Back to Glossary

Merchant Category Code (MCC)

Merchant Category Codes (MCCs): A Complete Guide for Payment Service Providers

Merchant Category Codes (MCCs) are four-digit numerical identifiers that classify businesses based on their primary commercial activity. These codes serve as the backbone of payment infrastructure, enabling card networks, acquiring banks, payment facilitators, and processors to track, analyze, and manage transaction flows across their ecosystems.

What MCCs Actually Do

The International Organization for Standardization (ISO) maintains the official MCC framework. Card networks like Visa and Mastercard adopt these standards with slight variations in implementation.

Visa defines MCCs based on a merchant's primary business activity measured by annual sales volume in local currency. Their Merchant Data Standards Manual emphasizes that networks use MCC data for activity tracking, reporting, and risk management.

Mastercard structures MCCs through Industry Card Acceptor Business (CAB) Programs, where each code belongs to exactly one industry category. This approach links each merchant type to specific network rules and monitoring requirements.

How MCCs Affect Payment Economics

MCCs directly influence multiple cost components:

Interchange Rates: The fee structure for accepting card payments varies by MCC, reflecting the risk profile and transaction characteristics of each business type.

Cardholder Fees: Certain MCCs permit merchants to charge service fees on card transactions based on regulatory and network rules.

Risk Assessment: Acquirers and processors use MCCs to evaluate merchant risk profiles, which affects underwriting decisions and reserve requirements.

Chargeback Monitoring: Industries with historically higher dispute rates receive closer scrutiny. Accurate MCC assignment is essential for effective risk management.

Tax Reporting: MCCs signal to tax authorities which transactions require reporting, particularly for Form 1099-K thresholds.

Visa's MCC Assignment Framework

Visa maintains six core principles for MCC assignment:

  1. Accuracy First: Select the MCC that most precisely describes the merchant's actual business. When multiple business lines exist, either use the MCC representing the highest revenue stream for all transactions, or assign separate MCCs for each distinct line of business.
  2. Avoid Generic Categories: Use miscellaneous MCCs only when no specific category applies to the business model.
  3. Location-Specific Assignment: Each physical outlet or distinct e-commerce site requires its own MCC evaluation. For online merchants, each country-specific website is treated as a separate location.
  4. Co-located Business Separation: Different businesses operating from the same physical location need separate MCCs when they have distinct names, operate in different areas, or use separate point-of-sale systems.
  5. Travel and Entertainment Specificity: Major merchants in these sectors must use their designated merchant-specific MCCs for all core business transactions.
  6. Distribution Model Distinction: Direct marketing and wholesale club MCCs describe how a business operates rather than what it sells.

Mastercard's Card Acceptor Business Code Requirements

Mastercard uses the same four-digit codes as Visa but calls them Card Acceptor Business Codes. Acquirers must include a valid MCC in every authorization and clearing message they send through Mastercard's network.

The practical requirement: When an acquirer submits transaction data to Mastercard, the MCC must accurately reflect what the merchant actually does. Mastercard's systems check this coding during transaction processing. Inaccurate codes trigger compliance reviews and potential penalties.

Criteria for New MCCs

Mastercard evaluates requests for new generic MCCs (excluding travel and entertainment) based on specific thresholds:

  • Projected annual bankcard volume must reach at least $10 million USD, AND the merchant type must be demonstrably distinct from existing industries
  • OR transaction characteristics require specific identification in authorization and clearing systems to optimize network operations

High-Risk MCC Registration Programs

Both Visa and Mastercard identify certain MCCs as carrying elevated integrity risk. These categories require special registration before processing can begin.

Visa calls this the High Integrity Risk Registration program. Mastercard names theirs the Specialty Merchant Registration Program. The lists differ slightly between networks, but both focus primarily on card-not-present transaction environments where fraud risk naturally increases.

MCCs Subject to High-Risk Registration

The following codes require pre-registration with applicable card networks:

MCC code
4816
Category
Computer Network/Information Services
Description
Computer network and information services.
MCC code
5122
Category
Drugs, Drug Proprietaries, and Druggist Sundries
Description
Drug-related products and druggist sundries.
MCC code
5816
Category
Digital Goods - Games
Description
Digital goods focused on games.
MCC code
5912
Category
Drug Stores and Pharmacies
Description
Retail pharmacies and drug stores.
MCC code
5966
Category
Direct Marketing - Outbound Telemarketing
Description
Direct marketing via outbound telemarketing.
MCC code
5967
Category
Direct Marketing - Inbound Teleservices
Description
Direct marketing via inbound teleservices.
MCC code
5968
Category
Direct Marketing - Continuity/Subscription Merchants
Description
Continuity or subscription-based direct marketing merchants.
MCC code
5993
Category
Cigar Stores and Stands
Description
Cigar stores, stands, and related retail.
MCC code
6012
Category
Financial Institutions - Merchandise, Services, and Debt Repayment
Description
Financial institution transactions including merchandise, services, and debt repayment.
MCC code
6051
Category
Non-Financial Institutions - Foreign Currency, Cryptocurrency, Money Orders, Account Funding, Travelers Cheques, Debt Repayment
Description
Currency exchange, crypto, money orders, account funding, travelers cheques, and debt repayment.
MCC code
6211
Category
Security Brokers/Dealers
Description
Securities brokers, dealers, and related services.
MCC code
7273
Category
Dating Services
Description
Dating services and matchmaking.
MCC code
7800
Category
Government-Owned Lotteries (US only)
Description
Government-owned lottery transactions in the US.
MCC code
7801
Category
Government Licensed Online Casinos (US only)
Description
Government-licensed online casinos in the US.
MCC code
7802
Category
Government-Licensed Horse/Dog Racing (US only)
Description
Government-licensed horse or dog racing wagers in the US.
MCC code
7841
Category
DVD/Video Tape Rental
Description
DVD or video tape rental services.
MCC code
7994
Category
Video Game Arcades
Description
Coin-operated or pay-to-play video game arcades.
MCC code
7995
Category
Betting - Lottery Tickets, Casino Gaming, Off-Track Betting, Race Track Wagers
Description
Betting-related transactions including lotteries, casino gaming, and wagering.
MCC code
9406
Category
Government-Owned Lotteries (Non-US)
Description
Government-owned lottery transactions outside the US.

Why These Categories Carry Higher Risk

Several operational characteristics elevate risk in these MCC categories:

Delayed Delivery Models: Subscription and continuity merchants (5968) charge customers before delivering the full service period, creating dispute risk if customers forget about recurring charges or experience buyer's remorse.

Regulatory Complexity: Pharmaceutical merchants (5122, 5912) operate under strict licensing requirements that vary by jurisdiction. Cryptocurrency services (6051) face rapidly evolving regulatory frameworks across different regions.

High Dispute Rates: Dating services (7273) and telemarketing merchants (5966, 5967) historically experience elevated chargeback ratios due to customer dissatisfaction and fraud.

Intangible Goods: Digital game merchants (5816) and online gambling (7801) sell non-physical products, making it harder to prove delivery in dispute scenarios.

Fraud Targeting: Financial service merchants (6012, 6211) handle high-value transactions that attract organized fraud operations.

MCC Management for Payment Facilitators and Acquirers

Incorrect MCC assignment creates multiple problems:

Network Penalties: Visa and Mastercard issue per-transaction fines when they detect miscoded merchants during audits. Repeated violations can result in processing privilege restrictions.

VAMP Exposure: The Visa Acquirer Monitoring Program tracks excessive fraud and disputes at the acquirer level. High-risk MCCs contribute disproportionately to these metrics. Acquirers exceeding VAMP thresholds face escalating penalties and potential registration revocation.

Reserve Requirement Miscalculation: Underestimating merchant risk through improper MCC assignment leads to insufficient reserves when disputes or fraud losses materialize.

Missed Risk Signals: MCCs serve as an early indicator of portfolio composition shifts. A sudden increase in high-risk MCC volume should trigger enhanced monitoring protocols.

Strategic Approaches to MCC Compliance

Merchant Onboarding Verification: Cross-reference the merchant's stated business model against their actual transaction patterns. A merchant claiming to sell software (MCC 5734) but processing high volumes of small transactions with gaming-related descriptors likely belongs in 5816.

Ongoing Transaction Monitoring: MCC assignment isn't permanent. Merchants evolve their business models. Regular reviews of transaction data against assigned MCCs catch drift before networks identify it during audits.

High-Risk Registration Tracking: Maintain a system that flags when merchants fall into categories requiring pre-registration. Processing without proper registration exposes acquirers to immediate penalties.

Geographic Consistency: Card networks evaluate MCC assignment differently across regions. A merchant acceptable under one jurisdiction's rules may require different treatment when expanding cross-border.

Documentation Standards: When a merchant legitimately operates multiple business lines, document the rationale for MCC selection. This evidence becomes critical during network audits or dispute investigations.

How Ballerine Addresses MCC Complexity

Ballerine's risk intelligence platform provides payment service providers with automated MCC verification capabilities:

Real-Time Transaction Analysis: The system compares merchant descriptors, transaction patterns, and website content against assigned MCCs, flagging mismatches for review.

High-Risk Registration Alerts: Automatic identification of merchants requiring network registration before they begin processing, eliminating a common source of penalties.

Portfolio Risk Scoring: Aggregated view of MCC distribution across your merchant base, highlighting concentration risk in high-dispute or high-fraud categories that affect VAMP metrics.

Dynamic Monitoring Rules: Customizable thresholds that account for industry-specific patterns. A spike in refunds might be normal for seasonal retail (MCC 5311) but concerning for digital services (MCC 5968).

Merchant Evolution Tracking: Longitudinal analysis that detects when a merchant's actual business activity diverges from their original MCC assignment, triggering re-evaluation workflows.

The Bottom Line

MCC management is portfolio risk management. Payment facilitators and acquirers handling card-not-present merchants, cross-border volume, or fast-scaling SMBs face heightened exposure. The networks increasingly use automated systems to detect MCC misassignment, making reactive approaches insufficient.

Success requires combining accurate initial assignment with continuous monitoring. The merchants who represent the highest risk to VAMP metrics often start as small accounts that grow rapidly or drift into adjacent business models without updating their classification.

Network penalties are the visible cost of poor MCC management. The less visible cost comes from merchant attrition when disputes and fraud losses exceed projections, reserve releases get delayed, and acquirer-merchant relationships deteriorate due to unexpected restrictions.

Strong merchant-level intelligence transforms MCC compliance from a checkbox exercise into a competitive advantage. Payment providers who understand their portfolio composition at the MCC level can underwrite more accurately, price more competitively, and scale more confidently.

Trusted by

Trusted by Leaders in the Payments Ecosystem

70%

Reduced manual efforts

49%

Improved review resolution time

30%

Increase in 
detected fraud

“We were able to downsize our compliance staff’s workload significantly, which allowed us to allocate the savings and workforce into more improvement projects.”

Shmulik Davar

VP Product at Fido

67%

Reduced Hiring Time

“Proactively navigating fintech regulations requires faster technology adoption. Next-gen compliance infrastructures should seamlessly integrate with existing and new systems and data sources.”

Ran Nachman

VP Regulation Solutions 
at eToro

67%

Reduced Hiring Time

“Proactively navigating fintech regulations requires faster technology adoption. Next-gen compliance infrastructures should seamlessly integrate with existing and new systems and data sources.”

Vicente Mederos

Head of Risk 

at Access Group

98%

Local Compliance

“User-friendly, reliable, and fast. It’s exactly what we needed to scale without adding complexity.”

Emily Rivera

Co-Founder

4.8 rating from 1.5k reviews

Author ImageAuthor ImageAuthor ImageAuthor Image

10+

Download from app store

Download for iOS

Ready to transform how your bank onboards, underwrites, and manages merchant risk?