What Actually Makes a Business High Risk to a Processor?

What makes a business high risk to a processor isn't really about your business. It's about what your acquiring bank has to do in order to bank you. Once you see the obligations that attach to the label, the declines and the reserves stop looking arbitrary.

Start with the label itself, because the industry uses a word the card networks don't.

Visa Doesn't Say "High Risk"#

We searched all 923 pages of the Visa Core Rules and Product and Service Rules, dated 18 April 2026. The phrase "High-Risk Merchant" appears zero times (Visa Core Rules).

Visa's term is High-Integrity Risk Merchant, and it appears throughout. That isn't pedantry. It tells you what the category is actually about. Integrity risk means the risk that a transaction is legally or reputationally problematic, not simply that a customer might dispute it. A business with terrible chargebacks isn't automatically in this category, and a business with excellent chargebacks can be in it permanently.

What Your Acquirer Has to Do to Take You#

Here's the part that explains everything else, quoted from the rules.

Before submitting transactions completed by high integrity risk merchants, an acquirer must do all of the following: submit a High-Integrity Risk Acquiring Registration Application and be approved by Visa, undergo a financial review, have the required equity capital, be investment-grade and/or commit to compensating controls such as collateral requirements as determined by Visa, comply with the Visa Rules, conduct appropriate due diligence under the Visa Acceptance Risk Standards, be in good standing in all Visa risk management programs, and if required complete and fully remediate an on-site operational review.

It must also register with Visa each high integrity risk merchant individually, along with any payment facilitators and their sponsored merchants, and any agents that solicit such merchants.

Read that again as a bank. Taking your account means a separate registration, a capital test, possible collateral, an individual filing for you specifically, and exposure to an on-site review. Most banks decline not because they dislike your product but because they never completed step one.

That's also why the ISO you're talking to matters. We hold relationships with acquirers that carry this registration, which is a different thing from finding a processor willing to try.

The Categories Visa Names#

Visa publishes the list in its Merchant Data Standards Manual (Visa). For card-absent transactions it covers codes including 5122 and 5912 for drugs and pharmacies, 5966 for outbound telemarketing, 5967 for adult content, 5993 for cigar stores, 7273 for dating and escort services, and 7995 for betting and gaming, with a further group covering cyberlockers, trading platforms, skilled game wagering, and cryptocurrency.

Your merchant category code is what puts you in or out, and you don't choose it. Your acquirer assigns the code that most accurately describes your business. Our MCC directory lists them all if you want to see where you'd land.

There Is a Documented Way Out#

Most guides present the category as permanent. The rules contain at least one explicit exit.

The registration requirement "does not apply to Merchants assigned MCC 5122 or 5912 if the Merchant is accredited by the National Association of Boards of Pharmacy (NABP) or other regulatory body recognized by Visa."

An accredited pharmacy under those codes drops the registration burden entirely. That's a concrete, checkable answer to "can we ever stop being treated this way," and it points at the general principle: recognised third-party accreditation is the lever that moves you, not arguing with underwriters.

Risk That Isn't About Your Category#

Plenty of businesses get treated as high risk without appearing on any list. Four patterns do it.

Delivery happens after payment. Pre-orders, event tickets, travel, coaching, and custom work all create a window where the customer has paid and received nothing. If you fail during that window, the acquirer refunds the customer. We covered the structure in what a rolling reserve is.

Recurring billing. Subscriptions produce disputes from customers who forgot, and those land as friendly fraud rather than as cancellations.

Card-absent volume. Card-not-present sales carry more fraud liability and feed the ratio your acquirer watches.

Ticket size and volatility. A high average ticket concentrates loss, and unpredictable volume looks like a control problem even when it's just seasonality.

None of these is a moral judgment. They're all descriptions of who eats the loss and when.

Regulators Removed the Reputational Argument#

For years the stated reason banks avoided legal but disfavoured industries was reputation risk. That justification has been pulled out of federal bank supervision.

The OCC began removing references to reputation risk from its Comptroller's Handbook and guidance in 2025 and instructed examiners that they should no longer examine for reputation risk (OCC Bulletin 2025-4). The FDIC then revised its payment processor relationships guidance in February 2026 specifically to remove reputation risk references (FDIC).

This doesn't force anyone to take you, and it doesn't touch Visa's registration requirements, which are a network matter rather than a supervisory one. What it does mean is that a decline now has to rest on something measurable. If you're in a legal category that struggled to get banked, that shift is real and worth knowing about.

What Actually Changes Your Outcome#

Underwriters assess what they can measure, so give them measurements.

Processing history beats projections. Six months of statements showing a stable dispute rate is the single most persuasive document you own.

A complete file beats a fast one. Applications stall waiting on documents, not in queues. Our guide to applying for a high risk account lists what to have ready.

Accreditation beats argument, as the pharmacy carve-out shows.

Clean presentation beats optimism. A website with visible pricing, terms, refund policy and contact details, describing exactly what you sell, removes the ambiguity that underwriters price as risk.

And accept the reserve rather than fighting it. Negotiate the percentage, the hold period, and the release schedule in writing. That's a far better use of leverage than trying to talk your way out of the category.