There is no master list to look yourself up on, which is why “what is considered a high risk merchant?” only ever gets answered one file at a time, by the bank reading yours. No card network publishes a roster of risky businesses. Each acquiring bank sets its own appetite, and two banks can read the same application and disagree.
The list you are hunting for does not exist
Most owners assume Visa and Mastercard maintain an official register of risky categories, and that somebody put their business on it. They do not. What exists instead is a merchant category code, a four digit number describing roughly what you sell, plus each bank’s private view of which codes and which patterns have cost it money before.
That distinction matters because it changes who you are arguing with. You are not appealing a network classification. You are presenting a case to one bank’s risk department, and a different bank may already have a different answer waiting. We wrote about why no credible public MCC risk list exists and why every table you find online is a copy of a copy.
So what is considered a high risk merchant?
A business the acquiring bank believes is more likely than average to cost it money after the sale has already happened. That is the entire definition. The cost can arrive as chargebacks, as fraud, as refunds the bank has to fund when a merchant cannot, or as regulatory exposure attached to the product itself.
Everything else people say about high risk status follows from that one sentence. The bank is not judging whether your business is legitimate or well run. It is estimating what it will owe if you stop trading tomorrow with orders still undelivered.
The four things that move a file into that pile
Underwriters keep returning to the same four questions, in roughly this order:
- What you sell. Products with regulatory attention, subscription models, and anything a customer might later claim they never authorized all raise the estimate.
- How long the customer waits. A meal handed over in ninety seconds carries almost no future liability. A trip booked eight months out carries eight months of it.
- How the card is presented. Card not present sales cannot verify the person holding the card, so the fraud and dispute exposure is structurally higher than a card tapped at a counter.
- What already happened. A prior termination, an unexplained volume jump, or a dispute rate trending the wrong way weighs more than the category ever will.
A closer walkthrough of each of those sits in what underwriting actually looks at, including which documents answer which question.
Two businesses in the same industry, two different answers
This is the part that confuses people who compare notes with a competitor. Same products, same website, same code, and one gets boarded easily while the other cannot get a callback.
The difference is almost never the industry. It is average ticket size, months of trading history, whether the bank statements show the volume the application claims, whether disputes are being answered or ignored, and whether the owner disclosed a previous closure or hoped nobody would notice. Category sets the starting position. The file moves you from there. The industry pages describe the starting position for several of the categories banks look at hardest.
Where judgment stops and a rule takes over
Up to a point, all of this is one underwriter’s opinion. Past a point, it stops being an opinion.
Mastercard’s Security Rules and Procedures Merchant Edition, as published and summarised in Stripe’s documentation at https://docs.stripe.com/disputes/match, sets a specific threshold for reason code 4, excessive chargebacks: Mastercard chargebacks in a single calendar month exceeding 1% of that month’s Mastercard sales transactions, and totalling USD 5,000 or more. Code 5, excessive fraud, is a fraud to sales ratio of 8% or more in a calendar month, together with 10 or more fraudulent transactions totalling USD 5,000 or more. Cross either line and a terminating processor is required to report the business to MATCH within one business day. Those are Mastercard’s numbers, not ours. The thresholds explained covers how they are counted and what the monitoring programs do earlier.
What changes once a bank puts you in that pile
Three things, usually. Underwriting gets slower and asks for more, because someone is reading rather than scoring. Pricing reflects the estimated liability rather than a published flat rate. And the bank may hold a reserve, a portion of your settlements kept back for a set period against future disputes.
None of that is a punishment and none of it is permanent. Files improve. Dispute rates come down, trading history lengthens, and the same business gets a different answer eighteen months later. If you want the fuller version of how banks sort businesses in the first place, what makes a business high risk is the place to start, and how high risk pricing is built explains which lines on an offer are worth arguing about.
Frequently asked questions
Can I check somewhere whether my business is classified as high risk? No, because there is nothing central to check. The closest thing to an answer is applying and reading what the underwriter asks for. Heavy documentation requests, a reserve proposal, or a request for processing history all tell you where the file landed.
Does being high risk mean I did something wrong? Usually not. Most businesses in the category arrive there because of what they sell and how long customers wait for it, both decided before the business ever took a payment. Conduct only enters the picture through disputes, fraud and disclosure.
Can a business stop being high risk? The category rarely changes, but the file does, and the file is what gets priced. Twelve to eighteen clean months of processing history with a low dispute rate changes what banks will offer, even in a category they treat carefully.
Why did an aggregator approve me instantly if I am high risk? Because aggregators approve first and underwrite afterwards, continuously. The review still happens. It just happens after your money is already moving through the account, which is why those closures feel so abrupt.
Does high risk mean a reserve is automatic? No. A reserve is one tool among several and it depends on the estimated exposure, the trading history and the category. When one is proposed, the release terms should be in the written offer before you sign anything.