How to Apply for a High-Risk Merchant Account: Documents and Process

To apply for a high risk merchant account you send an acquiring bank enough evidence to price your risk: business registration, ownership details, processing history, bank statements, and a clear description of what you actually sell. The bank is deciding whether it can predict your chargebacks well enough to carry the loss if you fail. Everything on the document list follows from that one question.

What's changed recently is worth knowing before you start, because it works in your favour.

Regulators Just Removed the Thing That Made Banks Nervous#

For years the stated reason banks dropped legal but disfavoured industries was reputation risk. That justification has now been pulled out of federal bank supervision.

In 2025 the OCC began removing references to reputation risk from its Comptroller's Handbook and guidance, and instructed its examiners that they should no longer examine for reputation risk (OCC Bulletin 2025-4). The OCC's own framing is that it never used reputation risk as a catch-all justification for supervisory action, but that removing the references would improve transparency and confidence in the supervisory process.

The FDIC followed. Its payment processor relationships guidance was revised on February 3, 2026 specifically to remove references to reputation risk (FDIC).

Don't over-read this. It does not mean banks must take you, and it does not soften the actual risk analysis one bit. What it does mean is that an acquirer declining you now has to point at something measurable, like your dispute history or your financials, rather than at how your industry looks in a headline. If you're in a legal category that struggled to get banked, that's a meaningful shift.

What the Bank Is Actually Underwriting#

The acquiring bank carries the loss if you take money, fail to deliver, and disappear. That's the entire basis of the review.

The FDIC's guidance is explicit that where a processor relationship is involved, agreements should provide for immediate account closure or contract termination, and for establishing adequate reserve requirements to cover anticipated chargebacks. It also warns that risk is significantly elevated where there isn't a direct customer relationship with the merchant.

So the underwriter is answering three questions. Can we identify who you really are? Can we predict your dispute rate? And if you go bad, can we recover?

Every document below maps to one of those three.

The Document Checklist#

Business identity

• Business registration or incorporation documents
• EIN confirmation letter
• Business licence where your category requires one
• Government-issued photo ID for each principal owner
• Ownership breakdown showing who owns what percentage

Financial position

• Three to six months of business bank statements
• Three to six months of processing statements if you've processed before
• Financial statements or tax returns for larger applications
• Credit report authorisation for the principals

The business itself

• A working website with visible pricing, terms, refund policy, and contact details
• A clear description of what you sell and how you deliver it
• Your fulfilment timeline, especially if delivery happens after payment
• Chargeback history and what you've done about it

That last item under identity deserves a note, because the rules changed and a lot of guidance online is now wrong.

Beneficial Ownership: Two Different Things#

People conflate these constantly.

Filing with FinCEN. Entities created in the United States are exempt from reporting beneficial ownership information to FinCEN under the Corporate Transparency Act. That started as an interim final rule on March 26, 2025, and FinCEN made it permanent in a final rule issued on August 11, 2026 (FinCEN). The reporting requirement now reaches only certain foreign companies registered to do business in the US.

The final rule went further than the interim one. Even those foreign reporting companies don't have to report BOI for US person beneficial owners or US person company applicants, and a US person who already holds a FinCEN ID isn't required to update or correct that information.

Giving ownership details to your bank. Unchanged. Banks still collect and verify beneficial ownership as part of customer due diligence. Your acquirer will ask, and refusing is a fast decline.

So if you read somewhere that you must file BOI before applying, that's out of date for a US company. You still need the ownership documents ready for the bank.

Your Category Code Gets Assigned, Not Chosen#

One underwriting output that follows you afterwards is your merchant category code. Visa requires that acquirers and their agents assign the correct code to each merchant, and reserves the right to require corrections (Visa Merchant Data Standards Manual, April 2026).

Visa also publishes a high integrity risk list, and if your business falls in it, expect a longer review. For card-absent transactions that list covers codes including 5122 and 5912 for drugs and pharmacies, 5966 for outbound telemarketing, 5967 for adult content, 5993 for cigar stores, 7273 for dating and escort services, and 7995 for betting and gaming, with a second group covering cyberlockers, trading platforms, skilled game wagering, and crypto.

Describe your business accurately on the application. Getting coded correctly at the start is much easier than correcting it later, and a code that doesn't match what you sell causes problems for as long as you hold the account. The MCC directory has a page per code if you want to check where you'll land, and we explain the mechanics in what an MCC is.

Expect a Reserve, and Ask How It Releases#

For most high risk approvals a reserve is part of the offer rather than a punishment. The FDIC guidance treats adequate reserves to cover anticipated chargebacks as a normal control.

The questions that matter are mechanical, and you should get answers in writing before signing:

• What percentage of volume is held?
• Rolling, capped, or upfront?
• How long is each tranche held before release?
• What would cause the reserve to increase?
• What triggers a review to reduce or remove it?

We covered how these work in detail in what a rolling reserve is. A provider that won't put reserve terms in writing before you sign is telling you something.

What Gets an Application Declined#

From the underwriting side, the common causes are boring and mostly fixable:

• The website isn't ready. No visible refund policy, no terms, no contact details, or a product description that doesn't match the application.
• The description is vague. Underwriters read evasiveness as risk. Say plainly what you sell.
• Undisclosed history. A prior termination you didn't mention, found during review, is worse than the termination itself.
• Mismatch between statements and claims. Stated volume that your bank statements don't support.
• Prior listing on the industry termination database. This is the hard one, and it's a specific recovery process rather than a normal application. See MATCH list recovery.

On that last point, one honest note. Mastercard does not publish MATCH mechanics, listing durations, or volumes anywhere we've been able to verify across several attempts. Anyone quoting you precise retention periods is passing along an estimate.

How Long It Takes#

We're not going to give you a number, and we'd be a bit suspicious of anyone who does.

No regulator or card network publishes an underwriting timeline, and every specific figure we found lives on a competitor's marketing page with nothing behind it. What actually determines your timeline is whether your file is complete on the first pass. Applications that stall are almost always waiting on a document the merchant hasn't sent, not sitting in a queue.

The practical version: assemble everything above before you apply, answer follow-up questions the same day, and you'll be at the fast end of whatever the real range is.

Before You Sign#

Read the agreement for these specifically:

• Reserve terms, as above.
• Termination clause and any early termination fee. The FTC has taken action over exactly this pattern in merchant services.
• Funding schedule. When does money actually reach you, and what's the cutoff?
• Rate structure. Interchange-plus lets you audit the bill against a published schedule. Tiered pricing doesn't.
• Whether the MID is yours. A dedicated merchant ID in your business name is a different thing from sitting under an aggregator.

You'll also need to complete a PCI self-assessment questionnaire once you're live. Which one depends on how you take payments, and your acquirer tells you which applies. It's covered in PCI DSS compliance.