Skip to content
Card-network rules

What is a high-risk merchant account? The definition, from bank examiners and Visa’s rules

A high-risk merchant account is a card-acceptance account that the bank behind it considers more exposed to fraud, charge-backs or credit losses than usual. Guidance for US bank examiners defines it that way, and Visa’s published rules name the business categories it treats as high-integrity risk. Where Visa classes a business as high-integrity risk, its rules change how the bank must register and monitor the account.

On this page

The definition

A merchant account, in the glossary of the Comptroller’s Handbook on merchant processing, is a bank account opened by a merchant through a bank or other financial institution that is a member of a major card network. The handbook is the guidance the Office of the Comptroller of the Currency (OCC) gives US bank examiners.

The same glossary defines a high-risk merchant account as one that poses increased risk to banks through fraud, high charge-back rates or poor credit history. In other words, high-risk describes how the bank sees the account, not a different product. The account works like any other merchant account; the terms around it are what change.

  • Businesses whose products carry a high likelihood of consumer fraud
  • Businesses with historically high refund and charge-back rates
  • Businesses with an elevated risk of bankruptcy
  • Businesses selling products or services specially regulated in the United States, such as gambling or gaming services or tobacco products

Those are the handbook’s own examples of categories that may be deemed high-risk. It leaves the decision to each bank: its underwriting guidelines decide which merchants it accepts and on what terms.

How Visa classifies high-integrity risk

Card networks use their own, narrower term. Visa’s rules, in the edition of 18 April 2026, classify a merchant as a High-Integrity Risk Merchant when it is required to use one of the merchant category codes (MCCs) Visa specifies for that purpose. An MCC is the four-digit code that tells the card network what kind of business a merchant is, and Visa’s rules require the acquirer to assign the code that most accurately describes the business.

Visa’s Merchant Data Standards Manual of April 2026 lists the current high-integrity-risk codes. The table repeats Visa’s own descriptions; it describes the codes, not any business.

High-integrity-risk MCCs in Visa’s Merchant Data Standards Manual, April 2026
MCCVisa’s descriptionWhen it counts as high-integrity risk
5122Drugs, Drug Proprietaries, Druggist SundriesAll card-absent transactions
5912Drug Stores, PharmaciesAll card-absent transactions; in some regions only for non-domestic transactions
5966Direct Marketing, Outbound Telemarketing MerchantsAll card-absent transactions
5967Adult Content and ServicesAll card-absent transactions
5993Cigar Stores and StandsAll card-absent transactions; in some regions only for non-domestic transactions
7273Dating and Escort ServicesAll card-absent transactions
7995Betting, including lottery tickets, casino gaming chips, off-track betting and wagers at race tracksAll card-absent transactions
5968Subscription negative-option merchantsCertain card-absent transactions
4816, 5816, 6211, 6051 and 6012Cyber lockers and file sharing; skilled game wagering; financial trading platforms; crypto exchanges, wallets and on-rampsCertain card-absent transactions

Scroll the table to see all columns.

Visa’s rules also say that where a business has several lines of business at one location and one of them is high-integrity risk, that line gets its own high-integrity-risk code and the others get another code. In a card-absent environment, a merchant that conducts online gambling transactions must use 7995 for all its transactions, even if gambling is not its main business.

The two terms overlap but are not the same. A bank can treat an account as high-risk because of its charge-back history or credit, even when its code is not on Visa’s list.

What changes behind a high-risk account

Visa’s rules place most of the extra work on the acquirer, the bank that settles your card payments. Before it submits transactions from high-integrity-risk merchants, the acquirer must apply to Visa and be approved, undergo a financial review and meet Visa’s capital requirements or commit to compensating controls such as collateral, and register each high-integrity-risk merchant with Visa, along with any payment facilitator or agent that brings such merchants to it.

  • Daily records: the acquirer must keep each such merchant’s daily gross sales volume, average transaction amount, number of transaction receipts and number of disputes.
  • Daily monitoring: it must start comparing your activity with your normal daily pattern on the 31st calendar day from your first deposit, review that pattern weekly and adjust it monthly.
  • Records on request: it must give Visa your original underwriting package and its monitoring records within 7 calendar days if Visa asks.
  • Extra checks: Visa may impose security or authentication requirements on a high-integrity-risk merchant.
  • Disqualification: Visa may disqualify a high-integrity-risk merchant that meets or exceeds a critical level of dispute activity, acts to circumvent Visa programmes or causes harm to the Visa system.

Visa’s rules also let it assess an acquirer USD 2,000 a month for each high-integrity-risk merchant it fails to register. That assessment is charged to the acquirer, not to the merchant.

The OCC handbook describes the bank’s side in the same direction: the financial condition of high-volume and high-risk merchants should be monitored regularly, and many acquirers protect themselves from high-risk merchants with reserve or holdback accounts, funded as a lump sum or by withholding part of each day’s proceeds.

If you sell subscriptions

Visa lists subscription negative-option merchants among its high-integrity-risk codes for certain card-absent transactions. In the United States, a federal statute, 15 U.S.C. § 8403, also sets three requirements for selling online with a negative-option feature: clearly and conspicuously disclose all material terms before taking billing information, obtain the consumer’s express informed consent before charging, and provide simple mechanisms to stop recurring charges.

What it means when you apply

  • Describe your business, products and sales channels exactly as they are. The code the acquirer assigns follows from that description, and the rules require the most accurate one.
  • Expect the provider to ask more about your dispute and refund history, your finances and your owners, because the acquirer must monitor and may have to justify your account to the card network.
  • Ask whether a reserve applies, how it is funded and when it is released.
  • Keep dispute levels in view from the first day: under Visa’s rules they are tracked daily from your 31st day of processing.
  • Get every term in writing before you sign.

None of this says whether any particular provider will accept you. Each provider applies its own underwriting, and the provider decides.

Where Zolution helps

Zolution lists offers from agents, intermediaries and direct banks that work with high-risk sectors. Each offer shows the provider type, the contracting company and its country, the merchant ID structure, the fees, the reserve and the payout terms, so you can compare what a high-risk account costs with each provider before you apply.

These terms are provider-declared: Zolution does not check them, does not process payments or hold funds, and approves nobody. Zolution Standard membership costs nothing.

Questions, answered

What makes a merchant high-risk?

In guidance for US bank examiners, an account is high-risk when it poses increased risk to the bank through fraud, high charge-back rates or poor credit history. The examples given include businesses with high refund and charge-back rates and businesses selling specially regulated products such as gambling or tobacco. Each bank applies its own underwriting guidelines.

Is a high-risk merchant the same as Visa’s high-integrity risk?

Not exactly. Visa’s high-integrity-risk classification follows from the merchant category code a business must use, such as 5967 for adult content and services or 7995 for betting in card-absent transactions. A bank can also treat an account as high-risk for other reasons, such as its charge-back history.

Does a high-risk account cost more?

Neither source sets prices. Visa’s rules require extra registration and daily monitoring by the acquirer, and the OCC handbook notes that many acquirers use reserves for high-risk merchants. What that means in fees and reserves differs by provider, so compare the terms each offer states.

Sources

  1. Comptroller’s Handbook: Merchant Processing (Version 1.0, August 2014; reputation-risk references removed 20 March 2025)

    Office of the Comptroller of the Currency · Opened 14 October 2026

  2. Visa Core Rules and Visa Product and Service Rules (edition of 18 April 2026)

    Visa · Opened 14 October 2026

  3. Visa Merchant Data Standards Manual (April 2026)

    Visa · Opened 14 October 2026

  4. 15 U.S.C. § 8403, Requirements for certain Internet-based sales

    Legal Information Institute, Cornell Law School · Opened 14 October 2026

  5. Payment terms explained

    Zolution · Opened 14 October 2026

ZOLUTION STANDARD

Your next payment provider starts here.

Merchants can request offers and invite providers. Both options are included in your membership and remain available in your workspace.

Standard membership · Complimentary
Confirm your email to sign in or join. No credit card.