Payments · Online Pharmacy7 min readUpdated November 2, 2026

How to Get an Online Pharmacy Merchant Account Approved

The steps, documents and website checks an online pharmacy needs before an acquirer registers it with Visa and Mastercard, and why files get declined.

Nick Bonnassies, CMO at Tagada · checked against 17 sources

Article summary

TL;DR

Get your state pharmacy licenses first, then a certification such as LegitScript or NABP, then make your website match both. Only then apply to an acquirer that takes pharmacies, with ID, bank statements and your prescription process. The acquirer registers you with Visa and Mastercard before your first sale. A missing license is the most avoidable decline.

Mastercard makes the acquirer register your pharmacy before any non-face-to-face sale, and re-verify your legality at least every 12 months (rules of August 4, 2026).
Visa exempts pharmacies accredited by NABP "or other regulatory body recognized by Visa" from its high-integrity-risk registration (October 24, 2026).
LegitScript asks for "All relevant healthcare licenses" and charges $975 per website to apply (2026).
Published approval times run from "24-72h" (Corepay) to "2 weeks" (Instabill) for a domestic pharmacy account, read November 2, 2026.

Want to go further? Ask

On this page

This guide is part of our hub on online pharmacy payment processing. The general guide, for any business: how to get a merchant account approved. Prescription brands can also apply to Tagada Rx, which runs storefront, doctors, pharmacy and payments in one stack.

Why approval is harder for a pharmacy

Your acquirer isn't only judging your risk. It has its own obligations to Visa and Mastercard for every pharmacy it signs.

Network rule	What the acquirer must do
High-integrity-risk codes	MCC 5912 and 5122 are flagged for card-absent sales (Visa)3
Visa registration	Be approved by Visa to carry these merchants and register each one, unless the pharmacy is NABP-accredited or accredited by another body Visa recognizes (Visa)1
Mastercard registration	"Register the Merchant with Mastercard" before non-face-to-face pharmaceutical sales (Mastercard)2
Proof of legality	Verify compliance with applicable laws, for example through "a written opinion from independent, reputable, and qualified legal counsel or accreditation by a recognized third party" (Mastercard)2
Annual check	Re-verify at least every 12 months (Mastercard)2
Penalty	Up to $10,000 for processing an unregistered pharmacy, then monthly fines (Mastercard)2

Tagada follows Visa and Mastercard rules and the laws that apply to payments.

Every document you're asked for maps to one of these lines. A complete file is the fastest way through.

Step by step

Get your licenses. A pharmacy license in your home state and in each state you ship to. Underwriters and certifiers check them first. Which ones you need: online pharmacy ownership and licensing.
Get certified. LegitScript or NABP gives your acquirer the "accreditation by a recognized third party" Mastercard mentions2. Which one: NABP .pharmacy or LegitScript.
Check your partners. LegitScript says partners such as fulfillment pharmacies "are typically required to hold LegitScript certification or equivalent accreditation"5.
Fix your website against the checklist below, before anyone reviews it.
Assemble the file and apply to an acquirer that takes pharmacies, not a general aggregator.
Answer follow-ups fast. Expect questions on your prescription process, sourcing and dispute history.

Fig. 1Six steps, and what each one puts in your file

LicensesHome state and every shipping state
CertificationLegitScript or NABP certificate
PartnersTheir certification or equivalent accreditation
WebsiteA site that passes the checklist
FileSent to an acquirer that takes pharmacies
Follow-upsPrescriptions, sourcing, dispute history

Licenses and certification come first; the acquirer only reviews a complete file.

Mastercard Security Rules, August 4, 2026; LegitScript 101 Guide, January 2026.

If you have no processing history yet: merchant accounts for new online pharmacies.

Documents to prepare

Processors publish similar lists. The pharmacy-specific part is what sets your file apart.

Category	Documents	Who asks
Identity and company	Owner's government-issued photo ID; documents of incorporation; organizational chart if applicable	PaymentCloud, Instabill, Corepay6 8 7
Bank	Voided check or bank letter; at least 3 months of business bank statements	PaymentCloud, Instabill6 8
History	3 to 6 months of processing statements, if you have them	PaymentCloud, Instabill6 8
Pharmacy	Pharmacy licenses; prescription verification process; licensed prescriber information; supply chain and wholesaler documentation; DEA or FDA registrations if applicable	Adaptiv11, Corepay7
Certification	An up-to-date NABP certificate or LegitScript certification	PaymentCloud6

Who you are
Owner's photo ID, documents of incorporation, organizational chart if applicable.
Where payouts go
Voided check or bank letter, at least 3 months of business bank statements.
Your history
3 to 6 months of processing statements, if you have them.
Your pharmacy
Licenses, prescription verification, prescriber information, supply chain, DEA or FDA registrations if applicable.
Your certification
An up-to-date NABP certificate or LegitScript certification.

LegitScript's own application asks for "Business registration information for all jurisdictions", "All relevant healthcare licenses (pharmacy, controlled substance, telemedicine, physician, wholesaler, etc.)" and a list of affiliates5. Build that set once and reuse it.

Your website, the first thing underwriters read

An underwriter opens your site before your file. It should show a legitimate pharmacy without them asking.

[ ] A prescription is required, stated on product pages and enforced before dispensing12. No "no prescription needed" wording anywhere11
[ ] A US physical address and contact details12
[ ] A licensed pharmacist customers can reach12
[ ] License numbers and the states you serve
[ ] Policies for refunds, shipping and privacy, one click away
[ ] No shipping from abroad: the FDA lists it as a sign of an illegal pharmacy12
[ ] Controlled substances: if you dispense them online, a compliance statement and the details federal law requires on your homepage13

Fig. 2Your site, as an underwriter reads it

Site review · product page and checkoutThe seven checks above, in order

1. Prescription required: Stated on product pages, enforced before dispensing
2. US physical address: Address and contact details in the footer
3. Licensed pharmacist: Reachable by phone and chat
4. License numbers: States served not listed
5. Policies: Refunds, shipping, privacy one click away
6. Shipping: From the US only
7. Controlled substances: Not dispensed online

Illustrative record, not real data.

One wrong line is enough to send the file back.

Illustrative example.

How to make checkout wait for the prescription: prescription-gated checkout.

How long approval takes

Neither the networks nor LegitScript publish a timeline. Processors do, for their own review, once your file is complete. These are their figures, not Tagada's.

Published time	Account type	Published by
"24-72h Typical Approval Window"	Pharmacy account	Corepay7
"As little as one to two days"	"Many qualified merchants"	Instabill9
5 to 7 business days	Complete file	Binderr10
"2 weeks"	Domestic online pharmacy account	Instabill8

Watch out

These clocks start once you're licensed and certified. Certification has its own review, and LegitScript doesn't publish how long it takes. Budget for it before you plan a launch date.

Why pharmacy applications get declined

Reason	What fixes it
Missing license for a state you ship to	License it, or stop shipping there until you do
NoCertification, no legal opinion	LegitScript, NABP, or a written opinion from qualified counsel2
Site sells without a prescription, or says so	Remove the wording, gate checkout on the prescription12
Uncertified fulfillment partner	Use a pharmacy partner with certification or equivalent accreditation5
Chargeback history	Corepay asks for chargebacks "under 2%"7; fix the causes first: chargebacks for online pharmacies
A prior termination	Check whether you're on Mastercard's MATCH list: MATCH list explained

Stripe reviews pharmacies as a restricted business14 and approves them only in the US, Canada, the EU, Australia, the UK and Japan17: does Stripe allow prescription drugs? What approval costs once you're in: online pharmacy processing fees and reserves.

How Tagada helps

Payments and LegitScript included, so you don't build the file alone

If you're launching a brand that sells prescription treatment online, Tagada Rx is a stack with storefront, doctors, pharmacy and payments, so you don't assemble a pharmacy merchant file alone15.

Payments and LegitScript included: your store runs on a Tagada-hosted domain tied to Tagada's LegitScript certification15 16
Pharmacy routing to a licensed US pharmacy, and US-licensed clinicians15
Capture on approval: "The card is only captured once a doctor approves"15
Every application reviewed: "We review every application"16

Tagada Rx is open by application to a selected group of brands. Terms are on the Tagada Rx page.

Apply to Tagada Rx

Payments and LegitScript included, so you don't build the file alone

Updated on November 2, 2026

Nick Bonnassies

CMO at Tagada

CMO at Tagada. Before Tagada, Nick built direct-to-consumer brands that generated over $115M in sales, raised over $25M in crowdfunding and sold two of them. He also works as a fractional CMO on marketing operations and AI systems.

Frequently asked questions

What documents does an online pharmacy need for a merchant account?

Owner ID, incorporation documents, a voided check, three months of bank statements and any processing history, plus pharmacy licenses, your prescription verification process and sourcing documents. Most pharmacy processors also ask for LegitScript or NABP certification.

How long does it take to get a pharmacy merchant account?

Processors publish 24 to 72 hours (Corepay) up to 2 weeks (Instabill) for a complete file. That assumes your licenses and certification are already in hand. LegitScript doesn't publish a timeline for its own review.

Do I need LegitScript to get approved?

Not by network rule. Mastercard accepts a legal opinion or "accreditation by a recognized third party", and Visa exempts NABP-accredited pharmacies. Many processors ask for one of the two anyway, and PaymentCloud lists NABP or LegitScript in its requirements.

Can a new online pharmacy with no history get approved?

Yes, but expect more scrutiny. Instabill lists offshore start-up pharmacy accounts; Corepay asks for "six months of processing history". Without history, your licenses, certification and website carry the file. More: merchant accounts for new online pharmacies.

Why do acquirers re-check my pharmacy every year?

Mastercard requires the acquirer to re-verify a registered pharmacy's legality at least every 12 months. Keep licenses and certification current: a lapse can trigger a review of your account.

Sources

Checked November 2, 2026

Tagada Rx

Send a pharmacy file underwriters can say yes to

Tagada Rx runs the stack behind your brand. Open by selection: every application is reviewed, and we reply to each one.

Apply to Tagada Rx

01Tell us about your brand
02We review every application
03Go live under your brand after review