๐Ÿš€ Decoda raises $4.5M, led by Y Combinator. Read more

Journal/Reference library
Updated August 31, 2026ยท9 min read
Med Spa MCC 8099 and FSA/HSA Payments Explained (2026)

Med Spa MCC 8099 and FSA/HSA Payments Explained (2026)

MCC 8099 sets FSA/HSA eligibility at the merchant level. Find out who qualifies, which services apply, and how to limit disputes in 2026.

Kevin Cheng
Co-Founder & CPO, Decoda Health

TL;DR

5 key points
  • 01MCC 8099 is the catch-all healthcare merchant code that lets FSA/HSA cards clear at checkout automatically
  • 02Misclassification runs both ways: claiming 8099 without qualifying risks account termination; the wrong code means inflated interchange fees
  • 03MCC 8099 approves your practice for FSA/HSA payments, but clinical indication determines whether each service is actually eligible
  • 04A $100 chargeback can cost $240 once fees and admin time are counted; documentation before treatment is your only reliable defense
  • 05Decoda Health supports FSA/HSA acceptance at checkout alongside AI Scribe-generated visit records that back MCC 8099 chargeback responses
Text size

What MCC 8099 Is

MCC 8099 stands for "Health Practitioners, Medical Services: Not Elsewhere Classified." It is a catch-all code assigned by acquiring banks to health-related businesses that don't fit a more specific medical category.

Every business that accepts card payments gets assigned a Merchant Category Code. Visa and Mastercard publish the guidelines; your acquiring bank applies the code when you open a merchant account. The code tells the card networks what kind of business you are, which affects how transactions are routed, taxed, and processed.

For med spas and elective care practices, the assigned MCC carries real consequences, from whether FSA and HSA cards work at checkout to how much you pay in interchange fees.

Which Businesses Qualify Under MCC 8099

MCC 8099 covers health service businesses that don't belong to a more specific medical category. Common examples include:

  • Medical spas and elective care practices
  • Acupuncturists and licensed massage therapists
  • Dietitians, nutritionists, and speech therapists
  • Chemical dependency treatment centers and sleep disorder clinics
  • Surgical hair replacement clinics

The "not elsewhere classified" framing is the key detail here. Card networks already have narrower codes for many practitioners: MCC 8011 for physicians, MCC 8021 for dentists, MCC 8041 for chiropractors. If your practice type doesn't map cleanly to one of those, MCC 8099 is where you land.

For a large proportion of med spas, that fit is intentional; a practice blending medical oversight with aesthetic services rarely belongs in a single-specialty code.

What Is Excluded from MCC 8099

However, MCC 8099 has real boundaries too. A nail salon, a cosmetics retailer, or a fitness studio with no licensed health services does not belong in this code. Neither does a practice that fits cleanly inside a more specific category: licensed chiropractors map to MCC 8041, and physician-only offices map to MCC 8011. Using 8099 to sidestep a more accurate code is misclassification, and acquiring banks do audit this.

The consequences run in both directions. A purely cosmetic business that claims 8099 to gain FSA/HSA acceptance can face account termination and chargeback liability, while a legitimate medical practice assigned to the wrong merchant code could end up paying inflated interchange rates it never owed.

How MCC 8099 Unlocks FSA and HSA Card Acceptance

FSA and HSA debit cards run on a restricted acceptance network. The card issuer checks your MCC at the point of sale, and if you're not coded as a recognized healthcare merchant, the transaction declines. MCC 8099 is one of a small group of codes that clears that check automatically.

When a patient swipes an FSA or HSA card at a practice coded 8099, the network recognizes the merchant as a qualified healthcare provider and approves the transaction without requiring item-level data, absolving the need for special certification or an additional verification step.

Practices holding a general retail or personal services MCC face a harder path: SIGIS registration and IIAS certification, which requires your med spa point-of-sale system to flag each line item as an eligible medical expense at the transaction level. MCC 8099 sidesteps that entirely by setting eligibility at the merchant level, not the product level.

Which Med Spa Services Are Actually FSA/HSA Eligible

While MCC 8099 can get your practice onto the approved merchant list, it cannot make every service you offer a qualified medical expense.

In particular, the IRS standard under IRC Section 213(d) serves as the governing rule, an expense qualifies only if it's primarily for the diagnosis, cure, mitigation, treatment, or prevention of a disease, or for affecting a structure or function of the body. Purely cosmetic procedures, defined by the IRS as procedures that improve appearance without meaningfully promoting proper body function or treating illness, generally do not qualify.

At a med spa, that line falls in some predictable places:

  • Botox for aesthetic wrinkle reduction: not eligible
  • Botox prescribed for hyperhidrosis or chronic migraines: potentially eligible
  • Dermal fillers for cosmetic volume: not eligible
  • Laser hair removal for purely cosmetic reasons: generally not eligible
  • Acne treatment under physician supervision: eligible

Service

FSA/HSA Eligible?

Key Condition

Botox (cosmetic wrinkle reduction)

Not eligible

Purely aesthetic purpose

Botox (hyperhidrosis or chronic migraines)

Potentially eligible

Requires clinical indication / Letter of Medical Necessity

Dermal fillers (cosmetic volume)

Not eligible

Purely aesthetic purpose

Laser hair removal (cosmetic)

Generally not eligible

No medical diagnosis required

Acne treatment (physician-supervised)

Eligible

Treating a diagnosed skin condition

Chemical dependency treatment

Eligible

Recognized medical condition

Surgical hair replacement

Potentially eligible

Depends on underlying diagnosis (e.g., alopecia)

Context and clinical indication are what shift eligibility, not the treatment category. A Letter of Medical Necessity from a licensed provider can sometimes move a borderline service into eligible territory. For gray-zone cases, med spa superbill documentation and the patient's plan administrator make the final call. Your job is to accept the card and document the clinical context accurately.

How Your MCC Affects Interchange Fees and Processing Costs

Interchange fees aren't set by your processor alone. Card networks publish rate tables that vary by card type, transaction method, and merchant category. Your MCC sits inside that calculation.

MCC 8099 is generally treated as a standard to medium-risk classification, and processors use MCC risk tiers to set underwriting requirements and baseline rates. Categories flagged as genuinely high-risk face higher fees and stricter reserves. The high-risk med spa payment processing guide covers what that tier actually means. MCC 8099 practices typically avoid both.

The bigger variable is your processor's pricing model. Under interchange-plus pricing, you pay the network's published interchange rate plus a fixed processor margin, so your MCC's rate tier shows up directly in your statement. Under flat-rate pricing, everything gets averaged into a single percentage and the MCC effect is hidden. Practices on flat-rate models may be absorbing more cost than a transparent interchange-plus arrangement would show. Your monthly processing statement should specify which model you're on.

Chargebacks and Friendly Fraud Under MCC 8099

Friendly fraud is a known pain point in elective care. A patient books a Botox appointment, receives the treatment, then disputes the charge claiming they never authorized it or that the results weren't what was discussed. The card network sides with the cardholder by default, and the practice eats the loss.

The numbers are worth knowing: per ZenPayments' analysis, health and wellness transactions see a chargeback rate of 0.86%, and the true cost of a $100 chargeback can reach $240 once processing fees and administrative time are counted. Common triggers in aesthetic practices include disputes over treatment outcomes, charges a cardholder doesn't recognize on their statement, and med spa no-show fees that weren't clearly disclosed at booking.

Card networks track your chargeback ratio continuously, and it's one of the weekly med spa KPIs every owner should monitor. Visa's Dispute Monitoring Program starts at a 0.9% ratio with at least 100 disputes in a month; Mastercard's Excessive Chargeback Merchant program starts at 1.5% with at least 100 chargebacks. Both thresholds have to be met, so a small practice is far more likely to lose a processor relationship through its acquirer's own risk review than through a card network program. Stay in either program long enough and you face fines, mandatory reserve accounts, or processor termination. For a practice under MCC 8099, that's a compliance problem with direct revenue impact.

Documentation is your primary defense. Signed consent forms, clinical notes reflecting what was discussed and performed, and written cancellation policies all create a paper trail that disputes can be resolved against. Chargebacks are rarely won on the dispute itself. They're won before the dispute is ever filed.

How to Verify and Update Your MCC Classification

Your MCC was assigned when your merchant account was opened, and most practice owners have never looked it up. That's worth checking before assuming you're coded correctly.

The fastest way to verify is to call your payment processor directly and ask for your assigned MCC. You can also pull your monthly merchant statement, which typically lists the code. On most statements, look for a line labeled MCC or SIC near the account summary or fee breakdown; it is a four-digit number, so a code like 8099 or 8011 is what you're looking for. If neither works, your acquiring bank can confirm it.

Requesting a reclassification follows a straightforward path, though approval isn't guaranteed:

  • Contact your processor with a written request for reclassification to MCC 8099
  • Provide a clear business description covering your licensed services and medical oversight structure
  • Include supporting documentation such as your medical director agreement, state licensure, or service menu showing clinical offerings
  • Your processor submits the request to the acquiring bank, which makes the final determination under card network guidelines

The acquiring bank owns that decision and applies the card network's published classification criteria. If your practice genuinely qualifies under MCC 8099, a well-documented request typically succeeds.

Best Practices for MCC 8099 Practices

Staying on the right side of your processor and your patients comes down to documentation habits built into every appointment.

  • Written consent before every treatment, signed by the patient, outlining what was performed and what was discussed
  • Itemized transaction records, especially for services where FSA/HSA eligibility may need to be substantiated later
  • Billing descriptors that are recognizable on a credit card statement, using your clinic name instead of a parent LLC or processor ID
  • A cancellation and no-show policy in writing, visible at booking and signed at intake
  • PCI DSS compliance for all cardholder data, whether stored on file for memberships or processed as one-time charges

When a patient sees an unfamiliar name on their statement, a dispute is the path of least resistance. A recognizable descriptor removes that friction before it starts. For PCI compliance, confirm with your processor annually that card data storage meets current standards.

How Decoda Health Handles Payments for Elective Care Practices

Elective-care practices under MCC 8099 rarely face a single payment problem. They face several at once: FSA/HSA acceptance, GLP-1 compounding pharmacy integration, high-risk service processing, membership billing cycles, and the documentation burden that keeps chargebacks from escalating.

Decoda Health handles all of these natively. FSA and HSA cards are supported at checkout alongside standard card processing, so patients paying with benefits accounts don't hit a decline at the register. For practices offering semaglutide and compounding GLP-1 programs, peptides, ketamine, or TRT/HRT, Decoda Health's integration with Rainforest covers payment processing in categories that mainstream processors routinely freeze or decline outright.

On the documentation side, Decoda Health's AI medical scribe generates a timestamped clinical record of every visit, and digital consent forms capture signed patient acknowledgment before treatment begins. That paper trail is exactly what acquirers expect from MCC 8099 businesses when a chargeback lands. Based on internal data from our clinic partners, practices see an average 70% reduction in call volume, freeing front desk staff to focus on the elective care billing workflows that keep dispute risk manageable.

Final Thoughts on How MCC 8099 Affects Your Med Spa or Elective Practice

Your merchant category code quietly shapes patient checkout, processing costs, and your ability to defend against chargebacks, all at once. Taking thirty minutes to verify your classification and tighten up your consent and billing workflows is one of the lower-effort, higher-impact things you can do for your practice this month. When you're curious what a purpose-built setup looks like in practice, this intro call with Decoda Health is a good starting point.

Frequently Asked Questions

What does MCC 8099 mean for FSA and HSA card acceptance at a med spa?

MCC 8099 places your practice on the card networks' approved healthcare merchant list, so FSA and HSA debit cards clear at the point of sale without item-level verification on each transaction. Practices coded under general retail or personal services categories have to go through SIGIS registration and IIAS certification instead โ€” a more involved path that requires your point-of-sale system to flag each line item as a qualified medical expense.

Does holding MCC 8099 make all med spa services FSA/HSA eligible?

MCC 8099 establishes merchant-level eligibility, but the IRS standard under IRC Section 213(d) still governs which services qualify. Botox for cosmetic wrinkle reduction does not qualify; Botox prescribed for hyperhidrosis or chronic migraines may. The code gets you onto the accepted merchant list โ€” clinical indication and a Letter of Medical Necessity are what shift individual services into eligible territory.

How do I verify and correct my med spa's MCC classification?

Call your payment processor and ask for your assigned MCC, or pull it from your monthly merchant statement. If your practice blends medical oversight with aesthetic services and you're currently sitting in a retail or personal services code, contact your processor with a written reclassification request, your medical director agreement, state licensure, and a service menu showing licensed clinical offerings. The acquiring bank makes the final call, but a well-documented request for MCC 8099 typically succeeds when the practice genuinely qualifies.

What's the best way to protect a med spa against chargebacks under MCC 8099?

Chargebacks in elective care are won before the dispute is filed, not during it. Signed consent forms, clinical notes capturing what was discussed and performed, and a written cancellation policy visible at booking and signed at intake are the three documents acquirers look for when a dispute lands. A billing descriptor that matches your clinic name rather than a parent LLC removes the "unrecognized charge" trigger that drives a large share of friendly fraud in aesthetic practices.

Can a med spa process FSA/HSA payments, high-risk services like semaglutide, and membership billing inside one system?

Yes. Decoda Health handles FSA and HSA card acceptance at checkout natively alongside standard card processing, and its Rainforest integration covers payment processing for semaglutide, peptides, ketamine, and TRT/HRT โ€” categories that mainstream processors routinely freeze. Membership billing, packages, and one-time charges all run through the same system, and the AI Scribe generates a timestamped clinical record of every visit, which is the documentation layer MCC 8099 practices need when a chargeback requires a response.

What merchant category code should a med spa use if it blends cosmetic and medical services?

MCC 8099 is the correct classification for med spas that offer licensed medical services alongside aesthetic treatments. Practices that fit cleanly into a single-specialty code โ€” a physician-only office belongs in MCC 8011, a chiropractic clinic in MCC 8041 โ€” should use the narrower code, but most med spas offering a mix of services land in 8099 by design.

What documents should I have ready when requesting a reclassification to MCC 8099?

Your acquiring bank will want a written business description covering your licensed services and medical oversight structure, a copy of your medical director agreement, state licensure for your clinical staff, and a service menu showing the health services you offer. The more clearly your documentation connects your practice to a health services definition, the faster the reclassification request moves.

Can my patients use FSA or HSA funds to pay for Botox at my med spa?

Botox for cosmetic wrinkle reduction does not meet the IRS standard for a qualified medical expense. Botox prescribed for a documented medical condition โ€” hyperhidrosis, chronic migraines, or TMJ โ€” may qualify, and a Letter of Medical Necessity from the treating provider strengthens that position. MCC 8099 gets you onto the approved merchant list; clinical indication is what determines whether a specific service clears the patient's plan administrator.

How does my merchant category code affect the interchange fees my practice pays?

Card networks publish interchange rate tables that vary by card type and merchant category, so your MCC sits inside the cost calculation on every transaction. MCC 8099 is treated as a standard-to-medium-risk classification, which typically means lower processing costs than categories flagged as high-risk. Under interchange-plus pricing the MCC rate tier shows up directly in your statement; under flat-rate pricing the effect is averaged in and hidden.

What is the chargeback threshold that puts a med spa's merchant account at risk?

Visa's Dispute Monitoring Program starts at a 0.9% chargeback ratio combined with at least 100 disputes in a month; Mastercard's Excessive Chargeback Merchant program starts at a 1.5% ratio with at least 100 chargebacks. Both conditions have to be met, so most independent practices never reach network-program volume โ€” the realistic risk is the acquirer's own risk review, which has no published floor. Practices that do land in a monitoring program face fines, mandatory reserve accounts, or processor termination.

Should I build my cancellation policy into intake forms, or is a posted sign enough?

A posted sign alone will not hold up in a chargeback dispute. Your cancellation and no-show policy should appear at the time of booking, be included in the digital intake forms patients sign before their appointment, and be stored as a dated record tied to that patient's chart. A signed acknowledgment is the document an acquirer looks for when a patient disputes a no-show fee.

What billing descriptor should my med spa use to reduce unrecognized-charge disputes?

Your billing descriptor should match the name patients recognize from booking โ€” your clinic name, not a parent LLC or processor entity ID. When a patient sees an unfamiliar name on their statement, disputing the charge is the easiest path forward for them. A recognizable descriptor removes that friction before a dispute is ever filed.

What is a Letter of Medical Necessity and when does a med spa need one for FSA or HSA claims?

A Letter of Medical Necessity is a signed statement from a licensed provider explaining that a specific treatment is required to treat, mitigate, or prevent a diagnosed medical condition. For gray-zone services โ€” laser treatment for a diagnosed skin condition, for example โ€” the letter can shift a borderline service from cosmetic to eligible territory. Your role is to accept the card and document the clinical context accurately; the patient's plan administrator makes the final eligibility determination.

How does AI Scribe documentation in Decoda Health support MCC 8099 chargeback responses?

Decoda Health's AI Scribe generates a timestamped clinical record of every visit, capturing what was discussed and performed during the appointment. When a chargeback lands, that record โ€” combined with the digital consent form signed before treatment โ€” gives the acquirer the documentation trail that MCC 8099 practices are expected to produce. Card networks look for exactly this paper trail when a patient disputes a charge in elective care.

Is IIAS certification required for a med spa to accept FSA and HSA cards?

IIAS certification is required only when a merchant is not coded under an approved healthcare MCC. Practices sitting in a general retail or personal services code must register with SIGIS and implement IIAS, which requires the point-of-sale system to flag each line item as a qualified medical expense at the transaction level. MCC 8099 sidesteps that requirement by establishing eligibility at the merchant level, so a correctly coded med spa can accept FSA and HSA cards without item-level verification on each charge.