High risk MCC codes

What are high risk MCC codes, and who decides which ones qualify?

No card network publishes a list called "high risk MCCs". Merchant category codes are a classification system, not a risk rating, and the risk judgment is made separately by each acquiring bank against its own appetite. Two acquirers can look at the same code and reach opposite conclusions.

So the honest answer to which codes are high risk is that it depends on the acquirer, and any list presented as definitive is somebody’s summary rather than a published standard. What is consistent is the shape of the categories that attract scrutiny.

What is a merchant category code in the first place?

A merchant category code, or MCC, is a four-digit number attached to a merchant account that describes the primary business activity behind it. Card networks and payment processors use it for interchange pricing, for reporting, and for tax purposes on certain card types. It is a classification code, similar in spirit to other four-digit business-classification formats used across the payments industry, and every processed card transaction carries one.

The code is not something a merchant picks off a menu. It is assigned by the acquiring bank when the account is boarded, based on the business description and documentation in the application, which is why the description you give at application time matters so much. See our merchant account application page for what that description needs to cover.

Once assigned, the code travels with every transaction the account processes. It shows up in the settlement data the acquirer sends to the card networks, and it is what triggers category-specific interchange pricing and, in some cases, tax reporting rules on certain card types. A merchant rarely sees the code itself day to day, which is part of why a wrong one can go unnoticed for a long time.

Which categories do acquirers commonly treat as elevated risk, and why?

These are broad categories described in words, not a code list, because no single official code list drives acquirer risk decisions. The reasons repeat across categories even when the categories themselves look nothing alike.

Your own file is read against that backdrop. A clean history in a scrutinised category is a very different application from a poor history in a benign one, which is the whole subject of what makes a business high risk. The category-specific picture for several of these is on our industries hub.

How do I find out what MCC I am assigned?

1. Look at your merchant processing statement. Many acquirers print the MCC or the category description on it.
2. If it is not there, ask your acquirer directly and in writing for the four-digit code assigned to your MID.
3. Check it against the authoritative list published by the card networks, not against a third-party blog table.
4. If it does not match what you actually sell, raise it with the acquirer in writing.

We are not reproducing a code table on this page. Every widely circulated MCC table online is a copy of a copy, the networks revise their lists, and a wrong four-digit code repeated as fact is worse than no table at all. Read the current list from the card networks themselves.

If the code on your statement does not match the category you would use to describe your own business in a sentence, that gap is worth raising, even before it causes a visible problem. Catching a wrong code early, before it produces a decline pattern or a run of downgraded interchange, is considerably less work than untangling it after the fact.

Why does the code matter so much before anyone reads my file?

Because screening happens before underwriting. An application carrying a category the acquirer does not board can be declined without a person ever reading the statements, which is why merchants sometimes get fast declines that seem to ignore an excellent trading history.

It also affects your economics. Interchange varies by category, so the code influences what a transaction costs you before any markup is applied. That is covered on our fees page.

How does the wrong MCC cause declines and interchange downgrades?

Two separate mechanisms are at work, and both bite even when the business itself is healthy. The first is at boarding: screening tools flag applications by category, so a code that reads as a category the acquirer does not board can trigger an automatic decline before a person is involved.

The second happens after boarding, transaction by transaction. Card networks set interchange rates partly by category, and a transaction that does not qualify for the rate tied to its assigned MCC can be downgraded to a higher-cost rate tier. A code that does not match what is actually being sold is one of the more common reasons a business sees interchange costs it cannot explain from its statements alone.

Both problems trace back to the same root: the code assigned at boarding did not describe the business accurately, or the business changed after boarding without the code being revisited.

The fix looks the same whether the mismatch caused a decline or an interchange downgrade: get the code corrected with the acquirer that assigned it, backed by a plain description of what the business actually does. Waiting it out rarely helps, because neither the screening rule nor the interchange pricing changes on its own while the code stays wrong.

What if your business genuinely spans two categories?

It happens often, and it is not something to paper over by picking whichever code sounds safest. A business that sells physical supplements and also runs a subscription coaching program, for instance, genuinely spans two different activities with different risk profiles.

Tell the acquirer both activities exist at application time and let underwriting decide how to handle it. Sometimes one code covers the primary activity with the secondary disclosed for context. Sometimes a business that genuinely operates two distinct lines is better served by separate merchant accounts, each coded correctly for what it does, which also has the side benefit covered on our multiple merchant accounts page. What does not work is describing only the more benign activity and hoping the other one goes unnoticed in the settlement pattern.

Can a merchant category code be changed?

It can be corrected where it is genuinely wrong, and that is a conversation with the acquirer holding the MID. What it is not is a lever to pull for better pricing.

Deliberately boarding under a code that does not describe the business is miscoding, and it is one of the fastest routes to a termination and a listing. Mastercard’s reason code table includes violation of standards and laundering, both of which cover conduct in this neighbourhood, and the consequences are on our MATCH list page.

The right version of this is a factual correction with evidence: what you actually sell, what the code says, and why they do not match. Expect to provide the same kind of documentation you provided at application, described on our application page.

What to do if your category is the problem

Stop applying to acquirers who do not board your category, because repeated declines cost weeks and change nothing. Find the ones who do, and give them a file that answers the category objection with your own numbers rather than leaving the acquirer to fill in the gap with an assumption.

That means the chargeback ratio with the arithmetic shown, the fulfilment timeline, the refund policy, and the controls you run. What underwriters weigh is in what underwriting actually looks at, and the industry-specific picture is on our industries hub.

A category objection is answerable in a way a fraud conviction or a laundering listing is not, which is one reason category-driven declines are among the more solvable problems in this business, if you take them to the right acquirer instead of the same one twice.