What is a high risk merchant?
What is a high risk merchant comes down to one thing: an underwriting judgment made by a bank or processor, not a legal category set by any regulator. This page walks through the real factors that go into that judgment, from chargeback exposure to billing model, and what the label changes for a business day to day.
Last updated:
What is a high risk merchant?
A high risk merchant is a business that acquiring banks and payment processors classify as carrying more chargeback, fraud or regulatory exposure than an average retail account. There is no government list of high-risk businesses and no law that labels one. It is an underwriting judgment made independently by each bank and processor, based on a set of factors that tend to repeat across the industry.
That distinction matters. Two processors can look at the same business and reach different conclusions, because each one weighs the factors below differently and carries a different appetite for risk. Being called high risk by one acquirer says nothing about whether another acquirer will agree.
What factors do underwriters actually weigh?
The label gets applied based on a combination of factors, almost never just one. The most consistent ones across the industry are below.
| Factor | Why it matters to an underwriter |
|---|---|
| Chargeback exposure | Industries with a track record of high dispute rates cost acquirers money and network penalties, so the category itself carries assumed risk before a single transaction runs. |
| Industry and merchant category code | The MCC assigned at setup reflects an industry-wide risk baseline that acquirers have built from years of aggregate data. |
| Regulatory attention | Industries that draw scrutiny from regulators or that operate in a legal gray area in some jurisdictions carry reputational and compliance risk for the acquirer, not just financial risk. |
| Billing model | Recurring billing, free-trial offers and future-delivery sales generate disputes for reasons that have nothing to do with fraud: customers forget a subscription, a delivery date slips, or a trial converts without clear notice. |
| Average ticket size | A high average ticket means a single dispute is worth more, and a cluster of disputes can move the ratio quickly. |
| Processing history | Clean statements from a prior account are the strongest evidence an underwriter has that the real-world risk is lower than the industry baseline suggests. |
| Personal credit | Ties to the personal guarantee behind the account. See how credit factors into a high risk application. |
| Prior terminations | A previous account closed for cause, or a MATCH listing, signals a documented history an underwriter has to account for. |
How is "high risk" different from a legal category?
High risk is a private, commercial judgment made by banks and card networks managing their own exposure. It is not a designation created or enforced by any regulator, and no law requires a business to be labeled high risk or forbids an acquirer from treating it that way.
That is why the same business can be high risk to one acquirer and an ordinary account to another, and why the label can change over time as a business builds processing history or as an acquirer’s own risk policy shifts. It also means a business cannot dispute the label the way it might dispute a regulatory finding. There is nothing to appeal, only a different underwriter to ask.
What does the high risk label actually change for a business owner?
Once a business is treated as high risk, several things tend to follow, though not every one applies in every case.
- Underwriting is manual and slower rather than automated and instant, since a person is reviewing the specific risk factors rather than a system approving on pattern alone.
- Pricing reflects the added exposure, covered in full on the high risk fees page.
- A reserve is more common than it would be on a standard account, holding back part of processing volume against future disputes.
- Mainstream aggregators like Stripe, Square and PayPal, built for fast automated approval of lower-risk merchants, are less likely to be a stable long-term fit. See aggregator versus dedicated merchant account for how that comparison actually works.
What can a business do about its own risk classification?
A business rarely changes which category it falls into, the industry itself sets that, but it can change how an individual application looks against that category.
- Keep processing statements, even from a closed or terminated account, since they are the clearest evidence of real chargeback behavior available to an underwriter.
- Be upfront about the billing model, including trial offers or future delivery, rather than letting an underwriter discover it independently.
- Address any prior termination or MATCH listing directly rather than leaving it for underwriting to find. See the MATCH list explained if that applies.
- Decide in advance what reserve or pricing terms are acceptable, since flexibility there often does more to move a decision than anything else on the file.
None of this changes the underwriting factors themselves. What it changes is how quickly and how favorably an acquirer that specializes in these files can act on them.
Questions merchants ask about this
Is there an official list of high risk industries?
No single official list exists. Card networks and individual acquirers each maintain their own internal risk classifications, and while there is broad overlap across the industry on which sectors are considered high risk, the exact list and the reasoning behind it varies by processor.
Can a business stop being high risk over time?
The industry classification itself generally does not change, but the risk an individual acquirer assigns to a specific business can improve as processing history accumulates and chargeback ratios stay low. That can lead to better terms with the same acquirer or an easier approval elsewhere later.
Does being high risk mean the business is doing something wrong?
No. The classification reflects statistical and structural risk patterns in an industry or billing model, not a judgment about any individual business’s honesty or conduct. Plenty of well-run, fully legitimate businesses fall into high-risk categories simply because of what they sell or how they bill.
Who actually decides if my business is high risk?
The acquiring bank or processor underwriting your specific application makes that call, informed by the merchant category code, the card networks’ published guidance, and its own risk policy. Different acquirers can and do reach different conclusions about the same business.