Merchant Account Application Documents Checklist

A merchant account application contains fields to fill in. What it is actually doing is assembling a risk file that an underwriter will read the way a bank reads a loan application. The fields are prompts. The documents behind them are the evidence. What the underwriter is doing is building a picture of the business, the people who own it, and the probability that processing this merchant will cost the acquirer money.

A complete, internally consistent document package is the single biggest determinant of approval speed and outcome. An incomplete package does not produce a request for the missing items at most acquirers. It produces a delay while the underwriter’s queue moves on to files that are ready to review. An inconsistent package, where names, amounts, or business descriptions do not match across documents, produces a decline. Neither outcome is recoverable quickly.

The documents below represent the standard package for a high-risk merchant account application in the US. International structures have different requirements. Specific verticals add items beyond the standard package. Every acquirer has its own version of this list, and some vary in format requirements, but the items below appear across virtually all high-risk underwriting applications.

Business Identity and Formation Documents

The first category of documents establishes that the legal entity is real, properly formed, and matches what is on the application.

The EIN confirmation letter confirms the federal Employer Identification Number assigned to the business. This is not the same as any internal business document. It is the letter or notice the IRS issues when the EIN is assigned, currently in the form of a CP575 notice or Letter 147C. The name on the EIN confirmation must match the legal name on the articles of incorporation and the name on the business bank account. A mismatch between any of these three is a hard stop at most acquirers. The IRS’s EIN information and confirmation process is documented at irs.gov.

Articles of incorporation or articles of organization are the formation documents filed with the Secretary of State when the business entity was created. For LLCs this is typically articles of organization. For corporations it is articles of incorporation. The document confirms the legal entity name, the state of formation, and the registered agent. Some acquirers also request the operating agreement for LLCs or the corporate bylaws for corporations.

A business license is required where the merchant’s industry or state requires one to operate legally. Not every business needs a license, but merchants who need one and cannot produce it will not be approved. A missing license in a regulated category is not treated as a documentation gap. It is treated as a compliance problem.

Owner Identity Documents

Every beneficial owner holding 25 percent or more of the business must provide a government-issued photo ID. This is a FinCEN Customer Due Diligence rule requirement for financial institutions, not just an acquirer preference. The acceptable forms are a passport or a driver’s license. The name on the ID must match the name on the application and on the formation documents. An expired ID is not accepted.

For applications with multiple owners each crossing the 25 percent threshold, every qualifying owner must provide an ID. An application where one co-owner’s ID is missing will not proceed until all IDs are received.

Banking Documents

Three banking documents are typically required: business bank statements, a voided check or bank letter, and sometimes a completed W-9.

Business bank statements covering the most recent three to six months confirm that the business is operationally active and financially capable of supporting the requested processing volume. Statements must be bank-originated PDFs. Screenshots of online banking are routinely rejected at most acquirers even when the underlying numbers are clean. The statements need to show the legal business name matching the application, consistent revenue activity, and an average balance that can support the rolling reserve the acquirer will require.

A voided check from the business bank account, or alternatively a bank letter showing the business name, account number, and routing number signed by a bank official, confirms the settlement destination. Settlement funds will be deposited to this account. The account must be in the name of the legal business entity, not a personal account or an account in a DBA name that differs from the registered entity name.

A completed W-9 form provides the business tax identification information required for IRS 1099-K reporting on card payments. Some acquirers collect this as part of the application. Others collect it at approval.

Processing History

Three to six months of statements from the merchant’s current or most recent payment processor are the most valuable documents in any application from a merchant who has previously accepted cards. These statements show actual transaction volume, average ticket size, refund rate, and chargeback ratio in a format that underwriters can read directly.

Processing statements from a prior processor should not be withheld if the chargeback history is imperfect. Underwriters check prior processing history through multiple channels. A merchant who does not provide statements but has a visible processing history will be asked to explain the omission. A merchant who discloses a period of elevated chargebacks with a documented explanation and evidence of current improvement is in a better position than one who tries to conceal it. Voluntary disclosure of a problem reads as operational maturity. Concealment reads as fraud risk.

Merchants who have never processed cards do not have statements to provide. The rest of the document package carries more weight when there is no processing history, and the underwriting criteria for merchants without prior history are covered in the merchant accounts section of this site.

For merchants who need card acceptance running while a traditional underwriting application is in progress, RiskPay operates on non-custodial rails without the document requirements above. It does not require processing history, a voided check, or industry-specific certifications. It settles directly to a merchant wallet in USDC on Polygon and is available to most of the categories that standard acquirers decline.

Website and Operations Documents

The website URL submitted with the application must be live and functional at the time of review. Underwriters visit the website as part of the review process. A site that is under construction, password-protected, or shows content different from what the application describes will not pass review.

The website must display a clearly labeled refund and return policy, terms of service or terms and conditions, a privacy policy, and a working contact page with a customer service email address or phone number. For subscription and recurring billing businesses the checkout page must show the billing frequency, the amount charged at each interval, and the cancellation mechanism before the customer enters card details. The full website compliance checklist and what specific elements underwriters verify are covered in the operations section of this site.

Some acquirers also request domain registration or WHOIS records to confirm the merchant controls the website domain they are applying under. This is more common for applications where the website appears new or the domain ownership is not clearly associated with the business entity.

Industry-Specific Documents

Regulated verticals require additional documentation beyond the standard package. These items are not optional extras. Missing an industry-specific document in a regulated category is treated as a compliance gap, not a documentation delay.

For nutraceuticals and supplement businesses, Certificates of Analysis from an ISO-accredited laboratory for each product sold are increasingly required by acquiring banks. LegitScript certification has become a hard gate in 2026 for telehealth and GLP-1 adjacent businesses at many acquirers. For firearms dealers, a valid Federal Firearms License is required and must cover the specific activities described in the application. For CBD and hemp businesses, a current state hemp permit and Certificates of Analysis confirming THC content below 0.3 percent are standard requirements. For adult content businesses, age-verification system documentation and compliance with 18 USC 2257 record-keeping requirements are required. For cryptocurrency services, documented AML and KYC procedures are required by acquiring banks as a condition of underwriting.

How to Submit a Package That Passes First Review

The package that passes first review has three characteristics. Every document is bank-originated or government-issued rather than self-generated. Every name, entity reference, and financial figure is internally consistent across all documents. Every required item for the specific vertical is present before submission.

Submitting a partial package with a promise to follow up with missing items is consistently less effective than waiting to submit a complete package. The underwriter who reviews an incomplete file and moves it to a pending queue is not the same underwriter who picks it up three days later when the missing document arrives. Each interruption in the review adds time.

The complete overview of what acquiring banks assess when they read these documents, and what a strong versus weak file looks like to an underwriter, is in the what underwriters actually check guide in this cluster. The full picture of how merchant accounts work, including what happens after approval, is in the high-risk merchant accounts hub.

Frequently Asked Questions

What documents are required for a high-risk merchant account application?

The standard document package includes an EIN confirmation, articles of incorporation or organization, government-issued photo ID for all beneficial owners at 25 percent or more, three to six months of business bank statements as bank-originated PDFs, a voided check or bank letter for the settlement account, three to six months of prior processing statements if available, and a live website URL. Regulated verticals require additional industry-specific documents such as licenses, Certificates of Analysis, or age-verification documentation.

Do bank statements need to be originals for a merchant account application?

Bank statements must be bank-originated PDFs, not screenshots of online banking, photographs of paper statements, or self-generated summaries. Screenshots are routinely rejected at most acquirers on format grounds, regardless of whether the underlying numbers would have supported the application. The statements must show the legal business name matching the application.

What happens if processing statements show a high chargeback ratio?

A prior chargeback ratio above 1 percent requires explanation rather than concealment. Underwriters check prior processing history through multiple channels. A merchant who discloses a period of elevated chargebacks with a documented cause and evidence of current improvement is in a better position than one who omits the statements. Voluntary disclosure of a documented and resolved problem reads as operational maturity.

What industry-specific documents do regulated verticals need?

Nutraceuticals and supplements require Certificates of Analysis from ISO-accredited laboratories. Telehealth and GLP-1 businesses increasingly require LegitScript certification, which has become a hard gate at many acquirers in 2026. Firearms dealers require a valid Federal Firearms License. CBD and hemp businesses require state hemp permits and THC content Certificates of Analysis. Adult content businesses require age-verification system documentation and 2257 compliance records. Cryptocurrency services require documented AML and KYC procedures.