The MATCH List: How Supplement Merchants Get Blacklisted (and Get Off)

What is the MATCH list and who actually adds you to it?

MATCH stands for Mastercard Alert to Control High-risk Merchants, a shared file of terminated merchant accounts that acquiring banks and processors check before boarding a new merchant. Mastercard built the database, but Mastercard does not decide who lands on it. An acquirer or processor makes that call, at the moment it terminates your merchant account for one of the network's listed reasons.

The mechanics are procedural rather than discretionary. Once an acquirer terminates a merchant for a MATCH-eligible reason, it must report the listing to Mastercard within one business day of the termination, per Stripe's documentation on the program. The report carries the business name, the reason code, and separately, the principal owner's identity.

None of that requires advance notice to the merchant. Many operators find out they are MATCH-listed only when a later application gets declined, because the acquirer's reporting obligation runs to Mastercard, not to the business it just terminated.

Which MATCH reason codes are most common for supplement merchants?

Nutra sellers land on MATCH mostly under two codes: 04, Excessive Chargebacks, and 10, Violation of Standards, with 05, Excessive Fraud, and 01, Account Data Compromise, showing up less often. Code 04 carries a hard quantitative trigger: Mastercard chargebacks exceeding 1% of that month's Mastercard sales transactions and totalling at least $5,000, per Stripe's documentation on the MATCH program.

One correction worth stating plainly, since it trips up a lot of secondhand writing on this topic: code 08 is not a chargeback code at all. It is the Mastercard Questionable Merchant Audit Program, a flag tied to the business model itself rather than a dispute ratio, and it sits outside the numbers in the table above.

Visa runs a separate set of dispute reason codes that often build toward a Mastercard code-04 listing in the first place. Trial-to-subscription billing exposes 10.4, Other Fraud in a Card-Absent Environment, and 13.2, Cancelled Recurring Transaction, both typically filed by cardholders who authorized the charge but dispute it as friendly fraud, according to Chargeflow's breakdown of Visa's 2026 reason-code list. Genuine fulfilment failures tend to land under 13.1, 13.3, 13.6 or 13.7 instead, a different problem that adds to the same ratio.

Because 13.1 and 13.3 disputes often start with a cardholder who says the product didn't match what the video promised, the line between a marketing problem and a fulfilment problem gets thin, which is the exact territory mapped out when we ask how direct compliant supplement ad copy can actually get.

Does a MATCH listing follow the corporation or the beneficial owners personally?

It follows the person, not the paperwork. The acquirer's MATCH report must include the principal owner's name, address, phone number and tax ID wherever the acquirer has them on file, per Stripe's documentation on the program, so the listing is keyed to an individual identity rather than just a corporate EIN.

That is why closing one LLC and opening another under a spouse's name, a holding company, or a slightly different DBA rarely works cleanly. Any acquirer running a MATCH inquiry against the new principal's name and tax ID during underwriting will surface the old listing, because the database exists specifically to catch that move.

How long does a MATCH listing last, and does it expire on its own?

A MATCH listing runs five years from the date it was filed, and Mastercard deletes it automatically once that period ends. No request is required and no appeal changes the timeline. That is a fixed retention period set by the network, per Stripe's documentation on the program, not a maximum a processor can shorten or extend at its own discretion.

Five years is a long runway for a supplement brand that depends on paid media and a working merchant account, which is the full arithmetic we work through in how nutra merchants get blacklisted for five years, from what the clock actually costs a brand to what changes once it runs out.

Nothing shortens that clock except the two narrow removal paths covered next. Remediating the underlying chargeback problem, changing ownership on paper, or simply waiting quietly does not accelerate deletion; the file sits for the full term regardless of what the business does in the meantime.

Can you get removed early, and which reason codes allow it?

Early removal exists on paper for exactly two situations, and most listings qualify for neither. The acquirer can confirm it added the merchant in error, such as a data-entry mistake or a listing that should never have been filed, or, for code 12 only, the merchant can achieve and document PCI DSS compliance. Mastercard does not adjudicate disputes about a listing itself; the reporting acquirer is the only party with authority to correct or withdraw it, per Stripe's documentation on the program.

This is where removal-service marketing tends to overpromise. Merchants listed under code 04, Excessive Chargebacks, or code 05, Excessive Fraud, cannot be removed early even after the underlying problem is fixed. Mastercard's own rule set treats those two codes as final for the full five-year term regardless of a subsequently improved chargeback ratio or new fraud controls, so a firm promising early removal from an excessive-chargeback listing is promising something the rule as documented does not allow.

Code 10, Violation of Standards, and code 01, Account Data Compromise, sit in the acquirer-confirms-error lane rather than a remediation lane. The fix there is not proving the business has changed; it is proving the acquirer was wrong to list it in the first place, which is a narrower and less common outcome than the removal-services pitch tends to suggest.

Can a MATCH-listed owner ever get approved again, and by whom?

Yes, but usually only through processors built for this exact risk profile, and typically at a price. High-risk providers such as PaymentCloud, eMerchantBroker and Easy Pay Direct actively underwrite nutraceutical merchants, including some with troubled processing histories, though an active MATCH listing narrows even that pool and pushes terms toward the aggressive end.

Expect a reserve. Typical high-risk reserve structures run 5% to 15% of processing volume held back for 90 to 180 days, with capped and upfront reserve variants as the two common alternatives acquirers offer, and nutraceuticals sit among the verticals facing the steepest demands, according to Corepay's high-risk merchant account guidance. A MATCH-listed principal should expect the high end of that range, not the low end.

Approval at that point depends heavily on what the underwriter can verify about the business model before it ever asks about the listing, which is the process mapped in detail in what high-risk underwriters actually check before approving a supplement offer.

A merchant-of-record arrangement is the other route some MATCH-listed owners use, since the MoR's own merchant account absorbs the card-network relationship and the listed principal never reapplies for a MID directly. The tradeoffs of routing volume that way instead of holding a direct account are covered in merchant of record, explained for supplement offer owners.

Does opening a new entity to escape MATCH work — or make it worse?

It does not work as evasion, and pushed far enough it turns into a separate legal problem. Running one entity's transactions through a MID underwritten for a different, undisclosed entity is transaction laundering, also called factoring, and it violates both the merchant agreement with the acquiring bank and, potentially, federal anti-money-laundering law, per Venable LLP's analysis of the practice.

The exposure is not theoretical. Card-network penalties for transaction laundering include fines against the business and against individual principals, plus bans from the payments business ranging from months to a lifetime, and the same conduct sits under statutes carrying real prison exposure: 18 U.S.C. 1344, bank fraud, up to 30 years per count, and 18 U.S.C. 1956, money laundering, up to 20 years and a fine of up to $500,000 or twice the transaction value.

Mastercard's newer Scam Merchant Monitoring Program, enforceable from 24 July 2026, treats multiple MID requests without clear business justification as an explicit scam signal on its own, so the shell-entity pattern gets flagged as a risk indicator before any chargeback ratio is even calculated. Running several MIDs is not automatically a violation; load balancing across disclosed MIDs is a legitimate, marketed feature at high-risk providers. The line is disclosure, not the number of MIDs.

For an owner working through a MATCH listing, the lower-risk move is usually distribution rather than disguise: placing the offer through networks and affiliates built for the vertical instead of rebuilding a direct merchant stack under a new name, which is the comparison laid out in where to list your supplement offer: networks compared.

Quick decision checklist

Use this page as a decision aid, not a generic blog post. The practical question is whether the reader needs faster evidence about what is already working in VSL-driven direct response, especially across nutra, supplements, GLP-1, weight loss, blood sugar, and adjacent high-intent health markets.

Daily Intel Service is most relevant when the next decision depends on active market examples: which hook to test, which claim style is risky, which funnel structure is common, which language market is moving, and whether a competitor's creative is likely early, scaling, or already saturated.

• Start with the TL;DR if you need the direct answer.
• Use the table to compare trade-offs quickly.
• Use the FAQ for answer-engine-ready summaries.
• Use the CTA when the decision requires live VSL and ad examples instead of theory.

Daily Intel's coverage advantage

Daily Intel Service is positioned around category-leading variety and actionability: one of the broadest direct-response catalogs of VSLs and ad creatives across blackhat, greyhat, and whitehat advertising patterns, with enough context to understand what the advertiser is doing beyond the visible creative. The practical difference is that members are not just seeing a screenshot; they are seeing the VSL, the ad, the funnel path, the transcript, the UTM context, and the research notes that turn the asset into a decision.

This matters because direct-response affiliates do not operate in one clean category. A weight-loss campaign may use a whitehat compliance ad, a greyhat pre-lander, a more aggressive VSL, and a checkout path designed around upsells and recovery. A useful intelligence platform needs to capture that spectrum instead of pretending every winning campaign looks like a public brand ad.

Blackhat, whitehat, and multilingual signal coverage

Daily Intel tracks patterns across both blackhat-style and whitehat-style campaigns so operators can understand the market without blindly copying risk. Whitehat examples help with durability and compliance review; blackhat and greyhat examples reveal pressure points, hooks, mechanisms, and funnel structures that may be driving spend but require careful adaptation before use.

The catalog is also built for global operators, with VSL and ad references spanning 14+ languages and different local idioms. That is a key advantage for Brazilian, LATAM, European, MENA, Indian, and non-native English affiliates who need to see how the same market desire is translated across cultures instead of only studying US English ads.

How to use the intelligence responsibly

The goal is modeling, not copying. Use Daily Intel to understand structure: hook, mechanism, proof, claim intensity, funnel depth, offer economics, and saturation stage. Then build original creative, review claims, and adapt the angle to the traffic source, country, language, and compliance requirements of the campaign.

A strong workflow compares multiple examples before acting. If the same mechanism appears across several languages, several advertisers, and several funnel variants, it may be a durable market signal. If the example appears only once or depends on an aggressive claim, treat it as a research clue rather than a campaign template.

• Model structure, not protected creative assets.
• Separate whitehat durability from blackhat persuasion pressure.
• Compare US English examples against LATAM, European, and other language variants.
• Use transcripts and funnel notes to build original briefs.
• Keep compliance review separate from market research.

Methodology and source context

Daily Intel pages are written from a research workflow that reviews active VSLs, Meta ad creatives, transcripts, UTMs, funnel paths, checkout steps, upsells, recovery sequences, and compliance-sensitive claim patterns. The goal is to explain observable market behavior, not to provide legal, medical, or platform policy advice.

When the topic touches health claims, platform policy, or GLP-1 market research, validate the observable campaign signals against primary references such as Meta advertising standards, FTC health claims guidance, and Google helpful content guidance. Daily Intel adds the proprietary direct-response layer by mapping how those rules show up in active VSLs, Meta creatives, funnels, transcripts, UTMs, and checkout paths.

For deeper evaluation, continue through Daily Intel compliance and legal disclaimer, Payment Processor for Peptide Merchant, FTC Rules for Supplement Advertising: Summary, Meta Policies for Weight Loss Ads, GLP-1 Advertising Legal Framework 2026, and What is a VSL?. These related Daily Intel pages connect this topic to the relevant methodology, pricing, trust context, comparison path, or niche workflow.