Your processor is not the party that decides when high-risk card processing turns into a real problem. The card networks are, and they publish the thresholds in writing. Mastercard and Visa each define a specific point at which a terminated merchant gets reported, and both are arithmetic rather than opinion.
Why does it matter that the numbers are published?
Because it means you can measure yourself against them before anyone else does. A merchant who knows the line can watch the distance to it. A merchant who does not know the line finds out about it in a termination notice.
These figures come from Mastercard’s Security Rules and Procedures, Merchant Edition, and from Stripe’s published documentation summarizing the MATCH system at https://docs.stripe.com/disputes/match. They are the networks’ own rules about their own systems, not estimates.
Which thresholds does high-risk card processing get measured against?
Four are worth knowing by heart. Each is measured over a single calendar month, not a rolling average, which is why one bad month can matter more than a mediocre quarter.
| Program and code | The published test |
|---|---|
| MATCH reason code 4, excessive chargebacks | Mastercard chargebacks in one calendar month above 1% of that month’s Mastercard sales transactions AND totalling USD 5,000 or more |
| MATCH reason code 5, excessive fraud | A fraud-to-sales dollar ratio of 8% or more in a calendar month AND 10 or more fraudulent transactions totalling USD 5,000 or more |
| Visa Merchant Screening Service code 22, excessive disputes | 1,000 disputes AND a 1.8% dispute-to-sales ratio in a single month |
| Visa Merchant Screening Service code 21, excessive fraud | USD 250,000 AND a 1.8% ratio |
Two details catch people out. The Mastercard tests count Mastercard activity only, so your blended all-brands ratio can look calm while the Mastercard slice is not. And both parts of each test have to be true, so a very small merchant can breach a percentage without breaching the dollar floor.
The mechanics of ratio calculation, including why the denominator month matters, are covered in chargeback thresholds explained, and the Visa system specifically in the Visa Merchant Screening Service.
What happens once a merchant is reported?
Under Mastercard’s rules, a processor that terminates a merchant for a qualifying reason must add that merchant to MATCH within one business day. MATCH stands for Mastercard Alert to Control High-risk Merchants, and it was formerly called the Terminated Merchant File.
The listing then sits there for five years, after which Mastercard purges it automatically. During those five years, any acquirer considering your application can query it and will see the reason code, the business detail and the principal’s detail attached to the file.
Mastercard states that it does not assess the accuracy of listings. That is important and under-appreciated: the system records what a processor reported, and the processor’s judgment is not audited before the record exists. What the record actually contains is itemized in what a MATCH listing records.
Can a listing be taken off early?
Only by the acquirer that placed it, and only in two situations. If the listing was added in error, that acquirer can remove it. If the listing is reason code 12, PCI DSS non-compliance, it can come off once compliance is confirmed.
Nobody else can remove a listing. Not us, not a lawyer, not a service charging a fee to make it disappear. Any offer to buy a listing off the file is selling something that does not exist. The honest version of what can and cannot be done is on our MATCH list removal page.
What can you do while you are still under the line?
Most of the work is unglamorous and it all lives inside your own operation.
- Watch the Mastercard-only ratio separately, not just the blended figure.
- Make the statement descriptor obviously match the name customers bought from.
- Refund fast when a customer is clearly unhappy, because a refund never counts as a dispute.
- Answer every retrieval request, including small ones, because the pattern is what gets read.
- Keep delivery and consent evidence in a form you can produce inside a dispute deadline.
- Watch fraud transaction counts, not just fraud dollars, since code 5 has a count test as well as a ratio test.
If a threshold has already been crossed, the account and the placement conversation both change shape, and high risk credit card processing covers what acceptance looks like from that point on.
Frequently asked questions
Does one bad month put me on MATCH automatically? No. A listing follows a termination, not a ratio. Crossing a published threshold makes your acquirer’s decision to terminate reportable if it takes that decision, but plenty of merchants breach a threshold, work with their acquirer and stay open.
Do the Mastercard tests include my Visa sales? No. The MATCH code 4 and code 5 tests are measured on Mastercard activity only, per Mastercard’s published rules. Visa runs its own separate screening program with its own thresholds, so a business can sit comfortably in one and badly in the other.
Is there a reason code 6? No. The published list runs 1 through 14 with no code 6 in use. The full list, with what each one signals to a future underwriter, is in the MATCH reason codes list.
Can I find out whether I am listed? Not by querying MATCH yourself. Access is limited to acquirers, so the practical routes are asking your terminating processor directly and watching for the pattern in how applications are handled. The realistic methods are set out in how to check the MATCH list.
Does a listing mean I can never process cards again? No, though it narrows the field considerably. Stripe publishes that it generally cannot process for MATCH-listed businesses absent extenuating circumstances, and other aggregators screen similarly. Dedicated placement with an acquirer that reads the reason code and the story around it is the realistic path.