High-risk merchant accounts: how underwriting actually works

If you've been told your business is "high-risk", you're in large company: travel, subscriptions, online gaming, nutraceuticals, adult content, CBD, ticketing and many digital-goods businesses are routinely classified that way. The label doesn't mean you're doing anything wrong. It means an acquirer expects more financial exposure from your transactions than from, say, a local bakery — and prices and controls the relationship accordingly.

This guide explains how high-risk merchant account underwriting works from the acquirer's side, so you can prepare an application that gets a fair, fast answer.

Why acquirers care about risk

When a cardholder disputes a payment, the card scheme pulls the money back from the acquirer, and the acquirer recovers it from the merchant. If the merchant can't pay — because it has closed, or chargebacks exceed its funds — the acquirer absorbs the loss. Underwriting is the acquirer estimating that exposure before it agrees to carry it.

What makes a merchant "high-risk"

• Industry and MCC. Every merchant is assigned a merchant category code. Some codes, such as 7995 for betting and gambling, carry scheme-level rules and closer monitoring by default.
• Delivery model. If customers pay today for something delivered weeks later (flights, events, pre-orders), the acquirer is exposed for that whole window.
• Recurring billing. Subscriptions are legitimate and popular, but forgotten or unclear renewals are a classic source of disputes.
• Processing history. Previous chargeback and fraud ratios, refunds, and any account terminations.
• Geography. Cross-border sales, owners or entities in higher-risk jurisdictions, and sanctioned regions.
• Business profile. New businesses without trading history, very high average tickets, or sudden volume spikes.

What underwriters review

The business

Company registration documents, ownership structure down to ultimate beneficial owners, licences where your sector requires them (gambling, financial services, pharmacy), and bank statements.

The owners

Identity verification for directors and significant owners, and screening against sanctions and adverse-media lists.

Your website

Underwriters read your site the way a cardholder would. They check that products and prices are clear, terms and refund policy are visible, customer-service contact details are real, and the descriptor that will appear on card statements makes sense. Missing refund or cancellation terms are among the most common — and most avoidable — reasons for delays.

Processing history

Usually three to six months of statements from your current or previous processor, showing volume, chargebacks, refunds and fraud.

Fulfilment and marketing

How orders are fulfilled, how long delivery takes, how subscriptions renew and how customers cancel. Affiliate and lead-generation models get extra attention.

Why applications get declined

• Inconsistencies between documents, the website and the application form.
• Missing or vague refund, cancellation and delivery policies.
• A chargeback history above scheme thresholds without a credible remediation plan.
• A product or jurisdiction the acquirer simply doesn't support — some categories are outside every acquirer's risk appetite.
• A previous termination that led to a MATCH listing.

How to prepare a strong application

1. Make everything consistent. Legal name, trading name, descriptor, addresses and ownership should match across every document and your site.
2. Fix your website first. Clear pricing, terms, refund and cancellation policies, contact details and, for subscriptions, explicit renewal terms at checkout.
3. Explain your numbers. If past chargebacks were high, show what changed: better descriptors, pre-dispute alerts, clearer billing emails, 3-D Secure.
4. Show your controls. Fraud screening, age or geo checks where relevant, and how you handle disputes.
5. Be honest about the model. Underwriters see many applications; surprises discovered later end relationships faster than difficult facts disclosed early.

Our high-risk processing service is built around exactly this preparation: we help assemble the application, introduce you to acquirers who serve your category and connect them to your gateway. Approval always rests with the acquirer.

Keeping the account once you have it

Approval is the start, not the finish. Card schemes run monitoring programmes for disputes and fraud, and thresholds are tighter than many merchants expect — check the current limits with your acquirer rather than relying on older figures you find online. In practice:

• Watch your dispute ratio weekly, not monthly.
• Use clear descriptors so customers recognise the charge.
• Make cancelling easy — a frustrated customer who can't cancel files a chargeback instead.
• Use 3-D Secure where it shifts fraud liability, and pre-authorization screening to stop card testing. The EMVCo 3-D Secure specification describes how the protocol works.
• Spread exposure across more than one acquirer where volume allows; payment orchestration makes that manageable.
• Expect a rolling reserve. Many high-risk accounts hold back a percentage of volume for a period; plan your cash flow for it.

The merchants who keep high-risk accounts for years aren't lucky — they treat disputes as an operating metric, not an accounting surprise.

Talk to us

If you're preparing an application or have been declined elsewhere, book a consultation. We'll tell you honestly what an acquirer is likely to see — including when a category isn't supportable.

AQ Pay Payments TeamThe engineers and payment specialists who build and operate AQ Pay's gateway and orchestration platform.