While getting approved for a high-risk merchant account might seem impossible in 2026, the requirements depend largely on whether the merchant can provide proper documentation regarding their products, billing practices, fulfillment process, finances, and fraud controls.
With improvements in payment technologies and gateways, there are now many tools available to merchants to reduce instances of declined payments. While it might be harder to get a payment gateway and processor without proper documentation for your business, there are still tools available for merchants with solid operations.
What a High-Risk Merchant Account Means in 2026
A business may be classified as having a high-risk merchant account based on its industry, how it takes payments, the size of its transactions, the number of chargebacks it receives, and its relationship with its products or bills customers.
The merchant account is just one part of the payment solution for a business. Other components may include:
- acquiring bank
- payment processor
- ecommerce gateway
- fraud and authentication software
- chargeback management software
- virtual-terminal and POS software
- ACH software
- reserve software
Approval by an ecommerce gateway does not necessarily mean that a merchant will be approved for its merchant account. Both the payment processor and acquiring bank must knowingly support the products and volume the company will bring in.
What Is Getting More Difficult for High-Risk Merchants
Network Monitoring Is More Unified
The Visa Acquirer Monitoring Program (VAMP) combines fraud and non-fraud dispute reports for card-not-present Visa transactions into a ratio. The ratio is calculated using the following equation:
VAMP ratio = (TC40 fraud reports + TC15 disputes) ÷ TC05 settled transactions
Visa has reduced the threshold for merchants to receive an “excessive merchant” determination for the United States, Canada, the European Union, and the Asia-Pacific regions from 220 basis points to 150 basis points. Additionally, there will be at least 1,500 fraud and dispute records reported by Visa for a merchant to reach this threshold.
However, smaller merchants will never reach this threshold. Thus, their payment processors can implement their own threshold that is more stringent than Visa’s to respond to these instances without waiting for Visa to identify them as problematic for that merchant.
Underwriting Requires More Operational Detail
A fast intake of the application does not equal approval. High-risk underwriters may ask for:
- processing statements
- bank statements
- ownership records
- product and pricing information
- licenses
- refund and cancellation policies
- supplier and fulfillment records
- monthly expected volume
- average and maximum ticket sizes
- chargeback history
Providing information that does not reflect the true operation of the company can result in underwriting limits, reserves, or even the termination of the funding process after the initial processing of the business application.
Ecommerce Security Requires More Attention
PCI DSS v4.x requirements 6.4.3 and 11.6.1 require that ecommerce merchants ensure that the scripts on their payment pages are authorized, have integrity, and are not tampered with. The PCI Security Standards Council (PCI SSC) states that ecommerce merchants and service providers must ensure that the scripts on their websites related to the ecommerce functions are authorized, have integrity, and are not tampered with.
Additional scripts can be embedded on ecommerce websites to collect information from customers. Merchants that use additional scripts must ensure that their websites are not susceptible to script attacks to remain compliant with the SAQ A eligibility requirements. Controls and providers that are eligible and implement the security solutions correctly can meet these requirements.
What Is Getting Easier for High-Risk Merchants
Fraud Tools Are More Accessible
Gateway-level fraud tools give merchants more control over transactions processed through their processors. Authorize.net, for example, permits merchants to process transactions, hold them for review, or decline them if a fraud filter is triggered. By holding transactions for review instead of declining them, merchants may be able to reject fewer transactions that were initiated by suspicious customers.
Most modern merchant gateways include device intelligence, network tokens, account updater services, and risk-based authentication services. Each of these systems helps to reject fraudulent transactions while increasing the number of valid transactions that pass through the gateway.
Gateways Offer More Flexibility
More high-risk merchants are able to separate their gateway from their processing company. This allows them to keep their checkout software and recurring billing systems while finding another processing company that will accept their transactions.
NMI reported processing over $502 billion in 6.5 billion transactions in 2025 while supporting more than 1.2 million active merchants. It also emphasized network tokens as one way to optimize authorization, cut fraud and minimize involuntary churn for subscriptions.
This does not make underwriting optional. It makes it easier to construct a payment stack that can accommodate changes in the merchant’s volume, software or acquiring needs.
Remediation Can Work
Stricter monitoring does not mean every account of interest will be marked for termination. Visa said nearly half of acquirers flagged under VAMP improved within a single quarter, resulting in a 45% reduction in their combined VAMP ratio.
Visa also reported about $1.5 billion in incremental payment volume for acquirers that successfully remediated their performance. The numbers indicate that enhanced controls for fraud, pre-disputes and merchants may foster growth rather than only limit payments.
Hosted Checkout May Simplify Security
Merchants who send customers to a provider-hosted checkout may face simpler security challenges than businesses that manage their payment forms and scripts. The right PCI scope still depends on the implementation method, service providers, and validation approach.
Merchants should select their checkout structure with security and account performance in mind rather than solely aesthetics or ease of development.
How to Compare High-Risk Merchant Account Providers
The best high risk merchant account providers do more than submit an application to the first bank willing to review it. They should explain the underwriting conditions, technology and operating limits that will affect the account after approval.
| Provider Factor | What to Confirm |
|---|---|
| Industry experience | Whether the provider has acquiring options for the exact products and billing model |
| Underwriting process | Which documents are required and whether approval is final or conditional |
| Gateway compatibility | Support for NMI, Authorize.net, the ecommerce platform and required software |
| Pricing | Processor markup, transaction fees, gateway costs and monthly charges |
| Reserve terms | Percentage held, release timing and conditions for changing the reserve |
| Processing limits | Approved volume, maximum ticket and permitted payment channels |
| Fraud controls | Velocity rules, authentication, card-testing prevention and manual review |
| Chargeback support | Alerts, reporting, evidence tools and VAMP-aware monitoring |
| Funding | Settlement timing, payout delays and weekend or holiday policies |
| Contract | Term length, cancellation costs and equipment ownership |
Payment Nerds may be a strong fit for eligible businesses that need underwriting, gateways and risk controls considered together. It can help merchants compare processor options and identify whether NMI, Authorize.net, ACH, a virtual terminal or another configuration matches the business. Approval and account terms remain subject to underwriting.
Merchants should avoid providers that promise guaranteed approval, hide reserves or recommend describing the business inaccurately. They should also be cautious about expensive equipment leases, unexplained gateway fees and account structures that cannot support future growth.
High-Risk Merchant Account Questions for 2026
Q: What is a high-risk merchant account?
A: A high-risk merchant account is used for businesses that have elements of higher risk than conventional merchants. These merchants have higher instances of fraud, chargebacks, regulatory issues, high credit and fulfillment issues. Therefore, they tend to require a higher level of underwriting than a conventional merchant.
Q: Is it harder to get a high-risk merchant account in 2026?
A: No. The requirements for security in ecommerce and merchants have become higher in general. However, merchants with documentation and policies showing they have appropriate fraud protections can still obtain merchant account options that work for them.
Q: What industries require high-risk merchant accounts?
A: Industries that may require these types of merchant accounts include industries with high instances of subscriptions, future delivery industries, regulated products, high-ticket sales, and industries with high instances of customer disputes. Each merchant acquiring company will have its own policies on what businesses it will accept for these high-risk accounts.
Q: Can a merchant receive instant high-risk approval?
A: A provider may provide fast intake and preliminary approval. However, final approval is needed to verify the merchant and business, the ownership of the business, the website, and the financial condition of the merchant.
Q: Do all high-risk accounts require a reserve?
A: No. Depending on the type of merchant and the financial condition of the business, reserves can be required or not required for high-risk accounts.
Q: How should merchants compare high-risk merchant account providers?
A: Merchant account providers can be compared based on their overall fit with the merchant’s industry. Factors to consider include high-risk underwriting options, requirements for reserves, transaction limits, payment gateways, funding options for merchants, quality of customer support services, and the total cost of the merchant account.
Q: Does a high-risk payment gateway guarantee approval for a merchant account?
A: No. A high-risk payment gateway will securely transmit payment data from the merchant and the customer. However, the merchant bank and acquiring bank will decide whether to approve the high-risk merchant.
Q: Can better fraud controls reduce processing restrictions for a merchant?
A: If a high-risk merchant implements better fraud controls or increases their transaction performance and volume, they may be eligible for a review of their processing restrictions. However, any change to the merchant’s processing restrictions is at the discretion of the merchant and acquiring bank.
Q: What should a merchant do after receiving a termination notice from their merchant account provider?
A: Upon receiving a merchant account termination notice, the merchant should gather all the merchant’s statements and information regarding any held funds. Finally, the merchant should include this information within the merchant application to their new merchant account provider to disclose their previous merchant account and its history.
Prepare for a Stricter but More Flexible Market
Visa and other ecommerce security requirements will make it harder for high-risk merchants to qualify for a merchant account. At the same time, however, the market is becoming easier for those willing to invest the infrastructure needed to offer the features and tools that create a more stable merchant account.
Sources
- Visa. “Visa Acquirer Monitoring Program Overview.” Accessed August 2026.
- Visa. “What’s Possible When the Payments Ecosystem Moves Together on Security.” Accessed August 2026.
- PCI Security Standards Council. “Payment Page Security and Preventing E-Skimming.” Accessed August 2026.
- PCI Security Standards Council. “FAQ Clarifies New SAQ A Eligibility Criteria for Ecommerce Merchants.” Accessed August 2026.
- NMI. “NMI Caps Landmark Year of Growth and Innovation.” Accessed August 2026.
- Authorize.net. “Advanced Fraud Detection and Prevention Tools.” Accessed August 2026.
