7280 Private hospital

Introduction

• What it is: This MCC code covers private hospitals and medical facilities providing a range of healthcare services.
• Risk level: Medium — Patient care operations face moderate risk due to potential service-related claims.
• Acceptance difficulty: Medium — Payment processors may require additional documentation related to healthcare services.
• Typical business models: private hospitals; medical clinics; specialty healthcare facilities; outpatient surgical centers.
• For merchants: Expect detailed due diligence during onboarding; possible higher MDR rates; and requirements for financial reserves.
• What PSPs expect: Business licenses; proof of medical certifications; and a comprehensive service description on the website.

Payment Insights & Benchmarks

Merchants operating in the Private Hospital MCC should be aware of the unique payment dynamics and potential challenges that come with healthcare-related transactions. With varying acceptance rates and possible chargeback complexities, understanding payment performance is crucial.

Payment methods

Cards: primary method, but often subject to higher scrutiny and approval delays.

• E-wallets: less common, but increasingly accepted for patient deposits and expenses.
• Bank transfers: vital for larger transactions, with varying acceptance rates across institutions.
• Vouchers: used for specific services or discounts but not universally accepted.

Authentication & security

Strong customer authentication (SCA) is typically mandated, impacting user experience.

• Additional fraud prevention measures may lead to increased customer friction.
• Unauthorized use may be reduced, but friendly fraud can still be prevalent in services.

Benchmarks (indicative, not guaranteed)

MDR: generally higher than traditional retail due to industry risk factors.

• Rolling reserves: may be implemented, often exceeding typical thresholds.
• Settlement time: typically longer, potentially ranging 5-10 days.
• Chargeback ratios: can be elevated, especially if service quality issues arise.
• Approval rates: card payments often face stricter scrutiny, resulting in lower rates.

Key metrics to monitor

Patient payment authorization rates, segmented by method and service type.

• Decline reasons tracked by transaction type, helping to identify patterns.
• Chargeback sources, differentiating between fraud and service discrepancies.
• Average transaction value and service frequency for financial planning.

Risk & Compliance

Merchants operating under the Private Hospital MCC face significant scrutiny regarding financial and reputational risks. Payment Service Providers (PSPs) and acquirers enforce stringent standards, expecting merchants to mitigate challenges related to fraud, chargebacks, and compliance with AML/KYC regulations.

Chargebacks & fraud

Common instances of friendly fraud can occur when patients claim services weren't received or authorized, leading to disputes.

• Fraudulent practices include the use of stolen insurance details and identity theft for non-existent medical services.
• Mitigation tools such as behavioral analytics and verification of patient history can help detect unusual patterns or suspicious behavior.

AML/KYC expectations

Comprehensive identity verification is necessary, including government-issued ID checks and secondary verification to confirm the identity of patients.

• Sanctions checks and Politically Exposed Persons (PEP) screenings are essential to mitigate risks associated with money laundering.
• Manual review triggers may include significant payments, multiple patient registrations from the same IP address, or unusual payment methods.

Operational red flags

Lack of transparency regarding ownership and management can raise concerns; unclear operator information is a significant red flag.

• Issues may arise from high referral traffic from unverified sources or questionable advertising practices.
• Absence of proper patient consent protocols for billing can lead to compliance issues.
• A failure to clearly communicate payment policies and patient rights can result in misunderstandings and potential disputes.

Onboarding Checklist

Merchants under the Private Hospital MCC should prepare a complete onboarding package before approaching PSPs or acquirers. A well-structured submission improves approval chances and shortens review times.

Legal & corporate documents

company registration and incorporation documents

• disclosure of beneficial owners (UBO) and corporate structure
• valid licenses for healthcare services provided
• policies: Terms of Service, Privacy, AML/KYC, Refund Policy

Financials & risk management

recent financial statements and cashflow forecasts

• liquidity or reserve model for patient payments
• description of antifraud setup and monitoring tools

Product & marketing

demo access or screenshots of patient management platform

• marketing plan and traffic source overview (affiliates, digital marketing)
• geographic service area information
• KYC flow details, including identity verification processes

Technical integration & security

payment architecture overview with supported methods/providers

• description of SCA/3DS flows relevant to healthcare payments
• PCI DSS compliance status and data storage policy

Operations

customer support coverage (languages, availability)

• SLA for dispute handling and payment inquiries
• payment limits and financial assistance options for patients
• internal process for handling chargebacks and disputes

Regulation & Licensing

Licensing and certification are essential for merchants in this MCC, particularly for private hospitals, as they must demonstrate compliance with health regulations and standards before they can operate or process payments. Recognition of licenses is heavily influenced by the merchant’s jurisdiction and target patient demographics.

Operator licenses

Department of Health licenses — required in many countries, these verify compliance with local health regulations.

• Accreditation by The Joint Commission (TJC) — recognized in the US, ensures that hospitals meet specific performance standards.
• National Health Service (NHS) registration (UK) — mandatory for private hospitals offering NHS services, ensuring adherence to quality standards.
• State health department certifications — varying requirements across states in the US; necessary for operational legitimacy.
• Some regions may require specialized licenses for specific services, such as maternity care or surgical procedures.

Geo-restrictions

Countries with strict regulations on private healthcare may limit foreign investment or operations.

• In the US, each state has its own licensing requirements, making it essential for private hospitals to understand local laws.
• Some PSPs may refuse to process payments in jurisdictions where healthcare practices are unregulated or operate in grey areas.

Certifications & audits

PCI DSS compliance for safeguarding patient payment data and ensuring secure transactions.

• Joint Commission accreditation audits to verify quality and safety standards.
• Regular health and safety inspections required by local health authorities.
• Compliance audits for insurance and billing practices, including adherence to Medicare and Medicaid requirements.

Official Definitions & Network Comparisons

This section shows how major card networks define this MCC and highlights practical differences that affect merchant onboarding.

Explanation:

Though the definitions are similar, the emphasis on accreditation and specific services can vary. Visa and Mastercard, for example, require thorough verification of medical credentials, while Discover may take a broader view of ancillary services offered. Common reasons for denial often include inadequate licensing, failure to meet regional regulations, and insufficient documentation regarding service offerings.

Alternative MCC Codes

Merchants often confuse this MCC with other categories. The table below shows which codes are related, why they are confused, and what risks misclassification brings.

Rule of thumb for merchants:

If your business is a private hospital offering licensed medical services, ensure you classify it accurately under MCC 7280. Misclassifying your services can lead to compliance issues, claim rejections, or account closures. Always choose the most specific code that describes your business activity.

Best Practices for Merchants

Merchants operating under the Private Hospital MCC (7280) need to navigate a highly regulated and scrutinized environment. Implementing best practices is essential for minimizing risk, optimizing payment acceptance, and fostering positive relationships with payment service providers (PSPs).

Classification & transparency

always use the correct MCC; incorrect classification can lead to penalties or account closure

• provide clear information about services, certifications, and compliance on your website
• ensure all descriptors are transparent to prevent customer confusion and chargebacks

Fraud & chargeback reduction

implement 3DS technology or step-up authentication mechanisms for high-risk transactions

• use clear and recognizable billing descriptors to help customers identify charges
• log all patient interactions and transaction details for evidence in potential disputes

Payment acceptance optimization

support a variety of payment methods (insurance, cards, digital wallets) to cater to patient preferences

• optimize transaction routing by geographic location, ensuring compliance with local regulations
• test multiple PSPs regularly through A/B testing to identify the most efficient options

Operational discipline

track key performance indicators (KPIs) such as chargeback ratio, authorization rates, and average transaction value

• conduct regular compliance audits and review internal processes to ensure adherence to standards
• establish a dedicated team or person for handling disputes and ensure timely responses to customer inquiries

Payouts & liquidity

build liquidity buffers to manage rolling reserves and potential financial fluctuations

• automate anti-money laundering (AML) checks on large withdrawals to maintain compliance and security
• keep an eye on payout times and monitor for any suspicious withdrawal patterns to mitigate risk

Business Scope & Examples

This MCC covers businesses that provide healthcare services, particularly in a private setting. Merchants classified under this category typically deliver medical services ranging from outpatient care to major surgical procedures. The scope primarily focuses on businesses that charge for healthcare services directly to patients or their insurance providers.

Models

private hospitals offering general and specialized medical care

• outpatient clinics providing targeted treatment and minor procedures
• diagnostic laboratories conducting various medical tests
• rehabilitation centers for physical therapy and recovery
• emergency care facilities not affiliated with public hospitals

Borderline cases

Non-profit hospitals — often operate similarly to private hospitals but may be classified differently based on funding structure.

• Urgent care centers — can vary in classification; those primarily function as extensions of emergency services may fall outside this MCC.
• Health and wellness spas — while offering medical-like services, they often focus on aesthetic or wellness treatments and may not belong here.

Signals for correct classification

services provided are billable to patients or third-party insurers

• patient care is a primary focus with licensed healthcare professionals
• facility is equipped to perform significant medical procedures or treatments