Skip to main content

Understanding Cloudflare Turnstile in the Online Payment Portal

Alyssa Elso avatar
Written by Alyssa Elso
Updated this week

To keep online payments secure and easy to use, our payment portal includes Cloudflare Turnstile as part of the verification process. Turnstile helps protect payments from bots, automated abuse, and fraudulent activity—without slowing patients down or requiring them to complete traditional CAPTCHA challenges.

This page explains what Cloudflare Turnstile is, where patients may see it during the payment process, and what to expect.


What Is Cloudflare Turnstile?

Cloudflare Turnstile is a modern, privacy-friendly security check that helps confirm a real person is using the payment portal. Unlike traditional CAPTCHAs that ask users to solve puzzles or select images, Turnstile works quietly in the background.

Most patients won’t notice it at all—it automatically verifies the session and allows the payment process to continue smoothly.


Where Turnstile Appears During Payment Flow

Turnstile is used at key entry points in the online payment experience to help ensure consistent protection across all payment portals.

Patients may encounter Turnstile after entering basic identity details on the Make a Payment screen, such as:

  • First Name

  • Last Name

  • Date of Birth

Once this information is entered, Turnstile automatically performs a quick verification before the patient moves forward. When verification is successful, a brief confirmation (such as “Success!”) appears, and the patient can continue with their payment.


What Patients Experience

  • Verification happens automatically in the background

  • No puzzles, images, or manual steps are required

  • A short confirmation indicates verification is complete

  • The Continue button becomes available to proceed

In most cases, this step takes only seconds and does not interrupt the payment flow.


Why This Is Important

Cloudflare Turnstile helps protect both patients and practices by:

  • Preventing automated or bot-driven payment attempts

  • Reducing fraudulent activity, including card-testing attacks

  • Ensuring only legitimate users can access the payment process

  • Keeping checkout fast and frustration-free

Turnstile is designed with privacy in mind and does not rely on invasive tracking or unnecessary data collection.


Security & Privacy

Our online payment portal uses industry-standard encryption (TLS AES-256) to protect sensitive information. Cloudflare Turnstile adds an extra layer of security without collecting additional personal data or impacting compliance requirements.


Key Things to Know

  • Patients do not need to take any action during verification

  • Verification completes automatically before payment continues

  • Successful verification allows patients to proceed normally

  • If verification does not complete, patients may be asked to refresh or try again

Cloudflare Turnstile enhances the security of the online payment portal while keeping the experience fast and easy for patients. By verifying real users quietly in the background, it helps protect payments from fraud and abuse—without adding extra steps or interruptions.

Did this answer your question?