Payments · Online Pharmacy6 min readUpdated November 3, 2026

Do I Need Visa Pharmacy Certification to Sell Online (MCC 5912)?

There's no Visa certificate for pharmacies. What Visa and Mastercard require of your acquirer for MCC 5912, and how NABP or LegitScript helps.

Nick Bonnassies, CMO at Tagada · checked against 10 sources

Article summary

TL;DR

No, there is no Visa certificate for pharmacies. Visa makes your acquirer register an online pharmacy (MCC 5912 or 5122) as high integrity risk, unless the pharmacy is accredited by the NABP or another body Visa recognizes, such as LegitScript. Mastercard makes the acquirer register you and verify you're legal. In practice, NABP or LegitScript is the simplest proof.

Visa lists 5912 and 5122 among high integrity risk codes "for all Card-Absent transactions" (Merchant Data Standards Manual, October 2026).
The acquirer, not you, must be approved by Visa and register each merchant; pharmacies are Tier 1, the strictest tier (Visa guide, April 6, 2023).
Registration "does not apply" to a 5912 or 5122 merchant accredited by the NABP "or other regulatory body recognized by Visa" (Core Rules, October 24, 2026).
Mastercard requires registration and proof of legality, re-checked at least every 12 months, and doesn't name LegitScript or NABP (manual of August 4, 2026).
LegitScript costs $975 to apply and $2,150 a year per site (January 2026).

Want to go further? Ask

On this page

This guide is part of our hub on online pharmacy payment processing. The general guide, for any business: high-risk merchant accounts. Prescription brands can also apply to Tagada Rx, which runs storefront, doctors, pharmacy and payments in one stack.

What Visa actually requires

Visa's rules apply to the acquirer that signs you. The code itself is defined in one line: "Merchants classified with this MCC sell prescription and proprietary drugs"1. The full code guide is on our MCC 5912 page.

Risk list
5912 and 5122 are high integrity risk codes for card-absent sales. Outside the US, only non-domestic transactions count1.
Tier 1
Visa's Integrity Risk Program puts pharmacies in its highest tier, for businesses whose illegal activity could "cause significant harm to the health, safety and/ or wellbeing of individuals"3.
Acquirer approval
The acquirer must "Submit to Visa a High-Integrity Risk Acquiring Registration Application and be approved by Visa", then register each merchant; Tier 1 needs a separate approval per category2 3.
Monitoring
From day 31, the acquirer tracks your volume, average ticket, transactions and disputes every day2.

So the question isn't "am I Visa certified?" but "can my acquirer board pharmacies, and will it register me or rely on my accreditation?"

Fig. 1What Visa asks of your acquirer, step by step

approved declined or closed routing step

Acquirer approvalHigh-Integrity Risk Acquiring application, per Tier 1 category
thenMerchant registrationSkipped if NABP or a body Visa recognizes accredits you
thenDaily monitoringVolume, ticket, transactions, disputes from day 31

There is no Visa certificate for you to hold. The steps sit with the acquirer.

Visa Core Rules, October 24, 2026, sections 1.9.5.1 and 10.4.5.2; Visa Integrity Risk Program guide, 2023.

The accreditation exemption

Accreditation takes you out of Visa's registration step. Visa's Core Rules, section 1.9.5.1, note 12:

This does not apply to Merchants assigned MCC 5122 or 5912 if the Merchant is accredited by the National Association of Boards of Pharmacy (NABP) or other regulatory body recognized by Visa.

Visa Core Rules, section 1.9.5.1, note 1, October 24, 2026

Visa's program guide names the accepted programs: NABP's Healthcare Merchant Accreditation or Drug Distributor Accreditation, "or the LegitScript Healthcare Merchant Certification (HMC) Program"3.

Program	Who it's for	What it requires
NABP Digital Pharmacy Accreditation	US pharmacies with a website	Licensure "in all jurisdictions in which you are conducting business"; an active .pharmacy domain; 3-year term (NABP)7
NABP Healthcare Merchant Accreditation	Broader healthcare merchants	Renewed every year; used for ad platforms and card networks (NABP)10
LegitScript Healthcare Merchant Certification	Online, mail-order and compounding pharmacies, among others	All healthcare licenses, affiliates, partners' status; $975 + $2,150 a year per site (LegitScript)5 6

Comparing the two: NABP .pharmacy or LegitScript.

Mastercard: registration and proof of legality

Mastercard has no exemption clause. Its rule targets "non-face-to-face selling of prescription drugs" (MCC 5122 and 5912)4.

Registration first: "Before acquiring Transactions [...] an Acquirer first must register the Merchant with Mastercard"4.
Proof of legality: the acquirer verifies you comply with all applicable laws; this "may include, but is not limited to, a written opinion from independent, reputable, and qualified legal counsel or accreditation by a recognized third party"4.
Every year: the verification is repeated at least every 12 months4.
Sanctions on the acquirer: up to $10,000 for acquiring without registering, then $5,000 a month for three months and $25,000 a month after that4.

Mastercard's rule for non-face-to-face prescription sales, section 9.4.3.

Mastercard charges an annual registration fee per merchant, but the August 2026 manual doesn't publish the amount4.

$10,000

Mastercard sanction, at most, for acquiring without registering

$5,000

Then a month, for three months

$25,000

A month after that

Visa and Mastercard side by side

	Visa	Mastercard
Codes	5912, 5122, card-absent1	5912, 5122, non-face-to-face4
Who registers	The acquirer, after Visa approves it for the category2 3	The acquirer4
Accreditation	NABP or a recognized body exempts you from registration2 3	One accepted proof of legality, among others4
Names LegitScript?	YesIn the 2023 program guide3	No4
Re-check	Daily monitoring from day 312	Legality verified at least every 12 months4

LegitScript describes its certification as "a necessary part of the approval process for conducting card-not-present transactions with Visa and Mastercard"5. That's its own wording; the network rules above are narrower. Most acquirers still ask for it, because it's the fastest proof they can file.

Tagada follows Visa and Mastercard rules and the laws that apply to payments.

What you provide to your acquirer

[ ] Pharmacy licenses: home state and every state you ship to
[ ] NABP or LegitScript accreditation, or the application in progress
[ ] Pharmacist-in-charge and owner details
[ ] DEA registration, if you dispense controlled substances
[ ] Your checkout: how a valid prescription is required before dispensing
[ ] Refund, shipping and privacy policies, and your billing descriptor

Licenses in detail: who can own an online pharmacy, and which licenses you need. The approval process: how to get an online pharmacy merchant account approved.

Watch out

Accreditation removes a Visa step; it doesn't oblige anyone to accept you. Stripe, for example, says pharmacies are "Maybe" and only in the US, Canada, the EU, Australia, the UK and Japan8.

How Tagada helps

LegitScript and payments included, for brands

Tagada Rx is a telehealth stack with storefront, doctors, pharmacy and payments for brands that don't want to run the pharmacy themselves9.

Payments and LegitScript included9.
Pharmacy routing to a licensed US pharmacy9.
Card captured on approval: hold, capture on approval, rebill on ship9.
By application: Tagada Rx is open to a selected group of brands, and every application gets a reply9.

Details on the Tagada Rx page.

Apply to Tagada Rx

LegitScript and payments included, for brands

Updated on November 3, 2026

Nick Bonnassies

CMO at Tagada

CMO at Tagada. Before Tagada, Nick built direct-to-consumer brands that generated over $115M in sales, raised over $25M in crowdfunding and sold two of them. He also works as a fractional CMO on marketing operations and AI systems.

Frequently asked questions

Is there a Visa certification for online pharmacies?

No. Visa requires the acquirer to be approved for high integrity risk categories and to register each online pharmacy it signs. A pharmacy accredited by the NABP or another body Visa recognizes, such as LegitScript, is exempt from that registration.

Does Visa require LegitScript?

No. Visa's rule names the NABP "or other regulatory body recognized by Visa". Its 2023 program guide lists LegitScript's Healthcare Merchant Certification among the accepted programs, next to NABP's. Either one qualifies for the exemption.

Does Mastercard require LegitScript?

Mastercard's merchant manual doesn't name LegitScript or NABP. It requires the acquirer to register you and verify your legality, which "may include" a legal opinion "or accreditation by a recognized third party", at least every 12 months.

What is MCC 5912 for Visa and Mastercard?

It's the code for drug stores and pharmacies that "sell prescription and proprietary drugs". Both networks treat card-absent 5912 sales as high risk. Wholesalers use 5122. Full definitions are on our MCC 5912 and MCC 5122 pages.

Who pays for registration?

Registration is the acquirer's obligation, and Mastercard charges it an annual fee per merchant. Acquirers usually pass such costs on; ask yours how it bills them.

Sources

Checked November 3, 2026

Tagada Rx

Accredited, registered and ready for your acquirer

Tagada Rx runs the stack behind your brand. Open by selection: every application is reviewed, and we reply to each one.

Apply to Tagada Rx

01Tell us about your brand
02We review every application
03Go live under your brand after review