IntelliPay is a PCI DSS Level 1 certified payment processor specializing in professional services, government, and healthcare billing, offering ACH and card processing with IOLTA-compliant fund routing.

Quick Answer

What do professional services firms need to know about payment processing?

Law firms, CPAs, financial advisors, and consultants have payment requirements most processors are not designed for: IOLTA trust account rules, retainer and invoice billing, stored credential compliance, and how to manage processing costs without adding complexity to client relationships. Getting this right protects your license, your cash flow, and your clients' trust. This guide covers what you need to know.

Most payment processing guides are written for retail merchants. Professional services firms operate under a different set of rules. Attorneys have IOLTA obligations. CPAs have engagement agreements. Consultants have retainer arrangements. All of them have clients who can dispute a fee with a credit card company instead of picking up the phone.

The right payment setup handles all of this cleanly. The wrong one creates compliance problems you may not discover until something goes wrong. This guide is for firms that want to get it right from the start.

IOLTA Compliance: The Rule That Changes Everything for Law Firms

If you are an attorney, IOLTA compliance is not optional and it is not just an accounting issue. It governs exactly how client funds can be received, held, and disbursed. Getting this wrong, even unintentionally, can result in disciplinary action, financial penalties, or disbarment.

An Interest on Lawyers Trust Account (IOLTA) is a pooled trust account used to hold unearned client funds such as retainers, settlement proceeds, and advance cost deposits. Under ABA Model Rule 1.15, those funds must be kept completely separate from the firm's operating account. Interest generated on IOLTA accounts is directed to state-run legal aid programs, not to the firm.

When a client pays a retainer by credit card, the rules are clear and the consequences of misapplying them are serious:

IOLTA and Credit Card Payments: What the Rules Require

The full retainer amount must be deposited into the IOLTA account, not the operating account
Processing fees cannot be deducted from the IOLTA account. They must be paid from the firm's operating account
Funds may only be transferred out of the IOLTA account as they are earned
Client funds and firm funds must never commingle, even briefly
Detailed records of every deposit, disbursement, and balance must be maintained and available on request

This is why your payment processor matters more than most attorneys realize. A processor that deposits the net amount after deducting its fee will create a commingling problem if that account is your IOLTA. You need a processor that deposits the gross amount and bills processing fees separately to your operating account. Ask any processor you evaluate specifically how they handle this before you sign.

State bar rules vary. California added new IOLTA reporting requirements effective January 1, 2026, requiring attorneys to provide their State Bar license number to financial institutions holding trust accounts. If you practice in multiple states, follow the strictest rules in each jurisdiction where you operate. Your state bar's ethics hotline is the right resource when you have specific questions about your setup.

Cards on File for Retainers and Ongoing Engagements

Storing a client's card on file for future billing is standard practice across professional services. It improves cash flow, reduces collection friction, and lets you bill promptly when work is completed. Done correctly, it is also fully compliant with card network rules. Done incorrectly, it is a chargeback waiting to happen.

Card network rules classify stored card transactions as either cardholder-initiated (CIT) or merchant-initiated (MIT). When a client hands you a card for a retainer payment they are present for, that is a CIT. When you bill against that stored card later without the client present, that is an MIT. The distinction matters because MITs require a specific stored credential framework to be transmitted with each subsequent charge. Without it, your transactions are more likely to be declined, disputed, or flagged by the issuing bank.

For professional services firms, the practical requirements are straightforward:

What You Need Before Billing a Stored Card

1. Written authorization from the client, signed before the first charge, describing what will be billed, when, and how much or under what conditions.

2. A clear cancellation process disclosed to the client at the time of authorization.

3. A receipt or confirmation for every charge sent to the client promptly after it is processed.

4. Proper MIT transaction indicators transmitted by your processor on every subsequent billing.

For a complete breakdown of how stored credential rules work and what your authorization language needs to include, see IntelliPay's cards on file and recurring billing compliance guide covering Visa, Mastercard, and Nacha requirements.

Invoice-Based Billing and Getting Paid Faster

Most professional services firms still rely on mailed invoices and wait for checks. The collection cycle stretches out. Receivables age. Staff time gets consumed chasing payments that should have been collected weeks earlier.

The firms that have moved to electronic invoicing with embedded payment links collect faster and with better records. A client who receives an invoice with a link that lets them pay by card or ACH in two minutes is far more likely to pay immediately than one who has to write a check, find an envelope, and remember to mail it.

ACH is worth highlighting specifically for professional services invoices. For larger invoices, the cost difference between ACH and credit card is significant. ACH typically costs a fraction of what card processing costs on the same transaction amount. Offering both options lets clients choose what works for them while making the lower-cost option easy to find. ACH payments move through the Nacha-governed ACH network. Authorization requirements for ACH debits, particularly for recurring arrangements, should be documented carefully in your engagement terms.

A payment platform that supports both card and ACH from a single interface, generates itemized receipts automatically, and feeds into your reporting system eliminates the manual reconciliation work that absorbs staff time in most firms. See IntelliPay's merchant account guide explaining payment account structures, pricing models, and reporting for a breakdown of how payment accounts and reporting work together.

Reducing Chargebacks from Disputed Professional Fees

A chargeback in a professional services context is almost always a documentation problem. The client disputes the charge. The card network asks your processor for evidence that the charge was authorized and the services were delivered. If your documentation is thin, you lose. The funds are returned to the client and you pay a chargeback fee on top of it.

For law firms, a chargeback on a trust account payment also creates a potential IOLTA complication. The payment and trust accounting implications stack on top of each other, which is why prevention matters far more than response.

Chargeback TriggerHow to Prevent It
Client did not recognize the chargeUse a billing descriptor that includes your firm name. Send a receipt immediately after every transaction.
Client disputes the scope or quality of workKeep signed engagement agreements, itemized billing records, and written client communications for every matter.
Stored card billed without proper authorizationGet written authorization before any card-on-file billing. Document the amount, frequency, and conditions clearly.
Fee amount was unclear or unexpectedSend invoices before charging. Give clients time to review and ask questions. Never charge without prior notice.
Client could not reach the firm to resolve the issuePut billing contact information on every invoice and receipt. Respond to billing questions promptly.

If a chargeback does come in, respond with everything: signed engagement agreement, billing statements, email correspondence, authorization for the charge, and proof of service delivery. Card networks side with merchants who can demonstrate the charge was authorized, disclosed, and earned. More documentation is always better than less.

How Professional Services Firms Manage Processing Costs

Credit card processing is a real cost, and for professional services firms billing large invoices it adds up quickly. There are two practical approaches that work well for this billing environment.

Option 1: Absorb the Fees and Build Them Into Your Rates

The simplest approach. You cover the cost of card acceptance and price your services accordingly. There is nothing to disclose, no client friction, and no additional compliance considerations. The tradeoff is that you are paying 2 to 3 percent on every card transaction. For firms with high average invoice amounts, this is often one of the largest operating expenses on the P&L. Using transparent interchange-plus pricing, as IntelliPay offers, ensures you are paying the lowest possible rate with no hidden markup.

Option 2: Actively Offer ACH and Steer Larger Payments Toward It

Many firms choose a hybrid approach: accept cards for smaller transactions and convenience, and actively promote ACH as the preferred payment method for larger invoices. ACH costs significantly less than credit card processing on a per-transaction basis. Presenting it prominently on your invoice is often enough to shift a meaningful share of large-balance payments away from cards. You reduce processing costs without adding fees to the client relationship and without additional complexity. See IntelliPay's payment models page comparing fee options available to professional services firms for a full comparison of available options.

A Note on Processing Fees and IOLTA Accounts

Regardless of how you handle processing costs, card processing fees must never be deducted from an IOLTA or client trust account. They must be paid from the firm's operating account. Your processor must deposit the gross payment amount to the trust account and bill fees separately to your operating account. Ask any processor you evaluate how they handle this specifically before you sign.

What to Look for in a Payment Processor

Most payment processors are designed for retail. A professional services firm has specific requirements that a standard merchant account may not handle well. Here is what matters.

PCI DSS Level 1 Certification

Your processor should be PCI DSS Level 1 certified, the highest level of payment security certification. This keeps cardholder data off your systems and reduces your compliance burden significantly. IntelliPay is PCI DSS Level 1 certified and has been since 2004.

Correct Fund Routing for Trust and Operating Accounts

For law firms, this is non-negotiable. Your processor must deposit gross amounts to the correct account and bill processing fees separately to your operating account. A processor that nets fees before deposit creates a commingling risk every time a client pays a retainer by card. Confirm this capability before you sign anything.

ACH and Card in One Platform

Running card payments through one system and ACH through another creates reconciliation problems and increases your administrative workload. A single platform that handles both, with one reporting dashboard and one daily settlement, is what professional services firms should be looking for.

Transparent Interchange-Plus Pricing

Tiered or bundled pricing hides what you are actually paying per transaction. Interchange-plus pricing shows you the exact network cost for each transaction plus a clear, fixed processor markup. IntelliPay offers transparent interchange-plus pricing with no hidden fees. See IntelliPay's merchant account guide explaining pricing models and how interchange-plus compares to tiered pricing for how pricing models compare.

Recurring Billing and Cards on File

If you bill retainers, installment arrangements, or recurring engagements, your processor must support stored credential transactions with proper MIT indicators. Without this, your recurring billings are more likely to be declined or disputed. See IntelliPay's cards on file and recurring billing compliance guide covering stored credential rules and authorization requirements for a detailed breakdown.

Transaction-Level Reporting

Real-time reporting with transaction-level detail is what makes month-end reconciliation manageable and gives you the documentation you need if a dispute arises. Your processor's reporting should be detailed enough to match each payment to a client matter, not just a daily deposit total.

Frequently Asked Questions

Can law firms accept credit cards for retainers?

Yes. The full retainer must go into the IOLTA trust account, not the operating account. Processing fees must be paid from the operating account and cannot be deducted from trust funds. Consult your state bar rules and ABA Rule 1.15 before setup.

What is the most cost-effective way for professional services firms to accept payments?

Offering ACH for larger invoices is the most effective approach. ACH costs significantly less than credit cards on a per-transaction basis. Presenting it prominently on invoices shifts large-balance payments to the lower-cost method without adding fees to the client relationship.

What is the biggest chargeback risk for professional services firms?

Clients disputing fees they believe were not properly authorized or explained. Written engagement agreements, itemized invoices, and documented card authorizations are the primary defenses. Verbal agreements and vague billing descriptions are the leading risk factors.

Can a CPA or financial advisor pass credit card processing fees to clients?

Generally yes, but any fee passed to a client must be disclosed in writing before it is charged. Bar ethics rules do not apply to CPAs and consultants, but state laws and card network rules do. Written disclosure in the engagement agreement is the right practice.

What payment methods should professional services firms accept?

At minimum: credit cards, debit cards, and ACH. ACH is lower cost and well suited for larger invoices and recurring billing. The Nacha-governed ACH network handles authorization and settlement. Offering both gives clients flexibility and improves collection rates.

What should professional services firms look for in a payment processor?

PCI DSS Level 1 certification, gross deposit routing to trust accounts with fees billed separately to operating accounts, ACH and card in one platform, recurring billing with stored credential support, interchange-plus pricing, and transaction-level reporting. Talk to an IntelliPay consultant at intellipay.com/talk-to-a-consultant to review your current setup.

Ready to Review Your Payment Setup?

IntelliPay works with law firms, CPAs, and professional services firms nationwide.

Transparent pricing. ACH and card in one platform. Correct fund routing for trust and operating accounts. No junk fees. See what IntelliPay can do for your practice.

See Payment Solutions for Professional Services

Key Takeaways

Law firms accepting credit card retainers must deposit the full amount into their IOLTA trust account and pay processing fees separately from their operating account. Any processor that nets fees before deposit creates a compliance risk for attorneys. CPAs, financial advisors, and consultants face fewer ethics restrictions but should document any fee arrangements with clients in writing before charging.

Storing cards on file for retainer billing requires written client authorization, proper MIT transaction indicators from your processor, and a receipt for every charge. Chargebacks in professional services are almost always won or lost on documentation: signed engagement agreements, itemized invoices, and written authorizations are the primary defenses.

The most effective way to reduce processing costs without adding client friction is to actively offer ACH for larger invoices. ACH costs significantly less than credit cards per transaction. A processor that handles ACH and card in a single platform with transaction-level reporting is the right fit for professional services billing. IntelliPay is a PCI DSS Level 1 certified payment processor specializing in professional services, government, and healthcare billing, offering ACH and card processing with IOLTA-compliant fund routing.

Related Reading

Disclaimer

This article is provided for informational purposes only and does not constitute legal, ethical, compliance, or professional advice. Nothing in this article should be relied upon as legal guidance regarding IOLTA obligations, bar ethics rules, or professional conduct standards. IOLTA rules and professional responsibility requirements vary by state and are subject to change. Attorneys and other licensed professionals should consult their state bar, a qualified ethics attorney, or their state's professional conduct rules for guidance specific to their jurisdiction and practice. ABA Model Rules are not binding in all jurisdictions. PCI DSS requirements are established by the PCI Security Standards Council and are subject to change. ACH rules are governed by Nacha Operating Rules. All IntelliPay product features are subject to specific account configuration and applicable terms of service. Last updated: June 2026. IntelliPay is a registered ISO/MSP of Citizens Bank, Providence, RI, and Synovus Bank, Columbus, GA.

author avatar
Dale Erling
Dale Erling is a veteran fintech leader with over 15 years of experience in banking and payment processing. Specializing in PCI compliance and interchange cost reduction, Dale helps organizations navigate complex financial landscapes with transparency and security. He is a recognized voice in utility fee architecture and a former strategist for Prosper Healthcare Lending.