Applying for a high-risk merchant account in the United States requires more preparation than applying for a conventional merchant account. Acquirers and payment processors may review the business model, transaction profile, expected processing volume, customer journey, dispute exposure, compliance controls, financial information, and geographic activity before deciding whether, and on what terms, to approve an account.
For businesses operating in areas such as gaming, adult, IPTV, supplements, crypto, forex, and subscription services, the goal is not to hide risk. It is to describe the business accurately and demonstrate that payment, fraud, refund, dispute, and compliance risks are being managed.
This guide explains 15 mistakes that can weaken a high-risk merchant account application in 2026, with practical steps businesses can take before approaching a payment provider.
What Is a High-Risk Merchant Account?
A high-risk merchant account is a payment-processing account for a business whose industry, transaction characteristics, dispute exposure, geographic activity, or other risk factors may lead an acquirer to apply additional underwriting or risk controls.
A stronger application generally has three characteristics: the application accurately reflects the live business, the documentation is complete and internally consistent, and the business can demonstrate practical controls for fraud, refunds, disputes, compliance, and customer support.
There is no single approval formula. Requirements applied by one payment provider may differ substantially from those of another.
1. Treating Your Industry Classification as a Surprise
A business may be classified as higher risk because of its industry, recurring billing structure, geographic exposure, customer acquisition methods, average transaction value, or potential for fraud and disputes.
Examples can include online gaming, adult services, IPTV or digital-content businesses, certain supplements, crypto-related activities, forex, and subscription-based businesses.
Being classified as high risk does not by itself mean the business is illegitimate.
The mistake is assuming that a legitimate business will automatically be assessed in the same way as a low-risk merchant.
Before applying for a high-risk merchant account, explain exactly what you sell, where customers are located, how customers find you, how the product or service is delivered, what customers pay, how refunds work, and how much payment volume you expect.
A clear business profile gives the underwriter a basis for evaluating the actual risk.
2. Not Knowing Your Visa VAMP Position
One of the biggest mistakes in 2026 is relying on outdated generic chargeback percentages.
Visa’s Acquirer Monitoring Program, or VAMP, combines fraud and dispute activity into a ratio for applicable card-not-present transactions. Visa’s published fact sheet states that the excessive-merchant threshold for the U.S., Canada, the EU, and Asia-Pacific was reduced to 150 basis points (1.50%) effective April 1, 2026, with a minimum monthly count of 1,500 fraud and dispute events for the applicable merchant threshold.
That should not be presented as a universal “rejection rate” for U.S. businesses.
The Visa network threshold is only one part of the risk picture. Acquirers and processors can impose their own internal controls and may intervene well before a merchant reaches a network monitoring threshold.
Why the ratio matters
The VAMP calculation is count-based rather than simply looking at the dollar value of disputes. That means a business should understand its transaction counts and dispute/fraud-event counts rather than relying only on its total chargeback dollar amount.
Before applying for a high-risk merchant account, businesses should:
- Review monthly fraud and dispute counts.
- Separate performance by product, region, payment flow, and customer segment.
- Identify recurring sources of disputes.
- Ask the prospective provider what internal thresholds and monitoring procedures it uses.
- Verify current Visa and Mastercard requirements rather than relying on older blog posts.
Mastercard also maintains separate merchant compliance programs, including the Excessive Chargeback Program and Excessive Fraud Merchant Program, with their own rules.
The important takeaway is simple: do not use a generic 1% chargeback rule as a universal U.S. approval standard.
3. Submitting an Incomplete or Non-Compliant Website
A website can form an important part of a payment provider’s review.
Your site should clearly communicate what the business does, who operates it, what customers are buying, how customers are charged, how refunds work, and how customers can contact support.
At minimum, review these areas:
- Privacy Policy
- Terms and Conditions
- Refund and Cancellation Policy
- Business identity and contact information
- Product or service descriptions
- Pricing and billing information
- Subscription terms, where applicable
Your website should match your application.
For example, an application describing a one-time purchase model should not lead to a checkout that silently enrolls customers into recurring billing.
Payment security also matters. PCI Security Standards Council guidance explains that outsourcing payment processing does not remove all merchant responsibilities. Merchants still have responsibilities involving service-provider oversight, written agreements, compliance validation, and shared security responsibilities.
For businesses reviewing gateway capabilities, see Inquid’s payment gateway resource.
4. Misrepresenting the Business Model
An application should never make the business appear less risky by leaving out material information.
Disclose relevant features such as:
- Free trials
- Recurring subscriptions
- Upsells
- High-ticket transactions
- Cross-border sales
- Digital fulfillment
- Affiliate marketing
- Advertising channels
- Customer acquisition methods
- Refund and cancellation practices
The application, website, bank statements, processing history, and customer journey should tell the same story.
For a high-risk merchant account, transparency is not simply an administrative requirement. It helps the provider assess whether the proposed processing arrangement fits the actual business.
5. Ignoring Industry-Specific Licensing and Legal Requirements
Payment providers cannot legitimately support activity that is unlawful for the applicable business or jurisdiction.
The correct question is not simply, “Is this industry high risk?” It is also, “What exactly does this business do, where does it operate, and what permissions apply?”
For example:
- Online gaming: Licensing and legality can vary between U.S. jurisdictions. Customer location can therefore be an important part of the review.
- IPTV and digital content: Businesses should be able to demonstrate appropriate rights or authorization for the content they distribute.
- Forex: The regulatory status and business activities of a forex operation can materially affect its payment and compliance requirements.
- Crypto: The precise activity matters. FinCEN guidance explains that certain virtual-currency business models can fall within the money-services-business framework, depending on the nature of the activity.
- Adult businesses: Age-related controls, content ownership or consent records, customer verification, and payment-network requirements may require particular attention.
- Supplements: Product claims, ingredients, labeling, fulfillment, and applicable regulatory requirements can affect underwriting.
If a license, registration, authorization, or compliance document is relevant to the business, prepare it before submitting the application.
6. Applying Without Organized Documentation
A high-risk merchant account application may require more information than a conventional application.
Prepare documentation such as:
- Certificate or articles of incorporation
- Owner or director identification
- Proof of business address
- Corporate ownership information
- Bank statements
- Existing processing statements
- Supplier or fulfillment agreements, where relevant
- Licenses or registrations
- Business website and policy information
Processing statements can help demonstrate actual transaction volume, refunds, disputes, average ticket size, and seasonality.
Check every document for consistency. Differences in company names, addresses, ownership information, or bank details can create avoidable questions.
7. Weak Projections or Assuming a Startup Cannot Qualify
A startup does not automatically need several years of processing history to be considered by every provider.
However, limited history means the underwriter has fewer real transaction results to analyze.
A startup should therefore provide a credible explanation of:
- What the business sells
- Who owns it
- Where customers are located
- How customers are acquired
- Expected monthly volume
- Average transaction value
- Fulfillment process
- Refund exposure
- Fraud-prevention controls
Projections should have a logical basis.
Traffic forecasts, conversion assumptions, marketing spend, inventory, subscription counts, or existing contracts can provide more context than simply stating a large expected processing volume.
8. Choosing a Provider Only Because the Rate Is Low
The cheapest advertised processing rate does not automatically mean the lowest overall cost or the most suitable payment relationship.
When comparing high-risk payment processing, review the full commercial structure.
| Factor | What to Check |
| Processing rate | What is the effective processing cost? |
| Reserve | Is a reserve required? |
| Settlement | When are funds released? |
| Chargebacks | What fees and monitoring procedures apply? |
| Payment gateway | Is the gateway included? |
| Volume limits | Are daily or monthly limits imposed? |
| Contract | Are there minimum commitments or termination charges? |
| Support | Who handles operational and risk issues? |
For some businesses, predictable settlement and operational support can be more important than a marginal difference in the headline rate.
Businesses can also review Inquid’s high-risk payment processing resources when comparing infrastructure options.
9. Assuming There Is a Standard Rolling Reserve
A rolling reserve is not a universal requirement, and there is no standard rule such as “10% for 180 days” that applies to every high-risk merchant account.
Depending on the provider and risk assessment, an account may include a reserve, delayed settlement, transaction limits, or other risk controls.
Before accepting an offer, ask:
- Is a reserve required?
- How is the amount calculated?
- How long are funds held?
- When are funds released?
- Can the reserve change?
- What events can trigger a settlement hold?
- How are refunds and chargebacks handled while funds are reserved?
Settlement conditions should be evaluated as part of the total economics of the account.
10. Confusing Onshore and Offshore Structures
“Onshore” and “offshore” should not be treated as automatic indicators of better or worse payment processing.
The appropriate structure may depend on the business jurisdiction, customer geography, acquiring arrangement, settlement currencies, licensing requirements, and applicable regulations.
A non-U.S. structure does not automatically make approval easier. Likewise, a U.S. structure does not automatically guarantee better terms.
A business should evaluate:
- Where the company is incorporated
- Where customers are located
- Where transactions are acquired
- Where funds settle
- What licenses are required
- What compliance obligations apply
- What contractual restrictions exist
For businesses operating in the UK, the FCA provides current guidance on the Payment Services Regulations and Electronic Money Regulations.
11. Expecting a Guaranteed Approval Timeline
There is no universal approval timeline for a high-risk merchant account.
The review may depend on:
- Application completeness
- Ownership structure
- Business model
- Processing history
- Expected volume
- Licensing
- Banking information
- Website and compliance review
- Acquirer requirements
Instead of publishing a blanket “5–14 business days” rule, ask the provider what information is required before underwriting begins and what circumstances may trigger additional review.
That is more useful than relying on a generic approval estimate.
12. Believing Revenue Alone Determines Approval
Revenue demonstrates business scale, but it does not eliminate payment risk.
A provider may also consider:
- Fraud activity
- Dispute activity
- Refund rates
- Average transaction size
- Recurring billing
- Customer acquisition methods
- Product delivery
- Customer geography
- Financial stability
- Industry characteristics
A business processing $500,000 per month is not automatically lower risk than a business processing $50,000.
The quality of risk controls and transaction behavior can matter as much as the size of the business.
13. Building a Multi-MID Structure Without a Clear Reason
Multiple merchant IDs can have legitimate operational purposes, but a business should not use them to conceal activity or bypass risk controls.
Where multiple MIDs are appropriate, document:
- Why each MID is required
- Which transactions are routed to each MID
- How refunds are handled
- How disputes are monitored
- How settlement is reconciled
- Whether the providers approve the structure
A multi-MID approach can support operational resilience or business segmentation when properly structured.
It should not be used as a workaround for a provider’s underwriting or monitoring requirements.
14. Treating Compliance as a One-Time Exercise
Approval is not the end of risk review.
Payment providers may continue monitoring transaction activity, disputes, fraud indicators, business-model changes, and other risk signals.
PCI SSC also makes clear that outsourcing payment processing does not remove all merchant responsibilities. Businesses should understand the responsibilities they retain and the responsibilities shared with their service providers.
Subscription businesses should regularly review billing disclosures, customer consent, cancellation procedures, refunds, and relevant federal and state requirements.
Mastercard also publishes resources covering subscription and recurring-payment merchants as part of its merchant rules and compliance resources.
Compliance should therefore be treated as an ongoing process rather than a checkbox completed during onboarding.
15. Applying Randomly Instead of Preparing Strategically
Submitting multiple applications without understanding the provider’s requirements can create unnecessary operational and underwriting friction.
Before applying for a high-risk merchant account, prepare an application pack covering:
- Business description
- Ownership and corporate documents
- Banking information
- Processing history, where available
- Website compliance
- Refund and cancellation policies
- Expected processing volume
- Average transaction size
- Customer and geographic profile
- Fraud, refund, and dispute information
- Relevant licenses or registrations
- A clear explanation of the customer journey
Then approach providers whose underwriting criteria match the actual business.
Preparation does not guarantee approval, but it can make the review more consistent and easier to evaluate.
Real-World Business Examples
The following examples illustrate documented business models. They are not claims about the companies’ specific merchant-account providers, approval decisions, or internal acquiring arrangements.
- Netflix: Recurring International Subscription Revenue
Netflix reports that it primarily derives revenue from monthly membership fees and that its membership plans vary by country and plan features. Its 2025 annual report also shows that pricing and plans can vary across markets.
The broader payment lesson is that recurring international businesses need a payment setup that can handle subscription billing, customer communication, refunds, and market-specific pricing.
- Coinbase: Crypto and Subscription Services
Coinbase’s 2025 annual report describes Coinbase One, a consumer subscription product with monthly or annual fees, alongside crypto infrastructure services. Coinbase also describes its developer platform as providing businesses with tools for integrating payments, trading, wallets, and stablecoins.
For a crypto-related applicant, the relevant lesson is that the exact activity should be explained clearly rather than relying on the broad label “crypto.” Regulatory treatment can depend on the specific business model and activities.
- DraftKings: Regulated Digital Gaming
DraftKings describes itself as a digital sports entertainment and gaming company offering sportsbook, iGaming, daily fantasy sports, digital lottery courier, prediction markets, and other products. Its 2025 filing explains that gaming activities are regulated and that licensing requirements vary by jurisdiction.
For a regulated gaming business, this illustrates why customer geography, licensing, regulatory status, financial information, and the exact product offering can be important during payment review.
High-Risk Merchant Account vs. Standard Merchant Account
| Factor | Standard Merchant Account | High-Risk Merchant Account |
| Underwriting | Often simpler | Often more detailed |
| Industry exposure | Typically lower | May involve elevated risk factors |
| Documentation | Standard business information | May require additional documentation |
| Reserve | May not apply | May apply depending on risk |
| Pricing | Often lower | Often higher |
| Monitoring | Standard controls | Potentially enhanced |
| Processing limits | Provider dependent | May be more restrictive |
| Approval | Provider dependent | Provider dependent and typically more complex |
The distinction is not simply about the industry name. A provider may evaluate the overall transaction and business profile.
Pros and Cons of a High-Risk Merchant Account
- Pros
A high-risk merchant account can give eligible businesses access to card-payment infrastructure when a standard account may not fit their business profile.
Depending on the provider, specialized arrangements may also support recurring billing, international payments, additional fraud controls, alternative payment methods, or industry-specific transaction requirements.
- Cons
High-risk payment processing can involve higher processing costs, reserves, settlement controls, transaction limits, enhanced monitoring, additional documentation, or more complex underwriting.
Commercial and risk terms can vary considerably between providers, so businesses should compare the entire arrangement rather than one advertised rate.
How to Prepare for High-Risk Payment Processing in 2026
A practical preparation process can be broken into five steps.
Step 1: Align the Business Story
Make sure your application, website, bank records, marketing, customer journey, and processing expectations describe the same business.
Step 2: Know Your Metrics
Review transaction volume, average ticket size, refunds, fraud, disputes, recurring transactions, and relevant network monitoring metrics.
Step 3: Organize Documentation
Make sure corporate documents, identification, banking information, processing statements, and licensing records are complete and consistent.
Step 4: Review Customer Experience
Check product descriptions, pricing, consent, billing disclosures, cancellation, customer support, fulfillment, and refunds.
Step 5: Read the Provider Agreement
Review reserves, settlement timing, processing limits, chargeback fees, monitoring, minimum commitments, and termination terms before signing.
Frequently Asked Questions
- What is a high-risk merchant account?
A high-risk merchant account is a payment-processing account for a business whose industry, transaction profile, geographic exposure, dispute history, or business model may lead an acquirer to apply additional underwriting or risk controls.
- How hard is it to get a high-risk merchant account in the U.S.?
There is no universal difficulty level. The outcome can depend on the provider, business model, financial position, processing history, customer geography, licensing, documentation, and risk controls.
- What can cause a high-risk merchant account application to be rejected?
Potential issues include incomplete documentation, material inconsistencies, unsupported activity, licensing problems, elevated fraud or dispute exposure, unclear product information, or a mismatch between the application and the live business.
- Can startups get a high-risk merchant account?
Some providers consider startups. Limited processing history can lead to additional questions about projected volume, ownership, customer acquisition, fulfillment, refunds, and financial capacity.
- Do high-risk merchant accounts always require a rolling reserve?
No. Reserve requirements vary by provider and risk assessment. Where a reserve applies, the percentage, duration, release schedule, and adjustment conditions can differ.
- How long does high-risk merchant account approval take?
There is no universal timeline. Underwriting time can depend on documentation, ownership, business complexity, processing history, licensing, and the provider’s internal review.
- Is a 1% chargeback rate automatically a rejection?
No. A 1% figure should not be treated as a universal U.S. rejection threshold. Visa’s current VAMP merchant threshold for applicable U.S. activity is 150 basis points, or 1.50%, from April 1, 2026, together with a minimum monthly count of 1,500 fraud and dispute events for the applicable merchant threshold.
Individual acquirers and processors may apply stricter internal standards.
- Should a business use multiple merchant accounts?
Only when there is a legitimate operational reason and the relevant providers approve the structure. Multiple MIDs should not be used to conceal activity or circumvent risk controls.
Final Thoughts
Getting a high-risk merchant account is not simply a matter of finding a processor that accepts a particular industry.
Businesses should approach the process as an underwriting exercise: explain the business accurately, understand transaction and dispute metrics, maintain a compliant customer journey, organize documentation, address licensing requirements, and understand settlement and reserve terms before accepting an account.
This is especially important for businesses in gaming, adult, IPTV, crypto, forex, subscription services, supplements, and other industries that may receive enhanced underwriting attention.
The right payment relationship should be evaluated on more than the headline processing rate. Businesses should consider underwriting criteria, payment gateway capabilities, settlement terms, reserves, transaction limits, fraud controls, customer support, compliance requirements, and contractual conditions.
For businesses reviewing specialized payment infrastructure, Inquid provides resources on high-risk merchant accounts, high-risk payment processing, merchant accounts, and payment gateways.
Need to evaluate your payment setup? Review your business model, processing requirements, and risk profile before selecting a payment provider.
Authoritative Sources & Further Reading
- Visa: Acquirer Monitoring Program (VAMP) fact sheet
- Mastercard: Rules and merchant compliance programs
- PCI Security Standards Council: Does PCI DSS apply to merchants who outsource payment processing?
- Federal Trade Commission: Negative Option Rule
- FinCEN: Application of FinCEN’s regulations to virtual currency activities
- Financial Conduct Authority: Payment Services and E-Money Regulations