High-risk MCC codes, explained.

Last updated: 11 July 2026

A Merchant Category Code (MCC) is a four-digit ISO 18245 classifier that describes what your business sells. Card networks price interchange around it, acquirers underwrite around it, and the entire "high-risk vs. standard" distinction in card acquiring boils down to which MCCs a bank is willing to board. This guide covers what each high-risk MCC means, which industries fall under it, and the chargeback thresholds that determine whether you stay on the network.

The reference table

The MCCs below are the ones VenderaPay routes most often. This is not the full ISO 18245 list — it's the subset that matters for the verticals traditional acquirers decline. "Risk" is our underwriting classification, not a network-official label.

* "Prohibited" here means "VenderaPay does not currently underwrite this MCC", not that the MCC itself is illegal. Licensed iGaming acquirers exist under separate frameworks.

Chargeback thresholds you need to know

Card networks run two parallel monitoring programs. Cross either threshold and you enter enforcement — fines, mandatory chargeback reduction plans, and, at the extreme, termination and MATCH list placement.

Two things worth internalising:

1. Ratios are calculated on the previous month, not rolling. A bad month can trigger monitoring even if your trailing 12 months are clean.
2. Both fraud and dispute counts trigger separate programs. A merchant can breach VFMP without ever breaching VDMP. Watch both.

The MATCH list

Mastercard's Member Alert to Control High-Risk Merchants (MATCH) list is the industry-wide blacklist. When an acquirer terminates a merchant for cause, they file the merchant, its beneficial owners, and its DBA on MATCH. Once you're on it, no Mastercard acquirer will board you for five years without a specific waiver.

The 14 MATCH reason codes range from "excessive chargebacks" (code 08) to "money laundering" (code 09) to "identity theft" (code 07). Reason code 04 — "laundering" — specifically covers transaction laundering: sending transactions through a merchant account for products the merchant is not licensed to sell. This is what happens when a merchant tries to hide a high-risk business behind a low-risk MCC.

If you're on MATCH for a code your prior acquirer misapplied, a licensed high-risk acquirer can still board you with a documented waiver process. VenderaPay reviews these case-by-case; the underwriting typically requires the original termination letter, evidence of the misapplication, and a clean 12-month reprocessing plan.

How to know which MCC applies to your business

Ask three questions, in order:

1. What is the primary product? Not the payment method, not the fulfilment channel — the actual product being sold at the moment of the card auth. A CBD gummy is 5912 regardless of whether it's sold via Shopify or an in-app purchase.
2. What is the fulfilment channel? Card-present retail, mail-order/telephone-order (MOTO), or ecommerce. Interchange categories differ within the same MCC based on this. A nutra sold via subscription auto-billing has different interchange than the same nutra sold at point-of-sale.
3. What is the geographic footprint? Domestic vs. cross-border acquiring changes interchange and, more importantly, changes which acquirer you can be routed to. EU acquirers cannot board US-only merchants and vice versa.

FAQ