Merchant Category Codes (MCC): UK Guide & High-Risk MCC Reference
Published - 24 September 2024
Revised - 07 September 2026


Libby James is the founder and Managing Director of Merchant Advice Service. Since 2016, she has worked directly with businesses and payment providers across merchant accounts, card processing, payment gateways and complex provider requirements.
Libby specialises in high-risk, declined and harder-to-place merchants, as well as businesses requiring specialist payment methods, integrations or international support. She writes and reviews Merchant Advice Service content, drawing on practical experience gained from real merchant enquiries and provider relationships.
A Merchant Category Code (MCC) is a four-digit code used within card payments to classify the type of business a merchant operates.
Your MCC can affect how card transactions are processed and can be relevant to:
But an MCC is not, on its own, a universal measure of whether a business is high risk.
Visa and Mastercard maintain merchant-category classifications, and Visa specifically identifies certain MCCs and transactions as High-Integrity Risk. Individual payment providers and acquiring banks can then apply their own underwriting policies and risk appetite.
This means two merchants with the same MCC can receive very different underwriting decisions depending on their transaction values, processing history, chargebacks, fulfilment model, geography, financial position and the provider they apply to.
This guide explains what an MCC is, who assigns it, which current Visa MCCs are classified as High-Integrity Risk, why some other merchant categories can require specialist underwriting, and what UK businesses should do if their MCC is affecting payment-provider acceptance.
A Merchant Category Code is a four-digit number used within the card-payment ecosystem to describe a merchant's business activity.
For example, different MCCs exist for businesses including:
Visa's April 2026 Merchant Data Standards Manual describes an MCC as a four-digit number assigned to describe the merchant's primary business, generally based on the activity generating the highest annual sales volume.
Visa says MCC information is used for purposes including:
Mastercard uses the term acceptor business codes (MCCs) and maintains a comprehensive merchant-category listing within its merchant reference documentation.
Your MCC tells the payments ecosystem what type of merchant you are.
It does not, by itself, tell an underwriter whether you are a good or bad risk.
An MCC can influence how a payment provider initially assesses a business, but the code alone does not determine whether a merchant will be treated as high risk. See High-Risk vs Low-Risk Merchant Accounts for the wider underwriting factors providers may consider.
Who Assigns a Merchant's MCC?
The merchant does not normally simply choose whichever MCC it prefers.
Visa states that:
acquirers and their agents are responsible for assigning the correct MCC to each merchant.
The general rule is to select the code that most accurately reflects the merchant's business.
For most merchants this will reflect the principal business activity.
Payment facilitators also have responsibilities when assigning merchant categories to sponsored merchants.
Visa's April 2026 standards state that a payment facilitator should evaluate the business of each sponsored merchant and assign the MCC most appropriate to that merchant's activity.
Do not choose a payment provider simply because it is willing to place you under a more convenient MCC.
The code should accurately represent the business and transaction being processed.
If you already process card payments, your current payment provider or acquiring bank should be able to confirm the MCC associated with your merchant account.
If you are applying for a new merchant account, describe your business accurately rather than trying to select the code you believe is easiest to get approved.
Be prepared to explain:
That information can help the acquirer determine the appropriate classification.
No.
An MCC and a UK Standard Industrial Classification code serve different purposes.
| Merchant Category Code (MCC) | UK SIC Code | |
|---|---|---|
| Used for | Card-payment merchant classification | Classification of economic activity |
| Typical format | 4 digits | 5 digits |
| Used by | Card schemes, acquirers and payment providers | Companies House, ONS and other organisations |
| Primary purpose | Payment and merchant classification | Business/economic activity classification |
| Directly interchangeable? | No | No |
The Office for National Statistics describes UK SIC as the system used to classify business establishments and other statistical units according to their economic activity.
UK SIC 2026 is the current ONS classification framework as of 2026.
Visa notes that its MCC descriptions have historical links to SIC and ISO classifications, but MCCs and SIC codes are not the same classification system.
Do not assume the SIC code registered for your company automatically determines your merchant-account MCC.
They classify business activity for different purposes.
Yes, it can.
The MCC gives an acquiring bank an immediate indication of the activity being processed.
That can influence whether:
However, MCC is only part of the underwriting assessment.
A provider can also consider:
This is why our High-Risk vs Low-Risk Merchant Accounts guide treats MCC as one risk indicator rather than the entire underwriting decision.
No single list determines whether every payment provider will treat every merchant as high risk.
This distinction is important.
Payment providers and acquiring banks have their own risk appetite.
An MCC accepted by one provider may:
However, this does not mean the term “high-risk MCC” has no basis within card-scheme rules.
Visa formally identifies specific merchant categories and activities as High-Integrity Risk.
That scheme classification is more precise than simply taking a long list of MCCs used by specialist acquirers and describing every one of them as universally high risk.
There are three different concepts that are often mixed together online:
They are related, but they are not interchangeable.
Visa's April 2026 Merchant Data Standards Manual identifies a number of MCCs and transaction types within its High-Integrity Risk framework.
Visa identifies the following MCCs for card-absent transactions, subject to the detailed regional and transaction-specific conditions in the Visa rules:
| MCC | Visa Category | High-Integrity Risk Context |
|---|---|---|
| 5122 | Drugs, Drug Proprietaries, Druggist Sundries | Identified within Visa's High-Integrity Risk MCC rules for card-absent transactions. |
| 5912 | Drug Stores, Pharmacies | Included subject to Visa's applicable regional conditions. In Europe and certain other regions, Visa's published footnote limits application to circumstances involving transactions other than domestic transactions. |
| 5966 | Direct Marketing – Outbound Telemarketing Merchants | Identified by Visa as High-Integrity Risk for card-absent transactions. |
| 5967 | Adult Content and Services | Identified by Visa as High-Integrity Risk for card-absent transactions. |
| 5993 | Cigar Stores and Stands | Included subject to Visa's applicable regional conditions. Visa's published regional footnote applies in Europe and certain other regions where the merchant conducts transactions other than domestic transactions. |
| 7273 | Dating and Escort Services | Identified by Visa as High-Integrity Risk for card-absent transactions. |
| 7995 | Betting and Gambling | Includes betting, lottery tickets, casino gaming chips, off-track betting, wagers at race tracks and games of chance for monetary-value prizes. |
Important: this table summarises current published Visa merchant-data standards. The detailed Visa rules, regional requirements and individual transaction circumstances determine whether specific requirements apply.
Visa's April 2026 standards also identify certain activities under other MCCs where the specific type of card-absent transaction brings the merchant within the High-Integrity Risk framework.
| MCC | Category | Visa High-Integrity Risk Circumstance |
|---|---|---|
| 4816 | Computer Network / Information Services | Sale of access to cyber lockers or remote digital file-sharing services. |
| 6211 | Financial Trading | High-Integrity Risk financial trading platforms in a card-absent environment. |
| 5968 | Subscription / Continuity | Subscription “negative option” merchants in a card-absent environment. |
| 5816 | Digital Goods – Games | Transactions involving skilled-game wagering, such as applicable fantasy-sports activity. |
| 6012 / 6051 | Financial / Quasi-Cash Activity | Certain card-absent cryptocurrency exchanges, wallet providers or on-ramp providers where Visa's required Special Condition Code applies. |
It would be inaccurate to conclude that every merchant using one of these MCCs is automatically a high-risk merchant in every circumstance.
For example, Visa's current rules relating to MCC 4816 refer specifically to particular file-sharing/cyber-locker activity.
Likewise, MCC 5816 covers digital gaming activity more broadly, while Visa's High-Integrity Risk provision relates specifically to transactions involving skilled-game wagering.
The transaction matters as well as the code.
This is why simply looking up an MCC online cannot replace proper merchant underwriting.
No.
This is a good example of why generic “high-risk MCC lists” can become misleading.
Travel businesses can receive specialist underwriting because of factors such as:
Relevant MCCs can include:
| Example MCC | Merchant Category |
|---|---|
| 4511 | Airlines / Air Carriers not otherwise classified |
| 4722 | Travel Agencies and Tour Operators |
| 7011 | Lodging – Hotels, Motels, Resorts and Central Reservation Services not otherwise classified |
These are legitimate mainstream business categories.
A provider may still consider the merchant's future financial exposure when deciding whether and on what terms to accept the business.
That is a different concept from Visa formally designating a particular MCC as High-Integrity Risk.
A business can require specialist underwriting without its MCC appearing on a card-scheme High-Integrity Risk list.
For merchants, the practical question is:
“Which providers understand the risk created by my business model?”
rather than:
“Is my four-digit number on an internet high-risk list?”
Subscription payments provide another useful example.
Not every business charging customers on a recurring basis should use MCC 5968.
Visa's April 2026 standards describe MCC 5968 as relating to direct-marketing continuity/subscription merchants.
Visa also explains that merchants that are not participating in direct-marketing activity but happen to offer recurring purchases should generally use the MCC that best describes their actual business.
For example, a software company charging a monthly subscription is not automatically converted into MCC 5968 simply because it uses recurring billing.
The nature of the business and the way it sells matter.
However, particular negative-option subscription activity can fall within Visa's High-Integrity Risk framework.
Recurring payment is a payment method. MCC describes merchant activity.
Do not assume every subscription company belongs under the same merchant code.
Visa's current standards identify MCC 7995 for betting and gambling activity including games of chance for prizes of monetary value.
Visa also has specific rules for how gambling transactions must be classified.
For card-present activity, gambling transactions must use the gambling MCC while other goods or services can require their appropriate MCC.
For online gambling, Visa states that MCC 7995 must be used for the relevant online gambling transactions according to its classification rules.
Gambling businesses can also be subject to:
The MCC is therefore one part of a much wider acquiring assessment.
Cryptocurrency transactions can require specific MCC and transaction treatment depending on the activity.
Visa's April 2026 Merchant Data Standards Manual refers to MCCs including:
in connection with different types of non-fiat-currency activity where applicable.
Visa also requires additional transaction indicators in certain cryptocurrency scenarios.
This is another reason it is unsafe to conclude:
“crypto = one MCC”.
The correct classification can depend on exactly what the merchant or payment intermediary is doing.
Yes.
This is one of the most useful clarifications in Visa's current merchant-data rules.
Visa has both:
Visa says that where a merchant has more than one business activity, the general approach can be to:
There are also circumstances where separate MCCs are specifically required.
Visa's April 2026 standards give several examples.
These include circumstances involving:
For example, Visa says a merchant with several lines of business at one location must separate a High-Integrity Risk activity from other non-High-Integrity Risk activities using the appropriate MCCs.
Potentially, depending on how the businesses and websites are structured.
Visa treats ecommerce websites as merchant locations for MCC purposes.
Its April 2026 standards explain that where a merchant operates multiple ecommerce websites offering distinct goods or services, each website may need the MCC that most accurately reflects the activity conducted on that site.
Visa also provides separate rules for businesses operating different activities from the same physical premises.
This can become particularly relevant for:
If your business has evolved significantly since your merchant account was opened, it is worth checking whether the payment-provider setup still accurately represents what the business now does.
Visa currently includes MCC 5262 – Marketplaces.
However, not every ecommerce business selling third-party products automatically qualifies as a marketplace for card-scheme purposes.
Visa's Merchant Data Standards state that qualifying marketplaces bring cardholders and retailers selling different goods or services together through a single ecommerce website or mobile application under a single marketplace brand.
Visa also states that a marketplace with only a single line of goods or services should use the MCC that most accurately describes that line of business.
Visa registration and qualification requirements can also apply to marketplaces.
Payment architecture matters here too.
If your business receives money from customers before passing it to another business or seller, there may also be wider payment-services and regulatory considerations.
See our Integrated Payments Solutions UK guide for more on how payments interact with business software and payment flows.
Yes.
An incorrect merchant category can create problems because the code is used throughout card-payment infrastructure.
Potential issues can include:
Visa states that acquirers and their agents must assign the correct MCC and that Visa can require corrections to MCC assignments and use.
Visa also recommends periodically reviewing assigned MCCs for accuracy.
A lower-risk-looking MCC is not a workaround for a difficult merchant application.
The solution to a complex merchant profile is appropriate underwriting and provider fit, not inaccurate classification.
It can.
Merchant category can form part of the rules used within card-payment pricing and interchange.
But MCC is only one part of what a merchant ultimately pays.
Card-processing costs can also depend on:
For a broader comparison of these costs, see our UK Merchant Fees Benchmark 2026.
Not automatically, but specialist underwriting can affect commercial terms.
A provider considering a merchant with greater exposure may potentially apply different:
The appropriate comparison therefore goes beyond the headline transaction rate.
Established merchants should compare:
| Area | What to Compare |
|---|---|
| Acceptance | Does the provider currently support the MCC and actual business model? |
| Acquiring | Which acquiring bank or acquiring structure supports the merchant? |
| Pricing | Blended or IC++, gateway fees, scheme fees and other charges. |
| Reserve | Whether funds are retained, percentage held and release terms. |
| Settlement | When processed funds reach the merchant. |
| Integration | Gateway, API, ecommerce platform, subscriptions, EPOS or other software requirements. |
| International | Countries, currencies and cross-border acquiring. |
| Risk Tools | Fraud, dispute and chargeback-management capability. |
| Contract | Term, notice, termination rights and other commercial conditions. |
It can contribute to a decline where the provider does not support that category or the underlying business activity falls outside its risk appetite.
But a decline can also result from factors unrelated to MCC.
These include:
Our Merchant Account Declined guide explains how these factors interact and what businesses should consider before applying elsewhere.
The MerchantRoute Merchant Onboarding Study 2026, published by Merchant Advice Service, asked 25 payments-industry participants about application and onboarding.
41% of respondents identified poor provider or risk fit as a contributor to merchant-account declines.
This is particularly relevant to MCC.
If the business category falls outside an acquirer's appetite, submitting a well-completed application does not necessarily solve the underlying provider-fit problem.
The research also found:
MCC should form part of provider selection before an application is submitted.
It is much more useful to identify potentially suitable acquiring routes first than to discover after applying that the provider does not support the merchant category.
MCC can be relevant to scheme requirements, but a merchant's MCC alone does not determine its fraud or dispute performance.
Visa operates monitoring frameworks including the Visa Acquirer Monitoring Program (VAMP), while scheme rules also contain additional requirements for particular merchant and transaction types.
Merchants should distinguish between:
These can interact, but they are different concepts.
For current information about Visa's monitoring changes, read our Visa VAMP Rules 2026 guide.
No.
An MCC and Mastercard MATCH Pro serve different purposes.
Your MCC describes merchant activity.
MATCH Pro is part of Mastercard's merchant-risk framework and can contain information relevant to merchant onboarding where merchants have previously been terminated for defined reasons or other relevant risk signals exist.
Having an MCC associated with specialist underwriting does not automatically mean a merchant is listed on MATCH Pro.
Likewise, being declined by one payment provider does not automatically mean the business has been added to MATCH Pro.
This is increasingly common.
Modern businesses can combine:
Do not force a complicated business model into the first MCC that looks broadly relevant.
Instead, map:
The payment provider or acquirer can then determine the appropriate merchant classification and whether one or several merchant accounts/MCCs are required.
For provider matching, Merchant Advice Service would not stop after identifying the merchant's MCC.
We would consider six layers.
What does the business sell and which MCC or MCCs appropriately describe the activity?
How does the company make money?
For example:
What does the merchant's real processing profile look like?
Which acquiring providers currently support that combination of MCC and business model?
Can the provider support the merchant's:
Only then compare:
MCC → Business Model → Risk → Provider Appetite → Technical Fit → Commercial Fit.
MCC is the start of merchant matching, not the end of it.
Merchant Advice Service helps businesses compare payment providers according to their actual requirements rather than simply ranking providers by headline transaction rate.
The Payments Directory® can use criteria including:
The payment provider or acquiring bank still undertakes its own underwriting and makes the final decision regarding acceptance, pricing, settlement and any reserve.
Merchant Advice Service cannot guarantee merchant-account approval.
The purpose of using MCC at the provider-selection stage is to reduce obvious mismatches between the merchant and the providers being considered.
Read more about How Merchant Advice Service Works.
Primary Visa source for Merchant Category Code definitions, MCC assignment requirements, multiple-MCC rules, marketplace classification and Visa's current High-Integrity Risk MCC information.
Visa — Merchant Data Standards Manual, April 2026
Visa's current public rules include requirements relating to High-Integrity Risk merchants, acquiring oversight and merchant monitoring.
Visa Core Rules and Visa Product and Service Rules
Mastercard's 2026 merchant reference material provides its current acceptor business-code / MCC framework and merchant-category information.
Mastercard — Quick Reference Booklet: Merchant Edition
The ONS maintains the UK's Standard Industrial Classification framework used to classify businesses by economic activity. SIC should not be confused with card-payment Merchant Category Codes.
Office for National Statistics — UK SIC 2026
Companies House uses SIC codes to describe company economic activity. These are separate from the MCC assigned within card-payment processing.
Companies House — SIC Code List
Merchant Advice Service is an independent payments information, comparison and provider-matching service.
MAS may receive commission or a referral fee from some payment providers where a business chooses to proceed following an introduction. This does not determine the factual MCC, card-scheme or merchant-underwriting information contained within this guide.
Merchant Advice Service is not Visa, Mastercard, an acquiring bank or a payment processor and does not assign Merchant Category Codes or make merchant-account underwriting decisions.
Merchant Category Code definitions and card-scheme requirements can change. References to Visa and Mastercard are based on their current publicly available documentation at the date this guide was reviewed.
A merchant being associated with a particular MCC does not mean that every payment provider will classify, accept, decline or price that merchant in the same way.
Where this guide refers to Visa High-Integrity Risk MCCs, the applicable Visa rules, regional conditions and transaction-specific requirements should be consulted rather than relying solely on the summary table above.
Payment-provider acceptance criteria and acquiring-bank risk appetite can change independently of card-scheme MCC classifications.
Card-scheme and MCC information last checked: 1 September 2026.
This guide provides general payments information and should not be treated as legal, regulatory, financial or formal compliance advice.
Written or reviewed by Libby James, founder of Merchant Advice Service and specialist in merchant payments and complex provider requirements.