High-Risk Merchants: Triggers, Costs, and the MATCH List

A high-risk merchant account is a credit card processing account offered to businesses that payment processors and acquiring banks expect will generate above-average chargebacks, fraud, or regulatory complications. If you’re classified as high-risk, you’ll typically pay 2.5% to over 5% per transaction compared with 1.5% to 3.5% for a standard account, and you’ll face rolling reserves, chargeback fees, and longer contract terms designed to protect the processor rather than you. The label isn’t always permanent, and several of its costs are negotiable if you understand what drives them.

What Puts a Business in the High-Risk Category

Processors weigh several factors, and any one of them can be enough. The one they watch most closely is the chargeback ratio. Mastercard’s Excessive Chargeback Merchant program flags merchants who hit 100 or more chargebacks in a calendar month with a chargeback-to-transaction ratio of 1.5% or higher.1JPMorgan Chase. Mastercard Excessive Chargeback Merchant Program Guide Visa’s Acquirer Monitoring Program uses a combined fraud-and-dispute ratio, with the “excessive merchant” threshold dropping to 1.5% in the U.S., Canada, the EU, and Asia-Pacific as of April 1, 2026.2Visa. Visa Acquirer Monitoring Program Fact Sheet Individual processors set internal thresholds well below the network ceilings, because once a merchant trips the network programs, the processor faces fines too.

Personal and business credit scores factor in as well. Scores in the “Fair” range of roughly 580 to 669 signal higher delinquency risk, with about 27% of consumers in that band eventually becoming seriously delinquent.3Experian. 600 Credit Score: Is it Good or Bad? Poor credit alone often pushes an application into the high-risk queue. Large average transaction amounts compound the concern: a business averaging $2,000 tickets creates a very different exposure profile than one averaging $50.

Bankruptcy history, no verifiable processing history, and operating from a country with elevated fraud rates can each independently trigger the classification. New businesses are a common case; underwriters have nothing to evaluate except projections and the owner’s personal financial profile.

Some businesses land in the category because of the industry, not the track record. Online gambling and adult entertainment face constant regulatory shifts and high rates of buyer’s remorse. Nutraceuticals, CBD, and hemp products sit in a legal gray zone where federal and state rules conflict. Travel services generate high-dollar disputes when trips get canceled, and the long gap between payment and fulfillment is a red flag processors watch closely. Vape and e-cigarette retailers, subscription businesses, firearms dealers, debt collection services, and tech support companies also frequently land in high-risk. The common thread is some combination of regulatory complexity, high dispute rates, or reputational sensitivity.

What a High-Risk Account Actually Costs

The premium shows up in several places at once, and merchants often focus on getting approved without fully pricing what approval will mean.

  • Processing rates typically run 2.5% to over 5% per transaction, versus 1.5% to 3.5% for standard accounts.
  • Chargeback fees run $20 to $100 per dispute, whether you win or lose.
  • Account setup runs $50 to $300, and some processors charge a separate application review fee of up to $500.
  • Rolling reserves withhold 5% to 10% of daily sales for 90 to 180 days as a cushion against chargebacks and fraud losses.
  • Early termination fees on fixed-term contracts (typically three to five years) run $250 to $500, and some providers charge them even if the business closes or changes ownership.

The rolling reserve deserves special attention because it directly hits cash flow. On $50,000 in monthly sales, a 10% reserve held for 180 days ties up roughly $30,000 in working capital at any given time. For a business already running thin margins, that can create real liquidity problems. Some processors will trade a lower reserve percentage for a higher processing rate, so there is room to weigh which one hurts less.

Card Network Monitoring Programs

Both major networks run enforcement programs that carry real financial consequences and, more importantly, can lead your processor to terminate the relationship entirely.

Visa’s VAMP measures a combined ratio of fraud reports and disputes divided by settled card-not-present transactions. A merchant has to exceed both the ratio threshold and a minimum of 1,500 combined fraud-and-dispute events per month to enter monitoring.2Visa. Visa Acquirer Monitoring Program Fact Sheet First-time violators get a three-month grace period before fines begin, provided they haven’t been enrolled in the prior 12 months. After that, fines escalate monthly until the merchant fixes the problem or the acquirer ends the relationship.

Mastercard’s Excessive Chargeback Merchant program operates in two tiers. The first kicks in at 100 chargebacks and a 1.5% ratio in a calendar month. The second, High Excessive Chargeback Merchant, requires 300 chargebacks and a 3.0% ratio.1JPMorgan Chase. Mastercard Excessive Chargeback Merchant Program Guide Both programs count transaction volume, not dollar values, so a business running thousands of small transactions can trip a threshold as easily as one running fewer large ones.

The MATCH List

The Mastercard Alert to Control High-risk Merchants (MATCH) system is the industry’s shared database of terminated merchant accounts. When a processor shuts down a merchant’s account for cause, whether for fraud, excessive chargebacks, money laundering, or PCI non-compliance, it’s required to submit a record to MATCH within five days.4Mastercard Developers. Mastercard Alert To Control High-Risk Merchants Every processor checks this database before approving a new account, and while listings are technically “informational,” many processors refuse to work with anyone who appears on it.5Stripe Documentation. High Risk Merchant Lists

MATCH entries are retained for five years, not permanently.4Mastercard Developers. Mastercard Alert To Control High-Risk Merchants For most businesses, five years without card processing is fatal. Each listing carries a reason code (excessive chargebacks, excessive fraud, fraud conviction, bankruptcy or insolvency, PCI non-compliance, illegal transactions) that tells the next processor exactly why you were terminated.

Only the acquiring bank that placed you on the list can request removal. No other processor can do it, and the merchant can’t request it directly. The process starts with identifying your reason code, then resolving the underlying issue: proving PCI compliance, demonstrating chargeback stability, or providing documentation to counter fraud allegations. Once the issue is resolved, you ask the acquiring bank in writing to submit a removal request. The bank isn’t obligated to submit it. If it does, Mastercard takes 30 to 60 days to process. PCI non-compliance listings may auto-expire after one year; most other codes run the full five-year retention.

How to Apply for a High-Risk Merchant Account

Applications are more intensive than what standard merchants face, and incomplete documentation is the fastest route to denial. Plan on providing government-issued ID for all owners and the business’s Employer Identification Number. Federal anti-money-laundering rules require financial institutions to verify the identity of anyone who owns 25% or more of a legal entity opening an account.6FinCEN. Information on Complying with the Customer Due Diligence (CDD) Final Rule You’ll also need business formation documents to verify the legal structure.

Financial documentation is where underwriters spend the most time. Expect to submit three to six months of business bank statements to show cash flow and reserves, plus three to six months of processing statements if you have prior merchant account history. Those processing statements reveal your sales volume, refund rates, and chargeback percentages, which are the numbers most weight rides on.

Your website needs to be live and functional before you apply. Card networks require clear refund and return policies, terms of service, and contact information. Missing or buried policies stall applications because they signal to the underwriter that customers won’t know what they agreed to, which breeds chargebacks.

The application usually goes to an Independent Sales Organization (ISO) or directly to an acquiring bank, where an underwriter reviews everything against internal credit policies and card network rules. High-risk reviews typically take 5 to 10 business days. Expect follow-up questions about specific transaction patterns, unusual bank entries, or discrepancies between your application and supporting documents. If your projected monthly volume doesn’t match the pattern in your bank statements, that alone can trigger a denial. Card networks push anti-fraud and due diligence obligations down through their contracts, and processors take underwriting seriously because they face enforcement and fines when they miss a bad actor.7Federal Trade Commission. $40.2 Million Reminder About the Importance of Due Diligence and Monitoring

Reducing Your Risk Profile Over Time

The classification isn’t necessarily permanent. If yours stems from business-specific factors rather than the industry itself, you can work toward reclassification by moving the metrics processors care about.

Chargebacks are the biggest lever. Prevention alerts give you advance notice when a customer initiates a dispute, letting you refund before the chargeback formally posts. That one tool can drop your ratio significantly because the dispute never becomes a chargeback in the network’s records. On the fraud side, Address Verification Service (AVS), CVV matching, and 3D Secure authentication each cut the odds that unauthorized transactions make it through.

Operational fixes matter as much as technology. Clear billing descriptors prevent the “I don’t recognize this charge” calls that turn into disputes. Detailed product descriptions and accessible refund policies reduce buyer disappointment. For subscriptions, notifying customers before each recurring charge gives them the chance to cancel rather than dispute after the fact.

If your chargeback ratio stays consistently below the network thresholds for 12 to 18 months, you have a reasonable case to ask your processor about reclassification, or at least a lower rolling reserve percentage and better processing rates. The conversation won’t happen unless you start it.

Contract Terms Worth Negotiating

High-risk agreements tend to favor the processor heavily, but several terms are negotiable if you push. Early termination fees of $250 to $500 are common on three-to-five-year contracts, and some agreements auto-renew without explicit consent. A contract that lists the early termination fee as $0.00 generally means a month-to-month arrangement with no cancellation penalty, regardless of the stated term.

The rolling reserve percentage and holding period usually have the biggest day-to-day impact. If your processing history is clean, push for the low end of the 5% to 10% range and a 90-day hold rather than 180. Some processors will agree to release reserves earlier once you’ve shown 6 to 12 months of consistent performance. Get that commitment in writing during the initial negotiation, because it’s much harder to secure after you’ve signed.

Watch for volume caps that trigger automatic account review or termination if you exceed them. If you’re growing, a ceiling you’ll hit in six months creates an avoidable crisis. Make sure projected growth is reflected in the agreement, or negotiate a defined process for requesting limit increases that doesn’t require a full re-underwriting.