Merchant Account Underwriting: What Payment Providers Check Before Approval
Published - 01 September 2026
Revised - 01 September 2026


Libby James is the founder and Managing Director of Merchant Advice Service. Since 2016, she has worked directly with businesses and payment providers across merchant accounts, card processing, payment gateways and complex provider requirements.
Libby specialises in high-risk, declined and harder-to-place merchants, as well as businesses requiring specialist payment methods, integrations or international support. She writes and reviews Merchant Advice Service content, drawing on practical experience gained from real merchant enquiries and provider relationships.
Merchant account underwriting is the process a payment provider or acquiring bank uses to understand a business before deciding whether it is prepared to process payments for it, and on what terms.
For a straightforward UK business, underwriting may be relatively simple.
For a larger or more complex company, it can involve much more than confirming a company number and checking a director's identity.
An underwriter may need to understand:
For complex businesses, the central underwriting question is often not simply:
“Is this company legitimate?”
It is:
“Who is the merchant, who owns and controls it, what exactly is being processed, where does the money go, and what financial exposure does the acquiring relationship create?”
This guide explains what payment providers check during merchant underwriting, how company and group ownership can affect KYB, what UBOs and PSCs mean, which entity should apply for the merchant account, and what established businesses can prepare before switching or adding an acquiring provider.
Merchant-account underwriting is the assessment undertaken before an acquiring bank or payment provider decides whether to establish a processing relationship with a business.
The exact process differs by provider and merchant.
A straightforward UK retailer with immediate fulfilment, low transaction values and a simple ownership structure may require substantially less investigation than a multinational group processing millions of pounds through several websites and legal entities.
Underwriting can consider several different types of risk:
Visa's current Acceptance Risk Standards require acquirers to maintain risk-based onboarding processes and carry out KYC/KYB checks in accordance with applicable law.
Underwriting should not be thought of simply as an identity check.
For larger merchants, it is closer to building a complete picture of:
who the business is + who controls it + what it sells + how money moves + what payment exposure exists.
The terms are often used together, but they describe different parts of the process.
| Process | What It Broadly Establishes |
|---|---|
| KYB – Know Your Business | What the legal entity is, where it is registered, what it does and whether the business information can be verified. |
| KYC – Know Your Customer | The identity of relevant individuals connected with the business, such as directors, principals and beneficial owners where applicable. |
| Merchant underwriting | Whether the provider is prepared to support the overall merchant and payment risk, and on what commercial/risk terms. |
A business can therefore successfully pass identity verification and still fail merchant underwriting.
For example, the provider might be completely satisfied that:
but still decide that:
Our Payment Provider Risk Appetite guide explains why two providers can make different decisions about the same business.
Visa's current Acceptance Risk Standards require acquirers to operate risk-based merchant onboarding.
The published standards include KYC/KYB controls involving areas such as:
Visa's guidance also refers to the use of techniques including:
The precise checks applied to an individual UK merchant remain provider-specific and must also reflect applicable law and regulation.
Do not assume the underwriter is looking only at the documents you upload.
Information can be compared across multiple sources.
That makes consistency important.
Because the company applying for the merchant account may only be one part of a larger ownership structure.
For example:
Trading Company Ltd
↓
UK Holdings Ltd
↓
European Parent SA
↓
Ultimate owners / controlling persons
The provider may need to understand the ownership chain rather than stopping at the first corporate shareholder.
Larger businesses can include:
None of these structures automatically makes a merchant problematic.
But complexity can increase the amount of information required to understand the business.
UBO means ultimate beneficial owner.
In practical terms, this means looking beyond a company that legally owns shares to understand the individual or individuals who ultimately own or control the corporate structure.
For example:
Merchant Ltd
100% owned by
Holding Company Ltd
owned by
Individual A – 60%
Individual B – 40%
Simply recording “Holding Company Ltd owns the merchant” may not tell the provider who ultimately controls the structure.
UK Money Laundering Regulations define beneficial ownership of many corporate bodies by reference to individuals who ultimately own or control more than 25% of shares or voting rights, exercise ultimate control over management or otherwise meet relevant control tests.
The 25% threshold is not a rule saying that anyone holding 25% or less can always be ignored.
Control can exist through mechanisms other than simple share ownership.
The circumstances and applicable legal requirements matter.
Legal shareholder and ultimate beneficial owner are not always the same thing.
For a simple owner-managed company they may be identical.
For a complex corporate group they may be several levels apart.
A UK Person with Significant Control (PSC) is a Companies House concept relating to individuals who own or control a company.
Companies House says a PSC is usually somebody who:
PSC information can be useful during KYB because it helps provide a public record of company control.
However, PSC and UBO should not simply be treated as interchangeable labels in every situation.
The payment provider must perform the checks required under its own applicable AML, scheme and underwriting framework.
Yes, under the Companies House identity-verification regime introduced as part of the Economic Crime and Corporate Transparency reforms.
Companies House states that identity verification became a legal requirement from 18 November 2025.
Current guidance requires directors and PSCs to provide their Companies House personal code according to the applicable timetable.
For existing directors, this is linked to the company's confirmation-statement process.
PSCs also have specific periods in which they must provide their verification information.
No.
This is an important distinction.
Companies House identity verification and merchant-account KYC/KYB operate for different purposes.
A payment provider can still be required to conduct its own checks under:
Companies House becoming more verified should make corporate information more useful.
It does not mean a merchant can tell an acquirer:
“Companies House verified us, so you do not need to.”
Corporate shareholders are common in larger businesses.
For example:
Operating Company Ltd
↓ 100% owned by
UK Group Holdings Ltd
The provider may need to determine who owns or controls UK Group Holdings Ltd.
If that company is itself owned by another legal entity, the ownership exercise can continue through the structure.
HMRC guidance on beneficial-owner identification specifically describes following linked corporate ownership until the relevant ultimate owners have been identified.
For a larger group, preparing an ownership chart before applying can therefore make underwriting significantly easier.
For a complex merchant, a useful ownership chart can show:
Global Parent Inc — USA
↓ 100%
European Holdings BV — Netherlands
↓ 100%
UK Trading Ltd — United Kingdom
↓
UK merchant account
An underwriter may then need information relating to both the UK applicant and the entities or individuals controlling it.
For complex ownership, send the provider a diagram before it has to reconstruct the group from individual documents.
A clear ownership chart can answer in one page what would otherwise create several rounds of underwriting questions.
Not automatically.
Many large UK companies are owned by international groups.
However, an overseas ownership chain can require additional verification because the provider may need to understand:
The level of investigation will depend on the jurisdictions and corporate structure involved.
Provider risk appetite can also vary by country.
Private-equity ownership is common among larger UK businesses and does not in itself make a merchant unusual.
But it can make the ownership picture more complex.
For example:
Trading Company
↓
Holding Company
↓
Acquisition Vehicle
↓
Investment Fund / investment structure
The provider may ask for information sufficient to understand:
The documents needed will depend on the specific structure and provider.
This can happen in businesses with dispersed ownership.
It does not mean the provider simply abandons the ownership review.
UK PSC rules also consider:
AML processes can similarly require reasonable measures to understand ownership and control rather than relying solely on one percentage test.
The provider may therefore ask who exercises control over the company and who holds senior management responsibility where applicable under the relevant rules.
Trust structures can create additional complexity because the relevant parties can include:
The Money Laundering Regulations contain specific beneficial-ownership provisions for trusts.
A merchant with trust ownership should expect the provider to request enough information to understand the arrangement and the relevant controlling parties.
Complex trust structures may also require specialist legal or compliance advice.
Yes, but the trading name is not necessarily the legal merchant entity.
For example:
Website: ExamplePay.co.uk
Trading brand: ExamplePay
Legal company: Example Holdings UK Limited
The payment provider needs to know which legal entity is actually:
The website should normally make the legal relationship clear.
Brand ≠ legal entity.
A recognised trading name can be commercially important, but underwriting still needs to establish which company sits behind it.
There is no single rule that can be applied to every corporate group.
However, the entity applying for the merchant account should make sense when compared with:
For example, problems can arise where:
Customer contracts with Company A
but:
Company B takes the card payment
and:
Company C receives settlement.
That structure may have a perfectly legitimate explanation.
But the provider needs to understand it.
The entity taking the payment should make sense within the customer contract, business model and funds flow.
If it does not look obvious on paper, explain it before underwriting has to ask.
Businesses should not assume that a merchant account approved for one legal entity can simply be used by other group companies.
The acquiring arrangement is established on the basis of the merchant that was underwritten.
Using the facility for transactions belonging to another entity can create issues around:
Larger groups should establish with the provider whether they need:
A Merchant ID or MID is an identifier used within the merchant's acquiring arrangement.
Large businesses can have more than one MID.
Separate MIDs can potentially be relevant where a merchant has:
The appropriate MID structure is provider-specific.
This deserves particular attention.
Consider a financial-services group:
Company A — FCA-authorised entity
Company B — customer-facing trading company
Company C — technology/IP company
If Company B applies for the merchant account while Company A holds the relevant regulatory permissions, the provider may need to understand:
Being part of the same corporate group does not automatically make the legal entities interchangeable.
Our Financial Services Merchant Accounts guide explains the additional issues that can arise for regulated businesses.
An underwriter needs to understand what happens to customer money.
For a simple merchant:
customer → merchant → merchant supplies its own product/service
For a more complex platform:
customer → platform → third-party seller/service provider
Those are not necessarily the same acquiring model.
The FCA specifically warns that businesses such as marketplaces and booking services may potentially be providing payment services where they receive customer money before passing it to another party.
This means merchant underwriting can overlap with wider payment-services-perimeter questions.
For complex businesses, draw the payment flow.
Show:
who pays → who receives → who controls → who settles → who ultimately keeps the money.
Do this before selecting the acquiring model.
A simple funds-flow diagram can show:
Customer
↓ card payment
Acquirer / PSP
↓ settlement
Trading Company Ltd
Customer
↓
Platform
↓
Payment arrangement
↓
Seller / service provider
The second structure requires considerably more explanation.
Providers can request information including:
Yes, particularly for ecommerce merchants.
Visa's current acquiring standards expressly refer to collecting ecommerce URLs and verifying merchant websites/domains.
An underwriter may look for information such as:
Website information should be consistent with the merchant application.
If the application says:
“UK professional-services consultancy”
but the website appears to sell:
international investment products
expect questions.
The issue is not just wording. The underwriter needs to understand the real activity being processed.
Yes.
A Merchant Category Code classifies the merchant's principal business activity within the card-payment ecosystem.
MCC can influence:
But MCC does not replace underwriting.
Two businesses with the same MCC can present completely different financial and operational risks.
Read our Merchant Category Codes (MCC) guide.
The level of financial review depends on the merchant.
A provider may request:
The financial review can become particularly important where the merchant has:
High processing volume does not remove acquiring risk.
In fact, larger volume can create greater financial exposure.
A merchant processing £20 million annually may be commercially attractive to an acquirer, but the provider still needs to understand:
High volume can increase commercial value and acquiring exposure at the same time.
Large merchants are not necessarily easier to underwrite. They may simply be worth underwriting in more detail.
Previous processing statements can provide evidence of what the merchant has actually done rather than what it forecasts it will do.
They can help show:
An established merchant should therefore generally expect to provide processing history where relevant.
It can make the merchant easier to evidence, but it does not guarantee a particular onboarding timeframe.
The MerchantRoute Merchant Onboarding Study, published by Merchant Advice Service, found that onboarding time varies considerably according to merchant complexity.
In the study:
The research also found that 41% of respondents identified poor provider or risk fit as a contributor to merchant-account declines.
For a complex merchant, the objective should not be:
“How do we make underwriting artificially fast?”
It should be:
“How do we give the right provider a complete, coherent application the first time?”
An established merchant's dispute history can form part of the risk assessment.
A provider may consider:
High dispute activity does not necessarily create an automatic decline.
But it can influence:
Future delivery occurs where customers pay before the merchant fully provides the goods or services.
An underwriter may want to understand:
Our Future-Delivery Risk in Payments guide explains how monthly processing and outstanding customer exposure can be very different figures.
Yes, potentially.
Merchant underwriting does not always result in a simple:
approved / declined.
A provider may approve a merchant subject to risk terms such as:
Read our Merchant Account Rolling Reserves guide.
Yes, where the merchant operates a regulated business.
The provider may ask for evidence of relevant:
But regulatory status alone does not guarantee merchant-account acceptance.
The acquirer still needs to understand the payment activity.
Yes.
FCA regulation and merchant-account underwriting answer different questions.
A regulated business may still have underwriting issues relating to:
See our Financial Services Merchant Accounts guide.
Providers can conduct screening relating to financial-crime and merchant risk.
Visa's current acquiring standards specifically require applicable sanctions screening and refer to methods including negative-news scanning and beneficial-owner research.
Depending on the merchant and applicable requirements, due-diligence processes can involve:
The precise process is provider-specific.
Potentially.
Where ownership, directors, websites, bank accounts or previous payment activity connect the merchant with other businesses, those relationships can become relevant to underwriting.
This can be particularly important where:
Our Terminated Merchant Facilities guide explains why connected merchant information can matter following account closure.
Potentially.
A provider may want to know:
A previous termination should be explained accurately.
A provider exiting a sector is very different from termination following serious fraud or scheme issues.
Card-scheme merchant-screening information can form part of acquiring due diligence.
Mastercard operates MATCH Pro and Visa operates Visa Merchant Screening Service.
These should not be confused with ordinary provider-risk decisions.
A merchant being declined because it falls outside one provider's appetite does not automatically mean it has been listed within a card-scheme merchant-screening system.
Read our Merchant Account Declined guide for more detail.
It can form part of the overall provider-fit assessment.
A business may be acceptable financially but still require payment functionality the provider cannot support.
This becomes particularly relevant for larger merchants needing:
Our Integrated Payments Solutions guide explains why technical fit should be established before provider selection.
A merchant can pass underwriting and still choose the wrong provider.
Provider selection requires:
Underwriting Fit + Technical Fit + Commercial Fit.
The exact requirements depend on the provider and merchant.
However, an established or complex business could be asked for information across several categories.
Common causes can include:
For complex merchants, underwriting delays are often caused by missing context rather than missing passports.
The underwriter needs to understand how all the pieces connect.
Create an underwriting pack before approaching providers.
For a larger business, we would suggest preparing information under the following headings.
Which legal company is applying and why?
Who owns and controls the applicant?
Include an ownership chart where the structure is not obvious.
What does the merchant actually sell?
Which MCC is relevant?
Who pays whom?
Which entity receives settlement?
Does money move to third parties?
Provide actual or forecast:
What evidence demonstrates the company's financial position and capacity?
Explain:
What does the payment provider actually need to deliver?
Entity → Ownership → Activity → Money Flow → Processing → Financials → Risk → Technology.
This is not an official card-scheme underwriting formula.
It is the Merchant Advice Service framework for organising the information a complex merchant should understand before provider selection.
Consider the following hypothetical merchant.
| Area | Example |
|---|---|
| UK card turnover | £18 million annually |
| Trading entities | 3 |
| Websites | 5 |
| Parent company | EU holding company |
| Ownership | Institutional / investment structure |
| Customer countries | UK and EEA |
| Average transaction | £850 |
| Maximum transaction | £12,000 |
| Fulfilment | Same day to 6 months |
| Processing | Ecommerce + telephone + recurring |
| Technology | Custom API + CRM integration |
This is not simply an £18 million pricing exercise.
The provider needs to understand:
This is why larger merchants should not begin a payment-provider review by asking for a transaction rate.
The first job is to define what actually needs underwriting.
For a complex company, usually it is better to clarify the structure first.
If the provider receives:
additional questions are predictable.
That does not mean the business is unacceptable.
It means the underwriter does not yet have a coherent picture.
Not necessarily.
It can make sense to compare several potential providers, but there is a difference between:
comparing acquiring options
and:
submitting full underwriting applications to unsuitable providers.
Before formal applications are submitted, compare:
Yes.
Acceptance is only one part of provider selection.
A merchant should also compare:
| Area | What to Check |
|---|---|
| Acceptance | Does the provider genuinely support the merchant? |
| Structure | Can it support the required entities, MIDs and countries? |
| Technology | Does it support the gateway, API and integrations? |
| Settlement | When are funds available? |
| Reserve | Are funds retained and on what terms? |
| Pricing | What is the complete processing cost? |
| FX | How are international transactions and settlement priced? |
| Contract | What are the term, renewal and termination provisions? |
| Operations | How do reporting, reconciliation, disputes and support work? |
Approved does not mean suitable.
The best acquiring arrangement needs to pass:
Underwriting Fit → Structural Fit → Technical Fit → Operational Fit → Commercial Fit.
Merchant Advice Service does not underwrite merchants or make payment-provider approval decisions.
Our role is to help businesses understand their payment requirements and identify providers that may fit before a formal application is submitted.
For larger or more complex merchants, this can involve understanding:
The payment provider then conducts its own KYB, KYC and underwriting and decides whether to offer processing and on what terms.
The Payments Directory® is designed to help narrow provider options according to the merchant's actual requirements.
You can also read How Merchant Advice Service Works and our Research & Comparison Methodology.
Visa's current acquiring-risk framework covers acquirer risk appetite, merchant onboarding, KYC/KYB, merchant ownership information, ecommerce website verification, fraud checks, beneficial-owner research and ongoing monitoring.
Companies House guidance explains how UK companies identify PSCs, including share ownership, voting rights, board appointment rights and other forms of significant influence or control.
Companies House guidance explains the mandatory identity-verification requirements introduced for directors and PSCs and the current timetable for providing personal codes.
The Money Laundering Regulations contain the UK legal definitions relevant to beneficial ownership of companies, partnerships and trusts, including direct and indirect ownership and control.
The FCA defines acquiring payment transactions as a payment service involving a payment-service provider contracting with a payee to accept and process payment transactions resulting in funds being transferred to the payee.
The FCA warns that businesses including marketplaces and booking services may potentially be providing payment services where customer money is received before being passed to another seller or service provider.
Merchant Advice Service's industry validation research included 25 payments-industry respondents and examined merchant application, underwriting and onboarding. The study found that 41% identified poor provider or risk fit as a contributor to merchant-account declines.
Read the MerchantRoute Merchant Onboarding Study.
Merchant Advice Service is an independent payments information, comparison and provider-matching service.
MAS may receive commission or a referral fee from some payment providers where a business chooses to proceed following an introduction. This does not determine the factual information about merchant underwriting, company ownership or payment-provider requirements contained within this guide.
Merchant Advice Service is not an acquiring bank and does not conduct the payment provider's formal KYB, KYC or merchant underwriting.
Payment providers and acquiring banks establish their own underwriting policies subject to applicable laws, regulations, card-scheme requirements and partner arrangements.
The documentation requested and individuals requiring verification vary according to the merchant, provider, corporate structure and applicable legal requirements.
References to PSC and beneficial-ownership thresholds describe current UK rules in general terms and should not be used as a substitute for legal or AML advice in complex ownership structures.
Companies House identity verification does not replace a payment provider's own identity, AML or underwriting checks.
The MAS underwriting framework and examples in this guide are explanatory tools and are not official Visa, Mastercard, FCA or statutory underwriting methodologies.
Payment-provider, Companies House, FCA and card-scheme information last checked: 1 September 2026.
This guide provides general payments information and should not be treated as legal, regulatory, accounting, financial or formal compliance advice.
Written or reviewed by Libby James, founder of Merchant Advice Service and specialist in merchant payments and complex provider requirements.