Your processor's compliance team is not your compliance team
Here's the number that matters: the average chargeback threshold before a processor terminates a merchant account is 1% of transactions. Most businesses never come close. Yet thousands of legitimate merchants — a licensed CBD retailer, a registered firearms dealer, a subscription supplement brand — get declined by Chase, Square, and Stripe before they process a single dollar.
That's not a judgment about your business model. It's a judgment about a bank's appetite for regulatory scrutiny, card network fines, and legal exposure. The underlying business might be perfectly sound. The bank's risk department just doesn't want to build the compliance infrastructure to handle it.
Understanding that distinction is step one.
What actually drives the "high risk" designation
Acquiring banks flag businesses across two broad dimensions: industry risk and operational risk.
Industry risk is about your merchant category code (MCC). Certain MCC codes carry statistically higher chargeback rates, attract more regulatory scrutiny, or operate in gray areas of law. The most commonly flagged verticals include:
- CBD and hemp products — federal vs. state law tension, age verification requirements, and high return rates
- Firearms, ammunition, and accessories — FFL compliance requirements, reputational risk, and card network policy variance
- Nutraceuticals and supplements — "free trial" subscription models historically generated massive chargeback volumes
- Adult content — age verification, reputational exposure, and card network rules that shift frequently
- Travel agencies and ticketing — long lag between purchase and service delivery means high dispute potential
- Subscription and membership businesses — recurring billing disputes are one of the most common chargeback triggers
Operational risk is about your transaction profile, not your industry. A $500,000/month business with a 0.3% chargeback rate is operationally lower risk than a $10,000/month business at 2.1%. Banks also look at average ticket size (higher = more disputed), card-not-present percentage (higher = more fraud exposure), and whether your monthly volume swings dramatically.
Many businesses that get labeled high risk are flagged for operational reasons that are entirely fixable. More on that below.
The real cost of the wrong processor
Getting placed with the wrong high-risk processor is expensive in three ways.
First, the rate. High-risk processors charge a markup over interchange that can run 1.0%–2.0% above standard rates. On $50,000 per month in volume, a 1.5% premium costs $750/month — $9,000 per year. Over a five-year term, that's $45,000 for the privilege of being categorized as risky.
Second, the reserve. Rolling reserves of 5%–10% are standard, but the terms vary enormously. Some processors release reserves monthly on a rolling basis. Others hold everything for 180 days. If you're doing $50,000/month and the processor holds 10% for 180 days, you're floating $30,000 in operating capital for six months.
Third, the contract. High-risk merchant agreements often include early termination fees of $500–$2,500 and auto-renewal clauses with 60-day cancellation windows. Read the contract. Then read it again. See our guide to reading a processing statement for the specific line items that reveal whether you're in a punishing contract.
For a deeper look at how pricing models affect your total cost, interchange fees explained walks through the math in detail.
The path to getting approved — and getting fair terms
Getting a high-risk merchant account isn't magic. It's documentation and positioning.
Get your paperwork together first. Processors doing real underwriting will ask for:
- Three months of processing statements (shows chargeback rate and volume consistency)
- Three months of business bank statements (shows cash-flow stability)
- Government-issued ID for all principals
- Business license and any industry-specific licenses (FFL, state hemp license, etc.)
- Website URL — they will review your checkout flow, refund policy, and product descriptions
Reduce your operational risk profile before you apply. If your chargeback rate is above 0.75%, work on it before shopping for a new processor. Use address verification (AVS) for all card-not-present transactions. Make your refund policy obvious — a clear refund policy reduces friendly fraud. Use 3D Secure for e-commerce transactions. These steps cost nothing and improve your approval odds and pricing.
Negotiate the reserve. The first reserve offer is not the final offer. If you have clean processing history, ask for a lower reserve percentage or a shorter holding window. Six months of clean statements is usually enough to get a reserve reduction or full release.
PayMullet works with merchants in high-risk verticals including CBD, firearms, nutraceuticals, and subscription businesses. We match each merchant to the acquirer whose appetite aligns with their specific MCC and volume profile — not a one-size-fits-all boarding decision.
The take
The "high risk" label tells you more about a bank's compliance posture than it does about your business. The merchants who get the worst outcomes are the ones who accept the first account they're offered, sign a punitive five-year contract, and never shop again.
Know your real chargeback rate. Know your MCC. Understand the reserve terms before you sign. And work with a reseller who has boarded enough high-risk accounts to know which processors actually want your business — not just the ones who'll take it at a punishing margin.
This is general business information, not legal or financial advice.