Payment Processing Guide

How to Choose a High Risk Payment Processor

By Violette K | CERF | 8 min read

How to choose a high risk payment processor: checklist for evaluating banking relationships, underwriting, fees, and red flags

Most merchants find out they picked the wrong high risk payment processor the same way: their account gets closed. Sometimes after three months. Sometimes after two weeks. The common thread is not the merchant's business. It is that the processor either did not have genuine banking relationships for their product category, or had relationships built on arrangements that collapsed when the acquiring bank changed its risk appetite.

Getting this decision right the first time is entirely possible. It requires asking a small number of specific questions and knowing what honest answers sound like versus what a sales pitch sounds like. Here is the framework.

What "High Risk" Actually Means to an Underwriter

The label "high risk" does not describe the quality of your business. It describes how acquiring banks and card networks categorize certain transaction types based on chargeback probability, regulatory complexity, and reputational exposure to the bank.

A merchant selling subscription supplements, CBD products, or research chemicals occupies a category that major card networks have flagged as elevated risk. The acquiring bank processing your transactions accepts more liability than they would for a restaurant or a software company. Processing rates are higher because that liability has a real cost. Rolling reserves are standard because chargebacks can arrive months after transactions clear. Underwriting is more detailed because the bank is making a deliberate decision to accept that risk profile.

Understanding this matters when evaluating processors. You are not looking for a processor that pretends the risk category does not exist. You are looking for one that has genuinely built the infrastructure to manage it, and has done so for businesses in your specific vertical.

The MATCH List: What It Is and Why It Matters

The MATCH list (Member Alert to Control High-Risk Merchants) is a database maintained by Mastercard that acquiring banks use to screen merchant applications. If a processor terminates your account for excessive chargebacks, fraud, or card network rule violations, they are required to add your business to the MATCH list. Being on it does not make it impossible to get a new merchant account, but it narrows your options substantially and raises your rates across every future application.

Worth knowing: Processors who suggest describing your business category vaguely to speed up approval are pointing you toward exactly the conduct that gets merchants added to the MATCH list. A fast approval today is not worth years of restricted access to processing.

If a previous account was terminated and you suspect the MATCH listing was made outside Mastercard's criteria, it can be contested, but the process takes documentation, time, and usually someone who has done it before. Better to never get there.

Key Questions to Ask Every Processor

Do you have direct banking relationships for my product category?

This is the most important question on the list. Direct relationships mean the processor has gone through the process of having your specific business category reviewed and approved by the acquiring bank before you even apply. Intermediary arrangements, where the processor is placing your account with a bank that has not fully evaluated what they are accepting, tend to collapse when the underlying bank changes its stance on a category.

What matters is whether they can demonstrate experience in your category through their underwriting process, their timeline, and the stability of accounts they have placed. You do not need to know their acquiring bank name to assess this. Most established processors do not disclose which specific banks they work with, and that is standard practice, not evasion. The same applies to client names: a processor that declines to hand over a list of other merchants is protecting confidentiality, not hiding a lack of history. What you are evaluating is process and track record, not a roster.

What does your underwriting process look like, and how long does it take?

Legitimate underwriting for a high risk merchant account takes two to seven business days. It involves reviewing your website, your product descriptions, your corporate structure, your processing history if you have one, and your compliance documentation. If an account is approved in two hours without any documentation review, it did not go through real underwriting. It went through an automated system that will eventually flag what it missed, and the closure notice will arrive at the worst possible time.

2–7 Business days for legitimate high risk underwriting
90–180 Days funds can be held after account closure

What are all the fees?

Processing rate, reserve percentage, reserve holding period, monthly minimum fee, chargeback fee, setup fee, international transaction surcharge, refund processing fee, and early termination penalty. Get every single one in writing before signing. Processors that are specific and complete about fees during the evaluation phase are the ones who maintain that transparency after you go live.

What is the contract structure?

Month-to-month agreements with reasonable notice periods are the standard for merchants who want to maintain flexibility. Two-year contracts with large exit penalties signal that the processor is not confident you will want to stay once you experience how they operate. Strong processors do not need to lock merchants in.

Red Flags That Should End the Conversation

Processing rates significantly below the market standard. The high risk processing market has a floor driven by actual acquiring bank costs. If a processor is quoting 2% on a product category that legitimate processors cannot place below 5%, either the rate is wrong or the banking relationship is not what it appears to be. Neither scenario ends well for the merchant.

Suggestions to obscure your product category. "Just say you sell health products" or "describe it as general retail in the application" is advice that leads directly to account termination, fund holds, and MATCH list exposure. Any processor offering this guidance is not a partner. They are a short-term fix with long-term consequences.

No verifiable business entity. The high risk processing market has operators who take merchant fees and disappear. Confirm the processor is a registered company with a physical address and a track record you can verify independently.

A processor sharing other merchants' names as proof of their track record is itself a concern. Client relationships are confidential. A processor who casually names the other businesses on their book is telling you exactly what they will do with yours. If a processor does not volunteer client names or acquiring bank names, that is professional conduct, not a red flag. Evaluate them on their process, timelines, and how clearly they can explain the underwriting requirements for your category.

Any processor who tells you the acquiring bank will not see your real product category is describing fraud. Misrepresenting merchant category to an acquiring bank violates card network rules and the bank's own underwriting terms. Accounts placed this way are not approved accounts. They are ticking closures. When the bank identifies the mismatch, and they do, the fund hold and any MATCH list exposure land on you, not the processor who suggested the approach.

Guaranteed or same-day approvals without documentation review are not a feature. A processor approving your account in two hours without seeing your website, your processing history, or your compliance documents did not underwrite you. They skipped it. Legitimate underwriting for a high risk merchant account takes time because there is real review happening. A processor that treats approval speed as a selling point is advertising that they do not do the work that keeps accounts live after approval.

Understanding Chargeback Thresholds

Card networks set chargeback thresholds that, if crossed, trigger consequences for both the merchant and the processor. Visa flags merchants who exceed 0.9% of monthly transactions under their Dispute Monitoring Program. Mastercard's threshold is 1.5% for their Excessive Chargeback Merchant program. Crossing either threshold can result in fines, increased scrutiny, or account termination.

When evaluating how to choose a high risk payment processor, ask whether they offer chargeback monitoring tools and how they handle accounts approaching these thresholds. Experienced processors have systems: alerts when disputes are initiated, dispute response support, and guidance on transaction practices that reduce reversal rates. Processors without this infrastructure hand the problem back to you when it becomes critical.

Chargeback context: A healthy high risk merchant account generally stays under 1% monthly chargeback rate. Some verticals, particularly subscription billing and digital goods, require extra attention to clear billing descriptors and easy cancellation to stay below that mark.

Multi-Bank Routing and Long-Term Stability

A processor that relies on a single acquiring bank has a single point of failure that affects every merchant they serve simultaneously. When that bank changes its risk appetite for a category, every merchant in that category gets the same call on the same day. Processors with multiple banking relationships across different jurisdictions can route accounts to a backup relationship while maintaining continuity, the kind of operational flexibility that keeps your revenue running when industry-level shifts happen.

Ask how many acquiring banking relationships the processor maintains and whether those relationships are in different geographic regions. Processors with access to acquiring banks in the US, EU, and other regulated markets can absorb policy changes at individual banks without the disruption cascading to their entire merchant portfolio.

Category-Specific Track Record

How long has the processor been placing accounts specifically in your industry? Not "high risk processing" in general. Your category specifically. The compliance requirements for a CBD supplement brand are different from those for an online gaming operator or a forex broker. Category experience means the processor understands the specific questions your business will face before they become problems.

A processor who has worked with CBD brands for three years knows what COA documentation looks like, how card network rules apply to hemp-derived products, and how to structure the account to minimize disruption when regulatory positions shift. One who is placing their first CBD account alongside yours is learning on your processing volume.

The Gateway and Integration Question

Payment infrastructure is not only the acquiring relationship. It is also the payment gateway that connects your checkout to the bank. Before signing with any processor, verify that their gateway supports your platform: Shopify, WooCommerce, custom API, or whatever checkout environment your store runs on.

Gateway switching after an account is live is technically possible but operationally disruptive: affects checkout conversion during implementation, requires dev work, and can create gaps in payment availability. Better to solve the integration question during evaluation than during your busiest sales period.

What the Underwriting Process Actually Involves

When you apply with a legitimate high risk processor, expect to provide: government-issued ID for principals, articles of incorporation or organization, voided check or bank letter, EIN documentation, three months of business bank statements, three months of processing statements if you have processing history, a W-9, and domain registration for your site.

The underwriting team will review your website for compliant product descriptions, clear terms of sale, and any content that might create card network concerns. They will look at your chargeback history if you have one. They will assess your refund and cancellation policies. This is not bureaucracy. It is the processor doing the work that keeps your account stable after approval.

Frequently Asked Questions

What chargeback rate is too high for a high risk merchant?
Visa flags merchants above 0.9% under their Dispute Monitoring Program. Mastercard flags above 1.5% under the Excessive Chargeback Merchant program. Most high risk processors want to see chargeback rates under 1% to maintain the acquiring bank relationship long term.
How long does high risk merchant account underwriting take?
Legitimate underwriting for a high risk merchant account takes two to seven business days. It involves reviewing your website, product descriptions, corporate documents, and processing history. Approvals that happen in hours without documentation review skipped the actual underwriting process, and accounts approved that way rarely last.
Can I negotiate my high risk processing rate?
Rates have flexibility, particularly for merchants with high monthly volume, clean processing history, or consistently low chargeback rates. The rate disclosed during the application is a starting point. After several months of clean processing, both rates and reserve terms can often be renegotiated with the processor.
What is the MATCH list and can I get removed?
The MATCH list (Member Alert to Control High-Risk Merchants) is a Mastercard database of merchants whose accounts were terminated for cause. Removal requires the processor who added you to submit a removal request. If the listing was made outside of Mastercard's criteria, it can be contested, but it takes documentation and usually specialist assistance.
Do I need separate merchant accounts for different product lines?
Not always. But if your product categories carry significantly different risk profiles, some processors recommend separate accounts to prevent one category's chargeback activity from affecting another's standing with the acquiring bank. This is worth discussing during underwriting if you sell across multiple product types.

Ready to Get Approved?

CERF works with direct acquiring relationships across the US, EU, and other regulated markets. Full fee and reserve disclosure before you go live. You know exactly what you are agreeing to before the account is activated.

Apply for a Merchant Account