MCC Codes for Restricted Businesses
A definitive guide to how four-digit Merchant Category Codes dictate card network risk classifications, interchange rates, underwriting eligibility, and acquiring bank compliance obligations.
Reference Guide · The Decline File · September 2026
This document serves as an objective reference on payment scheme classification taxonomy. It contains no affiliate links, sponsored listings, or commercial solicitations.
01 — Taxonomy & Authority
What a Merchant Category Code is and why it matters
A Merchant Category Code (MCC) is a standardized four-digit numerical identifier defined under the international standard ISO 18245 and maintained by global card networks such as Visa, Mastercard, American Express, and Discover. Its primary function is to classify a commercial enterprise according to the exact nature of the goods, digital products, or services it provides.
MCC assignment is not an administrative formality. The four-digit code assigned to your merchant identification number (MID) directly dictates three critical operational factors across the payment processing lifecycle:
- Underwriting and boarding eligibility: Acquiring banks operate within strict risk mandates set by their sponsor institutions and credit committees. If an acquirer does not support high-risk or specialized MCCs, the application is declined automatically regardless of merchant creditworthiness.
- Interchange qualification and pricing: Card networks publish tiered wholesale interchange schedules where specific MCCs qualify for custom rate categories, interchange surcharges, or mandatory card brand registration fees.
- Fraud and dispute monitoring thresholds: High-risk MCC categories are subject to heightened scrutiny under card network surveillance programs, requiring tighter chargeback monitoring and stricter data security verification.
The code is formally assigned by the acquiring bank underwriter during the boarding process. The merchant does not select their code from a drop-down menu; rather, the underwriter evaluates the merchant corporate structure, domain content, product catalog, and fulfillment model to designate the appropriate classification.
02 — Classification Mechanics
How codes are assigned and what happens when descriptions diverge
During initial underwriting, the risk team examines the merchant website, sample product listings, terms of service, supplier invoices, and business entity formation documents. The underwriter maps this operational profile against card brand category manuals. If the business generates revenue across multiple verticals, the underwriter typically assigns the code that represents the highest proportion of gross sales or the highest inherent risk exposure.
Problems arise when the products actually billed through the payment gateway diverge from the business model originally evaluated during underwriting. This mismatch typically occurs in one of three ways:
1. Unannounced catalog expansion
A merchant approved under a standard retail code (such as general consumer goods) begins selling restricted botanicals, continuity subscriptions, or adult digital content without notifying the acquirer or requesting a formal underwriting review.
2. Platform aggregation drift
Onboarding through instant payment aggregators that assign a single generic MCC across their entire merchant portfolio. When automated risk algorithms eventually inspect the store inventory, the account is flagged for operating outside permitted merchant parameters.
3. Deceptive masking (factoring / transaction laundering)
Intentionally routing card transactions for a restricted product through an unrelated shell company approved under a low-risk MCC to bypass underwriting scrutiny. This constitutes a severe violation of card scheme regulations.
Acquirers and card brands identify classification mismatches through automated web-scraping sweeps, transaction pattern deviations, customer dispute descriptors, and periodic mystery shopping. When a mismatch is confirmed, the acquirer must immediately rectify the classification, assess retroactive fees, or terminate processing.
03 — Code Reference
Commonly cited codes in restricted categories
The following table compiles widely published Merchant Category Codes across sensitive, regulated, and elevated-risk commerce sectors. Only established codes are listed; where classification varies by acquirer policy, it is explicitly indicated.
Table 1 — Commonly cited codes in restricted categories
| Code | Category | Commonly associated with |
|---|---|---|
| 5816 | Digital Goods — Games | Video game downloads, in-game virtual assets, downloadable software extras, gaming credits. |
| 5815 | Digital Goods — Media | Digital books, audio files, streamed media, graphic arts, digital document downloads. |
| 5993 | Cigar Stores & Stands | Cigars, pipe tobacco, premium smokable accessories, specialty retail tobacco products. |
| 7995 | Betting & Gambling | Licensed casino wagering, sports betting, lottery tickets, gaming chips, prediction markets. |
| 5912 | Drug Stores & Pharmacies | Licensed prescription pharmaceuticals, regulated wellness compounds, diagnostic supplies. |
| 7273 | Dating & Matchmaking | Online matchmaking platforms, subscription dating applications, companion directory services. |
| 5966 | Direct Marketing — Outbound | Outbound telemarketing, continuity subscription programs, remote telephone order solicitation. |
| 5967 | Direct Marketing — Inbound | Inbound phone response to broadcast advertising, print catalog ordering, remote customer fulfillment. |
| 7372 | Computer Programming & SaaS | Software-as-a-service recurring plans, custom enterprise software development, data processing. |
| Varies by acquirer | Peptides & Research Biochemicals | Laboratory reagents, synthesized research compounds, analytical chemical supplies. No single global code. |
| Varies by acquirer | High-Risk Nutraceuticals | Specialty dietary supplements, nootropics, herbal wellness formulations (frequently 5499, 5912, or 5969). |
04 — Compliance & Enforcement
Why miscoding is treated with zero tolerance
In high-risk card processing, merchants sometimes encounter unscrupulous sales agents suggesting that an unplaceable business can simply be boarded under a benign, low-risk code such as general consulting or miscellaneous retail. Operating under an incorrect MCC—whether intentional or negligent—exposes the business to immediate catastrophic operational risk.
Global card networks enforce strict brand integrity and anti-money laundering programs, including the Visa Brand Risk Assessment Program (BRAM) and the Mastercard Business Risk Assessment and Mitigation (BRAM/BPS) framework. When a payment processor boards a merchant under an improper code to circumvent scheme rules or registration requirements, the card brands assess severe compliance penalties directly against the acquiring institution.
Because acquiring banks must absorb these institutional fines, their response to discovering a miscoded merchant is swift and non-negotiable:
- Immediate processing termination: The merchant identification number is shut down instantly with no transition period or grace window.
- Long-term custodial reserve holds: Acquirers retain all pending settlement balances for extended holding windows (frequently up to 180 days) to offset potential customer chargebacks and network penalty assessments.
- MATCH / VMAS industry blacklisting: Acquirers routinely list the business and its beneficial owners on the Mastercard MATCH (Member Alert to Control High-Risk) or Visa VMAS databases under reason codes indicating fraud, deceptive practices, or laundering. A MATCH listing severely impairs the merchant ability to secure credit card processing with any legitimate acquiring bank globally for up to five years.
For sustainable long-term commerce, restricted merchants must insist on transparent underwriting where their primary goods are fully disclosed and accurately coded from day one.
05 — Cluster Index
In this section
Technical briefs on specific industry classification codes, underwriting requirements by vertical, and scheme registration rules are published in this section:
Detailed breakdowns of specific merchant category codes, interchange qualifications, and registration requirements for restricted verticals are indexed here.
06 — Related Topics
Explore related payment governance guides
Review vertical underwriting briefs, card brand scheme regulations, and merchant account requirements:
- Explore industry-specific payment profiles
Comprehensive processing briefs, MCC assignments, and acquiring hurdles across 20+ restricted commercial categories.
- Understanding card network operating regulations
An analysis of Visa and Mastercard brand protection programs, excessive chargeback thresholds, and scheme compliance.
- How high-risk merchant accounts are underwritten
Dedicated MIDs, aggregator limitations, underwriting documentation standards, and approval timeline expectations.
07 — Questions
Frequently asked questions
Can a merchant select their own Merchant Category Code?
No. A merchant cannot unilaterally assign their own MCC. The acquiring bank or payment processor assigns the four-digit code during the underwriting phase based on the primary line of business, inventory review, corporate documentation, and sales channel. Attempting to dictate an inaccurate or lower-risk code is classified as deceptive onboarding and violates card network operating rules.
What happens if a business sells multiple distinct categories of products under one MID?
When a merchant sells goods spanning multiple product classes, the acquiring bank generally assigns the MCC corresponding to the business unit generating the majority of gross sales volume, or the category representing the highest inherent regulatory and chargeback risk. In complex multi-category operations, acquirers frequently require separate merchant accounts (MIDs) dedicated to distinct product lines.
Why do payment aggregators reject entire MCC categories outright?
Payment facilitators and aggregators operate master merchant accounts with downstream banking partners under predefined risk tolerances. Because certain MCC categories exhibit statistically elevated dispute volumes, regulatory compliance burdens, or enhanced card brand registration mandates, aggregators maintain strict prohibited business lists that exclude those codes completely to preserve their master portfolio stability.
Last reviewed September 2026