What is a virtual credit card payment on a dental claim?

A virtual credit card, or VCC, is a single-use credit card number a health plan sends instead of a paper check or a standard electronic funds transfer. The practice keys the number into a card terminal to draw the payment, and the transaction runs through a credit card network rather than the banking system, which is why it carries a card-network processing fee the practice pays out of the reimbursement.

Are virtual credit card fees themselves illegal under federal rules?

No. HHS has adopted standards only for EFT transmitted through the Automated Clearing House network, and the guidance letter states plainly that HHS has not promulgated HIPAA regulations governing VCC payments, so it does not regulate the fees card networks or health plans charge for them. The federal lever is the right to request standard EFT instead, not a ban on VCC.

Can a health plan force a practice to work with a specific vendor to receive EFT payments?

No. GL-2022-04 states a health plan may not require a provider to agree to receive payment or reassociation services from a vendor of the health plan's choosing as a condition of receiving EFT or ERA under the adopted standards, even when the health plan uses that vendor for other parts of the transaction.

Do any states go further than the federal rule on virtual credit card fees?

Several states have passed laws that go beyond the federal floor, generally prohibiting a health plan from making a fee-bearing payment method the only option and requiring advance notice of any fee along with a clear path to select a fee-free alternative. State insurance law is the place to look for an outright limit on the fee itself, since the federal rule addresses the right to request EFT, not the fee.

The Payer Sent You a Virtual Credit Card. A Federal Guidance Letter Says You Do Not Have to Take It.

Q: Does federal law require health plans to offer standard EFT instead of a virtual credit card?

Yes. CMS Guidance Letter GL-2022-04 (March 22, 2022) confirms that under 45 CFR 162.925(a)(1), if a provider requests that a health plan pay claims using the adopted HIPAA EFT and ERA standards, the health plan must comply. The letter states the rule provides no exceptions to that requirement, and it applies regardless of whether the provider is in-network.

Q: What has to happen for a dental practice to switch a payer from VCC to EFT?

The practice must enroll with that specific health plan for EFT and ERA, and the enrollment process must follow the CAQH CORE Phase III operating rules: CORE 380 for EFT enrollment data and CORE 283 for ERA enrollment data, both adopted at 45 CFR 162.1603. Enrollment is done payer by payer, not once for all payers.

A remittance email arrives with a sixteen-digit number, an expiration date, and instructions to run it through the practice’s card terminal like a patient copay. The front desk does it because it is the fastest way to get the money moving, and nobody stops to ask what the card network took before the deposit hit the account.

The fee is real, and it is not an accident.

The mechanism

A virtual credit card is a single-use card number a health plan sends in place of a paper check or a standard electronic funds transfer. Running it draws a card-network transaction, which carries the same kind of interchange and processing fee any credit card swipe carries, paid by the practice out of the claim reimbursement. Standard EFT through the Automated Clearing House network carries none of that, because it is a bank-to-bank transfer, not a card transaction.

Source: CMS Guidance Letter GL-2022-04, March 22, 2022

Every VCC payment the practice runs is a card-network transaction dressed up as a remittance. That distinction is the whole reason the fee exists, and it is also the reason a health plan can offer VCC at all: HHS has never regulated it.

HHS answered the exact question a practice actually has.

The question is not whether VCC fees are legal. They are. The question that matters is narrower: if a practice asks to be paid the standard way instead, does the health plan have to say yes.

The rule

45 CFR 162.925(a)(1) states that if an entity requests that a health plan conduct a transaction as a standard transaction, the health plan must do so. CMS Guidance Letter GL-2022-04 applies that rule directly to claims payment: if a provider requests that a health plan pay claims using the adopted HIPAA EFT and ERA standards, the health plan must comply, and the letter states the rule provides no exceptions to that requirement, regardless of whether the provider is in-network.

Source: 45 CFR 162.925(a)(1); CMS Guidance Letter GL-2022-04

That answer is unambiguous in a way federal guidance rarely is. A health plan does not get to prefer VCC once a practice has made the request in the adopted format. It also cannot make the practice go through its own chosen payment vendor as a condition of getting EFT, a separate question the same guidance letter answers directly: no.

What “the adopted standard” actually means, in practice.

The guidance letter is specific about what a provider is entitled to ask for, and it is three things: the NACHA CCD+ Addenda standard for the payment initiation transmission, the ASC X12 835 TRN Segment Specification for the data content of that transmission, and the ASC X12 TR3 835 standard for the remittance advice itself. Asking for those three, together, is what triggers the health plan’s obligation to comply.

Getting there is not automatic. A practice has to enroll for EFT and ERA with each health plan individually, and that enrollment has to follow the CAQH CORE Phase III operating rules, CORE 380 for EFT enrollment data and CORE 283 for ERA enrollment data, both adopted at 45 CFR 162.1603. Until a practice completes that enrollment with a given payer, that payer may keep paying by whatever method it was already using, VCC included.

Why this keeps happening anyway.

If the federal answer is this clean, the fee should already be gone from most practices. It is not, for three ordinary reasons. Enrollment is done payer by payer, so a practice that enrolled with its largest payers years ago may still have several smaller ones defaulted to VCC and never noticed. Front-desk staff process whatever arrives, and a VCC in the inbox looks like progress, not a fee. And the fee itself is invisible on the remittance total; it is taken by the card network before the deposit lands, so the number the practice sees already has it subtracted.

None of that is a legal obstacle. It is an operational one, and it is the kind that gets fixed by someone actually going payer by payer and checking.

Where state law can do more than the federal rule.

The federal guidance secures the right to ask for EFT. It does not ban the VCC fee itself, because HHS has stated plainly that it does not regulate VCC payments at all. Several states have gone further, generally prohibiting a health plan from making a fee-bearing method the only option and requiring advance notice before a payer changes payment methods on a practice. Whether that added protection applies is a state-by-state question, and it sits on top of the federal floor, not in place of it.

What to actually do with this.

Pull the last twelve months of remittances and separate them by payment method: standard EFT, VCC, paper check. Every VCC line is a fee the practice paid without agreeing to it in any meaningful sense, and every one of those payers is a candidate for a CORE-compliant EFT enrollment request today.

Reading the remittance stream closely enough to see where the money actually went, not just what the deposit total says, is the same work that finds a medically necessary claim filed at the wrong rate or a modifier that should have carried a different level of documentation. It is a specific, checkable question, payer by payer, not a shrug about how dental payments work.

We run this kind of review, along with the medical-necessity and coding review that recovers most of a practice’s missing money, on a contingency. No recovery, no fee.

Get your 12-Month Missing Money Scan. It checks your remittances against your fee schedule and flags exactly where a payment method quietly cost you money.