Everything high-risk businesses need to know about getting and keeping a merchant account — acquirer assessment, rolling reserves, chargebacks, costs, and payment orchestration.
Getting a merchant account as a high-risk business is not a single step — it is a process that most operators get wrong the first time. The wrong acquirer, an incomplete application, or a misrepresented business model can result in account termination, frozen funds, and blacklisting from entire acquiring networks. This guide covers the complete process: what a high-risk merchant account actually is, how acquirers assess your application, which processors work for which industries, what things cost, and how to protect the account once you have it.
A high-risk merchant account is a payment processing relationship between a business and an acquiring bank — the financial institution that processes card transactions on the merchant's behalf and settles the funds to their account. The "high-risk" designation means the acquirer has classified the business as carrying above-average risk of chargebacks, fraud, regulatory issues, or financial instability, and has priced and structured the account accordingly.
Without a merchant account, a business cannot accept Visa or Mastercard payments from customers. For most consumer-facing businesses — particularly in iGaming, adult content, crypto, forex, and CBD — card acceptance is essential. The alternative is to rely entirely on bank transfers, e-wallets, and cryptocurrency, which significantly limits the customer base in most markets.
Who controls merchant account access:
The card schemes — Visa and Mastercard — set the rules for which businesses can and cannot accept their cards. These rules are implemented through the acquiring banks that issue merchant accounts. Visa and Mastercard publish prohibited merchant category lists and high-risk merchant category codes (MCCs) that determine how a business is categorised and what compliance requirements apply.
Key distinction: a merchant account is not the same as a business bank account. Your merchant account receives card payment settlements, which are then swept to your business bank account. You need both — and for high-risk businesses, obtaining both is a separate process requiring separate applications.
Acquiring banks conduct underwriting on every merchant application — a process that assesses whether the risk of the relationship is acceptable given the potential revenue. For high-risk businesses, this underwriting is substantially more intensive than for standard merchants.
Chargeback risk is the primary concern. A chargeback occurs when a cardholder disputes a transaction with their bank rather than seeking a refund from the merchant. Chargebacks cost acquirers money — through scheme fees, processing costs, and potential fines from Visa/Mastercard if the merchant's chargeback rate exceeds programme thresholds. High-risk industries historically generate more chargebacks than standard retail, which is the core reason for their classification.
Fraud risk — the likelihood that the merchant's platform will be used to process fraudulent transactions, either by the merchant themselves or by their customers. Acquirers assess this through the merchant's fraud prevention tools, customer verification procedures, and the transaction patterns typical of their industry.
Regulatory and reputational risk — whether the business is licensed and compliant in the jurisdictions it operates in, and whether association with the business poses reputational risk to the acquirer. An unlicensed iGaming operator or an adult content business without adequate age verification creates regulatory exposure for the acquirer.
Financial stability — the acquirer assesses whether the business has the financial reserves to cover potential chargebacks if the relationship is terminated. Rolling reserves exist precisely to provide this buffer.
Processing history — the single most important factor for established businesses. Six to twelve months of processing statements showing low chargeback rates, consistent volumes, and no unexplained spikes dramatically improves approval rates and reduces reserve requirements.
| Feature | Standard Merchant Account | High-Risk Merchant Account |
|---|---|---|
| Processing rate | 0.3–2% | 2.5–8% |
| Rolling reserve | None or minimal | 5–15% held 90–180 days |
| Contract length | Month-to-month | 12–36 months typical |
| Early termination fee | Rare | Common (€5,000–€50,000) |
| Volume limits | High | May be capped initially |
| Multi-currency | Variable | Usually available |
| Chargeback threshold | 1% (Visa/Mastercard standard) | Same, but monitored more closely |
| Approval timeline | Days | 2–8 weeks |
| Application complexity | Simple | Extensive |
The higher costs of high-risk merchant accounts are not arbitrary — they reflect the genuine additional operational and financial risk the acquirer absorbs. As a merchant's track record improves (lower chargebacks, stable volumes, clean compliance record), these terms typically improve through renegotiation.
Visa and Mastercard maintain lists of restricted and prohibited merchant categories. Industries that consistently require high-risk merchant accounts include:
Online gambling and iGaming — casino, sports betting, poker, skill games. Regulated by the MCC code 7995. Requires a valid gambling licence in the operator's jurisdiction; most acquirers require MGA, UKGC, Gibraltar, or equivalent.
Adult content — adult entertainment websites, subscription platforms, cam sites, studios. High chargeback exposure from "friendly fraud" (customers disputing legitimate purchases). Requires robust age verification compliant with the Digital Services Act in the EU and BBFC standards in the UK.
Cryptocurrency — exchanges, wallets, OTC desks. Classified as high-risk due to AML exposure, transaction irreversibility, and VASP regulatory gaps. Requires VASP registration under FATF Travel Rule standards in most jurisdictions.
Forex and CFD broking — regulated by MCC 6211. Client fund risk, regulatory complexity, and high transaction values make this a consistently high-risk category. Requires FCA, CySEC, ASIC, or equivalent authorisation for most acquirers.
CBD and hemp products — legal ambiguity across jurisdictions creates underwriting complexity. Most acquirers require Certificate of Analysis (COA) documentation, THC content below legal thresholds, and evidence of compliance with local food supplement regulations.
Pharmaceuticals and nutraceuticals — risk of counterfeit product, prescription drug issues, and regulatory complexity.
Travel and ticketing — high chargeback risk due to event cancellations, airline insolvency, and advance purchase disputes.
Subscription businesses — any recurring billing model generates elevated chargeback risk from consumers who forget they have subscribed.
For industry-specific guides, see: iGaming Business Bank Account | Adult Content Business Banking | Crypto Business Bank Account | Forex Broker Bank Account | CBD Business Banking
The high-risk payment processing market has several distinct tiers. Understanding which type of processor you are dealing with affects both your negotiating position and the services you receive.
A direct acquirer is a bank that holds a principal membership with Visa and Mastercard and underwrites merchants directly on its own books. Direct acquiring relationships typically offer the most competitive rates and the highest degree of account stability — but they are also the hardest to obtain and require the strongest application profile.
Direct acquirers that serve high-risk merchants include select Eastern European banks, Caribbean banks, and specialist European payment banks. Most do not publicly advertise their high-risk merchant services.
Payment Service Providers (PSPs) that specialise in high-risk industries aggregate merchant volume across many merchants and process through their own or partner acquiring relationships. They absorb some of the underwriting risk themselves and pass the cost through elevated rates.
Key high-risk PSPs include:
Payment orchestration platforms sit above multiple acquirers and route transactions to the most appropriate processor based on card type, geography, currency, and risk profile. For high-risk businesses with complex processing needs, orchestration dramatically improves approval rates and reduces single-acquirer dependency.
Payment aggregators (Stripe, PayPal, Square) use a shared merchant account model — all merchants process under the aggregator's single merchant ID. Most aggregators have blanket exclusions for high-risk industries and will terminate accounts if they discover prohibited business models. Do not attempt to process high-risk transactions through aggregators. Account termination typically comes with frozen funds held for 90–180 days.
A rolling reserve is a percentage of your card processing volume that your acquirer withholds as security against future chargebacks. If you process €100,000 per month and your acquirer holds a 10% rolling reserve with a 180-day release cycle, they retain €10,000 of each month's volume and release it six months later.
Why rolling reserves exist: When a merchant's account is closed — whether by the acquirer or the merchant — chargebacks continue to arrive for 60–180 days after the last transaction. If the acquirer does not hold reserves, it bears these losses directly. Rolling reserves protect the acquirer; the cost is borne by the merchant in the form of delayed cash flow.
Typical rolling reserve terms for high-risk businesses:
How to reduce your rolling reserve over time:
Chargebacks are the primary reason high-risk merchant accounts get terminated. Understanding how they work — and how to prevent them — is essential for any business that processes card payments.
A chargeback occurs when a cardholder contacts their issuing bank and disputes a transaction. The issuing bank investigates; if it finds in the cardholder's favour, it reverses the charge and the merchant is debited the transaction amount plus a chargeback fee (typically €15–€35 per chargeback).
Visa and Mastercard chargeback thresholds:
Categories of chargebacks:
Chargeback prevention tools every high-risk merchant should use:
A complete application package for a high-risk merchant account typically includes:
| Document | Notes |
|---|---|
| Certificate of Incorporation | Certified copy; apostille required for some jurisdictions |
| Memorandum & Articles of Association | Full constitutional documents |
| Register of Directors & Shareholders | Current, signed |
| UBO Declaration & ID | Passport + proof of address for all beneficial owners above 10% |
| Source of Funds Declaration | For the business — initial capitalisation and ongoing revenue sources |
| Business Plan | Including projected monthly volumes, average transaction value, target markets |
| Regulatory Licences | Gambling licence, VASP registration, FCA/CySEC authorisation, or equivalent |
| AML / KYC Policy | Business-specific, not a downloaded template |
| Website / Platform | Live or fully documented staging environment |
| Existing Processing Statements | 3–6 months if available — the most valuable document in your application |
| Existing Bank Statements | 3–6 months of business account statements |
| Privacy Policy & Terms of Service | Live on your website; must match your processing model |
| Refund Policy | Clear, prominent, and realistic — ambiguous refund policies are a chargeback trigger |
| Customer Service Contact | Visible phone number or email on your website |
The most common application failure is submitting incomplete documentation — particularly missing processing history, vague business plans, or AML policies that are clearly generic. Acquirer underwriting teams review hundreds of applications; a well-prepared package stands out immediately.
Your Merchant Category Code (MCC) determines how Visa and Mastercard classify your business and which acquirers can process for you. Common high-risk MCCs include:
Apply to acquirers who explicitly serve your MCC. Applying to a processor that does not accept your MCC wastes everyone's time.
Your first merchant account should be with a specialist high-risk processor, not Stripe, PayPal, or a mainstream bank. Mainstream processors will terminate the account on discovery; specialist processors have the underwriting infrastructure to maintain it. Once you have processing history, you can expand to additional acquirers and potentially negotiate better rates.
Describe your business exactly as it is. State your MCC, your licence number and jurisdiction, your expected monthly volume, average transaction value, and your primary markets. Acquirer underwriting teams will verify all of this — discrepancies between the application and reality are grounds for immediate termination.
Present your AML policy, KYC procedures, fraud prevention tools, and chargeback management approach proactively. An application that demonstrates a business actively managing its compliance and fraud risk is materially more likely to be approved — and at better rates — than one that treats compliance as an afterthought.
Never rely on a single acquiring relationship. Apply to 2–3 processors simultaneously so that you have a primary and backup account operational from launch. The high-risk processing market changes rapidly — acquirers change their risk appetite, exit markets, or are acquired. Operational resilience requires multiple relationships.
| Cost Component | Typical Range | Notes |
|---|---|---|
| Processing rate | 2.5–8% per transaction | Varies by industry, licence, volume, chargeback history |
| Rolling reserve | 5–15% held 90–180 days | Released on rolling basis; frozen on account termination |
| Setup / application fee | €0–€2,500 | Some processors charge upfront; legitimate cost, not a guarantee of approval |
| Monthly minimum | €300–€2,000/month | Fee charged if you do not process enough volume |
| Chargeback fee | €15–€35 per chargeback | Plus possible scheme fines if thresholds exceeded |
| Refund fee | €0–€5 per refund | Some processors charge for refund processing |
| Early termination fee | €5,000–€50,000 | Read contracts carefully before signing |
| PCI DSS compliance | €50–€500/year | Annual payment card industry compliance certification |
| 3DS2 authentication | €0.05–€0.20 per transaction | Per-transaction fee for strong customer authentication |
Total effective processing cost for a high-risk business typically ranges from 3.5–10% of card processing volume when all fees and reserves are factored in. This is significantly higher than the 0.5–2% effective cost for standard merchants. Reducing this cost over time requires building processing history, maintaining low chargebacks, and renegotiating terms annually.
Payment orchestration is the practice of routing transactions through multiple acquiring relationships simultaneously, rather than relying on a single processor. For high-risk businesses, orchestration is not a luxury — it is an operational necessity.
Why orchestration matters:
Building an orchestration stack:
A basic high-risk orchestration setup involves:
This setup reduces single-point-of-failure risk, improves approval rates by 5–15%, and provides negotiating leverage with both acquirers.
Full guide: High-Risk Payment Processing: Costs, Reserves & How It Works
Card processing is important but not the only payment infrastructure a high-risk business needs. Alternative payment methods (APMs) reduce dependence on card rails and often carry lower costs and chargeback risk.
Bank transfers (Open Banking) — direct account-to-account payments via Open Banking infrastructure. No chargebacks, instant settlement in many markets, lower cost than cards. Particularly effective in the UK (where Open Banking adoption is highest in Europe), Germany, the Netherlands, and the Nordics.
E-wallets — Skrill, Neteller, and similar wallets are widely used in iGaming. Transactions are not chargeable in the traditional sense once funds are in the wallet, which reduces chargeback exposure at the acquirer level.
Cryptocurrency — USDT, USDC, and Bitcoin are increasingly used for B2B payments, affiliate settlements, and — for crypto-native businesses — customer deposits and withdrawals. No chargeback risk; transaction irreversibility is a feature, not a bug, for merchants.
Pay-by-bank — real-time bank payment initiation, available through providers like Trustly, Volt, and Token. Zero chargeback risk, typically lower cost than cards, and growing consumer adoption across Europe.
Prepaid cards and vouchers — Paysafecard and similar voucher-based payment methods are popular with privacy-conscious consumers in iGaming and adult content markets.
A well-structured payment mix for a high-risk business typically allocates 50–70% to cards (for maximum market reach) and 30–50% to APMs (for cost efficiency and chargeback reduction).
Merchant account termination is more common in high-risk industries than in standard retail — and the consequences are severe: frozen reserves, processing downtime, and potential blacklisting from acquiring networks. Protecting established processing relationships requires ongoing discipline.
Keep chargebacks below 0.5%. The Visa and Mastercard threshold is 1%, but acquirers typically impose internal limits of 0.75% and begin informal pressure at 0.5%. Monitor your chargeback rate daily, not monthly.
Enrol in Verifi and Ethoca immediately. Both alert services intercept disputes before they become chargebacks, at a fraction of the cost. There is no reason not to use them.
Never process outside your declared MCC or business model. If your merchant account was approved for iGaming and you begin processing payments for a separate adult content business through the same account, this constitutes misrepresentation. Acquirers monitor transaction patterns and will terminate if they detect MCC mismatch.
Notify your processor of volume changes. If you expect a significant volume increase (seasonal promotion, new market launch), inform your acquirer in advance. Unexplained volume spikes trigger automated fraud review.
Monitor your descriptor. Your merchant descriptor — the text that appears on your customer's bank statement — should clearly identify your business. A confusing or misleading descriptor is a primary driver of friendly fraud chargebacks. Use a recognisable name and include a customer service phone number where possible.
Maintain a second active account. If your primary account is terminated, having a live secondary account means you continue processing within hours, not weeks.
How long does it take to get a high-risk merchant account?
Typically 2–8 weeks from submission of a complete application. The timeline depends on the processor's underwriting queue, the completeness of your documentation, and whether additional information is requested during review.
Can I get a merchant account without processing history?
Yes, but with less favourable terms. Without processing history, acquirers have no empirical basis for assessing your chargeback risk — so they compensate with higher rates and larger rolling reserves. Providing strong ancillary evidence (detailed business plan, robust fraud prevention tools, strong AML programme, regulatory licence) partially offsets this.
What happens to my rolling reserve if my account is terminated?
The reserve is held for the duration of the rolling reserve period (90–180 days) after the last transaction, then released — assuming chargebacks during that period do not exceed the reserve amount. In practice, funds are typically released 6 months after account closure. Read your processing agreement carefully for the specific terms.
Is it illegal to process through a standard merchant account if I'm high-risk?
Not illegal, but it violates your merchant agreement — which is grounds for immediate termination and fund freezing. Processors that discover a high-risk business processing under a misrepresented MCC typically freeze funds immediately and report the merchant to Visa/Mastercard's MATCH list (Member Alert to Control High-Risk Merchants), which blacklists the business from mainstream acquiring for up to five years.
What is the MATCH list and how do I avoid it?
The MATCH list (also called the Terminated Merchant File or TMF) is a shared database maintained by Mastercard listing merchants whose accounts were terminated for cause — typically fraud, excessive chargebacks, or misrepresentation. Being on the MATCH list makes it extremely difficult to obtain a merchant account with any mainstream processor for up to five years. Avoid it by operating honestly, managing chargebacks proactively, and never misrepresenting your business model.
Do I need a business bank account before I can get a merchant account?
Yes. Card processing settlements are swept to a business bank account — you cannot have a merchant account without a receiving account. For high-risk businesses, setting up both simultaneously is recommended. See our High-Risk Business Banking Guide for banking options.
GetBanked connects high-risk businesses with acquiring banks, specialist PSPs, and payment orchestration platforms matched to your specific industry, licence, and volume profile. We work with all major high-risk processors — and with a number of additional acquiring partners we cannot name publicly due to confidentiality agreements.
Submit a free pre-approval in 2 minutes. We respond within 24 hours with a realistic outcome.
Get Free Pre-Approval