Merchant of Records: What Matters and What Does Not

how does the money actually move?

A merchant of record collects the customer payment as the seller, then remits the vendor share after its fee, refunds, tax handling and risk controls. Paddle defines the role as "a legal entity responsible for selling goods or services to an end customer," and its terms say the vendor appoints Paddle as reseller across territories. That wording matters because the buyer is not simply paying your checkout page; the buyer is paying the MoR, and the MoR decides what it will sell.

For a direct-response operator, the payment chain usually has 3 rails: customer to MoR, MoR to vendor, and vendor to affiliates or media. ClickBank says "ClickBank is the retailer of products on this site," which is why it can support digital or physical product purchases and shipping fees in a way Paddle and Polar cannot. If you are comparing networks, buygoods e clickbank is the practical fork: both can sit between buyer and seller, but they do not publish the same economics.

The name on the statement is not cosmetic.

Visa's April 2026 Merchant Data Standards Manual gives 25 spaces for the merchant name in authorization and clearing, requires acquirers to support all 25, and says longer names must be abbreviated with the uniquely identifying part preserved. That is a small rule with a large refund effect: if your rebill descriptor hides the offer name, the first person explaining the charge may be the issuer agent, not your support team.

what does the fee stack look like end to end?

The fee stack is platform fee plus dispute cost plus payout cost plus reserve timing, not just the headline percentage. Paddle publishes 5% + 50 cents per checkout transaction on pay-as-you-go, while Polar's MoR fee page lists Starter at 5% + 50 cents, Pro at 3.8% + 40 cents, Growth at 3.6% + 35 cents and Scale at 3.4% + 30 cents, with +1.5% for international non-US cards. Polar also charges $15 per dispute regardless of outcome and passes through Stripe payout costs.

ClickBank is more expensive on the visible take rate, but it also fits a different job. ClickBank's own explainer states "a 7.5% + $1 transaction fee from the total purchase price," taken before vendor and affiliate splits. Digistore24's calculator says $1 + 7.9% of the pre-tax or gross amount for US sales. BuyGoods does not publish a commission rate, so any specific public percentage for BuyGoods should be treated as a quote or a guess, not a rate card.

We counted one uncertainty that would change a buyer's spreadsheet: Lemon Squeezy's widely repeated 5% + $0.50 figure, +1.5% international and +0.5% subscription, was not confirmed against Lemon Squeezy's own pages because those pages returned 403 on 2026-08-04; a current accessible Lemon Squeezy fee page or signed quote would settle it.

For a high-risk merchant account, the cheaper-looking percentage can be less liquid. PaymentCloud's guidance cites high-risk processing averages of 3.49% to 3.95% plus about $0.25 per item, monthly and gateway fees, about $20 chargeback fees, and reserves of 5% to 10%, with 15%+ for higher risk, held 90 to 180 days. That means your cash-cost model has to include withheld cash, not only processing expense.

what gets an account shut down?

Accounts get shut down when the product is prohibited, the billing is deceptive, the dispute math breaches card-network thresholds, or the merchant routes traffic through an undisclosed MID. Paddle and Polar are clear examples: Paddle prohibits physical products that require physical delivery, and Polar prohibits physical products, human services, and medical or health advice. A shipped nutraceutical VSL cannot become acceptable just because the checkout badge says merchant of records.

Card-network math is less forgiving than many offer owners assume. Visa's Acquirer Monitoring Program, VAMP, Visa's fraud-and-dispute monitoring programme, took effect on 1 April 2025 and counts card-absent fraud reports plus disputes over settled transactions. Per Visa's VAMP fact sheet, the merchant Excessive threshold in the U.S., AP, Canada and EU dropped to 150 bps, or 1.50%, on 1 April 2026, with a monthly fraud-plus-dispute count threshold of 1,500. That leaves little room for a rebill page that produces confusion.

The claim many buyers dislike is still true: adding more MIDs does not fix merchant risk if the same offer, descriptor confusion and refund friction stay in place. Multiple merchant IDs can be legitimate when disclosed and underwritten, but Venable describes transaction laundering as one merchant processing for another undisclosed entity through its own MID. That is not load balancing; it is the kind of fact pattern that can lead to network penalties and termination.

Negative-option billing is the other shutdown path. ROSCA requires clear terms before billing information, express informed consent before charging, and a simple cancellation mechanism. The FTC's 2024 Click-to-Cancel amendments were vacated by the Eighth Circuit on 8 July 2025, but ROSCA, Section 5, state automatic renewal laws and state UDAP statutes still apply. If your VSL moves the buyer faster than your disclosures can support, what is merchant risk stops being an abstract compliance topic.

• Visa VAMP Ratio: fraud TC40 plus disputes TC15 divided by settled TC05 transactions for card-not-present VisaNet activity.
• Mastercard ECM: 100 to 299 chargebacks and 1.50% to 2.99%, with HECM at 300+ and 3.00%+.
• MATCH code 04: Mastercard chargebacks above 1% of monthly Mastercard sales transactions and at least $5,000.
• SMMP: from 24 July 2026, combined refunds plus chargebacks above 5% over 30 days with at least 500 transactions can trigger review.

who carries the liability?

The MoR carries the card-network and tax-facing seller role, but the vendor can still carry the economic loss through contract. Paddle's reseller agreement says "As Merchant of Record, Paddle reserves the right to set the price or licence fee," and also says the vendor reimburses Paddle for the full amount of refunds or chargebacks plus fees and expenses where Paddle prevents or refunds a chargeback. That moves legal position; it doesn't make bad traffic free.

FastSpring uses the same commercial idea for digital goods: its developer documentation says FastSpring purchases products and services from the publisher or provider and resells them to the end customer, with FastSpring's terms governing the transaction. Polar says it resells digital goods and services on the vendor's behalf. The point for your offer is simple: read the vendor agreement, not only the checkout marketing page.

The issuer still decides many authorization outcomes. Visa response code 05, Do Not Honor, is a Category 4 generic refusal that can be retried within the 15-in-30-days Visa limit for the same card, amount and currency, while Category 1 declines must never be reattempted. Stripe's decline-code guidance treats do_not_honor as an unknown issuer refusal and tells merchants to send the customer to the issuer. If your dunning sequence treats every decline as recoverable, you are buying network fees and complaints.

3-D Secure, cardholder authentication at checkout, can shift liability for successfully authenticated fraud disputes, but it does not cover off-session merchant-initiated rebills under Stripe's documentation. That matters for trial-to-subscription VSLs because the initial order and the rebill have different liability profiles. A buyer who disputes the rebill is not the same risk event as a buyer who fails authentication on the first checkout.

• MoR liability: seller of record, tax collection and card-network dispute posture sit with the MoR.
• Vendor liability: refunds, chargebacks, prohibited claims and account termination can still flow back through contract.
• Issuer liability: approval, decline category and customer authentication still depend on card-network and issuer rules.
• Operator liability: offer claims, cancellation design, fulfilment and support evidence remain yours in substance.

what changes by country?

Country changes affect tax, local payment methods, import handling, authorization rates and cancellation law, but the fact pack does not support a single global MoR answer. Paddle says it handles Sales Tax collection, reporting and remittance under its terms. FastSpring says it handles sales tax and VAT collection and remittance. ESW sells cross-border MoR as a legal and operational commitment, while Global-e describes country restrictions, import processing, currency fluctuation protection and local payment methods across over 200 markets.

Local acquiring can improve approvals, but we would not publish a universal lift. The loaded sources put local-acquiring versus cross-border approval gains across a wide 2 to 16 percentage-point range depending on source and market, with Adyen-citing summaries often using 5 to 12 points for Brazil, Mexico and India. For your spreadsheet, that is a sensitivity input, not a promise. A signed processor proposal with country-by-country approval history is stronger than a generic benchmark.

Subscription law changes by state inside the U.S. as well. California's amended Automatic Renewal Law took effect on 1 July 2025 and requires online cancellation through a prominently displayed direct link or click-to-cancel button processed promptly. New York's amended law took effect on 5 November 2025, adding reminder and price-increase rules for covered subscriptions. Colorado SB25-145, effective 16 February 2026, extends auto-renewal protections to business-to-business subscriptions and requires a one-step cancellation link.

Card tokens also change the country and issuer picture because tokens replace the primary account number, or PAN, with network-managed credentials. Visa's own tokenization hub reports a "4.6 percent lift in authorization rates globally, compared to PAN" and a 30% online fraud reduction versus PAN in the cited 2022 periods. That is one of the cleaner authorization facts in the pack because it comes from Visa rather than a retry vendor.

what does onboarding actually ask for?

Onboarding asks whether the provider wants to be the seller of your exact product, not just whether your checkout can connect. For MoRs, the first screen is category fit: Paddle and Polar reject physical goods, Polar rejects medical and health advice, FastSpring markets digital categories, and ClickBank and BuyGoods have public materials consistent with physical product sales. If your offer is a supplement, a software-first MoR is usually the wrong door.

The second screen is claim and billing risk. Stripe's restricted-businesses list prohibits unsafe pseudo-pharmaceuticals and nutraceuticals or harmful claims, and separately prohibits negative-option clubs and reduced-price trials with unclear or hidden pricing under its unfair, deceptive or abusive practices category. That overlaps directly with VSLs, a video sales letter, that sell weight loss, nootropics, testosterone or pain relief with continuity billing. Cloaker X Medic sits beside this issue because hidden landing-page behavior and hidden billing terms create the same underwriting question: what did the acquirer actually approve?

The third screen is evidence. Expect product pages, fulfilment paths, refund policy, customer-service contact points, descriptor text, chargeback history, prior processing statements, principal ownership, traffic sources, affiliate controls and cancellation flow. High-risk underwriters will also care about reserves, projected volume and whether you have multiple MIDs. A legitimate multi-MID setup discloses the entities and products to the acquirer; an undisclosed setup can become transaction laundering.

We checked the provider split rather than pretending onboarding is identical everywhere. PaymentCloud publicly says it underwrites dietary supplements, vitamins, protein powders, weight-loss formulas, nootropics and herbal products, with recurring or auto-ship billing support and stated approval times of 24 hours to 5 days. eMerchantBroker markets nutraceutical merchant accounts, while Easy Pay Direct positions supplements and subscription billing as best-fit verticals built around load balancing. Durango and Authorize.net remain commonly cited, but their supplement-specific terms need direct re-verification before publication.

• Product proof: label, ingredients, claims, fulfilment method and refund window.
• Business proof: entity records, owners, tax information, bank account and prior processing statements.
• Traffic proof: VSL, advertorial, affiliates, ad accounts, pre-sell pages and compliance review process.
• Billing proof: checkout terms, consent language, cancellation path, descriptor and rebill notices.

when is this the wrong structure?

A merchant of record is the wrong structure when the provider rejects your category, when the economics only work by hiding refund risk, or when you need control the MoR contract will not give you. Paddle and Polar are wrong for shipped nutraceuticals because their policies prohibit physical products. FastSpring looks wrong for physical goods because its public positioning is digital and its vendor terms do not create a clear physical-goods path in the loaded facts.

It is also wrong when you are trying to outrun monitoring. VAMP, Mastercard ECM, MATCH and SMMP measure actual disputes, fraud reports, refunds, chargebacks and merchant behavior; changing the seller layer does not make buyers less confused after a trial converts. If a $47 bottle becomes a subscription that the buyer does not recognize, the issuer sees a dispute, the network sees a ratio and your counterparty sees reserve risk. A chargeback with chase is a consumer event before it is a spreadsheet row.

The structure is useful when the provider is allowed to sell the product, the fee buys real tax and payments infrastructure, and the payout delay is acceptable. It is not a badge of legitimacy. Digital River is the counterexample: reporting on its collapse describes halted merchant payouts from around July 2024, German subsidiary insolvency proceedings, Minnetonka HQ closure by end of March 2025, 122 US layoffs, and a Chapter 7 filing on 1 May 2025 listing about $45.2 million in secured debt against less than $50,000 in assets. Counterparty risk is merchant risk too.

For operators, the working rule is blunt: use an MoR when it solves a real seller-of-record problem you can name, and use an underwritten high-risk merchant account when the offer is the kind card networks expect to see underwritten directly. The cheaper route is the one that survives refunds, reserves, monitoring and payout timing. If your business model needs a provider not to understand the offer, the structure is already broken.

• Wrong for physical goods: Paddle and Polar publish prohibitions; FastSpring's public market fit is digital.
• Wrong for hidden continuity: ROSCA and state automatic-renewal laws still apply.
• Wrong for laundering: undisclosed routing through another MID creates termination and legal exposure.
• Wrong for fragile cash flow: reserves, payout holds and MoR counterparty failure can be existential.

Quick decision checklist

Use this page as a decision aid, not a generic blog post. The practical question is whether the reader needs faster evidence about what is already working in VSL-driven direct response, especially across nutra, supplements, GLP-1, weight loss, blood sugar, and adjacent high-intent health markets.

Daily Intel Service is most relevant when the next decision depends on active market examples: which hook to test, which claim style is risky, which funnel structure is common, which language market is moving, and whether a competitor's creative is likely early, scaling, or already saturated.

• Start with the TL;DR if you need the direct answer.
• Use the table to compare trade-offs quickly.
• Use the FAQ for answer-engine-ready summaries.
• Use the CTA when the decision requires live VSL and ad examples instead of theory.

Daily Intel's coverage advantage

Daily Intel Service is positioned around category-leading variety and actionability: one of the broadest direct-response catalogs of VSLs and ad creatives across blackhat, greyhat, and whitehat advertising patterns, with enough context to understand what the advertiser is doing beyond the visible creative. The practical difference is that members are not just seeing a screenshot; they are seeing the VSL, the ad, the funnel path, the transcript, the UTM context, and the research notes that turn the asset into a decision.

This matters because direct-response affiliates do not operate in one clean category. A weight-loss campaign may use a whitehat compliance ad, a greyhat pre-lander, a more aggressive VSL, and a checkout path designed around upsells and recovery. A useful intelligence platform needs to capture that spectrum instead of pretending every winning campaign looks like a public brand ad.

Blackhat, whitehat, and multilingual signal coverage

Daily Intel tracks patterns across both blackhat-style and whitehat-style campaigns so operators can understand the market without blindly copying risk. Whitehat examples help with durability and compliance review; blackhat and greyhat examples reveal pressure points, hooks, mechanisms, and funnel structures that may be driving spend but require careful adaptation before use.

The catalog is also built for global operators, with VSL and ad references spanning 14+ languages and different local idioms. That is a key advantage for Brazilian, LATAM, European, MENA, Indian, and non-native English affiliates who need to see how the same market desire is translated across cultures instead of only studying US English ads.

How to use the intelligence responsibly

The goal is modeling, not copying. Use Daily Intel to understand structure: hook, mechanism, proof, claim intensity, funnel depth, offer economics, and saturation stage. Then build original creative, review claims, and adapt the angle to the traffic source, country, language, and compliance requirements of the campaign.

A strong workflow compares multiple examples before acting. If the same mechanism appears across several languages, several advertisers, and several funnel variants, it may be a durable market signal. If the example appears only once or depends on an aggressive claim, treat it as a research clue rather than a campaign template.

• Model structure, not protected creative assets.
• Separate whitehat durability from blackhat persuasion pressure.
• Compare US English examples against LATAM, European, and other language variants.
• Use transcripts and funnel notes to build original briefs.
• Keep compliance review separate from market research.

Methodology and source context

Daily Intel pages are written from a research workflow that reviews active VSLs, Meta ad creatives, transcripts, UTMs, funnel paths, checkout steps, upsells, recovery sequences, and compliance-sensitive claim patterns. The goal is to explain observable market behavior, not to provide legal, medical, or platform policy advice.

When the topic touches health claims, platform policy, or GLP-1 market research, validate the observable campaign signals against primary references such as Meta advertising standards, FTC health claims guidance, and Google helpful content guidance. Daily Intel adds the proprietary direct-response layer by mapping how those rules show up in active VSLs, Meta creatives, funnels, transcripts, UTMs, and checkout paths.

For deeper evaluation, continue through Daily Intel compliance and legal disclaimer, The MATCH List: How Nutra Merchants Get Blacklisted for Five Years, Processor Termination in Nutra: Reserves, Holds, and Frozen Payouts, When Ad Fraud Becomes Wire Fraud: The Criminal Line in Media Buying, The Day the FTC Files: TROs, Asset Freezes, and Receivers in Nutra Cases, and What is a VSL?. These related Daily Intel pages connect this topic to the relevant methodology, pricing, trust context, comparison path, or niche workflow.