High Risk Merchant Account Requirements: What Underwriters Check
See the high risk merchant account requirements underwriters check, from owner IDs and processing statements to website policies, and avoid review delays.
Photo: Pixabay
On this page 8 sections
- Why High-Risk Underwriters Ask for so Much
- Identity and Ownership: The Baseline High Risk Merchant Account Requirements
- Processing Statements Outweigh Any Projection
- The Website Gets Reviewed Before the Paperwork
- Show That You Can Deliver What You Sell
- Licenses and Lab Reports for Regulated Products
- Present Your Dispute History Before the Underwriter Finds It
- Package the File to Prevent Follow-Up Requests
Key takeaways
- Ownership ID requests follow FinCEN's due diligence rule: everyone who owns 25% or more, plus one person who controls the company.
- Under Visa's VAMP, a 1.6% ratio stays out of the Excessive tier only while you log fewer than 1,500 events a month. Your growth projection can push you over that floor.
- A hemp COA that reports only delta-9 THC won't show compliance with the federal total-THC standard that takes effect December 11, 2026.
- Mastercard MATCH listings generally last five years. Disclose one with the termination letter instead of letting the underwriter find it.
High risk merchant account requirements come in two layers. The first is the identity file any acquiring bank wants: formation documents, an IRS record of your EIN, photo ID for every owner of 25% or more plus one person who controls the company, and a voided check for the settlement account. The second is evidence that your business won't leave the bank holding losses: recent processing and bank statements, a website with working policies, proof of supply and fulfillment, any industry licenses or lab reports, and an honest account of your chargeback history.
Exact lists vary by acquiring bank, industry and volume, so get your provider's list before you submit. Every missing page or mismatched name turns into a follow-up email, and each one adds days to the review.
Why High-Risk Underwriters Ask for so Much
A standard application confirms that your business exists and that you are who you say you are. High-risk underwriting tries to predict whether you will generate disputes, fraud or regulatory trouble that the acquiring bank could end up paying for.
The bank also has its own scorecard. Visa's Acquirer Monitoring Program (VAMP) measures acquirers across their whole portfolio. Industry summaries of the 2026 rules put an acquirer in the "Above Standard" tier when its combined fraud-and-dispute ratio reaches 0.5%, and in the "Excessive" tier at 0.7%. One merchant with runaway disputes can push a bank toward those lines. That's why the underwriter studies how you sell, bill, ship and handle unhappy customers, and why your reserves and pricing depend on what the file shows. If you're unsure why your business landed in this category, start with what a high-risk merchant account is and who needs one.
Identity and Ownership: The Baseline High Risk Merchant Account Requirements
Formation documents come first: articles of incorporation or organization, your operating agreement or bylaws, and a certificate of good standing if the bank asks for one. They prove the entity is active and show who controls it.
The ownership questions follow federal anti-money-laundering law. FinCEN's Customer Due Diligence Rule (31 CFR 1010.230) requires covered financial institutions to identify and verify each individual who owns 25% or more of a legal entity customer. They must also identify one individual with significant responsibility to control or manage it, such as a CEO or managing member. Expect to supply a valid driver's license or passport for each of those people. Expired IDs are a common reason files stall.
For the tax ID, send the IRS letter that assigned your EIN, or another official IRS document that shows the legal name and number together. For the settlement account, send a voided business check or a letter from your bank. The account must be in the business's legal name, not an owner's. Add any business license or local permit your type of business requires and, if asked, a utility bill or lease for the business address.
Consistency Is What the Underwriter Is Really Checking
Underwriters compare your legal name, DBA, address and tax ID across the application, the IRS letter, the bank letter and your website footer. A document that says "LLC" next to an application that says "Inc." triggers a follow-up. So does a DBA that appears on the website but nowhere in your paperwork. These mismatches cost nothing to fix before you submit and days to fix afterward.
Processing Statements Outweigh Any Projection
If you already accept cards, your processing statements are usually the most important pages in the file. Ask your provider how many recent months it wants. The underwriter reads them for volume and average ticket, monthly chargeback and refund counts, and the split between card-present, keyed and online sales. Any sign of a reserve, hold or termination at your current processor gets close attention.
Illustrative example: an application projects $60,000 a month at a $45 average ticket, but recent statements show about $22,000 a month at $140. Maybe you raised prices or started selling bundles. The underwriter can't know that and will ask, so explain the change in one sentence of your business summary.
Business bank statements confirm that the revenue is real and that the business can cover refunds. Steady deposits and a reasonable balance help; a pattern of overdrafts hurts. Newer businesses, and applicants asking for higher volume, may also need a profit and loss statement, a balance sheet or recent tax returns. A startup may be asked for a business plan with volume projections instead.
If a previous processor closed your account, say so up front and include the closure notice. A hidden closure that comes out during underwriting looks far worse than the closure itself. Our guide to why Stripe closes accounts and what to do next covers the records worth gathering after a shutdown.
The Website Gets Reviewed Before the Paperwork
For online businesses, underwriters often open your site before your PDFs. They expect product descriptions with prices and shipping costs, a refund policy with timeframes and conditions, and a shipping policy with realistic delivery windows. Terms of service and a privacy policy should be posted. Contact details should include a phone number and an email address, ideally with a physical address too. Checkout must run over HTTPS.
Subscription checkouts get the closest look. Underwriters check five things. The billing amount and frequency must appear before purchase. Trial terms must say when the trial ends and what will be charged. The customer must take an affirmative step to agree. The confirmation email must repeat the terms. Cancellation instructions must be posted, and the cancellation process has to work when someone tests it. Network rules for trials change, so review the current Visa and Mastercard free trial billing rules and how subscription merchants get approved for recurring billing before you apply.
One requirement is the same at every bank: the products on your site must match the products on your application. Selling items you didn't disclose, or sending traffic from websites you didn't list, can get an account terminated. Declare every site and product line.
Show That You Can Deliver What You Sell
Underwriters want evidence that orders arrive on time and come from a legitimate source.
| Document | Why Underwriters Ask | What Strong Looks Like |
|---|---|---|
| Product list with SKUs and pricing | Confirms what you sell and supports the average ticket | Matches the website and application exactly |
| Supplier or manufacturer invoices | Shows legitimate sourcing | Recent, in the business's name, consistent with your volume |
| Fulfillment or 3PL agreement | Confirms you can ship what you sell | Signed, with shipping timelines |
| Sample marketing materials | Reveals claims and offers that could drive disputes | Ads, landing pages and emails with no misleading claims |
| Affiliate or partner agreements | Affiliates can create compliance risk | Written terms that prohibit noncompliant claims |
| Customer service process | Shows how complaints get resolved before they become chargebacks | Named contact methods, response times and a refund workflow |
Supplement sellers should expect close review of labels and marketing. Underwriters look for a supplement facts panel and check that claims stay within federal rules for dietary supplements. A claim that a product treats or cures a disease is a red flag for underwriters and regulators alike. MannyPay's page on payment processing for nutraceutical merchants covers that industry. Drop-shippers should include the supplier agreement and evidence of typical delivery times, because long or unpredictable shipping windows lead to "item not received" disputes.
Licenses and Lab Reports for Regulated Products
If you need a license to sell your product, include a current copy. That could be a tobacco or vape retail license, a firearms license or the professional licenses behind a telehealth service. Legality in these categories depends on state and federal law and can change quickly. This section is general information, not legal advice; confirm your obligations with a qualified attorney.
CBD and Delta-8 Files Need Total-THC Lab Results
CBD and Delta-8 underwriting centers on certificates of analysis (COAs) from an independent lab for each product or batch. Each COA should clearly match the product page it covers. Underwriters also want age verification where required, any state hemp registrations that apply, and a list of the states you won't ship to, enforced at checkout.
The federal standard behind those COAs is changing. In November 2025, P.L. 119-37 amended the federal hemp definition (7 U.S.C. 1639o) so that total THC, not only delta-9 THC, must stay below 0.3% on a dry-weight basis, according to the Congressional Research Service. The same law caps finished hemp-derived cannabinoid products at 0.4 mg of total THC per container. According to Vicente LLP, H.R. 6500 was signed September 2, 2026. It moved the total-THC standard and the per-container cap from November 12 to December 11, 2026. The ban on synthetic cannabinoids in hemp products still starts November 12.
A COA that reports only delta-9 THC shows compliance with the rule in force until December 11, but not with the rule after it. Expect an underwriter to ask how each product line fits the new definition, and get that answer from your attorney before you apply. MannyPay's CBD and Delta-8 merchant processing page covers card acceptance for this category.
Present Your Dispute History Before the Underwriter Finds It
Your chargebacks already appear in your statements, so present them yourself, with context. Give monthly counts of transactions, chargebacks and refunds; our explainer on how to calculate your chargeback ratio shows the math. Explain any spike in a sentence, such as a carrier delay that caused a run of "item not received" claims. Then show what you changed: clearer billing descriptors, dispute alerts, 3-D Secure authentication, faster refunds or a simpler cancellation process.
Worked Example: How Growth Alone Can Trip Visa's Threshold
Since April 1, 2026, Visa's VAMP has flagged a U.S. merchant as Excessive when its ratio reaches 1.5%, down from 2.2%. The ratio adds fraud reports (TC40s) to disputes (TC15s) and divides the total by settled card-not-present transactions. It applies only once a merchant logs at least 1,500 counted events in a month. At the Excessive level, each counted transaction carries an $8 fee. A transaction that is reported as fraud and then disputed counts twice. Mastercard runs a separate test: its Excessive Chargeback Merchant level starts at 100 or more chargebacks in a month combined with a chargeback ratio of 1.5% or higher.
For illustration, assume an online merchant settles 80,000 Visa card-not-present transactions in a month and receives 760 disputes and 520 fraud reports. That's 1,280 events, a 1.6% ratio. Because 1,280 is under the 1,500 floor, the merchant isn't Excessive.
Now the merchant tells the underwriter it expects 100,000 transactions a month. At the same rates, that's 950 disputes and 650 fraud reports: 1,600 events, still 1.6%. The merchant crosses the floor and lands in Excessive, and that month's VAMP fees come to $12,800 (1,600 × $8). Visa bills VAMP fees to the acquirer, so check your merchant agreement to see how those fees are passed on to you.
Merchants often treat the floor as a safe zone. It isn't, because the underwriter is pricing the account you're asking for, not the one you have. If your ratio is above 1.5% today, show the fixes and the falling counts before you ask for more volume. For the details, see Visa's VAMP fraud and dispute thresholds explained and what happens if you're enrolled in an excessive chargeback program.
Disclose MATCH Listings Before They Surface
Mastercard's MATCH list records merchants that acquirers terminated for specified reasons. Under Mastercard's Security Rules and Procedures, the acquirer must add the merchant within five days of termination, and the listing generally stays for five years. Merchants listed for PCI DSS noncompliance (reason code 12) can be removed once they become compliant. Underwriters check MATCH, so include the termination letter and a plain account of what changed. Hiding a listing can end the relationship later. Your history also shapes your terms, and our guide to how rolling reserves work and how to lower them explains the connection.
Package the File to Prevent Follow-Up Requests
Put everything in one folder with numbered file names, such as "01_Articles_of_Organization.pdf." Submit complete, readable PDFs, not cropped phone photos. Answer every field on the application, and name one person who can answer underwriting questions the same day. Add a one-page business summary covering what you sell, how you bill and fulfill orders, your typical ticket size in plain terms and your expected monthly volume. End it with a line explaining anything in the file that might look odd.
Before you submit, confirm the file includes:
- Formation documents and the IRS EIN letter
- Photo ID for each 25%+ owner and the control person
- Voided business check or bank letter in the legal name
- Recent bank statements, plus processing statements if you've processed before
- A live website with every policy posted and a working cancellation process
- Product list, supplier invoices and fulfillment agreement
- Licenses, COAs or certificates your industry requires
- A monthly chargeback summary and disclosure of any prior closure or MATCH listing
If another provider has already turned you down, work through common merchant account denial reasons and fixes before you reapply. When the file is ready, MannyPay offers high-risk merchant accounts for e-commerce and regulated businesses. Request a free quote and a MannyPay specialist will respond within one business day. Each acquiring bank makes its own approval decision, and a complete file gets your application a fair review the first time.
Sources
- Visa and Mastercard Just Tightened Chargeback Monitoring Again: What the 2026 VAMP Threshold Cut Means for Merchants
- VAMP Thresholds 2026: Ratio Formula, Rules, and Merchant Survival Guide
- The MATCH List: What It Means to Be Listed (and How to Avoid It)
- FinCEN CDD Rule FAQs
- Federal Register: Customer Due Diligence Requirements for Financial Institutions
- Congressional Research Service: Change to Federal Definition of Hemp and Implications for Federal Enforcement (IN12620)
- Vicente LLP: Federal Hemp Update: Definition Change Delayed to December 11
This article is for general educational purposes and is not legal, tax or financial advice. Card network rules and state laws change; confirm current requirements for your business.
