
To process high-risk payments as a payment service provider (PSP), you need an acquiring partner that accepts high-risk volume, the right card network registrations, tight underwriting, risk controls such as reserves and limits, and constant monitoring of chargebacks and fraud. Skipping any of these can lead to fines, frozen settlement or losing your acquirer. This guide walks through each step so you can build a high-risk offering that stays compliant and profitable.
Quick answer
Decide which high-risk verticals you will serve and what risk you can absorb.
Secure an acquiring partner, ideally more than one, that explicitly accepts high-risk.
Complete card network registrations for yourself and each merchant before processing.
Underwrite every merchant for identity, business model, website and processing history.
Price and protect the risk with reserves, volume caps and settlement controls.
Monitor transactions, fraud and chargebacks daily against network thresholds.
Build compliance, contracts and a backup plan around it all.
This guide is general information, not legal advice. Network rules change and parts of them are confidential, so confirm requirements with your acquirer and counsel.
What “high-risk” means for a PSP
Acquirers and card networks label merchants high-risk because of chargeback exposure, regulatory exposure, reputational risk or a history of fraud. Typical categories include gaming and gambling, adult content, forex, crypto, travel, nutraceuticals, subscription and continuity billing, and some digital goods. As a PSP, you are not just processing these payments. Your acquirer and the networks hold you responsible for the merchants you sign, so the risk sits partly on your balance sheet.
Step 1: Choose your model and risk appetite
Your PSP model shapes your obligations:
Payment facilitator (PayFac): you hold the master merchant relationship and onboard sub-merchants under your acquirer. You carry the most risk and control.
ISO or reseller: you refer merchants to an acquirer that underwrites them directly. Less risk, less control.
Gateway or orchestration layer: you route payments across acquirers but do not hold the merchant accounts.
Then set clear rules: which industries you accept, maximum monthly volume per merchant, average ticket limits, accepted countries and your tolerance for chargebacks.
Step 2: Secure acquiring partners with high-risk appetite
Many acquirers decline high-risk volume. Look for sponsors or acquirers that explicitly support your verticals and regions, and ask:
Which MCCs and countries they accept
Whether they hold the required card network high-risk registrations
Their reserve, settlement and chargeback liability terms
How they handle program fines passed through to you
Plan on at least two acquirers. If one pauses your portfolio, a second route keeps your merchants processing. Our ranking of high-risk merchant account providers is a useful starting point for acquirer and ISO options.
Step 3: Complete card network registrations
Registration is the step most often missed. Key points:
Visa: under the Visa Integrity Risk Program (VIRP), which replaced the older Global Brand Protection Program, acquirers must hold a High-Integrity Risk Acquirer Registration before signing high-integrity-risk merchants. Each such merchant must be registered with Visa before submitting transactions.
Payment facilitators: a facilitator that takes on high-integrity-risk merchants must be registered as a high-risk payment facilitator, even if it is already registered as an ordinary one. Visa’s documentation describes serious penalties for failing registration rules, reported at USD 25,000 per month per facilitator, rising after repeat violations.
Mastercard: it runs its own program, the Specialty Merchant Registration Program, with separate fees. Visa registration does not cover Mastercard.
MCCs: assign the correct merchant category code (for example, adult content processes under MCC 5967). Miscoding is a common trigger for fines and account termination.
Your acquirer normally handles the filings and fees, but you must supply accurate merchant data and keep it current.
Step 4: Underwrite every merchant properly
High-risk underwriting is deeper than standard onboarding:
Verify the company and people. Collect incorporation documents, ownership details and identity checks for directors and beneficial owners (KYC and KYB). Our directory of AML and KYC providers can help you compare verification tools.
Screen against industry lists. Check owners and the business against the Mastercard MATCH list of terminated merchants, plus sanctions and adverse media lists.
Review the business model. Assess products, delivery times, refund policy, billing practices and expected chargeback behavior.
Review the website. Check terms, refund policy, pricing, contact details and descriptors. Look for signs of a different business than the one applied for.
Analyze processing history. Request recent processing statements to judge chargeback and refund ratios.
Confirm licensing. Gambling, forex, crypto and adult merchants often need industry licenses or age and consent controls.
Assign a risk tier. Use it to set pricing, reserves and limits.
Step 5: Price and protect the risk
Control | What it does | Typical use |
|---|---|---|
Rolling reserve | Holds a share of sales for a set period | Cover chargebacks and refunds |
Volume and ticket caps | Limits monthly and per-transaction amounts | Prevent sudden spikes |
Delayed settlement | Pays out after a hold period | Higher-risk or new merchants |
Upfront or fixed reserve | Collects funds at onboarding | Very high-risk or high-ticket models |
Higher pricing | Covers added risk and monitoring costs | Based on risk tier |
Chargeback fees and fine pass-through | Recovers dispute and program costs | All high-risk merchants |
Document these terms in the merchant agreement, including your right to change reserves, hold funds, terminate and pass through network fines.
Step 6: Monitor fraud and chargebacks daily
Networks measure you as well as your merchants. Under Visa’s VAMP program, merchants face an “Excessive” threshold of a 1.5% ratio from April 1, 2026 in the US, Canada, the EU and Asia-Pacific, and per-event fines have been reported at up to $8. Acquirers must also keep daily figures for each high-integrity-risk merchant or facilitator, including gross sales volume, average transaction amount, receipts and disputes. Build tooling to match:
Real-time fraud rules and velocity checks
3D Secure where it improves liability and approvals
Dispute alerts and automated refund or resolution flows
Alerts when a merchant approaches network thresholds
Dashboards by merchant, MCC, acquirer and country
Our guide on the Visa VAMP program for high-risk merchants explains the thresholds in more detail.
Step 7: Stay compliant
PCI DSS: maintain the right validation level for your role.
AML and sanctions: run risk-based monitoring, sanctions screening and suspicious activity reporting.
Licensing: holding customer funds or stored value may require money transmission or e-money licensing, depending on your structure.
Vertical rules: age verification and consent records for adult content, licenses for gambling, and registration or licensing for crypto and forex in the countries you serve.
Data and privacy: protect merchant and customer data under local laws.
Step 8: Build technology and redundancy
Orchestration and routing: route traffic across acquirers by performance, risk and cost, with automatic failover.
Separate merchant IDs and descriptors: keep high-risk merchants away from your low-risk portfolio so one problem does not affect everyone.
Reconciliation and reserve engine: automate settlement holds, reserve releases and dispute accounting.
Audit trails: log underwriting decisions, changes and approvals for acquirer and network audits.
Common mistakes
Signing high-risk merchants before registrations are complete
Using the wrong MCC to get approved faster
Relying on one acquirer for all high-risk volume
Underwriting once and never reviewing the merchant again
Mixing high-risk and low-risk merchants in the same account structure
Failing to pass through network fines in contracts
Verdict
Processing high-risk payments as a PSP is manageable if you treat registration, underwriting, reserves and monitoring as one system rather than separate tasks. Start narrow with a few verticals, use at least two acquirers, document every decision and watch ratios daily. Then expand as your data proves you can keep chargebacks under control.
Ready to explore more? Browse the TheFinRate High-Risk Payments Hub to compare providers and learn more about high-risk payments.
Recent News and Developments in High-Risk Payments
October 2025: Visa began enforcing fines under its VAMP program, which combines fraud reports and chargebacks into one ratio.
January 2026: Global Payments completed its acquisition of Worldpay, consolidating a major acquirer that serves merchants of all sizes.
April 2026: Visa lowered its “Excessive” merchant VAMP threshold from 2.2% to 1.5% in the US, Canada, the EU and Asia-Pacific.
Note: If you require specific details, provider comparisons, or insights that are not currently included in this overview, we are happy to accommodate your request. Please let us know your exact needs, and we will ensure the content is updated accordingly.
About Us:
TheFinRate is a B2B fintech information platform featuring payment provider reviews, comparisons, directories, industry guides, and educational resources. It helps online merchants, eCommerce businesses, SaaS companies, fintech startups, and payment professionals compare providers and make informed payment decisions.
Contact Us:
TheFinRate
Website: https://thefinrate.com/