BLOG
>
Legal Services Payment Processing: A 2026 Guide for Law Firms & Legal Tech
How law firms should handle IOLTA-safe payment processing, surcharge compliance, and merchant account selection in 2026, a practical guide for legal tech and firm ops.

Every industry has payment processing quirks, but law firms carry one that almost no other professional service does: a meaningful share of the money moving through the practice was never the firm's money in the first place. Retainers, advanced costs, and settlement proceeds belong to the client until they're earned, and that distinction is written into the ethics rules every licensed attorney practices under. Get the mechanics wrong, and the problem is a bar complaint.
This guide walks through legal services payment processing heading into 2026: what legal payment compliance actually requires, how attorney trust account payments are supposed to flow, where the surcharge rules currently stand across a patchwork of states, and what to look for in a law firm merchant account built to keep pace with both.
Why Payment Processing Isn't a Commodity Decision for Law Firms
Most businesses evaluate a payment processor on rate and uptime. Law firms have to evaluate one more question first: where does the money go, and whose money is it. Under ABA Model Rule 1.15, every state has adopted some version of a rule requiring lawyers to hold client and third-party funds separate from the firm's own property, in a dedicated trust account, with complete records preserved for years after a matter closes. A retainer that hasn't been earned yet is client property. Deposit it straight into the operating account, or let a processor pull its fee out of a trust deposit before the full amount lands, and the firm has a recordkeeping violation on its hands regardless of intent.
The upside of getting this right is real. Firms that let clients pay by card collect measurably faster than firms relying on checks alone, and a large majority of clients now say they'd rather pay a legal bill online than mail a check. That's the case for modernizing intake and billing. The rules above are the case for doing it through infrastructure that was actually built to keep trust funds untouched.
The Three-Account Framework
Almost every compliance question in this space comes back to which of three accounts a given dollar belongs in. It's worth mapping out before anything else.
That third row isn't universal, most jurisdictions handle card-funded retainers by routing the full deposit into the IOLTA account and debiting processing fees from operating at the end of the month. But a few states, including Wisconsin, have codified a dedicated credit card trust account structure specifically for card and electronic deposits. Firms with multi-state practices should confirm which model their bar requires before assuming their existing setup is portable.
Where Legal Payment Compliance Actually Breaks
The failure patterns are consistent across states, and none of them require bad faith; most start as bookkeeping drift that compounds quietly until an audit or overdraft notice surfaces it.
- Processing fees deducted directly from the trust account before the deposit posts, instead of being billed to operating at month's end.
- Advance or flat fees deposited to operating before they're actually earned, which is commingling even when the lawyer intends to "true it up" later.
- Reconciliation that happens quarterly, or only when something looks off, rather than every month against a three-way check of bank balance, book balance, and client ledger totals.
- Letting a processor debit the trust account for a chargeback or client dispute, the funds should be replaced from operating, not pulled from money that may belong to other clients in the pooled account.
- New for 2026: California now requires financial institutions holding client trust accounts to collect and file the attorney's State Bar license number for every account. Existing trust accounts have until July 1, 2026 to comply under Business and Professions Code section 6091.3.
Built for the accounts law firms actually run
Approvely underwrites regulated and compliance-intensive verticals, legal services included, with same-day onboarding and a typical 3–5 business day go-live. Fee handling, chargeback response, and settlement are structured so client funds and firm revenue never share a ledger line.
→ See how Approvely supports regulated industries
Surcharging Client Payments: What's Actually Legal in 2026
Passing card processing costs on to clients is legal in most of the country, but "most" isn't "all," and the rules split across three overlapping layers: federal law (debit cards can never be surcharged, full stop), card network rules (a 3% cap, or the actual cost of acceptance if lower), and state law, which varies enough that a national firm needs a state-by-state view rather than one policy.
Two extra wrinkles apply to firms specifically. First, some state bars have issued their own advisory opinions on whether a lawyer may pass card fees to a client at all, layered on top of the general surcharge statute; that's a separate question from whether surcharging is legal for merchants generally. Second, card network rules cap the surcharge at the lesser of the two figures, if a firm's actual processing cost is 2.4%, a 3% surcharge is a violation even in a state that allows surcharging outright. A current rundown of surcharge law by state is worth bookmarking, since several bans are tied up in litigation and the list shifts year to year.
Notes From the Field
Firms that switch processors over a rate dispute usually resolve it in a quarter. Firms that switch because a client's retainer got declined at the worst possible moment, or because a processor pulled its fee straight out of trust, are usually fixing something underwriting should have caught the first time. If a current processor can't show, in writing, that trust deposits and fee debits never touch the same ledger entry, that's worth resolving before an audit finds it first.
Evaluating a Law Firm Merchant Account
General-purpose processors can technically move money for a law firm. Whether they can do it in a way that survives a bar audit is a different question. A few criteria separate the two:
- Trust-safe fee handling: processing fees and chargebacks are billed to the operating account by default, never netted out of a trust deposit.
- PCI DSS compliance documentation the firm can hand to an auditor without chasing the processor down for it.
- Matter-level reconciliation that ties card deposits back to individual client ledgers, not just a single lump merchant statement.
- Integration with the practice management software the firm already runs, so payments post automatically instead of through manual re-entry.
- Chargeback and dispute support built for retainer and advance-fee disputes specifically, which behave differently than a typical retail chargeback.
Legal-specific platforms tend to lead on the first three points because they were built around trust accounting from day one, while general processors sometimes require a firm to build those safeguards manually on top.
A 2026 Compliance Checklist for Law Firm Payments
- Confirm in writing that the processor never debits fees or chargebacks from the IOLTA or trust account.
- Verify monthly three-way reconciliation (bank balance, book balance, client ledger totals) is scheduled or automated, not ad hoc.
- Check the current surcharge status and disclosure rules for every state where the firm accepts payment before turning on card fees.
- If operating in California, confirm the bank has filed the attorney's State Bar license number for every trust account ahead of the 2026 deadline.
- Keep a separate, current ledger for every client matter, updated the day a transaction posts.
- Review PCI DSS compliance documentation annually, and after any change of processor or point-of-sale hardware.
- Retain trust account records for the period required in the firm's jurisdiction, commonly five to seven years after a matter closes.
Frequently Asked Questions
Can law firms accept credit cards for retainer payments?
In most jurisdictions, yes. Because the retainer hasn't been earned yet, it typically needs to be placed in trust rather than deposited straight to the operating account, and the processing fee for that transaction can't be pulled out of the trust deposit itself.
Can credit card processing fees be deducted from an IOLTA account?
No. Nearly every state bar requires those fees to come from the firm's operating account, so client funds held in trust are reduced only by an authorized disbursement, never by a bank or card network fee.
Is credit card surcharging legal for law firms?
It depends on the state. As of 2026, a small number of states, Connecticut, Massachusetts, and Maine among them, prohibit surcharging outright. Several others cap the fee or require it to match the firm's actual processing cost. Most of the rest allow it up to the card network's 3% ceiling with proper disclosure.
What's the difference between an IOLTA and a credit card trust account?
An IOLTA pools nominal or short-term client funds and sends the interest earned to the state's legal aid fund. A credit card trust account is a separate structure a few states require specifically for card-funded deposits, so a chargeback or network deduction never touches the pooled IOLTA balance directly.
Do law firms need a legal-specific payment processor?
Not in every case, but a processor built for legal accounts is structurally set up to keep trust and operating funds separate, support matter-level reconciliation, and block third-party debits against trust guarantees a general-purpose processor typically wasn't designed to make.
Disclaimer
This article is for general informational purposes and does not constitute legal, accounting, or compliance advice. Firms should confirm current requirements with their state bar and a qualified professional.


.webp)
