A guide for underwriters at ISOs and Acquirers onboarding MCC 5912 pharmacy and drug store merchants, covering risk assessment, fraud signals, and the underwriting questions that matter.
If you're underwriting a pharmacy, MCC 5912 looks low risk on volume but carries real exposure around controlled substances, insurance and copay handling, and online fulfillment. Licensing and prescription compliance drive the underwriting more than chargebacks. Here's what to look for.
Key Information
This guide covers drug stores and pharmacies, where high transaction volumes sit alongside strict licensing, controlled substance rules, and insurance billing that demand careful verification.
Typical Business Types
Retail Chain Pharmacies
#1
Pharmacy counters inside larger drug or grocery retail formats.
Independent Pharmacies
#2
Owner-operated community pharmacies filling prescriptions locally.
Compounding and Specialty Pharmacies
#3
Pharmacies preparing custom or specialty medications, often shipped.
Payment Processing Information
Transaction Types
1
In-Person Prescription Payment
Copays and retail items paid at the pharmacy counter.
2
Insurance and Third-Party Billing
Claims adjudicated through pharmacy benefit managers with patient copays.
3
Online and Mail Order
Prescriptions and retail goods ordered for shipment.
4
Auto-Refill Subscriptions
Recurring fills charged on file for maintenance medications.
5
Front-of-Store Retail
Health, beauty, and convenience items at the general register.
Common Payment Methods
Credit and Debit Cards - Used for copays and retail purchases
FSA and HSA Cards - Health benefit cards for eligible medical items
Insurance Adjudication - Third-party claims with patient copay balances
Mobile Payments - Contactless and digital wallets
Cash - Common for low-cost copays and sundries
Underwriting MCC
5912
at scale?
See how Gratify automates the risk assessment and gets applications decision-ready in minutes.
Prescription Fraud - Forged or altered prescriptions presented for fill
FSA and HSA Misuse - Benefit cards used for ineligible items
Card-Not-Present Fraud - Stolen cards used for online or phone orders
Friendly Fraud - Disputes on auto-refill charges customers forgot
Controlled Substance Diversion - Patterns indicating drug diversion or doctor shopping
Regulatory Challenges
State Pharmacy Licensing - Board of Pharmacy registration and inspections
DEA Controlled Substance Rules - Registration and recordkeeping for scheduled drugs
HIPAA - Patient health information privacy and security
FSA and HSA Eligibility - IRS rules on qualified medical expenses
PCI Compliance - Payment card data security
Common Fraud Signals
Auto-Refill Dispute Spikes
Rising disputes on recurring fills suggest weak consent or notice practices.
Unusual FSA and HSA Volume
Benefit card use inconsistent with eligible items can indicate misuse.
Card-Not-Present Surge
A jump in online or phone orders without verification raises fraud risk.
Example Scenarios and Red Flags
Forged Prescription Activity
Patterns of altered or duplicated prescriptions presented at the counter.
Auto-Refill Chargebacks
Customers disputing recurring charges they did not recall authorizing.
Controlled Substance Red Flags
Early refills, cash-only scheduled drugs, or doctor shopping indicators.
Online Order Fraud
Card-not-present orders shipped to addresses that later dispute.
FSA Card Abuse
Benefit cards repeatedly used for clearly ineligible front-store items.
Common Underwriting Questions
UW Tips Business
Verify state Board of Pharmacy licensing and current standing
Confirm DEA registration if controlled substances are dispensed
Check the physical pharmacy operation and any mail-order footprint
UW Tips Financial
Separate insurance copay revenue from front-store retail in the review
Assess auto-refill recurring volume and its dispute history
Review specialty and compounding revenue concentration
UW Tips Risk
Evaluate controls on auto-refill consent and notice
Assess card-not-present verification for online and phone orders
Review controlled substance monitoring and recordkeeping
UW Questions Business
What pharmacy type do you operate and do you ship medications?
Are your state license and DEA registration current?
Do you offer compounding or specialty fulfillment?
UW Questions Payments
What share of revenue is copay versus front-store retail?
Do you bill recurring auto-refills and how is consent captured?
How are FSA and HSA card transactions handled and segregated?
UW Questions Fraud
How do you verify prescriptions and prevent forged scripts?
What verification covers online and phone orders?
How do you monitor for controlled substance diversion?
UW Questions Compliance
Are you HIPAA compliant and how is patient data secured?
How do you confirm FSA and HSA item eligibility?
Are PCI assessments current across all registers?
UW Questions Chargebacks
What is your chargeback ratio and how many disputes are auto-refill related?
How do you handle copay and insurance billing complaints?
Do you retain consent and fulfillment records for representment?
UW Questions Infrastructure
What pharmacy and POS systems do you run and how do they integrate?
How is patient and payment data segmented and protected?
Do you support EMV and contactless at all counters?
Ongoing Monitoring
Transaction Monitoring
Track auto-refill recurring charges and related disputes
Monitor card-not-present order volume and shipping mismatches
Watch FSA and HSA transactions against eligible item rules
Compliance Checks
Maintain Board of Pharmacy and DEA registrations
Keep HIPAA safeguards and PCI assessments current
Review controlled substance records on schedule
Security Updates
Use EMV and contactless across pharmacy and front-store lanes
Encrypt and tokenize card and patient data
Apply verification controls on card-not-present orders
Risk Assessment
Reassess exposure as online and mail-order volume grows
Track controlled substance dispensing patterns
Review auto-refill consent practices regularly
Merchant Communication
Help the merchant document auto-refill consent to cut recurring-charge disputes. Share guidance on FSA and HSA eligibility handling and card-not-present verification. Support controlled substance monitoring and HIPAA-aligned data practices.
Overwhelmed with Applications?
Gratify offers instant merchant application enrichment to get the full picture of your customers in real-time
