You registered the company, built the website, and applied to take card payments. A few days later: "Unfortunately we are unable to support your business at this time." No reason given. No one to call.
This happens to new companies constantly, and it's rarely about the product. A payment provider isn't judging whether your business is a good idea. It's pricing the risk that it will be left holding the bag — and with no processing history, it has to price that risk from everything except the numbers. Your background. Your company's paperwork. Your website. Your industry's MCC code. What Google says about you.
This guide walks through what underwriters actually look at when there's no history to look at, why each item matters, and what you can do about it before you apply — so your first application is the one that gets approved.
First, understand what you're really asking for
A merchant account looks like a service you pay for. Underneath, it's an unsecured line of credit.
When a customer pays you by card, the money moves to you within a day or two. But the customer keeps the right to dispute that payment for a long time afterwards. Under the card schemes' rules a cardholder can typically raise a chargeback for 120 days after a transaction — and for goods or services delivered later (a pre-order, a flight, an annual plan), the clock usually starts at the expected delivery date, which under Visa's rules can stretch the window to as much as 540 days.
If the customer wins and you can't or won't pay, the acquirer pays. If you've gone out of business, the acquirer pays. If you were a fraud from the start, the acquirer pays. That's why every card-acquiring licence comes with an obligation to know your merchant — and why the card schemes run brand-protection programmes (Visa's Integrity Risk Program, Mastercard's BRAM) that fine acquirers for boarding merchants they shouldn't have.
So underwriting a brand-new company comes down to three questions:
- Are you who you say you are? (KYB, KYC, sanctions and PEP screening — non-negotiable, regulatory.)
- Will customers get what they paid for? (Delivery risk, refund risk, chargeback risk.)
- If they don't, is there money and a reachable person to make it right? (Capital, runway, guarantees, reserves.)
An established merchant answers all three with statements: twelve months of volume, a chargeback ratio, a refund ratio. You can't. So the underwriter answers them from the material below. Every section is one input into those three questions.
1. You, the founder
With no company history, the acquirer underwrites the people. Expect the founder(s), every director, and every beneficial owner holding 25% or more to be checked — not just identified.
Identity and screening. Government ID, proof of address, and a screen against sanctions lists and politically-exposed-person databases. Name matches happen (common names, transliterations); they're cleared with documents, not argument. Have your ID and a dated proof of address ready before you apply, and make sure the name on your ID, the company register, and your application are spelled identically. Mismatches don't get you declined — they get you parked in a manual-review queue.
Your work history. Yes, underwriters read LinkedIn. What they're checking is coherence: does your background make this business plausible? A logistics manager launching a freight-booking platform makes sense. A profile with no visible history launching a "premium nutraceutical subscription" matches a pattern underwriters have watched end badly a hundred times. You don't need a résumé that impresses — you need one that fits, and that's consistent with what the application says.
Your previous companies. How did they end? A company dissolved cleanly is fine. A company struck off with unpaid creditors, or an insolvency where customers lost deposits, is something you should explain before they find it. And the big one:
Previous merchant accounts. If you or a company you controlled had a merchant account terminated for cause — excessive chargebacks, fraud, misrepresenting the business, brand-protection violations — you're likely on the MATCH list (Mastercard Alert to Control High-risk Merchants, also called the Terminated Merchant File). Acquirers are required to check it before boarding you, and listings persist for five years. Being on MATCH isn't the end, but it moves you straight to the high-risk track. If it applies to you, say so in the application. Discovering it themselves is worse than anything you could disclose.
Your personal credit. In markets like the US, UK, Canada and Australia, a soft credit check on the principals is routine for small businesses — often alongside a personal guarantee. It's less common in much of the EU, but don't be surprised by it. The logic is simple: the company has no credit, so you are the credit.
Red flags underwriters look for:
- Founder profiles created the same month as the company and the domain
- A "team" page of stock photos, or named team members whose own profiles don't mention the company
- A founder who can't be reached on the phone number given
- Ownership routed through nominees or opaque holding companies with no explanation
2. The company
The paperwork check is mostly about alignment. Every document should tell the same story about the same entity.
The alignment rule. Legal name on the register = trading name on the website (or a documented trading-as name) = name on the settlement bank account = registrant of the domain = name on the billing descriptor customers will see. Every mismatch is a question, and every question is a delay or a decline. If your brand and legal name differ, that's normal — but document it and use both consistently.
Incorporation date and register extract. A company registered last week isn't disqualifying. It just shifts more weight onto everything else in this guide.
Where you're incorporated matters more than founders expect. Card scheme rules generally require a merchant to be located in the acquirer's licensed region — with an entity, a director, a bank account and real operations there. An offshore holding company, or a founder in one country with an entity in a second selling to customers in a third, is one of the most common quiet decline reasons for "remote-first" startups. If your setup is unusual, address it head-on, or pick an acquirer that serves your actual jurisdiction.
Registered address vs trading address. A virtual office as your registered address is fine. A virtual office as your only address, with no evidence of where the business actually operates, is a flag. Give the operating address too.
Business bank account. In the legal entity's name, in an acceptable jurisdiction, with statements. Even three months of thin statements are useful: they show capital, who's paying you, and that you're running a real business rather than an application.
Capital and runway. The underwriter's real question is: if this goes wrong, can this company refund its customers? A short financial summary — cash on hand, funding raised, monthly burn — answers it. If you've raised money, say so and show it.
Licences and registrations. Some verticals can't be boarded without them: travel (bonding or agency registration in many markets), lending, insurance distribution, online pharmacies, alcohol and tobacco, crypto (VASP or equivalent registration), gambling (a licence in each market you sell to). No licence means no account, regardless of everything else.
3. Your industry and the MCC code
Every merchant is assigned a four-digit Merchant Category Code. It determines your interchange, which scheme rules apply to you, whether your acquirer has to register you with the schemes, and — most importantly for a new company — which underwriting track your application lands on.
Here's the part most founders miss: you don't choose your MCC. The acquirer assigns it from your description of the business and from your website. So the way you describe what you sell decides whether you're underwritten as a low-risk retailer or a high-risk subscription marketer.
That cuts two ways. Describe your business precisely and you land in the right code with the right pricing. Describe it vaguely and you land in a catch-all like 5999 (miscellaneous retail), which is itself a signal that the underwriter should look harder. Describe it misleadingly — calling a nutraceutical subscription "health & wellness retail" — and you may get approved, and then terminated for misrepresentation when the chargebacks start, which puts you on MATCH.
Some MCCs are treated as high-risk or restricted by most acquirers, and several require formal registration with Visa and Mastercard (with an annual fee of roughly $500–$1,000 that is passed on to you):
| MCC | Category | Why acquirers are cautious |
|---|---|---|
| 7995 | Betting, casinos, lotteries | Licensing per market, scheme registration required |
| 5967 | Direct marketing – inbound teleservices | Adult content, psychic services, high dispute rates |
| 5968 | Direct marketing – continuity / subscription | "Free trial" billing, negative-option disputes |
| 5966 | Direct marketing – outbound telemarketing | Consent and fraud risk |
| 7273 | Dating and escort services | Chargebacks, brand-protection rules |
| 5912 / 5122 | Pharmacies / drugs and proprietaries | Prescription verification, cross-border legality |
| 6051 | Quasi-cash, foreign currency, crypto purchases | Cash-equivalent fraud, money-laundering exposure |
| 6211 | Securities brokers, forex, CFDs | Regulation per market, large disputed losses |
| 4722 | Travel agencies and tour operators | Long delivery delay, insolvency exposure |
| 5993 | Tobacco, vape | Age verification, jurisdictional bans |
Not on that list but still scrutinised: firearms and accessories, CBD, adult products, tickets and events, multi-level marketing, debt collection and credit repair, "get rich" courses and coaching, telehealth, and anything sold with health or income claims.
The second axis: delivery delay. Independent of your MCC, the underwriter asks when does the customer get what they paid for? A digital download is delivered before the dispute window even opens. A made-to-order sofa, a festival ticket, a flight, a twelve-month plan paid up front — each of those is money you're holding for something you haven't delivered yet, and every day of that gap is credit exposure for the acquirer. Long delivery delays are the usual reason a perfectly respectable business gets a rolling reserve.
What "high-risk" actually means in practice: higher pricing (often a point or more above low-risk rates), a rolling reserve (commonly 5–10% of volume held for 90–180 days), monthly volume caps, and sometimes a specialist acquirer rather than the mainstream one you applied to. It doesn't mean "no". It means "yes, on different terms" — and the sooner you know which track you're on, the sooner you can apply to the right provider.
4. Your website — the underwriter reads it before they approve you
An underwriter will open your website and go through it with a checklist before your application moves forward. Card scheme rules require an e-commerce merchant's site to display specific things, and a site that's missing them can't be approved even if everything else is perfect.
What must be on the site:
- Your legal business name and the country you operate from (footer is fine)
- Customer service contact: an email address, a phone number, and a physical address
- A complete description of the goods or services, with prices and the transaction currency
- A refund, return and cancellation policy — specific, not "contact us"
- Delivery timelines and fulfilment method
- Terms and conditions and a privacy policy
- Any export or legal restrictions (age limits, countries you don't ship to)
- HTTPS everywhere, and card-brand acceptance marks at checkout
The site must be live and finished. "Coming soon" pages, placeholder text, empty categories, broken links, and product pages without prices are the single most common self-inflicted decline for new companies. The underwriter can't assess what customers will buy if there's nothing to buy. If you're pre-launch, finish the site first, then apply.
Test accounts and demo access. If what you sell sits behind a login, a paywall, a subscription, or an app-store install, the underwriter can't see it — and an underwriter who can't see the product either guesses (badly) or emails you and waits (slowly). Put test credentials directly in the application: a working username and password for a demo or staging account, an app build link or a short screen recording of the full purchase-to-delivery flow, and for subscriptions, a walkthrough of the cancellation path. Marketplaces should show both the buyer and seller sides. This one step regularly turns a two-week back-and-forth into an approval.
Subscriptions and free trials get special attention. The card schemes' rules for trial and recurring billing require explicit consent to the recurring charge, a reminder before a trial converts, and an easy online cancellation. If your pricing page doesn't make the recurring charge obvious, fix it before an underwriter (or a chargeback analyst) reads it.
Domain. Registered to the company or a founder, ideally with some age. A two-week-old domain isn't fatal, but it's another item that puts weight on the rest of the story. Apply from an email address on that domain, not a free webmail account.
Descriptor. Decide what will appear on customers' card statements and make it match the brand they saw at checkout. "I don't recognise this charge" is the origin of a huge share of chargebacks, and a mismatched descriptor is the cheapest way to earn them.
Claims and content. Health outcomes, income promises, "guaranteed results", or branded goods without proof of authorisation will end an application on the spot. If you make a claim, be able to substantiate it; if you can't, remove it.
5. Social media, LinkedIn and media presence
Underwriters aren't counting followers. They're looking for corroboration — evidence that the business exists outside the application and that it matches the story you've told.
What helps:
- A LinkedIn company page with the founders' profiles listing the company as their current role, and any employees whose profiles agree
- Founders' profiles whose history is consistent with the application (same companies, same dates, same spelling)
- Press, podcasts, product listings, app-store presence, a funding announcement — anything third-party
- Reviews of the brand, or of the founder's previous brand, on independent platforms
- Social accounts that show real, dated activity — not necessarily much of it
What hurts:
- Every profile created in the same week as the domain and the company
- Reviews that are all five stars and all posted on the same day
- Negative coverage, complaint threads, or regulator warnings about the founder or a previous company that you didn't mention
- A "team" that doesn't exist anywhere except the about page
Do what the underwriter will do: search your own name, your company's name, and your domain. Whatever comes up on the first page is part of your application whether you included it or not. If there's something unflattering, get ahead of it with a sentence in the application rather than hoping it isn't found.
6. The application itself: projections and answers
The form will ask for your expected monthly volume, average transaction value, highest transaction value, the countries you sell to, your card-present/card-not-present mix, and how you acquire customers. Three rules:
Be honest. Under-declaring volume to look small doesn't help — if you then process three times your declared volume, that's a velocity alert, a review, and probably a hold on your funds, right when you least want one. Over-declaring to look bigger looks like "load balancing" or transaction laundering for a business that isn't yours, which is a scheme violation. Give your best estimate and say it's an estimate.
Be specific. "We sell handmade furniture" is a category. "We sell made-to-order oak furniture to UK consumers, average order £1,400, 30% deposit at order and 70% on dispatch, delivery 6–8 weeks, free returns within 14 days of delivery" is an underwriting file. The second version takes the same effort to write and gets approved faster because it answers the questions before they're asked.
Explain the risky bits yourself. If you have a long delivery time, a large average ticket, an affiliate marketing channel, or an unusual corporate structure, the underwriter will find it. Explaining it — and, ideally, explaining what you do to reduce the risk — is the difference between a flag and a note.
Send the full document pack up front. Typical list: certificate of incorporation, register extract showing directors and shareholders, ID and proof of address for each principal, proof of the business bank account, three to six months of bank statements (personal if the company has none), any licences, and a short business summary with your projections. Applications that arrive complete get processed; applications that trigger a document request get queued.
Show that you've thought about disputes. Mention that 3-D Secure is on, that you check CVV and address, that you ship with tracking, that customer service replies within a day. Most chargebacks come from customers who couldn't reach the merchant. An underwriter who sees a plan for that sees a lower-risk merchant.
7. What you can offer to close the gap
You can't manufacture history, but you can reduce the acquirer's exposure — and offering to do so before they ask is the strongest signal a new company can send.
- A rolling reserve. Say you'll accept one. 5–10% held for 90–180 days is typical and it's usually released once you've built history.
- A volume cap with a scheduled review at three and six months.
- Slower settlement — weekly, or T+7 rather than T+1 — during the first months.
- A security deposit or a personal guarantee where that's normal in your market.
- A narrower scope to start: domestic cards only, one currency, no Amex, no high-ticket items above a threshold.
- Take the riskiest money off cards. Deposits and large tickets by bank transfer or pay-by-bank (which can't be charged back) and cards for the rest. This reduces the acquirer's exposure and often cuts your fees too.
8. Choose the right door
Not every provider underwrites the same way, and the biggest mistake new companies make is applying to the wrong kind of provider for their stage.
| Route | Onboarding | Typical timeline | Best for |
|---|---|---|---|
| Aggregator / payment facilitator (Stripe, PayPal, Mollie, Square and similar) | You're a sub-merchant under their master account. Light checks up front, deeper review as volume grows. | Minutes to a few days | Most low-risk businesses with no history |
| Direct merchant account (acquiring bank or ISO) | Full underwriting before approval; your own merchant ID; a human account manager. | Typically 1–4 weeks | Established or well-funded businesses, higher volumes |
| High-risk specialist | Underwrites restricted MCCs and MATCH-listed founders; reserves and higher pricing are standard. | Typically 2–6 weeks | Regulated or high-risk verticals, previous terminations |
| Local and account-to-account methods (pay-by-bank, SEPA, iDEAL, UPI, mobile money) | Lighter underwriting because there's no chargeback. | Days | A bridge while you build card history, or a permanent complement |
For most new companies the strategy is straightforward:
- Start with an aggregator. Accept that the onboarding is automated and the pricing is flat. The point is to start processing.
- Run clean for six to twelve months. Keep chargebacks well under the schemes' monitoring thresholds (which start around 0.9–1% of transactions — acquirers get nervous well before that), refund promptly, never breach your declared volume without telling them, and keep your website compliant.
- Apply for a dedicated merchant account with those statements. Now you're an established merchant with history. That history is the asset you were building the whole time, and it unlocks interchange-plus pricing, better terms, and a relationship instead of an algorithm.
Two cautions. First, aggregators have restricted-business lists that are broader than the card schemes' own rules — check the list before you apply (Stripe publishes its list publicly, and most others do too), because a decline there is automated and rarely reversible. Second, be wary of anyone who charges an up-front "application fee" to place you with a high-risk acquirer. Reputable acquirers and brokers are paid from processing, not from applications.
9. If you're declined
Ask why. Providers often won't give a detailed reason, but the shape of the answer usually tells you whether it was the business type, the documentation, the website, or the principals. Fix that thing.
Don't shotgun applications. Applying to eight providers in a week with slightly different descriptions of the same business creates exactly the footprint underwriters are trained to spot — the same directors appear in every KYB check. Worse, reapplying under a different trading name or a fresh website is misrepresentation, and if it's discovered after approval it ends in a termination, not just a decline.
Know the difference between a decline and a termination. A decline is a decision by one provider. It isn't shared industry-wide and it doesn't follow you. A termination for cause is what puts you on MATCH for five years. The practical rule: never get approved on a story that won't survive contact with your real transactions. It's far better to be declined honestly by a mainstream acquirer and go to a specialist than to be approved on a stretch and terminated six months later.
Consider whether the structure is the problem. If you're an entity in one country selling to consumers in another, a locally incorporated subsidiary with a local director and bank account is often what turns a "no" into a "yes" — legitimately.
Pre-application checklist
| Area | Before you apply |
|---|---|
| Founders and owners | ID and proof of address for every principal and 25%+ owner; names spelled identically everywhere; LinkedIn consistent with the application; previous companies and any account terminations disclosed |
| Company | Register extract; business bank account in the legal name; 3–6 months of statements; operating address; licences for regulated activity; a one-page financial summary |
| Industry | Know which MCC your description implies; if it's high-risk, apply to a provider that boards that MCC; describe delivery timing and deposits explicitly |
| Website | Live and complete; legal name, contact details, currency, refund/return/cancellation policy, delivery times, T&Cs, privacy policy, HTTPS; no unsubstantiated claims; test login or demo for anything behind a paywall |
| Presence | Company page and founder profiles that agree with the application; search your own name and company; address anything negative up front |
| Application | Honest, specific projections; risky points explained; full document pack attached; fraud and customer-service measures described; reserve or cap offered |
Find a provider that will actually say yes
The fastest way to get approved is to apply to a provider that already accepts your industry, your country and your stage — instead of learning that from a decline. Get matched and we'll shortlist providers based on your business model, where you're incorporated, what you sell and how much you expect to process. If you already know you're in a restricted category, start with the providers that accept high-risk merchants; if you're a small, low-risk business, the small-business shortlist is the right place to begin.
PaymentProviders.io is an informational service. Underwriting policies, reserve levels, timelines and fees vary by provider, market and business model; figures above are typical ranges, not guarantees. This article is not legal or financial advice.
