High-Risk Merchant Accounts 2026: Processing, MATCH and Restricted Industries

The definitive 2026 guide to high-risk merchant accounts, restricted industries, MATCH, Stripe and Square shutdowns, specialized banks, compliance, and payment processing.

Presented by Allen Kopelman, CEO — Nationwide Payment Systems-Host of B2B Vault: The Biz2Biz Podcast

AI Overview

High-risk merchant services help legitimate businesses in regulated, restricted, or chargeback-prone industries accept credit cards through specialized underwriting. A high-risk merchant account should be approved by an acquiring bank that understands the company’s exact products, sales model, licensing, website, and compliance requirements. Merchants should review every processor’s restricted-business policies before processing and disclose all products accurately. Businesses shut down by Stripe, Square, PayPal, Shopify Payments, Wix Payments, or QuickBooks Payments may still qualify with another bank. Merchants listed on Mastercard MATCH may also have options, depending on the reason code, circumstances, remediation, and underwriting review. Nationwide Payment Systems helps match niche and higher-risk businesses with appropriate acquiring relationships rather than relying on instant approval.

The Definitive Guide to High-Risk Merchant Services in 2026

If your business operates in a higher-risk or highly regulated industry, choosing a payment processor should not start with one question:

“Who can get me processing today?”

It should start with:

“Which acquiring bank actually understands and approves my business model?”

That distinction matters.

Many businesses classified as “high risk” are perfectly legal, legitimate companies. They may simply operate in an industry that requires additional underwriting, licensing, monitoring, card-brand registration, age verification, enhanced website disclosures, or specialized banking relationships.

At Nationwide Payment Systems, we often refer to these businesses as niche industries rather than simply “high risk.”

Why? Because different banks have different risk appetites. A business one bank refuses to process may be exactly the type of business another acquiring bank actively wants in its portfolio.

The key is getting the merchant placed with the right bank from the beginning. And in 2026, that has become more important than ever.

What Is a High-Risk Merchant Account?

A high-risk merchant account is a merchant processing account specifically underwritten for a business that presents additional financial, regulatory, reputational, fraud, chargeback, fulfillment, or card-brand compliance risk.

A company can be considered higher risk because of:

The products or services it sells
Its industry or Merchant Category Code (MCC)
Recurring billing or subscription models
Future delivery & long fulfillment periods
High average tickets or rapid growth
Card-not-present (online) transactions
Elevated chargeback exposure & refund profiles
Regulatory oversight & age-restricted products
Marketing methods & international sales
A previous processing history or prior merchant account termination

Being classified as high risk does not automatically mean the business is doing anything wrong. In many cases, the business simply requires a bank that has the underwriting expertise and risk appetite for that particular industry.

The Biggest Mistake High-Risk Merchants Make

One of the most common mistakes we see is a business opening an account with an instant-approval processor or payment facilitator (PayFac) such as:

Stripe
Square
PayPal
QuickBooks Payments
Wix Payments
Shopify Payments

...without first reading the provider's Terms of Service (TOS), Acceptable Use Policy, Restricted Business List, and Prohibited Business List.

That can be a very expensive mistake.

These platforms are excellent tools for many mainstream businesses. But they are not designed to accept every business model:

Stripe specifically maintains prohibited and restricted business categories and states that some restricted businesses require additional due diligence and explicit approval.
Shopify Payments similarly states that certain businesses are prohibited while others require additional review, noting that even completely legal businesses may not qualify.
Wix Payments publishes a substantial list of unsupported categories including various regulated products, healthcare, adult businesses, tobacco, firearms, financial services, peptides, and research chemicals.
PayPal & QuickBooks Payments both maintain strict Acceptable Use Policies covering prohibited merchants, activities, and business types.

The takeaway is simple: Do not assume that because a processor allowed you to open an account, your business has been approved for processing. Instant account creation is not the same thing as full underwriting approval.

Always Read the TOS Before You Process a Dollar

Most business owners never read their payment processor's Terms of Service. High-risk merchants cannot afford to make that mistake.

Before using any payment company, search its website for:

Terms of Service
Acceptable Use Policy
Restricted Businesses / Prohibited Businesses
Prohibited Products

Then compare those rules with everything your company sells and advertises—including primary products, secondary products, upsells, supplements, subscriptions, digital content, website claims, social-media advertising, affiliate offers, and recurring billing programs.

Your processor needs to know what you actually do. Do not describe your company as something safer or more generic simply to obtain an account. That strategy will backfire badly.

"But My Business Is Legal"

This is another common misunderstanding. A product being legal does not automatically mean every payment processor has to support it.

Stripe makes this point directly: a business may be completely legal but still fall outside the types of businesses Stripe or its financial partners are willing or able to support. The processor, acquiring bank, and card brands may impose requirements that go beyond whether the product itself is legal.

That is why two similar merchants can have completely different experiences:

Processor A: "No."
Processor B (Specialized): "Yes, provided you have the correct licenses, disclosures, registration, and controls."

This is what specialized merchant underwriting is designed to solve.

What Happens When You Process a Prohibited Business Anyway?

This is where the risk becomes serious. A processor discovering that your company is operating outside its approved business model can result in:

Account review and transaction restrictions
Delayed funding, payout holds, or reserve requirements
Frozen funds or mandatory customer refunds
Account suspension or full merchant account termination
Reporting to card-brand monitoring programs
Placement on the Mastercard MATCH system

For example, Wix warns that selling prohibited products may result in account closure or withheld funds. Shopify Payments continuously evaluates risk and may freeze payouts or deactivate accounts. PayPal similarly enforces account limitations, holds, or termination when restricted activities occur.

The consequences can extend far beyond losing one payment provider. That brings us to MATCH.

The Mastercard MATCH List: The Risk Every Merchant Should Understand

MATCH is Mastercard's system used by acquiring institutions to identify merchants and related parties that have been terminated for specified reasons.

Acquiring banks conduct MATCH inquiries whenever they evaluate a new merchant application. A MATCH listing is serious:

Mastercard rules state that MATCH merchant records remain in the MATCH Pro system for five years, after which they are automatically purged.
While it doesn't make obtaining another account legally impossible, it makes obtaining conventional merchant processing extremely difficult.

Certain specialized acquiring banks may still consider MATCH-listed merchants depending on the reason code, the circumstances, whether the problem was resolved, current financial condition, and card-brand compliance programs. However, you definitely do not want to find yourself on this list simply because you ignored a policy.

Two MATCH Codes Higher-Risk Merchants Should Know

There are multiple MATCH reason codes, but two are especially important when discussing prohibited products and improper processing:

MATCH Reason Code 10 — Violation of Standards

Mastercard defines Reason Code 10 as Violation of Standards. In broad terms, it applies when a merchant violates applicable Mastercard standards governing card transactions. For regulated and higher-risk merchants, following card-brand rules is just as important as complying with federal and state law.

MATCH Reason Code 13 — Illegal Transactions

Mastercard's MATCH rules identify Reason Code 13 as Illegal Transactions for an authorized-user listing. This is why merchants must be exceptionally careful about product legality, ingredients, state vs. federal laws, required licenses, age restrictions, FDA requirements, shipping restrictions, and claims made on their website.

Your Merchant Account Must Match What You Actually Sell

An underwriter approves a business based strictly on the parameters provided during underwriting—including your website, MCC, processing volume, average ticket, fulfillment policy, licenses, and suppliers.

After approval, a merchant cannot simply start processing an entirely different business model through the same account.

A retail store approved to sell clothing should not suddenly begin processing payments for CBD.
A general e-commerce merchant should not quietly add peptides.
A convenience store should not begin selling unauthorized or prohibited products.
A consulting company should not process transactions for a separate, unapproved business.

These activities create severe issues involving transaction laundering, incorrect merchant classification, and card-brand violations.

Industries Commonly Considered Higher Risk

Risk classifications vary by bank, sales channel, and business model. However, the following industries frequently require specialized underwriting and merchant acquiring relationships:

CBD and Hemp

Typically require specialized acquiring relationships and strict documentation regarding ingredients, Certificates of Analysis (COAs), THC levels, suppliers, product labeling, and state/federal legal compliance.

Smoke Shops, Vape Shops, and Tobacco

Face card-brand registration requirements, FDA compliance, age-verification systems, and heavy restrictions—especially for online sales.

Firearms and Ammunition

Require acquiring banks comfortable with the industry, accompanied by enhanced underwriting, licensing verification, and strict card-brand compliance.

Adult Products and Adult Entertainment

Subject to specialized underwriting, card-brand registration, website-content standards, strict age controls, and continuous monitoring. Most mainstream payment facilitators prohibit this category.

Telemedicine

Requires a thorough review of licensing, prescription practices, pharmacy relationships, marketing claims, fulfillment, and healthcare regulations.

Pharmaceuticals and Online Pharmacies

Heavily regulated; requires specialized licensing, certifications, and card-brand registration depending on the business model.

Nutraceuticals and Supplements

Become challenging when aggressive disease, weight-loss, or health claims are used. Underwriters analyze ingredients, labels, marketing claims, testimonials, subscription practices, FDA warning letters, and refund policies.

Peptides and Research Chemicals

The exact product, intended use, marketing claims, and legal status matter tremendously. You cannot assume a product labeled "for research use only" will be automatically accepted by a processor.

Cannabis-Related Businesses

Plant-touching marijuana businesses remain extremely difficult for traditional credit card acceptance in the United States due to federal law. CBD, hemp, and ancillary (non-plant-touching) cannabis companies are distinct categories evaluated individually.

Kratom and Kava

Face frequent processor restrictions even where products are legally sold. State laws, product formulation, marketing claims, and individual processor policies all play a major role.

Online Dating

Dating services carry elevated fraud, dispute, and reputational risk, causing processors to classify them as restricted or high risk.

Travel Agencies and Vacation Businesses

frequently involve future delivery—customers pay months before receiving the service, creating significant financial exposure for acquiring banks.

Timeshares

Classified as higher risk due to regulatory scrutiny, high-pressure sales history, future delivery, and historical chargeback exposure.

Ticketing and Events

Selling tickets months before an event creates future-delivery exposure. If an event is canceled, thousands of customers could request chargebacks simultaneously.

Subscription and Recurring Billing Businesses

Recurring billing increases disputes related to cancellations, free trials, negative-option billing, renewal disclosures, and authorization records. A compliant billing setup is vital.

Credit Repair and Debt Services

Face strict federal regulations, specialized processor rules, and complete prohibition on most mainstream payment platforms.

Cryptocurrency and Digital Assets

Require specialized licensing, compliance programs, and banking relationships. The risk profile varies dramatically between exchanges, software tools, consulting firms, and mining equipment sellers.

Money Services Businesses (MSBs)

Money transmission, check cashing, and currency exchange require specialized banking relationships and stringent AML/KYC compliance.

Pawn Shops

Frequently restricted by instant-approval platforms, but readily processed through acquiring banks that support the retail and secondary market industry.

Precious Metals and Coins

High average transaction values, high fraud exposure, and liquid resale value trigger deep underwriting scrutiny.

Weapons and Tactical Products

Even when products are fully legal, tactical gear and non-firearm weapons often fall outside mainstream processors' risk policies.

Bail Bonds

Commonly treated as niche or restricted merchants requiring dedicated acquiring relationships.

High-Ticket Coaching and Consulting

Not automatically high risk, but high ticket sizes, earnings claims, future delivery, and dispute ratios can cause underwriters to categorize them as higher risk.

Membership Programs

Annual prepaid programs or long-term memberships create extended future-delivery exposure for the acquiring bank.

Fantasy Sports, Contests, and Gaming

Involves complex state-by-state laws, card-brand registrations, and strict regulatory compliance that should never be processed without specialized, fully underwritten accounts.