What makes one business a high-risk merchant while another is considered low risk?
The answer is more complicated than simply looking at the industry.
In card payments, “high risk” and “low risk” are commonly used by acquiring banks, PSPs and payment processors to describe the level of financial, operational, fraud, dispute or compliance exposure associated with a merchant.
But there is no single universal high-risk merchant list that every payment provider follows in exactly the same way.
A business that falls outside the risk appetite of one processor may be perfectly acceptable to another provider with the right acquiring relationships, underwriting expertise and sector experience.
Equally, a business that has historically been straightforward to process can become more complex as its turnover, markets, products, customer journey or payment model changes.
The important question is therefore not simply “Am I high risk?” It is “What elements of my business create payment risk, and which providers have appetite for them?”
Whether a business is considered low or high risk depends on far more than its industry alone. Our main High-Risk Merchant Accounts guide brings together the wider issues around provider appetite, underwriting, reserves, applications, declines and specialist payment processing.
This guide explains how high-risk and lower-risk merchant accounts differ, how providers assess merchants and why Merchant Category Codes, chargebacks, fulfilment, subscriptions, geography and processing history all matter.
Key Takeaways
- “High risk” is a common payments-industry underwriting term rather than one universal merchant classification.
- Your industry and Merchant Category Code matter, but they do not tell the whole story.
- Providers also assess transaction value, fraud, disputes, delivery times, subscriptions, geography, financial strength and processing history.
- A merchant can fall outside one provider's risk appetite while being acceptable to another.
- Being classified as high risk does not mean a business is illegal, badly run or fraudulent.
- High-risk merchants may face enhanced underwriting, reserves, settlement controls or other commercial conditions.
- An established processing history can materially strengthen an application.
- Merchant risk can change as a business grows or changes its payment model.
- A declined or terminated account does not automatically mean that the business has been added to Mastercard MATCH Pro or Visa's terminated-merchant database.
- Provider fit should be established before submitting applications wherever possible.
Find Your New Processor
What Is a High-Risk Merchant Account?
A high-risk merchant account is a payment-processing arrangement for a business that an acquiring bank or payment provider believes presents greater-than-standard exposure.
That exposure could relate to:
- fraud;
- chargebacks and disputes;
- future financial liabilities;
- long delivery periods;
- subscription or recurring payments;
- high transaction values;
- regulatory requirements;
- international customers;
- cross-border acquiring;
- the products or services being sold;
- previous processing history;
- financial strength; or
- the provider's own risk appetite.
Some industries naturally receive enhanced scrutiny, but industry alone is not the complete underwriting decision.
High Risk Does Not Mean Bad Business
This distinction matters.
A well-run, profitable and established company can still be classified as higher risk for card processing.
For example, a travel company might have excellent financials and customer service but take substantial payments months before the customer travels.
The acquiring bank therefore carries potential future-delivery exposure if the merchant fails before those services are provided.
Likewise, a subscription business may be financially strong but produce more customer disputes because payments continue over a longer relationship.
Risk classification is therefore about the exposure attached to processing the transactions rather than a judgement on the quality of the business.
What Is a Low-Risk Merchant Account?
“Low risk” generally describes merchants whose payment activity sits comfortably within a provider's standard underwriting appetite.
These businesses may typically have:
- straightforward products or services;
- short fulfilment periods;
- predictable processing volumes;
- lower dispute and fraud exposure;
- clear refund policies;
- limited future-delivery liability;
- stable financials;
- established trading history; and
- a payment model that the provider routinely supports.
However, “low risk” should not be interpreted as no risk.
All acquiring relationships involve underwriting and ongoing monitoring.
Visa, for example, requires acquirers to monitor factors such as sales volumes, transaction values, disputes, changes in card-present and card-not-present activity, cross-border activity and unusual authorisation patterns. See Visa's Acceptance Risk Standards.
High-Risk vs Low-Risk Merchant Accounts: The Main Differences
| Area | Lower-Risk Merchant | Higher-Risk Merchant |
|---|
| Underwriting |
Often relatively standardised |
May require specialist or enhanced underwriting |
| Business model |
Usually familiar to the provider |
May involve regulated, complex or specialist activity |
| Processing history |
Stable fraud and dispute performance |
May require closer analysis of historic performance |
| Fulfilment |
Goods/services supplied relatively quickly |
Can include significant future-delivery exposure |
| Transactions |
Predictable transaction profile |
May involve high-ticket, recurring or unusual transaction patterns |
| Geography |
Often straightforward domestic processing |
May involve multiple markets, currencies or cross-border acquiring |
| Commercial terms |
Usually broader provider choice |
Pricing, reserves or settlement may reflect additional risk |
| Provider choice |
Many mainstream providers may have appetite |
Provider/acquirer appetite becomes particularly important |
These are general characteristics rather than fixed rules. Each provider sets its own underwriting and commercial criteria.
What Actually Makes a Merchant High Risk?
At Merchant Advice Service, we find it more useful to break merchant risk into individual components rather than simply attaching a “high-risk” label to the entire company.
1. Industry and Business Model
Some products, services and commercial models receive greater scrutiny because they historically create higher levels of fraud, disputes, regulatory exposure or financial liability.
Examples can include:
- travel and future delivery;
- online gambling;
- certain financial services;
- subscriptions and continuity models;
- digital services;
- supplements and nutraceuticals;
- certain marketplaces;
- high-ticket ecommerce; and
- other sectors subject to specialist card-scheme or acquiring requirements.
The exact position varies by provider, jurisdiction and business model.
2. Your Merchant Category Code
A Merchant Category Code (MCC) is a four-digit code used to identify the principal type of goods or services supplied by a merchant.
Visa describes the MCC as a code identifying a merchant's type of business, product or service. See Visa's Merchant Data Standards Manual.
MCCs can be important in underwriting because certain business types are subject to different scheme rules, registration requirements or provider policies.
But an MCC should not be treated as a complete risk score.
Two merchants using the same MCC can have very different:
- transaction values;
- chargeback rates;
- delivery periods;
- customer locations;
- financial strength;
- processing history; and
- commercial models.
Your Merchant Category Code can influence underwriting and provider eligibility, but it does not determine merchant risk on its own. See our UK MCC and High-Risk Merchant Category Code guide for current Visa classifications, multiple-MCC rules and an explanation of how MCC interacts with payment-provider risk appetite.MAS View
Your MCC tells the provider what type of business you operate. It does not, by itself, tell the provider whether your individual business is a good acquiring risk.
3. Chargebacks and Disputes
Historic and current dispute performance is one of the most important parts of underwriting.
Providers may review:
- number of disputes;
- dispute rate;
- fraud reports;
- refund behaviour;
- reason codes;
- transaction volumes; and
- whether performance is improving or deteriorating.
A merchant with a clear understanding of why disputes happen and a credible remediation plan is in a much stronger position than one that cannot explain its numbers.
For more detail, see our guide to reducing chargebacks.
4. Future-Delivery Exposure
Future delivery is frequently misunderstood.
If a merchant collects £2 million today for services that will not be delivered for another six months, the acquiring bank may potentially remain exposed if the business fails and customers seek refunds or raise disputes.
This is particularly relevant in sectors such as:
- travel;
- events;
- ticketing;
- pre-orders;
- bespoke goods;
- memberships; and
- other advance-payment models.
An otherwise financially healthy business can therefore receive additional underwriting because of the timing between payment and fulfilment. Future delivery can be significant even where a merchant has strong financials and low historic chargebacks. Our Future-Delivery Risk in Payments guide explains how to measure outstanding customer exposure, why fulfilment periods matter and how advance payments can affect underwriting, reserves and settlement.
5. Average Transaction Value
Higher transaction values can increase the financial impact of individual disputes and refunds.
An acquirer may therefore look differently at a merchant processing:
10,000 transactions at £20
compared with:
100 transactions at £2,000.
The turnover may be similar, but the risk characteristics are not necessarily the same.
6. Subscription and Recurring Payments
Recurring payments are not automatically high risk.
However, subscription businesses can create additional underwriting considerations around:
- free trials;
- renewal disclosure;
- cancellation;
- billing descriptors;
- customer communication;
- card-on-file transactions;
- refunds; and
- long-term customer disputes.
See our Subscription Payment Processing guide.
7. International and Cross-Border Processing
Selling internationally does not automatically make a merchant high risk.
But the provider may consider:
- where the business is incorporated;
- where customers are located;
- where products or services are delivered;
- transaction currencies;
- cross-border fraud;
- local regulation;
- sanctions exposure;
- local acquiring requirements; and
- how the money flows between entities.
For larger international businesses, see our guidance on UK businesses expanding into Europe and local acquiring.
8. Processing History
An established merchant account history can be extremely valuable during underwriting.
A provider may look at previous processing statements to understand:
- monthly volume;
- average transaction value;
- refunds;
- chargebacks;
- fraud;
- seasonality;
- currencies;
- settlement; and
- how the business has grown.
This is one reason an established £10 million business with several years of stable processing can sometimes be easier to assess than a newly launched business with an identical business model.
For more on underwriting evidence, see our High-Risk Merchant Account Applications guide.
9. Financial Strength
Providers may also assess the merchant's ability to meet future refunds, disputes and other financial obligations.
Depending on the business, this might include:
- bank statements;
- management accounts;
- filed accounts;
- cash position;
- trading history;
- existing liabilities;
- seasonality; and
- growth projections.
This is particularly relevant where the acquirer has significant future exposure.
10. Provider Risk Appetite
This is the factor merchants often overlook.
Payment providers do not all underwrite the same businesses.
One provider may specialise in travel but avoid gaming.
Another may support regulated financial services but have little appetite for long future-delivery periods.
Another may technically support the merchant's industry but impose commercial conditions that make the relationship unsuitable.
That is why a decline from one processor should not automatically be interpreted as:
“My business cannot get a merchant account.”
It may simply mean:
“This particular provider does not have appetite for this particular risk profile.”
Can a Business Be High Risk to One Processor and Not Another?
Yes, in practical underwriting terms.
The underlying characteristics of the merchant do not change, but different providers can have different:
- sector appetite;
- acquiring relationships;
- risk policies;
- geographical coverage;
- fraud controls;
- commercial limits;
- technical capabilities; and
- portfolio strategies.
A merchant should therefore distinguish between:
the risk inherent in the business
and:
the provider's willingness and ability to underwrite that risk.
Can an Established Business Become High Risk?
Yes.
A merchant's payment profile can change over time.
Examples include:
- rapid growth in processing volume;
- a large increase in average transaction value;
- expansion into new countries;
- launching subscriptions;
- changing from immediate to future delivery;
- adding regulated products;
- an increase in chargebacks;
- a spike in fraud;
- acquiring another business;
- changing the customer journey; or
- a change in the provider's own risk appetite.
This is why merchants should discuss material business changes with their provider rather than assuming an existing approval automatically covers the new activity.
Does High Risk Always Mean Higher Card Processing Fees?
Higher underwriting exposure can influence pricing, but there is no universal “high-risk merchant rate”.
Commercial terms may depend on:
- processing volume;
- card mix;
- transaction value;
- chargebacks;
- fraud;
- geography;
- currencies;
- provider;
- acquirer;
- settlement;
- reserve requirements;
- gateway requirements; and
- the merchant's negotiating position.
An established high-volume merchant with strong performance should therefore avoid assuming that a generic “high-risk rate” is automatically competitive.
See our guide to auditing payment fees for high-turnover businesses.
What Is a Rolling Reserve?
A rolling reserve is one risk-management mechanism an acquirer may use where it wants funds available against future liabilities.
The provider may retain an agreed percentage of processed funds for a defined period before releasing them.
Whether a reserve is required, how large it is and how long funds are held depends on the individual underwriting decision.
Not every high-risk merchant has a rolling reserve, and reserves are not exclusive to merchants labelled high risk.
Does High Risk Mean Slower Merchant Account Approval?
Not necessarily, although more complex underwriting can require additional evidence.
Speed depends heavily on:
- provider fit;
- quality of the application;
- availability of documents;
- business complexity;
- regulatory checks;
- processing history; and
- whether the underwriter needs further explanation.
Applying to an unsuitable provider can often create more delay than the risk category itself.
Our 2026 merchant-onboarding research found that provider and risk fit was one of the factors industry respondents associated with application declines.
See our UK Merchant Onboarding Study 2026.
What Happens If a High-Risk Merchant Account Is Declined?
A declined application does not necessarily mean there is anything fundamentally wrong with the merchant.
Common reasons can include:
- the provider does not support the sector;
- the business falls outside geographical appetite;
- future-delivery exposure is too high;
- processing volumes fall outside provider limits;
- chargeback or fraud performance is unacceptable;
- financial information does not support the requested exposure;
- the application does not clearly explain the business model;
- the provider cannot support the required integration; or
- the application was simply sent to the wrong acquiring route.
Before making another application, establish why the first one failed.
Does a Terminated Merchant Account Mean You Are on MATCH?
No.
This is an important correction to the previous version of this guide.
A merchant account can be terminated for many reasons without automatically resulting in a Mastercard MATCH Pro listing.
Mastercard operates MATCH Pro, a system used by acquiring institutions to share information about merchants terminated under defined circumstances and reason codes.
Current Mastercard rules include specific MATCH Pro listing reasons covering matters such as excessive chargebacks, excessive fraud, transaction laundering, insolvency and certain violations of Mastercard standards.
See Mastercard's current Security Rules and Procedures.
Visa separately operates the Visa Merchant Screening Service (VMSS), which includes a Terminated Listing Database used by acquirers as part of merchant due diligence.
Read about Visa Merchant Screening Service.
Neither should simply be described as a generic “blacklist”.
A listing can materially affect future acquiring decisions, but the circumstances and provider response depend on the specific record and underwriting assessment.
For more detail, see our guide to terminated merchant facilities.
Can You Change From High Risk to Low Risk?
There is no simple process for “converting” a merchant account from one universal category to another because risk classification is provider-specific.
However, a merchant's underwriting profile can improve.
Examples might include:
- building a longer clean processing history;
- reducing chargebacks;
- reducing fraud;
- strengthening financials;
- reducing future-delivery exposure;
- improving refund processes;
- changing the products or services supplied;
- simplifying the payment flow; or
- moving to a provider with a more appropriate risk model.
Likewise, a previously straightforward merchant can move in the opposite direction if its business model changes.
High Risk Does Not Automatically Mean Offshore
The previous version of this guide also placed too much emphasis on offshore acquiring.
A higher-risk UK or European merchant does not automatically need an offshore merchant account.
The appropriate acquiring structure depends on:
- where the company is established;
- where customers are located;
- licensing and regulatory requirements;
- the merchant's business model;
- provider appetite;
- settlement requirements;
- currencies;
- scheme rules; and
- technical requirements.
For established international merchants, the objective should be to build a legitimate acquiring structure that supports the business rather than moving jurisdictions simply to avoid underwriting.
What Should an Established High-Risk Merchant Compare?
For an established business, approval is only one part of the decision.
Compare:
- acquiring appetite;
- processing rates;
- reserve requirements;
- settlement;
- gateway technology;
- authorisation performance;
- fraud tools;
- 3D Secure;
- recurring-payment support;
- token portability;
- international acquiring;
- currencies;
- chargeback support;
- integration requirements;
- contract terms; and
- how the provider will support future growth.
For the technology side of the decision, see our Payment Gateways for High-Risk Merchants guide.
Find Your New Processor
The MAS Merchant Risk Fit Test
Instead of asking only whether a merchant is “high risk”, we would look at seven separate areas.
1. Business Risk
What exactly is being sold, how is it regulated and what liabilities could arise?
2. Transaction Risk
What are the processing volume, average ticket, payment channels, fraud profile and dispute performance?
3. Fulfilment Risk
How long is the period between the customer paying and receiving the product or service?
4. Financial Risk
Does the merchant have sufficient financial strength to support refunds, disputes and future liabilities?
5. Geographic Risk
Where are the business, customers, transactions and acquiring relationships located?
6. Technical Risk
What gateway, ecommerce, API, subscription, marketplace or other payment architecture is required?
7. Provider Fit
Which providers and acquirers actually have appetite for the complete risk profile?
MAS View
“High risk” should be the beginning of the underwriting conversation, not the end of it.
The useful work is understanding which parts of the merchant create risk and finding an acquiring structure that can support them.
How Merchant Advice Service Approaches High-Risk Provider Selection
Merchant Advice Service works with established merchants whose payment requirements do not always fit standard provider models.
When assessing provider fit, we may consider:
- industry;
- MCC;
- processing history;
- monthly card turnover;
- average transaction value;
- fraud and disputes;
- future delivery;
- subscriptions;
- customer geography;
- currencies;
- gateway and API requirements;
- existing payment provider;
- reason for switching; and
- future growth plans.
A merchant’s risk classification does not determine which providers will accept the business. Individual acquirers have different sector, MCC and underwriting policies. Our Payment Provider Risk Appetite guide explains why two providers can assess the same merchant differently and what businesses should check before applying.We do not make underwriting decisions and cannot guarantee acceptance.
Our role is to help establish which payment-provider routes are appropriate before merchants submit applications.
Read more about How Merchant Advice Service Works.
Sources & Further Reading
Visa — Acceptance Risk Standards
Visa's published standards covering acquirer merchant due diligence and ongoing transaction-risk monitoring.
Visa Acceptance Risk Standards
Visa — Merchant Data Standards Manual
Visa's published reference for Merchant Category Codes and merchant-data standards.
Visa Merchant Data Standards Manual
Mastercard — Security Rules and Procedures
Mastercard's current merchant rules, including MATCH Pro listing reason codes.
Mastercard Security Rules and Procedures
Visa — Merchant Screening Service
Visa's merchant-screening service used by acquirers as part of merchant due diligence, including its Terminated Listing Database.
Visa Merchant Screening Service
Related Merchant Advice Service Guidance
Editorial and Commercial Disclosure
Merchant Advice Service is an independent payments information, comparison and provider-matching service.
MAS may receive commission or a referral fee from some payment providers where a business chooses to proceed following an introduction. This does not determine the factual information or provider-selection principles included in this guide.
There is no single universal “high-risk” or “low-risk” merchant classification used identically by every acquiring bank and payment provider. Individual underwriting criteria, scheme requirements and provider risk appetite vary.
References to high-risk and lower-risk merchants in this article describe common payment-industry underwriting concepts and should not be treated as a formal classification by Visa, Mastercard or any particular acquiring bank.
Merchant Advice Service does not make underwriting decisions, assign MCCs, determine MATCH Pro or Visa Merchant Screening Service status, or guarantee merchant-account acceptance.
Provider appetite, commercial terms, scheme rules and underwriting criteria can change.
Payment-industry information last checked: 26 August 2026
This guide provides general payments information and should not be treated as legal, regulatory or compliance advice.
