Merchant category codes are four-digit numbers that payment processors assign to businesses to classify what they sell, and they quietly shape almost every card transaction: the fees a merchant pays, the rewards a cardholder earns, the information reported to the IRS, and the compliance rules a business has to follow. The system comes from ISO 18245, an international standard that defines roughly 600 codes covering everything from agricultural services to government offices.1International Organization for Standardization. ISO 18245:2023 – Retail Financial Services – Merchant Category Codes
The standard itself is voluntary. In practice, Visa, Mastercard, and American Express have built their networks around these codes, which makes adoption effectively required for any business that wants to accept card payments. Acquiring banks use MCCs to route transactions. Card issuers use them to categorize purchases and apply rewards. The IRS uses them on Form 1099-K. A voluntary standard has become mandatory plumbing.
What an MCC Actually Classifies
An MCC is tied to a business’s primary activity, not to individual items on the receipt. A department store that sells clothing, electronics, and groceries gets one code reflecting its overall business model. A gas station with a convenience store typically gets the petroleum code even if half its revenue comes from snacks and drinks. The system is deliberately broad-brush so that automated networks can sort millions of transactions daily without human review.
ISO 18245 groups codes into numeric ranges by industry:
- 0001–1499: Agricultural services
- 1500–2999: Contracted services such as construction and engineering
- 3000–3999: Airlines and car rental agencies, often with codes assigned to specific companies
- 4000–4799: Transportation (railroads, taxis, freight)
- 4800–4999: Utility services (telecom, cable, electric)
- 5000–5599: Retail stores (hardware, electronics, groceries)
- 5600–5699: Clothing stores
- 5700–7299: Miscellaneous retail and personal services
- 7300–7999: Business services (advertising, cleaning, recreation)
- 8000–8999: Professional services and membership organizations
- 9000–9999: Government services
The mismatch between a broad code and a business’s actual product mix is where most of the real-world friction shows up, both in fees and in cardholder rewards.
How a Business Gets Its Code
When a business opens a merchant account, the acquiring bank or payment processor picks the code during onboarding. The processor reviews marketing materials, licensing, and expected sales across product categories, then chooses the four-digit code that best reflects where the business earns most of its money. A company earning 60% from restaurant sales and 40% from catering gets the restaurant code. The processor looks for the most specific code available before falling back on a general category, and the selection goes into the merchant service agreement.
If the business changes direction, the merchant needs to notify the acquirer so the code stays current. An outdated code can mean paying the wrong interchange rate, losing eligibility for certain processing programs, or generating mismatched tax documents.
Fixing a Wrong Code
Merchants who think their code is wrong should contact their payment processor directly. The conversation goes better with documentation ready: a clear description of what the business actually sells, supporting evidence like invoices or product catalogs, and one or two alternative codes that would fit better. Processors have final say, but they have their own incentive to get it right, because misclassification creates compliance exposure for the acquirer.
If a single business has receipts spanning multiple MCCs, the acquirer can either file separate reports for each code or use the code representing the largest share of total receipts.2Internal Revenue Service. Form 1099-K FAQs: Third Party Filers of Form 1099-K
What MCCs Cost Merchants
An MCC is one of the largest factors determining what a business pays to accept cards. Card networks publish interchange fee schedules that map specific codes to specific rate programs. Mastercard, for instance, places insurance companies (MCC 5960, 6300), day care centers (MCC 8351), supermarkets, restaurants, petroleum stations, and lodging providers into distinct interchange tiers.3Mastercard. Mastercard 2025-2026 U.S. Region Interchange Programs and Rates
The practical effect: a grocery store typically pays a lower interchange rate than a jewelry store on the same transaction. Supermarket and restaurant codes qualify for tiered programs that shave fractions of a percent off each charge. For a business processing millions in annual card volume, the difference between a preferred tier and a default category can be thousands of dollars a year.
High-Risk Codes and Extra Scrutiny
Networks flag some MCCs as elevated risk. Visa’s merchant data standards identify codes including pharmacies (MCC 5122, 5912), outbound telemarketing (MCC 5966), adult content (MCC 5967), tobacco retailers (MCC 5993), dating services (MCC 7273), and gambling (MCC 7995) as “high integrity risk,” which triggers registration and monitoring requirements for the acquiring bank.4Visa. Visa Merchant Data Standards Manual
The cost of getting this wrong lands on the acquirer, which in turn pushes hard on the merchant. Visa can impose non-compliance assessments of $100,000 per month for Tier 1 and Tier 2 merchants and $25,000 per month for Tier 3 merchants if the acquirer fails to meet registration requirements for high-risk accounts.5Visa. Visa Core Rules and Visa Product and Service Rules Mastercard runs a parallel program called Business Risk Assessment and Mitigation. Merchants found in violation can face account termination and placement on an industry database that effectively blocks them from getting a new merchant account for five years.
High-risk merchants also lose certain dispute protections. In the U.S., Visa strips secure e-commerce dispute protection from merchants classified under wire transfers (MCC 4829), adult content (MCC 5967), cryptocurrency (MCC 6051), stored value cards (MCC 6540), and several gambling codes.5Visa. Visa Core Rules and Visa Product and Service Rules If a customer disputes a charge, these merchants have fewer tools to fight the chargeback.
What MCCs Mean for Credit Card Rewards
The code attached to each purchase is what decides whether a transaction earns bonus rewards. When a card promises 3% back on dining, the issuer’s system checks the MCC of each transaction against a list of restaurant codes. Match, and the cardholder gets the bonus. No match, and the purchase earns the base rate no matter what the cardholder actually bought.
This is where consumers meet the system’s blunt edges. A bakery coded as a retail food store rather than a restaurant will not trigger a dining bonus. A gas station coded under general merchandise because of a large convenience store operation will not trigger a fuel bonus. The cardholder has essentially no control over the code and limited recourse when a purchase does not earn what they expected.
Issuers typically will not reclassify a transaction after the fact, because the MCC is embedded in the authorization data from the merchant’s processor. About the only useful move for a motivated cardholder is to check how a merchant codes before a large purchase. Some rewards programs publish their qualifying MCC lists, which at least lets people know which businesses will and will not trigger bonus categories.
MCCs on Tax Form 1099-K
Payment settlement entities that report merchant transaction volumes to the IRS on Form 1099-K put the merchant’s four-digit MCC in Box 2 of that form.6Internal Revenue Service. Instructions for Form 1099-K The code tells the IRS what kind of business generated the income. If a filer uses a different industry classification system internally, it still has to assign the MCC that most closely corresponds to the merchant’s business.
Third-party settlement organizations like PayPal or Venmo are an exception. Because they do not use MCCs to classify payees, they do not complete Box 2.2Internal Revenue Service. Form 1099-K FAQs: Third Party Filers of Form 1099-K Under the current statute, TPSOs must report when a payee’s transactions exceed $20,000 and 200 transactions in a calendar year.7Office of the Law Revision Counsel. 26 USC 6050W – Returns Relating to Payments Made in Settlement of Payment Card and Third Party Network Transactions A lower $600 threshold enacted in 2021 was repeatedly delayed, and legislation in 2025 reverted the threshold back to $20,000.
An incorrect MCC will not by itself trigger an audit. But if the code on a 1099-K does not match the income category the merchant reports on its own return, it creates the kind of mismatch that draws IRS attention. Payment settlement entities that file incorrect returns or send incorrect payee statements face penalties under IRC sections 6721 and 6722.6Internal Revenue Service. Instructions for Form 1099-K Verifying the code with the processor each year and confirming it matches the 1099-K is a small check that heads off a much larger problem.
The Firearm Retailer Code Dispute
In 2022, ISO approved a new MCC for firearm and ammunition retailers, separating them from the general sporting goods code these businesses had previously used. Proponents said a dedicated code would help financial institutions detect suspicious purchasing patterns. Opponents said it amounted to surveillance of lawful gun purchases.
State legislatures have split sharply. As of mid-2025, roughly 20 states have enacted laws prohibiting payment networks from using a firearm-specific MCC to track gun and ammunition purchases, from Idaho and Montana to Florida, Georgia, and New Hampshire. California, Colorado, and New York have passed laws requiring implementation of the code, and additional states have legislation pending on both sides.
Caught between contradictory state mandates, Visa, Mastercard, and American Express paused implementation of the firearm code, citing the legal uncertainty created by the patchwork of state laws. That pause remained in place as of mid-2025. At the federal level, H.R. 1181 in the House and S. 1715 in the Senate would prohibit the use of a firearm-specific MCC nationwide. Neither had advanced to a vote as of the same period.
The episode illustrates something about the classification system that most cardholders never think about: a four-digit code designed for payment routing and fee calculation can become a civil liberties dispute when applied to a politically sensitive product. The firearm code is the most visible example, but the tension can arise anywhere purchase tracking runs into privacy concerns.