BLOG

>

Legal Services Payment Processing: A 2026 Guide for Law Firms & Legal Tech

How law firms should handle IOLTA-safe payment processing, surcharge compliance, and merchant account selection in 2026, a practical guide for legal tech and firm ops.

9/8/2026

7

MIN READ

Every industry has payment processing quirks, but law firms carry one that almost no other professional service does: a meaningful share of the money moving through the practice was never the firm's money in the first place. Retainers, advanced costs, and settlement proceeds belong to the client until they're earned, and that distinction is written into the ethics rules every licensed attorney practices under. Get the mechanics wrong, and the problem is a bar complaint.

This guide walks through legal services payment processing heading into 2026: what legal payment compliance actually requires, how attorney trust account payments are supposed to flow, where the surcharge rules currently stand across a patchwork of states, and what to look for in a law firm merchant account built to keep pace with both.

Why Payment Processing Isn't a Commodity Decision for Law Firms

Most businesses evaluate a payment processor on rate and uptime. Law firms have to evaluate one more question first: where does the money go, and whose money is it. Under ABA Model Rule 1.15, every state has adopted some version of a rule requiring lawyers to hold client and third-party funds separate from the firm's own property, in a dedicated trust account, with complete records preserved for years after a matter closes. A retainer that hasn't been earned yet is client property. Deposit it straight into the operating account, or let a processor pull its fee out of a trust deposit before the full amount lands, and the firm has a recordkeeping violation on its hands regardless of intent.

The upside of getting this right is real. Firms that let clients pay by card collect measurably faster than firms relying on checks alone, and a large majority of clients now say they'd rather pay a legal bill online than mail a check. That's the case for modernizing intake and billing. The rules above are the case for doing it through infrastructure that was actually built to keep trust funds untouched.

The Three-Account Framework

Almost every compliance question in this space comes back to which of three accounts a given dollar belongs in. It's worth mapping out before anything else.

Account What Belongs Here Common Pitfall
Operating Account Earned fees, firm revenue, processing fees, and any chargeback or dispute debits None if used correctly, this is the account processing costs should always be pulled from
IOLTA / Trust Account Unearned retainers, advanced costs, nominal or short-term client funds; interest is remitted to the state's legal aid program Fees or chargebacks debited directly from trust; funds left in trust after they're earned
Credit Card Trust Account A handful of states allow or require a separate holding account for card-funded retainers before they move to IOLTA Missing the short replenishment window (often 3 business days) after a chargeback or shortfall

That third row isn't universal, most jurisdictions handle card-funded retainers by routing the full deposit into the IOLTA account and debiting processing fees from operating at the end of the month. But a few states, including Wisconsin, have codified a dedicated credit card trust account structure specifically for card and electronic deposits. Firms with multi-state practices should confirm which model their bar requires before assuming their existing setup is portable.

Where Legal Payment Compliance Actually Breaks

The failure patterns are consistent across states, and none of them require bad faith; most start as bookkeeping drift that compounds quietly until an audit or overdraft notice surfaces it.

  • Processing fees deducted directly from the trust account before the deposit posts, instead of being billed to operating at month's end.
  • Advance or flat fees deposited to operating before they're actually earned, which is commingling even when the lawyer intends to "true it up" later.
  • Reconciliation that happens quarterly, or only when something looks off, rather than every month against a three-way check of bank balance, book balance, and client ledger totals.
  • Letting a processor debit the trust account for a chargeback or client dispute, the funds should be replaced from operating, not pulled from money that may belong to other clients in the pooled account.
  • New for 2026: California now requires financial institutions holding client trust accounts to collect and file the attorney's State Bar license number for every account. Existing trust accounts have until July 1, 2026 to comply under Business and Professions Code section 6091.3.

Built for the accounts law firms actually run

Approvely underwrites regulated and compliance-intensive verticals, legal services included, with same-day onboarding and a typical 3–5 business day go-live. Fee handling, chargeback response, and settlement are structured so client funds and firm revenue never share a ledger line.

→  See how Approvely supports regulated industries

Surcharging Client Payments: What's Actually Legal in 2026

Passing card processing costs on to clients is legal in most of the country, but "most" isn't "all," and the rules split across three overlapping layers: federal law (debit cards can never be surcharged, full stop), card network rules (a 3% cap, or the actual cost of acceptance if lower), and state law, which varies enough that a national firm needs a state-by-state view rather than one policy.

State(s) Surcharge Status What to Know
Connecticut, Massachusetts, Maine Prohibited Cash discounts are still permitted; the distinction is framing, not the fee itself
California Permitted Requires clear disclosure at the point of payment; no state cap beyond the card network's 3%
Colorado Permitted, capped Capped at 2% of the transaction
New York, New Jersey, Nevada Permitted, capped at cost Surcharge can't exceed the firm's actual cost of accepting the card
Most remaining states Permitted Card network rules apply: lesser of 3% or actual acceptance cost, with signage and receipt disclosure

Two extra wrinkles apply to firms specifically. First, some state bars have issued their own advisory opinions on whether a lawyer may pass card fees to a client at all, layered on top of the general surcharge statute; that's a separate question from whether surcharging is legal for merchants generally. Second, card network rules cap the surcharge at the lesser of the two figures, if a firm's actual processing cost is 2.4%, a 3% surcharge is a violation even in a state that allows surcharging outright. A current rundown of surcharge law by state is worth bookmarking, since several bans are tied up in litigation and the list shifts year to year.

Notes From the Field

Firms that switch processors over a rate dispute usually resolve it in a quarter. Firms that switch because a client's retainer got declined at the worst possible moment, or because a processor pulled its fee straight out of trust, are usually fixing something underwriting should have caught the first time. If a current processor can't show, in writing, that trust deposits and fee debits never touch the same ledger entry, that's worth resolving before an audit finds it first.

Evaluating a Law Firm Merchant Account

General-purpose processors can technically move money for a law firm. Whether they can do it in a way that survives a bar audit is a different question. A few criteria separate the two:

  • Trust-safe fee handling: processing fees and chargebacks are billed to the operating account by default, never netted out of a trust deposit.
  • PCI DSS compliance documentation the firm can hand to an auditor without chasing the processor down for it.
  • Matter-level reconciliation that ties card deposits back to individual client ledgers, not just a single lump merchant statement.
  • Integration with the practice management software the firm already runs, so payments post automatically instead of through manual re-entry.
  • Chargeback and dispute support built for retainer and advance-fee disputes specifically, which behave differently than a typical retail chargeback.

Legal-specific platforms tend to lead on the first three points because they were built around trust accounting from day one, while general processors sometimes require a firm to build those safeguards manually on top.

A 2026 Compliance Checklist for Law Firm Payments

  • Confirm in writing that the processor never debits fees or chargebacks from the IOLTA or trust account.
  • Verify monthly three-way reconciliation (bank balance, book balance, client ledger totals) is scheduled or automated, not ad hoc.
  • Check the current surcharge status and disclosure rules for every state where the firm accepts payment before turning on card fees.
  • If operating in California, confirm the bank has filed the attorney's State Bar license number for every trust account ahead of the 2026 deadline.
  • Keep a separate, current ledger for every client matter, updated the day a transaction posts.
  • Review PCI DSS compliance documentation annually, and after any change of processor or point-of-sale hardware.
  • Retain trust account records for the period required in the firm's jurisdiction, commonly five to seven years after a matter closes.

Frequently Asked Questions

Can law firms accept credit cards for retainer payments?

In most jurisdictions, yes. Because the retainer hasn't been earned yet, it typically needs to be placed in trust rather than deposited straight to the operating account, and the processing fee for that transaction can't be pulled out of the trust deposit itself.

Can credit card processing fees be deducted from an IOLTA account?

No. Nearly every state bar requires those fees to come from the firm's operating account, so client funds held in trust are reduced only by an authorized disbursement, never by a bank or card network fee.

Is credit card surcharging legal for law firms?

It depends on the state. As of 2026, a small number of states, Connecticut, Massachusetts, and Maine among them, prohibit surcharging outright. Several others cap the fee or require it to match the firm's actual processing cost. Most of the rest allow it up to the card network's 3% ceiling with proper disclosure.

What's the difference between an IOLTA and a credit card trust account?

An IOLTA pools nominal or short-term client funds and sends the interest earned to the state's legal aid fund. A credit card trust account is a separate structure a few states require specifically for card-funded deposits, so a chargeback or network deduction never touches the pooled IOLTA balance directly.

Do law firms need a legal-specific payment processor?

Not in every case, but a processor built for legal accounts is structurally set up to keep trust and operating funds separate, support matter-level reconciliation, and block third-party debits against trust guarantees a general-purpose processor typically wasn't designed to make.

Disclaimer

This article is for general informational purposes and does not constitute legal, accounting, or compliance advice. Firms should confirm current requirements with their state bar and a qualified professional.

Payments infrastructure that respects the rules you practice under

Approvely builds payment infrastructure for regulated and compliance-intensive industries, legal services included, designed for approval stability, trust-safe fee handling, and long-term operational continuity.

Talk to Approvely about your firm's payment setup

Share this post

Related blogs

Gradient background transitioning from bright white at the center to purple and then dark blue to black at the edges.

Optimize Your Transaction Success

Boost your approval rates with Approvely’s advanced payment processing solutions. Achieve higher transaction success and enhance customer satisfaction with efficient, secure processes.

Learn More