and approval is not guaranteed.

Apply for processing See pricing

01Tell us what you sell and how
02Underwriting reviews your business
03Process through TagadaPay alongside your other processors