What actually happens to a telehealth clinic without certification
Operating without LegitScript certification does not produce a single dramatic failure, it produces four quieter ones in sequence: payments that are declined or frozen, advertising that will not serve, partners that decline diligence, and a rebuild done under time pressure.
By VeriScripts · · 5 min read
Nobody sends a letter. That is what makes this failure mode worth describing, because a clinic operating without certification does not hit a wall, it accumulates constraints, and each one gets attributed to something else.
Here is the sequence, roughly in the order it tends to arrive.
One: payments become unreliable before they become impossible
The first symptom is usually not a rejection, it is instability. A processor boards the account and then requests documentation. A rolling reserve appears. Settlement is held. An account works for four months and then goes under review because a routine network check flagged the merchant category.
Clinics read this as bad luck with a processor and go looking for another one. The second processor asks the same question. So does the third, because the question originates with the acquiring bank's obligations under network integrity programs rather than with the processor's appetite.
The cost here is rarely the lost transaction. It is the cash flow disruption from held settlement while you are still paying for pharmacy fulfilment and customer acquisition.
Two: paid acquisition stops working
Advertising in the healthcare and medicines categories is gated. Without certification, the platform healthcare approval is unavailable, and the accounts that were serving stop serving.
The pattern is familiar: a workaround gets found, an account runs for a while on softened landing pages, then a policy sweep catches it and the account is suspended. Suspended accounts take historical performance data with them, and rebuilding an account is not the same as switching one on.
Meanwhile the organic and affiliate channels that were supposed to compensate have their own gate, which is the third constraint.
Three: partners quietly decline
This is the one nobody measures, because it does not look like a rejection. It looks like partnership outreach that converts poorly.
Affiliate networks in the health vertical increasingly require certification before approving an offer. Marketplaces require it for healthcare listings. Pharmacy partners with their own compliance obligations prefer certified clinics, and the good ones can afford to choose. Enterprise and benefits buyers ask for it in diligence questionnaires.
None of these counterparties tells you that a missing credential is why the conversation stopped. They just stop replying, and the loss shows up in your funnel as a business development problem.
Four: the rebuild happens at the worst possible time
The fourth stage is the expensive one, and it is the direct consequence of the first three. By the time certification becomes urgent, it is urgent because something has already broken. Processing is suspended, or the ad account is gone, or a partner has set a deadline.
Now the preparation work happens under pressure. The claims audit that would have taken a fortnight is being done by people who are also handling customer support for delayed orders. The domain consolidation that would have been a planning decision is now a migration during a revenue outage. The pharmacy documentation nobody collected has to be requested from a partner who is themselves now nervous.
And the clock does not care. Expedited processing buys a review start within two business days of submission, but it does not shorten the review, and it does nothing at all for a file that is not ready. The timeline page sets out which parts of the wait are actually purchasable and which are not.
The part that is not about revenue
Set the commercial argument aside for a moment. The preparation work, done properly, is a genuine audit of whether your clinic is describing itself accurately: what the product is, who prescribes it, under what licences, with what disclosures.
Most clinics that go through it find at least one thing they were saying that they could not actually support. Finding that during a planned preparation is a Tuesday. Finding it because a regulator found it first is not.
What to do if you are already in stage two or three
Do not start with the application. Start with the website, because that is what blocks everything downstream and it is the longest piece of work.
Then get the domain list straight, because it decides how many applications there are and what actually drives the cost.
Then decide honestly whether you have somebody who can own a request for information the day it arrives for the duration of a review. If you do not, that is the argument for having it filed for you, and it is a better argument than the sticker price on either option.
The stopgaps that make it worse
Each of these is offered to telehealth operators regularly, and each converts a delay into a different and larger problem.
Coding the merchant account as something else. Network rules prohibit it, detection programs exist for it, and being found generally means termination rather than a warning. It also poisons the certification application that follows.
Running ads on a softened landing page while the underlying claims remain elsewhere on the site. Policy sweeps read the domain rather than the page you edited.
Splitting the business across several small merchant accounts to stay under the radar. This has a name in the network rules and the name is not flattering.
Waiting for the counterparty to forget. They do not. Reviews are periodic and automated, and the account that has been fine for eight months is fine until the next sweep.
What to do in the first week
If certification has just become urgent, spend the first week on the two things that gate everything else rather than on the application form.
Pull the complete domain list from the registrar and decide what each domain is for. Then start the claims audit, because it is the longest piece of work and because nothing else can be finalised while the website still says something the file will have to explain.
Everything else, the corporate documents, the licence list, the pharmacy paperwork, is days of collection work that can run in parallel. The website is the constraint, and it is the constraint whichever route you take.
Frequently asked questions
Can I operate a telehealth clinic without certification?
Legally, certification is not required by any government. Commercially, the card networks, acquiring banks, advertising platforms and many partners require it, so operating without it means accumulating constraints on payments, advertising and partnerships rather than facing a single prohibition.
Will switching payment processors solve the problem?
Usually not. The requirement generally originates with the acquiring bank rather than the processor, because network integrity programs make acquirers answerable for merchants in high integrity risk categories, so the next processor asks the same question.
My ads are running fine. Do I still need it?
Ad accounts in restricted healthcare categories that run without the underlying certification tend to run until a policy sweep catches them. A suspension takes the account history with it, which is a materially worse outcome than never having served.
More on Telehealth clinic compliance
General compliance information, not legal or medical advice.