High Risk Merchant List Usa: The Practical Version

how does the money actually move?

The money moves through one of three structures: your own high-risk merchant account, a retailer or reseller of record, or a digital-only Merchant of Record that becomes the seller to the cardholder. In the direct MID model, the acquirer underwrites your company, the descriptor should identify your business, and you carry the card-network relationship. In a reseller model, ClickBank, Digistore24 or BuyGoods sits between the buyer and the offer owner. In a software-style MoR model, Paddle, FastSpring or Polar is the seller, but only for categories they allow.

Paddle's own definition is useful because it states the legal shift plainly: a Merchant of Record is "a legal entity responsible for selling goods or services to an end customer." That does not mean the offer owner has no economic exposure. Paddle's reseller agreement says, "You appoint Paddle as your non-exclusive reseller of the Product across all territories," and its terms also let Paddle recover refunds and chargebacks from the vendor. That is why MoR is a liability-routing structure, not a magic dispute absorber.

Shipped supplement offers are the dividing line.

Paddle and Polar prohibit physical goods, and Polar also bars medical and health advice, so a nutra VSL with bottles in a fulfilment centre should not be modelled as a Paddle-style checkout problem. ClickBank is different: it says ClickBank charges "a 7.5% + $1 transaction fee from the total purchase price" and its materials cover digital or physical product purchases. If you are mapping a list of Merchant of Record companies, the first filter is product eligibility, not headline fee.

what does the fee stack look like end to end?

The fee stack is the processor rate, the platform or MoR fee, dispute fees, reserve cost, gateway cost, and the hidden cost of failed authorization retries. Published MoR fees look clean because they bundle tax, payment processing and merchant-of-record handling, but they don't always beat a direct high-risk account once reserves release normally and approval rates hold. The figure buyers quote for a supplement account is often useless unless it includes reserve terms, chargeback fees, monthly fees, gateway fees and whether the account supports continuity billing.

We counted the load-bearing published figures in the fact pack and the spread is wide: Paddle publishes 5% + 50¢ for standard checkout transactions, Polar publishes 5% + 50¢ on Starter down to 3.4% + 30¢ on Scale, ClickBank publishes 7.5% + $1, and Digistore24's calculator states $1 + 7.9% for US sales. PaymentCloud's guidance puts high-risk processing averages at 3.49% to 3.95% plus about $0.25 per item, but it also cites monthly, PCI, gateway, chargeback and reserve costs. That is the part your spreadsheet has to carry, because a lower discount rate with a 10% reserve held 180 days can be more expensive than a visibly higher platform fee.

Visa retry fees are easy to miss until dunning gets noisy. Visa permits up to 15 reattempts in a rolling 30-day period for the same card, amount and currency on retryable categories; Category 1 declines should not be reattempted at all. Reported excessive-reattempt assessments are $0.10 domestic and $0.15 cross-border per attempt, so a rebill engine that treats every decline as soft can create fees before it creates recovered revenue. For the adjacent gateway view, see high risk merchant payment gateway.

what gets an account shut down?

Accounts get shut down for excessive disputes, excessive fraud, transaction laundering, misleading negative-option billing, unsupported health claims, and activity that no longer matches the underwriting file. The common mistake is treating the high risk merchant list usa problem as a provider-shopping problem. It is usually a monitoring and disclosure problem: the card networks, acquirer and processor are asking whether the account they approved is still the account processing the traffic.

Visa's Acquirer Monitoring Program, VAMP, Visa's card-not-present fraud-and-dispute monitor, changed the math by combining fraud reports and disputes into one ratio. Visa's fact sheet defines the numerator as fraud plus disputes over settled card-absent transactions, and Visa's acquirer monitoring fact sheet gives a 1.50% US Excessive Merchant threshold from 1 April 2026, with a monthly count threshold of 1,500 fraud-plus-dispute items. Visa's own wording says the programme "consolidates five prior fraud and dispute programs" into one acquirer framework.

That threshold is not generous for paid VSL traffic.

Mastercard runs different math. Its Excessive Chargeback Merchant tier starts when both 100 to 299 Mastercard chargebacks and a 1.50% to 2.99% chargeback ratio hit in a month, while High Excessive Chargeback Merchant starts at 300 or more chargebacks and 3.00% or higher. Mastercard's ratio is lagged, using current-month chargebacks over prior-month sales, so a scale-up in May can punish you in June even if June sales look cleaner. Our high risk merchants Mastercard page is the better drill-down for that side of the file.

Transaction laundering is the hard line operators try to soften with vocabulary. Running several MIDs is not automatically wrong; undisclosed aggregation is. If one entity's VSL, fulfilment, customer service and refund exposure are routed through another entity's MID, the issue is not clever load balancing. Venable describes transaction laundering as one merchant processing card transactions for another undisclosed entity, and the fact pack ties that to network penalties, principal-level exposure and possible wire-fraud, bank-fraud or money-laundering theories. Multiple MIDs can be legitimate only when the acquirer knows what each MID is actually processing.

who carries the liability?

Liability follows the role in the transaction, but the economic loss often comes back to the offer owner. In a direct MID, you carry disputes, refunds, reserves, monitoring exposure and possible MATCH reporting. In a retailer or MoR model, the named seller may carry the network-facing role, but the contract can still pass refund and chargeback cost back to you. That distinction matters more than the sales-page phrase "merchant of record."

We checked the contract language because marketing pages blur this point. Paddle says it handles sales tax collection, reporting and remittance, yet clause 10.4 lets Paddle recover the full refund or chargeback amount plus fees and expenses from the vendor. FastSpring states that it purchases products and services from the publisher and resells them to the customer, with FastSpring terms governing the transaction. BuyGoods manages refund and exchange requests and gives buyers 60 days from purchase for return or replacement on covered sites.

MATCH is different because it can follow the principal. Stripe's MATCH documentation says acquirers or processors report terminated merchants, records remain for 5 years, and the reporting party includes owner identity data where available. Code 04, Excessive Chargebacks, has a quantitative trigger above 1% of monthly Mastercard sales transactions and at least $5,000; code 05, Excessive Fraud, requires an 8% fraud-to-sales ratio with at least 10 fraudulent transactions totalling $5,000 or more. If you need the plain-English frame, what is merchant risk is the broader concept behind this page.

what changes by country?

Country changes the approval rate, tax handling, local law, card mix and retry economics, even when the offer page looks identical. Visa's VAMP threshold for US merchants is 1.50% from 1 April 2026, while CEMEA remains at 2.20% and LAC was already at 1.50% in the cited fact sheet. Cross-border cards can also add platform fees: Polar publishes +1.5% for international non-US cards, and Paddle's standard price does not make physical-goods offers eligible.

Authorization changes too. Visa reports tokenised card-not-present transactions delivered a "4.6 percent lift in authorization rates globally, compared to PAN" and a 30% reduction in online fraud versus PAN across the cited period. That is not a supplement-specific guarantee; it is network-level evidence that the credential you send matters. Recurly's subscription report gives another operator-relevant split: credit cards declined 6.0%, debit cards declined 13.0%, and debit initial transactions declined 14.4% in its 2022 dataset.

Local automatic-renewal law is the other country-adjacent problem, because US state rules can change the cancellation flow for the same national funnel. ROSCA still requires clear material terms before billing information, express informed consent before charging and simple cancellation mechanisms. The 2024 FTC Click-to-Cancel amendments were vacated by the Eighth Circuit on 8 July 2025, but California, New York and Colorado rules still matter. California's AB 2863 requires online cancellation via a prominent direct link or click-to-cancel button from 1 July 2025, and Colorado extends protections to business subscriptions from 16 February 2026.

what does onboarding actually ask for?

Onboarding asks whether the processor can defend the account to its bank, not whether your landing page converts. Expect questions about entity ownership, product ingredients, fulfilment, refund policy, descriptor, customer support, traffic sources, trial terms, continuity billing, prior processing history, chargeback history, reserves and whether any principal has been terminated or listed. For peptides, hormones or aggressive health claims, the question gets narrower because the product category itself can trigger restricted-business review; see high risk merchant account for peptides for that version.

Operators consistently report that supplement underwriting also asks for screenshots or live URLs for the VSL, checkout, terms, privacy policy, refund policy and cancellation flow, even where the provider does not publish a formal checklist. That is practical, not cosmetic. The acquirer wants the same story in the application, descriptor, fulfilment promise, billing terms and customer-service script. If the VSL says one bottle and the rebill terms say continuity, your decline handling is not the first problem.

We could not verify Durango Merchant Services' current supplement-specific underwriting terms from a primary page because the cited check hit a 503 or redirect; a current provider underwriting packet or live supplement account approval letter would settle it. That is the only provider-specific hole we would not fill from memory. PaymentCloud, by contrast, explicitly markets nutraceutical merchant accounts for dietary supplements, vitamins, protein powders, weight-loss formulas, nootropics and herbal products, with recurring and auto-ship support.

when is this the wrong structure?

This is the wrong structure when the product, billing model or traffic source cannot survive transparent underwriting. A high-risk account is not a workaround for hidden continuity, undisclosed aggregation, fake descriptors, unsupported disease claims or a refund operation that depends on customers giving up. If the offer needs the processor not to understand it, the account is already built on the failure condition.

A Merchant of Record is also wrong when the product is physical and the MoR is digital-only. Paddle prohibits physical products, Polar prohibits physical products and human services, and FastSpring markets itself around AI, SaaS, mobile apps, software, games, digital products and courses. BuyGoods, ClickBank and Digistore24 may fit direct-response selling better, but their platform rules and economics replace your acquirer rules; they do not remove consumer-protection law, refund liability or reputational risk.

The argument people in this niche resist is that a cleaner cancellation path can be a payments asset, not just a compliance cost. Under VAMP and Mastercard chargeback math, a saved subscription that becomes a 13.2 dispute may be worse than a cancellation you let go in 1 click. The FTC's vacated rule did not erase ROSCA, state automatic-renewal laws or card-network monitoring. For a VSL operator, fewer angry rebills can mean more durable processing, even when front-end revenue looks lower.

Quick decision checklist

Use this page as a decision aid, not a generic blog post. The practical question is whether the reader needs faster evidence about what is already working in VSL-driven direct response, especially across nutra, supplements, GLP-1, weight loss, blood sugar, and adjacent high-intent health markets.

Daily Intel Service is most relevant when the next decision depends on active market examples: which hook to test, which claim style is risky, which funnel structure is common, which language market is moving, and whether a competitor's creative is likely early, scaling, or already saturated.

• Start with the TL;DR if you need the direct answer.
• Use the table to compare trade-offs quickly.
• Use the FAQ for answer-engine-ready summaries.
• Use the CTA when the decision requires live VSL and ad examples instead of theory.

Daily Intel's coverage advantage

Daily Intel Service is positioned around category-leading variety and actionability: one of the broadest direct-response catalogs of VSLs and ad creatives across blackhat, greyhat, and whitehat advertising patterns, with enough context to understand what the advertiser is doing beyond the visible creative. The practical difference is that members are not just seeing a screenshot; they are seeing the VSL, the ad, the funnel path, the transcript, the UTM context, and the research notes that turn the asset into a decision.

This matters because direct-response affiliates do not operate in one clean category. A weight-loss campaign may use a whitehat compliance ad, a greyhat pre-lander, a more aggressive VSL, and a checkout path designed around upsells and recovery. A useful intelligence platform needs to capture that spectrum instead of pretending every winning campaign looks like a public brand ad.

Blackhat, whitehat, and multilingual signal coverage

Daily Intel tracks patterns across both blackhat-style and whitehat-style campaigns so operators can understand the market without blindly copying risk. Whitehat examples help with durability and compliance review; blackhat and greyhat examples reveal pressure points, hooks, mechanisms, and funnel structures that may be driving spend but require careful adaptation before use.

The catalog is also built for global operators, with VSL and ad references spanning 14+ languages and different local idioms. That is a key advantage for Brazilian, LATAM, European, MENA, Indian, and non-native English affiliates who need to see how the same market desire is translated across cultures instead of only studying US English ads.

How to use the intelligence responsibly

The goal is modeling, not copying. Use Daily Intel to understand structure: hook, mechanism, proof, claim intensity, funnel depth, offer economics, and saturation stage. Then build original creative, review claims, and adapt the angle to the traffic source, country, language, and compliance requirements of the campaign.

A strong workflow compares multiple examples before acting. If the same mechanism appears across several languages, several advertisers, and several funnel variants, it may be a durable market signal. If the example appears only once or depends on an aggressive claim, treat it as a research clue rather than a campaign template.

• Model structure, not protected creative assets.
• Separate whitehat durability from blackhat persuasion pressure.
• Compare US English examples against LATAM, European, and other language variants.
• Use transcripts and funnel notes to build original briefs.
• Keep compliance review separate from market research.

Methodology and source context

Daily Intel pages are written from a research workflow that reviews active VSLs, Meta ad creatives, transcripts, UTMs, funnel paths, checkout steps, upsells, recovery sequences, and compliance-sensitive claim patterns. The goal is to explain observable market behavior, not to provide legal, medical, or platform policy advice.

When the topic touches health claims, platform policy, or GLP-1 market research, validate the observable campaign signals against primary references such as Meta advertising standards, FTC health claims guidance, and Google helpful content guidance. Daily Intel adds the proprietary direct-response layer by mapping how those rules show up in active VSLs, Meta creatives, funnels, transcripts, UTMs, and checkout paths.

For deeper evaluation, continue through Daily Intel compliance and legal disclaimer, Retry Logic That Recovers Rebills Without Triggering Network Fines, Merchant Accounts Opened Under a Nominee: How the Law Treats It, Account Updater vs Network Tokens: What Actually Saves a Rebill, Under an MOR, Whose Chargeback Ratio Is It Anyway?, and What is a VSL?. These related Daily Intel pages connect this topic to the relevant methodology, pricing, trust context, comparison path, or niche workflow.