High-Risk Merchant

A high-risk merchant is a business that poses elevated financial, operational, or reputational risk to payment processors, acquiring banks, and card networks. This classification is based on factors including industry vertical, business model characteristics, transaction patterns, compliance history, or credit profile.

‍

The Challenge: Why High-Risk Classification Matters

‍

High-risk designation creates operational friction and financial constraints across the merchant lifecycle:

Restricted Access to Payment Infrastructure: Many acquirers and payment service providers (PSPs) decline applications from high-risk verticals entirely, forcing merchants into a smaller pool of specialized processors.

‍

Elevated Processing Costs: Merchants in this category typically pay higher merchant discount rates (MDR), transaction fees, and may be subject to rolling reserves (10-30% of transaction volume held for 90-180 days).

‍

Increased Underwriting Requirements: Merchant underwriting processes for high-risk businesses require deeper due diligence on beneficial owners, business models, and financial projections, extending approval timelines from days to weeks.

‍

Continuous Surveillance: Once onboarded, these merchants face more intensive merchant monitoring protocols, including real-time transaction screening, velocity checks, and frequent compliance reviews.

‍

Card Network Oversight Programs: Merchants flagged for excessive chargebacks may be enrolled in programs such as Mastercard's Excessive Chargeback Merchant (ECM) or Visa's Visa Dispute Monitoring Program (VDMP), which impose fines and potential termination if thresholds are breached.

‍

The core risk stems from historical patterns: certain industries and business models consistently produce higher rates of fraud, chargebacks, regulatory violations, or merchant insolvency. Payment ecosystem participants use high-risk classification as a preemptive control to mitigate these exposures.

‍

Common High-Risk Industry Verticals

‍

Payment processors and card networks have designated specific industries as inherently high-risk based on regulatory scrutiny, chargeback history, and operational characteristics. These classifications are formalized through Merchant Category Codes (MCCs), four-digit identifiers assigned during merchant onboarding that determine interchange fees, compliance requirements, and risk oversight protocols.

‍

Regulated or Restricted Industries

‍

Online gambling and gaming (MCC 7995): State-by-state licensing requirements, fraud exposure, and elevated chargeback risk from disputed losses or bonus abuse

‍

Adult entertainment (MCC 7841): Reputational risk for payment processors, high chargeback rates driven by billing disputes and unauthorized use claims

‍

Pharmaceuticals and nutraceuticals (MCC 5122 for prescription drugs, MCC 5499 for supplements): Regulatory compliance with Food and Drug Administration (FDA) oversight, counterfeit product risk, and efficacy dispute chargebacks

‍

Alcohol, tobacco, and cannabis (MCC 5921 for alcohol/wine, MCC 5993 for tobacco/e-cigarettes, MCC 8398 for cannabis): Age verification requirements, jurisdiction-specific restrictions, and federal-state regulatory conflicts (particularly for cannabis)

‍

Cryptocurrency exchanges and wallet services (MCC 6051): Anti-Money Laundering (AML) obligations, transaction irreversibility creating chargeback exposure, market volatility impacting merchant solvency

‍

High-Chargeback Verticals

‍

Travel and ticketing (MCC 4722 for travel agencies, MCC 7991 for event tickets): Extended service delivery timelines, weather/event cancellations, and consumer dispute rights under Card Not Present (CNP) regulations

‍

Subscription-based services (MCC 5968): Recurring billing disputes, "friendly fraud" from forgotten subscriptions, and unclear cancellation policies

‍

Multi-level marketing (MLM) (MCC 7399): Refund claims from distributors unable to resell inventory, regulatory scrutiny from Federal Trade Commission (FTC), and business opportunity misrepresentation disputes

‍

Debt collection and credit repair (MCC 7321 for debt collection, MCC 7276 for credit repair): Consumer protection laws (Fair Debt Collection Practices Act (FDCPA), Credit Repair Organizations Act (CROA)), high dispute frequency, and regulatory enforcement risk

‍

Fulfillment and Business Model Risks

‍

Pre-orders and crowdfunding: Delivery failure risk when funds are collected months before fulfillment (often classified under general business services MCC 7399)

‍

Drop shipping: Lack of inventory control, fulfillment delays from third-party suppliers, and difficulty resolving product quality disputes (merchant classified by product category MCC)

‍

High-ticket electronics (MCC 5732): Large transaction values increasing per-incident chargeback exposure, first-party fraud through falsified claims of non-receipt

‍

Payday lending and financial services (MCC 6051): Regulatory violations of state lending laws, consumer harm claims, and elevated dispute rates from vulnerable borrowers

‍

We observe acquirers applying high-risk classification immediately when these MCCs appear on merchant applications. However, merchants can also migrate into high-risk status post-onboarding if transaction behavior deviates from projections or if violations are detected through merchant monitoring programs, regardless of their initial MCC assignment.

‍

MCC Reference Table

Online gambling and gaming

7995

Adult entertainment

7841

Pharmaceuticals (prescription drugs)

5122

Nutraceuticals and supplements

5499

Alcohol and wine

5921

Tobacco and e-cigarettes

5993

Cannabis

8398

Cryptocurrency and payday lending

6051

Travel agencies

4722

Event tickets and entertainment

7991

Subscription-based services

5968

Multi-level marketing (MLM)

7399

Debt collection

7321

Credit repair services

7276

High-ticket electronics

5732

‍

Operational Factors That Trigger High-Risk Status

‍

Beyond industry classification, certain operational red flags elevate merchant risk profiles:

‍

Limited Processing History: Startups or newly incorporated businesses without established transaction records lack predictive data on chargeback behavior or financial stability.

‍

High Average Transaction Value (ATV): Merchants processing transactions over $500 increase exposure per chargeback and attract fraudsters targeting high-value goods.

‍

Card-Not-Present (CNP) Dominance: Online or mail-order/telephone-order (MOTO) businesses carry inherently higher fraud risk than in-person card-present transactions.

‍

Cross-Border Sales: Merchants selling internationally introduce currency fluctuations, cross-border dispute complexity, and jurisdiction-specific regulatory requirements.

‍

Rapid Volume Escalation: Transaction volume spikes that deviate significantly from projections suggest potential bust-out fraud or business model instability.

‍

Negative Credit Indicators: Poor business or personal credit scores, prior bankruptcies, or terminated processing agreements signal financial distress.

‍

Beneficial Owner (BO) or Key Management Personnel (KMP) Risk Factors: Backgrounds showing prior involvement in high-chargeback merchants, fraud investigations, or regulatory enforcement actions.

‍

We recommend acquirers maintain a dynamic risk classification model rather than static industry lists. Merchants initially classified as low-risk can migrate to high-risk status if monitoring detects emerging patterns aligned with these factors.

‍

How to Assess and Manage High-Risk Merchants

‍

Risk teams managing high-risk merchants should implement layered controls across underwriting, monitoring, and portfolio management:

‍

1. Enhanced Due Diligence (EDD) During Underwriting

‍

Verify business registration, licensing, and regulatory approvals relevant to the industry vertical (e.g., state gambling licenses for iGaming merchants).
Conduct comprehensive background checks on all beneficial owners (UBOs) and key management personnel, including litigation history, prior merchant processing relationships, and sanctions screening.
Analyze the merchant's business model documentation: revenue projections, fulfillment timelines, refund policies, and customer dispute resolution procedures.
Evaluate the merchant's website and marketing materials for compliance with card network standards (e.g., clear transaction descriptors, visible refund policies, accurate product descriptions).
Cross-reference the merchant's stated business model against transaction patterns from similar vertical benchmarks to identify projection mismatches.

‍

2. Implement Financial Controls and Reserve Structures

‍

Apply rolling reserves (typically 10-30% of transaction volume held for 90-180 days) to cover potential chargeback liabilities and ensure funds are available for consumer refunds.
Set lower transaction velocity limits during the initial operating period (first 90-180 days) to contain exposure while establishing baseline behavior.
Require larger security deposits or letters of credit for merchants with prior processing terminations or elevated credit risk indicators.

‍

3. Deploy Real-Time Transaction Monitoring

‍

Configure alerts for transaction velocity thresholds, large-value outlier transactions, or cross-border patterns that deviate from the approved business model.
Monitor chargeback ratios daily or weekly rather than monthly to detect early warning signals before card network thresholds are breached.
Track refund rates as a leading indicator (excessive refunds often precede chargebacks as merchants attempt to manage disputes).
Integrate with third-party fraud detection tools and use device fingerprinting, IP geolocation, and velocity checks at the transaction level.

‍

4. Conduct Frequent Portfolio Reviews

‍

Perform periodic reviews (quarterly or semi-annually for high-risk merchants vs. annually for low-risk) to reassess business model accuracy, compliance status, and financial health.
Update beneficial ownership verification and rescreen against sanctions lists, adverse media, and law enforcement databases.
Validate that the merchant's website and operations still align with the originally approved business description (scope creep into prohibited verticals is common).

‍

5. Prepare for Regulatory and Card Network Compliance Programs

‍

If the merchant enters Visa's VDMP or Mastercard's ECM program, implement immediate remediation: analyze chargeback root causes, adjust transaction descriptors, improve customer service response times, or tighten fraud prevention controls.
Document all risk assessment decisions, monitoring findings, and remediation actions to demonstrate compliance during audits or scheme reviews.
Consider offboarding merchants who cannot reduce chargeback ratios below scheme thresholds within the allowed remediation window.

‍

Example: High-Risk Merchant in Practice

‍

A newly launched online supplement retailer applies for merchant processing. The business has been incorporated for four months, has no prior processing history, and projects $200,000 in monthly transaction volume with an average transaction value of $120. The merchant's products include weight loss supplements and nootropics marketed with health benefit claims.

‍

During underwriting, the acquiring bank classifies this merchant as high-risk due to:

‍

Nutraceutical industry vertical (MCC 5499, subject to Federal Trade Commission (FTC) and Food and Drug Administration (FDA) oversight)
Limited operating history and no transaction benchmarks
Health claims that may violate advertising regulations
High potential for consumer disputes regarding product efficacy

‍

The acquirer approves the merchant under the following conditions:

‍

20% rolling reserve held for 180 days
Transaction velocity limits of $50,000 per week for the first 90 days
Monthly compliance reviews of website marketing claims
Requirement to implement a robust refund policy with 60-day return window

‍

Three months post-onboarding, monitoring detects the merchant's chargeback ratio at 1.8% (industry benchmarks for nutraceuticals typically fall below 1.0%).

‍

The acquirer conducts an immediate review and discovers:

‍

Marketing emails contain exaggerated health claims not present during underwriting
The merchant added a new product line (prescription-alternative medications) without notifying the acquirer
Customer service response times average 5-7 days, contributing to chargeback filings

‍

The acquirer issues a remediation notice requiring the merchant to remove non-compliant marketing, cease sales of unauthorized products, and reduce chargeback ratios below 1.0% within 60 days. Failure to meet these conditions will result in processing termination.

‍

This example demonstrates why continuous monitoring and adaptive risk controls are essential when managing high-risk merchants. Initial underwriting assessments cannot predict mid-lifecycle behavior changes, making ongoing surveillance and enforcement mechanisms critical to protecting the payment ecosystem.

‍

Strategic Impact on Payment Ecosystem Participants

‍

High-risk merchant management represents a balance between revenue opportunity and portfolio risk containment:

‍

For Acquirers and PSPs

High-risk merchants typically face processing rates 2-4x higher than standard-risk merchants, but also carry the greatest exposure to financial loss through chargebacks, refunds, and regulatory fines.
Portfolio concentration in high-risk verticals increases scrutiny from card networks and can result in registration downgrades or fines if excessive chargeback rates persist at the acquirer level.
Reputation damage from facilitating fraudulent or non-compliant merchants can lead to loss of card network sponsorship or market trust.

‍

For Merchants

High-risk designation creates structural cost disadvantages, with processing fees and reserve requirements materially impacting profitability margins compared to competitors in low-risk categories.
Access to mainstream payment methods (Visa, Mastercard, American Express) may be restricted, forcing reliance on alternative payment methods with lower consumer adoption rates.
The administrative burden of compliance reporting, document submission, and remediation consumes operational resources that could otherwise focus on growth.

‍

For Card Networks and Regulators

High-risk merchants account for disproportionate shares of consumer complaints, fraud losses, and regulatory enforcement actions despite representing a minority of transaction volume.
Card networks use monitoring programs and financial penalties to incentivize acquirers to apply rigorous risk controls, effectively distributing compliance responsibility throughout the payment chain.

‍

We observe that effective high-risk merchant management relies on technology platforms capable of ingesting and correlating data from multiple sources (transaction behavior, website monitoring, adverse media, sanctions lists, chargeback reason codes) to provide risk teams with early warning signals. Manual review processes cannot scale to the volume and speed required for modern risk detection.

‍

How Ballerine Supports High-Risk Merchant Management

‍

Ballerine provides acquirers, PSPs, and financial institutions with an AI-powered risk infrastructure designed to manage high-risk merchant portfolios efficiently and accurately. The platform automates enhanced due diligence during underwriting, continuously monitors merchant behavior post-onboarding, and delivers risk-scored insights that enable faster, more confident decision-making. Risk teams use Ballerine to reduce manual review workloads while improving fraud detection and compliance coverage across their entire merchant base.

‍