Marcus, your patient care coordinator, has been with your medical spa for five years, longer than two of your injectors and longer than your current lease.
Most mornings, he opens the med spa and handles the front desk before moving into the financial side of the day. Client payments run through him, along with courtesy discounts or refunds when a treatment runs long or a client leaves unhappy. By the daily close, Marcus has also prepared the deposit that goes to the bank on his way home.
He knows every membership client by name and notices the retail shelf getting thin before anyone else does, which is what five years of institutional knowledge looks like inside a busy practice.
Then you pull a discount-by-user report for the first time in eight months and find roughly $14,000 in comped and discounted treatments under one login. Many of the entries have no reason code or documentation explaining what happened.
You know what you want the explanation to be. You have watched Marcus calm down furious clients for five years, and you would rather absorb the $14,000 than accuse him of something he did not do.
The report does not give you enough information to make either determination. It shows the discount and identifies the user who entered it, but it cannot tell you whether the service recovery decision was appropriate or whether Marcus had approval authority for the amount.
Now you have a financial record of the revenue reduction without enough context to reconstruct the decision behind it.
Why Every Healthcare Practice Needs a Patient Financial Policy
A clear policy protects more than cash flow. It steadies your revenue cycle.
Without a written policy, one employee may collect a deposit while another waits until the first appointment. Two patients in identical situations can walk out with different payment terms. Those differences confuse patients and create unnecessary collection problems.
A written policy establishes one standard for every patient. It reduces misunderstandings and gives your team a documented answer when financial questions arise.
A balanced drawer does not answer the whole question
Suppose Marcus enters a $200 courtesy discount in Boulevard. Once the client pays the lower amount, the POS records the reduced charge and the daily close can still balance.
From an accounting standpoint, everything may line up as expected, but reconciliation answers only part of the question.
The cash can agree with the POS activity, the deposit can reach the bank, and the bank reconciliation can still be correct without showing whether Marcus had authority to reduce the treatment price by $200.
The books can be accurate while the owner still cannot explain why collected revenue changed.
This is where segregation of duties comes in. The person who enters a transaction should not remain responsible for supporting or reviewing the same transaction later. A financial decision needs a second point in the process where someone else can verify what happened.
If Marcus applies the discount and prepares the deposit, a bookkeeper or fractional CFO needs enough documentation to trace the revenue reduction back to the client situation and the approval behind it.
Without that separation, the financial trail leads right back to Marcus when someone asks why the number changed.
Follow the discount
Go back to the $14,000. One courtesy discount under Marcus’s login tells you very little, but eight months of revenue reductions with limited documentation changes the conversation.
You are no longer trying to understand one service recovery decision. You need to know how much financial discretion came with Marcus’s role and where his approval authority was supposed to stop.
Could he reduce a treatment by $200 without approval? Was a reason code required once the discount crossed a threshold? Who owned the monthly review of the discount-by-user report?
Those questions sit underneath the accounting record. They tell you who can change collected revenue and where financial oversight is supposed to enter the process.
If the practice has never defined where Marcus’s authority stops, habit makes the decision.
Refunds expose the same weakness. A POS record can show money returning to a client, but it does not establish who approved the refund or whether the amount fell within the employee’s authority.
Comparing refund activity with the merchant processor gives the owner another financial record to check. An approval threshold establishes when management needs to enter the transaction.
The control creates a point in the transaction path where another person reviews what happened before one role can move from client payment through financial reporting without interruption.
A small team still needs segregation of duties
A medical spa with one coordinator and a few providers is not going to place five people between the front desk and the bank, nor does segregation of duties require it.
The weakness appears when Marcus can influence the transaction at the front desk, prepare what moves toward the bank, then remain the only person who can explain the activity months later.
Your coordinator can handle the client-facing transaction while the bookkeeper or fractional CFO handles the bank reconciliation. A routine courtesy adjustment may remain within the coordinator’s role. A larger revenue reduction can move to the owner or manager under the practice’s approval threshold.
The separation comes from assigning financial responsibilities with intention rather than allowing them to accumulate around the person who knows the system best.
A discount-by-user report sitting untouched for eight months offers very little financial oversight. Once a specific person owns the monthly review, unusual activity can be traced while the people involved still remember the client interaction and the decision behind it.
The owner does not need another full-time task. The financial process needs a defined point where an exception gets noticed and someone with the right authority follows the transaction.
What a fraud examiner sees in the same numbers
A Certified Fraud Examiner does not have to start with the assumption that Marcus stole money. The first concern is whether unauthorized activity could move through the revenue cycle of the practice while the accounting still appears normal.
One discount tells you very little, while a pattern gives you somewhere specific to look. Revenue reductions concentrated under one login deserve more context, especially when the same role also participates in refunds, the daily close, or deposit preparation.
Once the pattern becomes visible, the amount is only part of the issue. You also need to understand how much of the transaction path sits with the same role.
The consequence becomes easier to see across a full year.
Consider a hypothetical medical spa generating $2.5 million in annual revenue, with $2 million coming from services. If undocumented comps and discounts equal 3% of service revenue, the business has $60,000 in revenue reductions with limited support for the decisions behind them.
The POS, bank deposits, and financial statements may all reconcile while $60,000 of reduced revenue still lacks a clear approval trail.
Accurate accounting cannot answer a management question the organization never built a process to document.
The practice did not plan this
This is where the Marcus story changes from a question about one employee to a question about how an established medical spa grew.
Marcus may have earned every bit of the trust placed in him over five years. The problem can develop without anyone deciding that one person should control so much of the financial process.
As the med spa gets busier, the employee with the most institutional knowledge picks up another financial responsibility. Client payments, courtesy adjustments, the daily close, and deposit preparation begin settling into the same role.
The arrangement becomes convenient as the medical spa grows, even though the resulting structure is not one the practice would have designed on purpose.
Five years later, convenience has become institutional dependence, leaving the business unable to reconstruct parts of its own financial activity without Marcus in the room.
Frequently-Asked Questions
What are internal controls in a medical spa?
Internal controls establish who can perform certain financial activities and where another person enters the process to provide financial oversight.
In a medical spa, those controls help the owner trace a discount or refund through the POS activity, supporting documentation, and approval attached to the transaction.
What is segregation of duties in a medical spa?
Segregation of duties separates financial responsibilities so one employee does not control the transaction from beginning to end.
For a smaller medical spa, the coordinator may process client payments while the bookkeeper or fractional CFO performs the bank reconciliation. Approval thresholds can create another point of separation when a discount or refund exceeds the employee’s authority.
Can a practice with five employees separate duties?
Yes. A small team can separate duties by deciding which financial activities belong with the front desk and which require another level of oversight.
The person accepting payments does not need to reconcile the bank account. Larger discounts can move to the owner for approval under a defined threshold.
Who should reconcile the daily deposit?
The daily deposit should be reconciled by someone other than the person who prepared it.
If your coordinator prepares the deposit after the daily close, your bookkeeper or fractional CFO can compare what reached the bank with the merchant processor records and the activity recorded in the POS.
How do I review discounts without making my staff feel accused?
Make discount oversight part of the financial process for everyone rather than something triggered by suspicion about one employee.
Use the same approval limits across the team, require reason codes when the practice needs documentation, and review discount-by-user activity on a set cadence so the process follows the financial role rather than the person occupying it.
When trust becomes the only evidence
Marcus may have spent five years making appropriate service recovery decisions, with the $14,000 representing exactly what he says it does.
Having to rely on Marcus to prove it is where the financial structure breaks down. An established health and wellness business should be able to follow a revenue reduction from the POS through the approval behind it without depending on one employee’s memory.
Trust can remain part of the relationship without becoming the internal control.
The question for the owner is no longer simply, “Do I trust Marcus?” The better question is whether the business has enough financial structure to explain what happened without him.
If Marcus were not here tomorrow, could someone else trace what he approved, what moved through the practice, and why?
Healthy Bodies of Finance helps established medical spa owners decide where financial responsibility should sit and build internal controls around how money moves through the business.
If your medical spa generates more than $1 million in annual revenue and one employee can follow a client payment from the POS through the daily close, deposit, and bank reconciliation, look at where your financial authority sits.
Schedule a consultation with Healthy Bodies of Finance
Follow Us Online
Stay connected and get more exclusive content on:
Instagram: @healthybodiesoffinance
Facebook: https://www.facebook.com/healthybodiesoffinance
LinkedIn: https://www.linkedin.com/in/lozellemathai/
TikTok: @healthybodiesoffinance
“We Just Wrapped up Q1… Now What?”
Dear Dangerously in Love with Finance, I’m the owner of a medical spa just outside of Scottsdale. We…
How to Make Financial Small Shifts within Your PMHNP’s Private Practice
Dear Dangerously in Love with Finance, We’re two psychiatric-mental health nurse practitioners (PMHN…
This article is designed to provide information only and should not be considered legal or tax advice. Because of the complexity of the law and the variables in your own personal tax and accounting situation, you can’t rely on our advice specifically related to your unique circumstances. In order to get the best tax savings and legal advice available to you, you should consult with your own accountant, attorney or advisor regarding your particular facts and circumstances. Healthy Bodies of Finance is an accounting firm that specializes in working with health and wellness providers. We provide monthly accounting & bookkeeping services and financial education. For more information on our specialized services for health and wellness providers please contact us at info@healthybodiesoffinance.com