High-Risk Merchant Processing Explained

High-risk merchant processing is a label your acquirer puts on your business. Here is what triggers it and what to expect.

Oct 11, 2026

High-risk merchant processing is not a sales pitch or a product tier. Your acquirer puts this label on your business. It follows Visa and Mastercard rules when it does. It comes from what you sell, how you sell it, or how your account has done. Once you carry that label, Visa's standards say approval can come with conditions such as reserves or holds. The watching does not stop after approval. This page explains what triggers the label, what the networks require before you can be processed, and what to expect at each step.

What high-risk merchant processing means

A high-risk merchant is one an acquirer must sign up, screen or watch more closely than a plain retail shop. The label comes from Visa and Mastercard rules. It also comes from what federal regulators tell the banks that hold the money. Your acquirer, sometimes called the processor, sits between you and a sponsoring bank. When the networks or the bank see more risk in your business, that risk lands on the acquirer. The acquirer passes it back to you in the form of paperwork and controls.

Why businesses get labeled high risk

Several things push a business into this pile:

Industry. Some product types carry built-in risk. Mastercard's rules name several types that must be signed up with Mastercard first. They include drug and tobacco sales where the buyer is not present. Adult content, gambling and crypto sellers are on the list too.
Chargebacks and disputes. A past full of chargebacks or fraud tells an acquirer you may cost it money. Visa's standards say a merchant's history of terminations, excessive chargebacks, fraud or illegal activity can affect the underwriting decision.
Card-absent sales. Selling online or by phone means you never see the card or the customer. FinCEN's advisory says payment processors serving telemarketing and Internet merchants may present a higher risk profile to a financial institution than other businesses.
Licensing gaps. Some products need a license from the right office. Mastercard's rules say an acquirer must obtain and retain a copy of each gambling license from the proper governmental licensing authority for the merchant.

If you sell by phone, read about billing authorization too.

What card networks require before processing

Mastercard's rules say an acquirer must register a merchant with Mastercard before acquiring non-face-to-face pharmaceutical or tobacco transactions. The same goes for adult content and gambling sales. Mastercard's manual says an Acquirer must register a Cryptocurrency Merchant with Mastercard before processing its transactions.

Mastercard requires Customers to register certain merchant types using the Specialty Merchant Registration application within My Company Performance, available through Mastercard Connect. Mastercard's manual says it assesses the Acquirer an annual USD 500 registration fee for each Merchant and Sponsored Merchant under the listed categories.

Mastercard's rules say an acquirer must identify non-face-to-face pharmaceutical retail transactions using MCC 5912 and TCC T. Mastercard's rules say an acquirer must identify non-face-to-face tobacco product transactions using MCC 5993 and TCC T.

Visa has its own layer. Visa's guide says acquirers must get a High-Brand Risk Acquirer Registration from Visa before contracting with a high-brand risk merchant. Visa's program says the registration requirement does not apply to Merchants assigned MCC 5122 or 5912 if accredited by NABP or LegitScript programs.

What regulators expect from banks and processors

The banks behind your account answer to federal regulators. FDIC guidance says payment processors pose greater money laundering and fraud risk if they cannot effectively verify their merchant clients' identities and business practices. FinCEN's advisory says financial institutions should determine during due diligence whether payment processors have obtained all necessary state licenses, registrations, and approvals.

That is why your acquirer asks so much of you. It is proving to its bank that it knows who you are and what you do. The bank's nerves roll downhill, which is why banks watch payment processors so closely.

The application and underwriting process

Visa's standards say acquirers must establish a risk-based onboarding policy that segments merchants into risk categories. Expect these steps:

Proof of who you are and what your business is. FDIC guidance links weak checks on who a merchant is and how it works to money laundering and fraud risk.
License review. Every license your product type requires.
Terminated Merchant File check. Visa's standards say acquirers must check the Terminated Merchant File before finalizing a contract with a prospective merchant. A past termination will surface here.
MCC assignment. Visa's standards say acquirers assign the MCC that most accurately describes a merchant outlet's business. Your business must be coded for what it actually is.

Visa's standards say an application decision can be approval, decline or conditional approval with exposure mitigation strategies such as reserves or holds. A yes with terms lets you take cards, with reserves or holds on top.

Reserves and settlement controls

Visa's standards describe these controls:

Reserves. The acquirer holds back a portion of your settlements. Visa's guide says reserve funds belong to the sponsored merchant and must be held and controlled by the acquirer.
Settlement holds. Visa's standards say acquirers may retain settlements to offset disputes or financial losses directly associated with the merchant.
Contract terms. Visa's standards say merchant agreements should detail which actions the acquirer can take, such as changing reserve requirements or adding holds on funds. Read that section before you sign.

Visa's guide says merchants should be underwritten on their merits, and reserves are not a reason to onboard unreasonably high-risk merchants. A reserve is a control, not a loophole. If a business cannot qualify on its own record, a bigger reserve will not fix that.

Ongoing monitoring after approval

Approval is not the end of the review. Visa's standards say acquirers must adopt a risk management-focused monitoring strategy for their merchants from onboarding until partnership termination. Visa's standards say acquirers must review merchants with high dispute rates for deceptive or misleading sales and marketing practices. Visa's standards say acquirers must carry out ongoing AML due diligence including sanction, politically exposed persons and derogatory media screening.

Mastercard designed the Excessive Chargeback Program so each Acquirer closely monitors its chargeback performance at the Merchant level. Your dispute ratio is watched by name, not in aggregate.

Your merchant agreement may let the acquirer change your reserve. It is the acquirer proving to its bank and the networks that it is watching.

How to prepare before applying

You can make your file easier to review:

Gather licenses first. Have every required license current and in hand before you apply.
Clean up your dispute history. Fix refund rules and delivery promises that lead to chargebacks.
Write down your business practices. Be ready to say how you check buyers and ship orders.
Be honest about what you sell. Your MCC must match your real business. Do not let anyone talk you into coding it as something else.
Plan cash flow for a possible reserve. Ask the acquirer what triggers a change, and get it in writing.

Is your product legal in some states and not others? Ask a lawyer and your acquirer before you apply. Do not guess.

You can handle high-risk processing when you know the rules going in. Prepare the file, keep disputes low, and read your merchant agreement.