Joshua N.
Fraudster opened an account in my client’s name; TherapyNotes took no responsibility
I’m the IT and compliance advisor for an ABA practice that was defrauded through TherapyNotes. I’m not a TherapyNotes user. This review is based on working the case directly with their support team and CEO. In 2024, someone opened a TherapyNotes account using my client’s name and practice information, with an email and phone number that had nothing to do with her. The same day, they used it to apply for a merchant account through TherapyNotes’ payment partner, CardConnect (Fiserv). That got her practice placed on the Mastercard MATCH list, and a 1099-K was issued in her name for sales she never made. Last month her real processor terminated her, and her practice could no longer take card payments. When she reported it with police, FTC and IC3 reports, TherapyNotes asked her for the login and charge details on the fraudulent account, information only the fraudster would have. They also told her the merchant account wasn’t connected to TherapyNotes. They later confirmed it was. It took weeks and a public post before anyone took ownership. Undoing the damage took more than five weeks, about 23 hours of professional time and roughly 15 hours of her own. To be fair, once the case reached MJ in Customer Success, MJ was responsive and helped get the MATCH listing corrected. But the company’s position, from its CEO, is that identity verification is Fiserv’s job, not TherapyNotes’. They declined any compensation for the time or business impact. How TherapyNotes can improve: match new accounts against the practice’s public NPI record, flag free email addresses registering practices that have their own domain, pause brand-new accounts that request payment processing on day one, notify the practice when a merchant account is opened in its name, and give fraud victims a clear path that doesn’t ask them for the fraudster’s information. Most of all, take responsibility when your platform is the way in. I would not recommend TherapyNotes to ABA or other healthcare providers.




