When a credit exists on a patient account, that credit can be refunded to a card not matching the patient's name and the only information that shows on the receipt AND in IQ is the patients name. No where on either platform does it show that a discrepancy exists between the patient name and the cardholder name. And I can't restrict refund without restricting ALL of the other adjustments as well. This is such a high risk area that definitely needs to be addressed. At a minimum, offices should be able to disable, require an authorization code or restrict refund access separately from other adjustment types. This is a very high risk area that should be addresses as soon as possible.