High-Risk Merchant Factors

📖 What Defines a High-Risk Merchant?

A business is classified as high-risk when it presents elevated financial, operational, or regulatory risk to an acquiring bank or payment processor. This classification affects approval odds, fee structures, reserve requirements, and ongoing account management. Understanding which factors apply to your business is the first step toward finding the right processing solution.

Processors assess risk across multiple dimensions, and a business that scores high on several factors will face stricter underwriting. Importantly, the absence of one risk factor does not automatically offset the presence of others — each dimension is evaluated independently.

🏭 Industry Category (MCC Code)

The most significant risk factor is the merchant category code (MCC) assigned to your business. Card networks and acquirers maintain internal lists of high-risk MCC codes that trigger enhanced scrutiny. Industries frequently classified as high-risk include:

• CBD & Hemp — Legal complexity, regulatory fragmentation, and bank-level restrictions on cannabis-related businesses make CBD one of the hardest industries to place.
• Adult Entertainment — Historically high chargeback ratios, brand risk for acquirers, and restrictive card network policies limit processor availability.
• Online Gambling & iGaming — Regulatory uncertainty across jurisdictions, high transaction volumes, and elevated chargeback risk classify this as maximum risk.
• Nutraceuticals — Subscription billing models, auto-ship programs, and aggressive marketing practices generate elevated dispute rates. Negative option billing is particularly scrutinized.
• Forex & Crypto Trading — High-ticket transactions, regulatory complexity, and customer dispute volumes create an unfavorable risk profile.
• Debt Collection — Regulatory compliance requirements (FDCPA), consumer complaint volumes, and negative brand association increase risk.
• Travel & Timeshares — Long settlement delays between booking and fulfillment create extended chargeback windows and higher dispute exposure.

Other notable high-risk MCC codes include psychic services, dating services, telemarketing, pharmaceutical sales, and ticket brokers. Some processors specialize in specific verticals — partnering with one that understands your industry is critical.

📊 Chargeback History & Volume

Chargeback history is the second most influential factor in risk classification. Processors evaluate both absolute chargeback counts and chargeback-to-transaction ratios. Key thresholds include:

• Low Risk: Below 0.5% chargeback ratio — standard processing available, minimal reserves
• Moderate Risk: 0.5% to 1.0% — higher reserves may apply, enhanced monitoring required
• High Risk: 1.0% to 2.0% — specialist processor required, significant reserves (10–15%)
• Critical Risk: Above 2.0% — MATCH list exposure, very limited processing options

Businesses without processing history (startups) are also classified as high-risk because there is no track record to assess. New businesses typically face higher reserves and longer settlement holds until a processing history is established.

💰 Transaction Volume & Ticket Size

High transaction volumes amplify the financial impact of any fraud or chargeback issues. Businesses processing more than $100,000 per month are typically subject to enhanced due diligence, and those exceeding $1 million per month face institutional-level underwriting.

Average ticket size also matters. High-ticket merchants ($500+ per transaction) face greater per-transaction risk because a single chargeback represents a larger loss. Processors may impose transaction caps, daily volume limits, and real-time monitoring for high-ticket businesses.

Conversely, very high-volume, low-ticket businesses (microtransactions, digital goods) are scrutinized for velocity — rapid transaction rates can indicate automated fraud or card testing.

🌐 Geographic & Cross-Border Factors

Cross-border processing introduces additional risk dimensions including currency conversion, regulatory compliance across multiple jurisdictions, and reduced ability to verify customer identity. Merchants operating internationally should be aware of:

• High-risk regions: Processors may restrict or surcharge transactions from certain countries based on fraud rates and regulatory risk.
• Sanctions exposure: Accepting payments from sanctioned countries or individuals carries severe legal penalties.
• Currency volatility: Multi-currency processing in volatile currencies introduces settlement risk if exchange rates move significantly between authorization and settlement.
• Regulatory fragmentation: GDPR in Europe, PSD2 strong customer authentication, and local data residency requirements create compliance complexity.

Businesses serving primarily domestic markets typically receive more favorable risk classification than those with >30% international volume.

⚖️ Regulatory & Legal Exposure

Certain industries carry disproportionate regulatory risk that acquirers factor into their underwriting. Key considerations include:

• FDA-regulated products (nutraceuticals, cosmetics with medical claims) — risk of regulatory action that could trigger mass chargebacks
• Age-restricted products (adult content, gambling, tobacco, alcohol) — compliance verification requirements
• Subscription/TRIAL programs — negative option billing and automatic renewal regulations vary by state (California's Automatic Renewal Law, FTC Negative Option Rule)
• Data privacy — industries handling sensitive personal data face higher breach-related liability
• Cross-border data flows — GDPR, LGPD, and similar regulations create compliance liability for international processors

🔄 Mitigating Risk Factors

While some risk factors are inherent to your industry, others can be actively managed to improve your processing profile:

• Clean Chargebacks — Implement fraud detection tools, 3DS authentication, AVS/CVV matching, and clear refund policies to reduce disputes
• Business Longevity — Established businesses with clean processing history receive better terms. Startups can mitigate with personal guarantees
• Transparent Billing — Clear descriptors, upfront terms, and accessible customer service significantly reduce friendly fraud
• Diverse Processing — Accepting alternative payment methods (ACH, crypto, e-wallets) alongside cards diversifies risk
• Documentation — Maintain thorough records of terms of service, refund policies, and customer communications