Payments · Guide9 min readUpdated November 2, 2026

High-Risk Merchant Account: Who Needs One, How to Get One, How to Keep It

Who needs a high-risk merchant account, how to get one, how long approval really takes, what it costs and how to keep it, with Visa's 2026 rules.

Nick Bonnassies, CMO at Tagada · checked against 17 sources

Article summary

TL;DR

You need a high-risk merchant account when your category, your sales model or your history goes beyond what Stripe, PayPal or Shopify Payments will carry. You get one from an acquirer approved to take your category, after a full review of your file: no rule-abiding provider can approve you instantly. Expect a reserve, closer monitoring and a 1.5% dispute line to stay under.

Visa keeps a formal list of high-risk merchant category codes: 13 codes in three tiers, all for card-absent sales.
For those codes, the acquirer must be approved by Visa and register you before it sends your first transaction.
Stripe's restricted businesses "require additional due diligence by Stripe", per its list updated September 22, 2026.
Published high-risk reserves: "typically 5 to 10% of your processing volume".
Since April 1, 2026, Visa flags US merchants at 1.5% fraud plus disputes and 1,500 cases a month.

Want to go further? Ask

On this page

This guide is about getting and keeping the account. What the term means, and how the US bank regulator defines it, is in our page on what a high-risk merchant account is. For your industry: supplement brands and skincare brands.

Do you need a high-risk merchant account?

You need one if a mainstream provider won't carry your risk, or has already stopped. Three things decide it, and one is enough: your category, how you sell, and your past3.

Your product is on Stripe's or PayPal's restricted listAn approval step, and no guarantee of a yesApply to a provider that underwrites your category before you launch
Your MCC is on Visa's high-risk listOnly an acquirer approved by Visa for that tier can take youAsk each provider if it is registered for your MCC
Trials, auto-ship or a high average orderMore disputes expected, so a closer reviewDeclare the offer in full and show the terms at checkout
An account closed, or a MATCH listingMost providers will declineKnow your listing reason and what you fixed

The category is the only formal list. Visa's covers 13 codes, from adult content and gambling to negative-option subscriptions and tobacco2. Tier by tier: high-risk MCC codes, or check one code in our high-risk MCC directory.

The other two are each provider's call. The OCC notes that mail and telephone order merchants have "in aggregate, displayed a much higher incidence of charge-backs"3. A provider can rate a subscription brand high risk even when its MCC isn't on Visa's list.

High-risk merchant account vs Stripe, PayPal or Shopify Payments

Stripe, PayPal and Shopify Payments open an account in minutes and review you later. A high-risk merchant account reviews you first. That order is the whole difference.

	Stripe, PayPal, Shopify Payments	High-risk merchant account
When you're reviewed	Mostly after sign-up, on live payments	Before you process a sale1
RestrictedCategories	Need extra due diligence, may be refused5	The provider is chosen because it serves your category
Your account	Shared platform terms	Your own merchant ID and MCC
Closure	Stripe "may terminate this Agreement or close User's Stripe Account at any time"6	Set by your contract: notice, reserve and release dates are negotiable
Typical conditions	Reserve or payout pause when risk shows up14	Reserve, volume cap or delayed payouts agreed upfront

Stripe's restricted list says plainly that approval "may be modified or revoked by Stripe at any time"5. Shopify Payments doesn't keep its own list: prohibited and restricted categories "are provided by each Payment Processor"7. What each Stripe category means: Stripe prohibited and restricted businesses.

Fig. 1Same brand, two ways in

Aggregator first

Sign-upLive in minutes
thenRisk reviewTriggered by disputes or a productDeclined

Review comes after the sales

Underwritten first

ApplicationDocuments, site, offers
thenApproved with termsReserve, limits, productsApproved

Terms known before the first sale

One reviews you after the money moves, the other before.

Illustrative example.

How to get a high-risk merchant account

Prepare the file the underwriter will read, then apply to providers that serve your category. Approval covers what you declared, so declare everything.

Check your category against the provider's list and Visa's high-risk codes.
Fix your site: contact details, delivery terms, refund policy, privacy statement, real product pages. The OCC lists these for card-accepting websites3.
Gather the documents below, with the same legal name everywhere.
Declare every product and offer, including trials, subscriptions and upsells.
Apply with real volumes and an honest average order.
Read the terms before signing: rate, reserve, caps, payout delay, approved products.

The full applicant's guide, with every document and why it's asked, is in our merchant account approval guide.

Document	Why it's asked
Company registration and tax ID	Proves the legal entity
ID for each owner of 25% or more, plus one controller	US beneficial ownership rule4
About 3 months of bank statements	Shows you can absorb refunds8
3 to 6 months of processing statements, if you have them	Shows your dispute and refund history3 8
Licenses, labels or claim support	Required in some industries8

Step by step, with the declines and how to answer them: merchant account approval. No processing history yet: merchant accounts for startups. Owners outside the US: US merchant accounts for non-US owners.

How long it takes, and what "instant approval" means

A complete file usually gets an answer in days, not minutes. Visa requires the acquirer to "conduct an adequate due diligence review" before it signs any merchant1.

For a high-risk code there is one more step. The acquirer must hold Visa's approval for that tier and register you with Visa before it processes for you1.

Fig. 2From application to first sale

ApplicationDocuments, site, offers
UnderwritingQuestions back to you
Decision24 hours to 5 business days, published
Visa registrationFor high-risk codes, before processing
LiveTest sale, then volume ramp

The clock starts when the file is complete.

Published timelines from PaymentCloud, read October 27, 2026. Registration rule: Visa Core Rules, April 18, 2026.

PaymentCloud publishes 24 hours to 5 business days for a high-risk file, and several weeks when documents are missing or an enhanced review applies8.

Watch out

"instant approval" means the review hasn't happened yet. An account opened instantly keeps being reviewed on your live payments, and that's when funds get held9. If it already happened: merchant account closed and funds held.

What a high-risk merchant account costs

More than a standard account, in three ways: a higher markup, a reserve, and network fees that only apply to high-risk categories. These are published figures, not quotes.

5 to 10%

Published high-risk reserve, as a share of processing volume (Soar Payments)

$500

Mastercard's yearly high-risk merchant registration in its 2025 rules; $1,000 since May 1, 2026, as reported by PaymentCloud

$15

Stripe US fee per dispute, plus $15 if you respond

Sources: Soar Payments10, Mastercard11, PaymentCloud12, Stripe13.

Stripe sizes its own reserves on "industry conditions, payment activity, dispute rate, refund rate, and financial stability"14. Every fee, and how to compare two offers on your effective rate: high-risk processing fees. How reserves come back: rolling reserves. When the money lands: payout schedules.

How to choose a high-risk merchant account provider

Pick on the terms you'll live with, not on the approval promise. Ask these questions in writing before you sign.

Ask	Why it matters	Read more
Is the acquirer registered with Visa for my MCC?	Visa requires it before your high-risk code is processed1	High-risk MCC codes
What reserve, for how long, and when is it reviewed?	It's cash you won't see for months	Rolling reserves
When do payouts land?	Sets your working capital	Payout schedules
Which products and offers are approved?	Selling anything else can close the account	Merchant account approval
Can I export my saved cards if I leave?	Your subscribers depend on it	Switch payment processors
Can I add a second processor?	One account is one point of failure	Multiple merchant accounts

Watch out

Walk away from any provider that offers to put you under a different MCC. Visa requires the code that "most accurately describes" the business, and can disqualify a high-risk merchant that tries to circumvent its programs1.

How to keep your high-risk merchant account

Watch your dispute ratio every month. Underwriting doesn't stop at approval: the OCC expects transactions to be "monitored rigorously"3.

Program	Merchant threshold in 2026
Visa VAMP, "Excessive"	1.5% fraud plus disputes and 1,500 cases a month in the US, since April 1, 202615
Mastercard ECM	100 to 299 chargebacks and 1.5% to 2.99%16
Mastercard HECM	300 chargebacks or more and 3%16

Fig. 3Where your ratio should sit

0.8%Fraud plus disputes, monthly

Providers act well before the line.

Illustrative ratio. Threshold: Visa VAMP merchant level, US, from April 1, 2026.

A closure for excessive chargebacks or fraud can lead to a MATCH listing, which stays active 5 years17. At Stripe, a listing "generally disqualifies" a merchant17. How listings work: the MATCH list.

Tagada follows Visa and Mastercard rules and the laws that apply to payments.

What helps most: how chargebacks work for merchants, chargeback alerts that stop disputes before they count, and subscription billing that follows the network rules on trials and renewals.

By industry

Industry	What changes	Guide
Supplements	Health claims, the FDA disclaimer, trials that roll into auto-ship	Supplement and nutraceutical payment processing
Skincare	Cosmetic claims that read as drug claims, before-and-after photos, refills	Skincare payment processing
Online pharmacy	Shopify Payments and Square don't support it; an acquirer registers the pharmacy with Visa and Mastercard, backed by state licenses and LegitScript or NABP	Online pharmacy payment processing
Telehealth	Stripe restricts telehealth and reviews each business; once you sell the medication yourself, pharmacy rules apply	Telehealth payment processing
Fitness	Equipment is on no mainstream restricted list; sports nutrition is judged like a supplement, and delivery disputes are the real risk	Fitness product payment processing
Info products	Not prohibited; income claims, fake testimonials and pressure upsells close accounts, and login records are the proof of delivery	Info product payment processing

How Tagada helps

An underwritten account, and more than one route

Two ways to get paid: with TagadaPay managed, onboarding, underwriting, acquiring, settlement, payouts and disputes run through TagadaPay; or bring your own processor and keep your acquiring relationship (how processors work in Tagada).
Every file is reviewed: "Each file is still underwritten, with enhanced review on regulated verticals." A processing application lands in a review queue where the team runs KYB (apply for TagadaPay processing).
Refusals stated upfront: falsified documents, counterfeits, chargeback circumvention, deceptive marketing around trials, subscriptions and cancellation, and MATCH-listed merchants.
Routing across TagadaPay and processors such as Stripe, NMI and Airwallex with one logic, and cascade to another processor when one is down or times out.
Live in 24h: "One KYC. One signed package." TagadaPay distributes it across its processor network and follows up, and most merchants are live in under 24 hours.
"If you sell something real, we will get you paid." Enhanced review for regulated verticals, with 100+ verticals live.
From 2.9% + $0.29, no setup fees, no monthly minimums. High-risk verticals and edge cases are priced case by case.
24/7 human support on Slack Connect: "The person who reviews your application has a name, and so does the one who picks up when something breaks."

Apply today · Go live in under 24 hours

Apply for processing

An underwritten account, and more than one route

Updated on November 2, 2026

Nick Bonnassies

CMO at Tagada

CMO at Tagada. Before Tagada, Nick built direct-to-consumer brands that generated over $115M in sales, raised over $25M in crowdfunding and sold two of them. He also works as a fractional CMO on marketing operations and AI systems.

Frequently asked questions

Can I get a high-risk merchant account with instant approval?

Not from a provider that follows card network rules. Visa requires a due diligence review before the acquirer signs you, and registration with Visa before it processes a high-risk code. Published timelines for a complete high-risk file run from 24 hours to 5 business days. An account opened instantly is still being reviewed.

Is Stripe a high-risk merchant account?

No. Stripe is a payment aggregator: you process under its platform terms, and it reviews your business mostly after sign-up. Its restricted categories "require additional due diligence by Stripe", and approval can be revoked at any time. A high-risk merchant account is underwritten for your category before you process.

How much does a high-risk merchant account cost?

It depends on the file. Expect a higher markup than standard rates, a reserve that providers publish at "typically 5 to 10%" of volume, dispute fees, and network fees such as Mastercard's high-risk registration. Compare offers on the effective rate.

Can I get a high-risk merchant account with bad credit?

Sometimes. The OCC lists credit reports on the business and its principals among minimum underwriting standards, so bad credit weighs on the decision. Some providers decline; others approve with conditions, such as a larger reserve or a volume cap.

Can I get a high-risk merchant account if I'm on the MATCH list?

It's hard, and no one can promise it. A listing stays active 5 years, and only the acquirer that added it can request a removal, in two cases: an error, or a PCI listing you have since fixed. Know your listing reason and what changed.

Do subscription businesses need a high-risk merchant account?

Not always. Visa's list covers subscriptions billed on a negative option, sold card-absent, under MCC 5968. Other subscription models aren't on it, but many providers still rate them higher risk because forgotten renewals drive disputes.