Visa Marketplace Rules: What Qualifies and What It Costs
Visa classifies a marketplace by a five part test, and all five must hold. Miss the requirements and the published ladder runs to USD 250,000.
By Jeffrey Anderson
- Visa classifies a marketplace by a five part test in Section 5.3.4.1 (ID# 0030069) and an entity must meet all five, including displaying its own brand more prominently than its retailers' brands and being financially liable for disputes.
- Four merchant types are ineligible to be a marketplace or to sell on one: franchisees without express franchisor permission, travel agents, High-Integrity Risk Merchants, and charitable social service organizations including crowd funding merchants.
- The cross border concentration test is a conjunction. A foreign retailer breaches only when it exceeds both USD 10 million in annual Visa volume through the marketplace and 10 percent of the marketplace's annual Visa volume.
- Section 5.3.4.2 (ID# 0030070) forbids a marketplace from transferring financial liability by asking or requiring cardholders to waive their dispute rights, and from permitting a retailer to attempt it.
- Liability flows up without a break. Section 5.3.4.3 (ID# 0030071) treats a retailer's acts and omissions as the marketplace's own, and makes the acquirer fully liable for losses caused by either, including legal costs and settlement.
- The published ladder in Section 12.3.2.1 (ID# 0030659) opens at a warning letter plus USD 25,000 and reaches USD 250,000 after 150 uncorrected days, then continues monthly at Visa's discretion. It replaces the general Tier 1 and Tier 2 schedules rather than stacking on them.
Visa classifies a marketplace by a five part test, and an entity has to meet all five. Miss any one of them and your acquirer is not running a marketplace under the rules, whatever your business calls itself. When the requirements go unmet, Visa walks the acquirer up a published ladder that opens at USD 25,000 and reaches USD 250,000 in five months.
That ladder is steeper than the one for breaking a Visa Core Rule. Here is the whole structure from the 18 April 2026 rulebook, with the rule IDs.
What Visa counts as a marketplace
Section 5.3.4.1 (ID# 0030069) sets the test. All five must hold:
- It brings together cardholders and retailers on an ecommerce website or mobile application.
- Its own name or brand is displayed prominently, displayed more prominently than the names and brands of the retailers using it, and forms part of the mobile app name or the URL.
- It handles payments for sales and refunds on behalf of its retailers and receives settlement for those transactions on their behalf.
- It is financially liable for disputes, and resolves them by either issuing a decision that binds both cardholder and retailer, or funding a money back guarantee itself.
- It ensures no retailer located outside its own jurisdiction exceeds both USD 10 million in annual Visa volume through the marketplace and 10 percent of the marketplace's annual Visa volume.
Test two surprises people. If your retailers' brands are the loud thing on the page and yours is a footer credit, you fail a rule rather than a style guide.
Test five is a conjunction and that matters. A foreign retailer has to cross both the dollar figure and the percentage before it breaches. A retailer doing USD 40 million through a marketplace that clears USD 2 billion is inside the rule, because 40 million is 2 percent.
Who cannot be a marketplace, or sell through one
The same rule names four merchant types that are not eligible either as the marketplace or as a retailer on it:
- Franchisees, unless they have given the marketplace the express permission of the franchisor
- Travel agents
- High-Integrity Risk Merchants
- Charitable social service organizations, including crowd funding merchants
Read the last one twice if you are building a giving platform. Crowd funding is named in the rules as ineligible, so a crowd funding model cannot be structured as a Visa marketplace at all. The high risk exclusion matters for the same reason. If a category sits in the high-integrity risk bucket, the marketplace model is closed to it and a different acquiring structure is the only route.
The clause your terms of service may already break
Section 5.3.4.2 (ID# 0030070) lists what an acquirer must write into a marketplace agreement. One line stands out, because marketplace terms of service breach it routinely. The marketplace:
Must not transfer or attempt to transfer, or permit the retailer to transfer or attempt to transfer, its financial liability by asking or requiring Cardholders to waive their dispute rights.
Note how wide that is. It covers attempting, it covers permitting a retailer to attempt it, and it covers asking as well as requiring. A checkout box that asks a buyer to agree disputes go through you instead of their bank is the thing the clause describes.
The same rule requires the agreement to confirm the marketplace is liable for all acts, omissions and cardholder disputes caused by its retailers, is financially liable for every transaction it deposits on a retailer's behalf, and must not knowingly contract with a retailer whose acceptance was terminated at Visa's direction or a government agency's.
Liability flows up with no break in the chain
Section 5.3.4.3 (ID# 0030071) is two sentences long and does a lot of work. An acquirer that contracts with a marketplace is liable for all acts, omissions and other adverse conditions caused by the marketplace and its retailers, including related legal costs and settlement. Then the key line: the acts and omissions of a retailer are treated as those of the marketplace, and the acquirer is fully liable for any losses caused by either.
So a rogue seller's conduct becomes the marketplace's conduct, and the marketplace's conduct becomes the acquirer's exposure. Nothing in that chain breaks. It explains why acquirers underwrite marketplaces harder than they underwrite a single merchant of the same volume, and why due diligence on a marketplace reaches down into the seller base.
Section 5.3.4.4 (ID# 0030072) adds the mechanics. The acquirer must be in good standing in every Visa risk management program, must register the marketplace as a third party agent, must obtain a unique marketplace identifier from Visa, and must ensure that identifier appears in both the authorization and the clearing record of every transaction. Both records, not either.
The ladder runs to USD 250,000
Section 12.3.2.1 (ID# 0030659) publishes the schedule in full:
| Stage | Assessment |
|---|---|
| Initial failure to meet marketplace requirements | Warning letter plus USD 25,000 |
| 30 days after the response due date, uncorrected | USD 50,000 |
| 60 days | USD 100,000 |
| 90 days | USD 150,000 |
| 120 days | USD 200,000 |
| 150 days | USD 250,000 |
| Beyond that | Levied each month until corrected, increasing at Visa's discretion |
Two things are worth noticing. There is no USD 1,000 compliance case fee at the top, which the general schedule has, so this one opens an order of magnitude higher. And every step fires on an uncorrected failure after a response deadline, not on the severity of the original problem. A marketplace requirement fixed on the first letter costs USD 25,000. The same requirement ignored for five months costs USD 250,000 and keeps climbing.
Why this schedule replaces the general one
Section 1.11.2.2 says the general Tier 1 and Tier 2 schedules apply "unless addressed by a specific non-compliance assessment program in Chapter 12." The marketplace schedule is such a program, so it stands in place of the general one rather than stacking on top.
Dynamic currency conversion works the other way. Section 12.3.3.1 (ID# 0030703) says an acquirer whose audit turns up a violation is subject to both a non-refundable assessment of up to USD 10,000 or USD 50,000 and the Tier 2 general schedule. The rulebook says "both" there and says nothing of the kind for marketplaces. Reading one as the model for the other gets the exposure wrong in both directions. Our breakdown of the general assessment schedules covers the tiers these replace.
For comparison, the Tier 1 ladder for breaking a Visa Core Rule runs USD 1,000, then 25,000, 50,000, 75,000, 100,000, 125,000 and 150,000. The marketplace ladder passes that terminal figure at its fourth step.
Frequently asked questions
Does Visa fine my marketplace directly?
No. Every assessment here is imposed on the acquirer. What reaches your business is whatever your agreement lets the acquirer recover, which is a contract question rather than a rules question.
Can a crowdfunding platform be a Visa marketplace?
No. Section 5.3.4.1 names charitable social service organizations, including crowd funding merchants, as ineligible to be marketplaces or to sell as a retailer on one.
How prominent does our branding have to be?
More prominent than your retailers' names and brands, and present in the app name or URL. The rule is comparative, so it depends on how your sellers appear rather than on an absolute standard.
What happens if one foreign seller gets very large?
The test only breaches when that seller exceeds both USD 10 million in annual Visa volume through your marketplace and 10 percent of your annual Visa volume. One threshold alone is not a breach.
Is the marketplace identifier needed on every transaction?
Yes, and in both records. Section 5.3.4.4 requires it in the authorization record and the clearing record of every transaction.
Sources: Visa Core Rules and Visa Product and Service Rules, 18 April 2026, sections 1.11.2.2, 5.3.4.1 through 5.3.4.5, 12.3.2.1 and 12.3.3.1.
Jeffrey Anderson, Merchant Placement Specialist
Merchant placement specialist at Gray Merchants. Jeffrey works directly with acquiring-bank underwriting teams across the firm’s 70+ banking relationships to place high-risk and hard-to-place businesses, structure multi-MID accounts, and keep flagged merchants processing. His writing draws on the placement files he works every week: what underwriters ask for, why accounts get declined, and what keeps an approved account open.