SEO Merchant Accounts and the Ranking Guarantee Problem

Search engine optimization is sold on a promise about something the seller does not control. An agency can rewrite pages, fix a site's technical problems, publish content and earn links, but where the site ranks is decided by a search engine. The client pays every month, often for months before the results show, and judges the work by a number in a report. When that number does not move the way the client was told it would, the next call is often to the client's card issuer rather than to the agency.

That is why acquiring banks look harder at SEO agencies, web design studios and hosting companies than the size of most of these businesses would suggest. This guide covers where these businesses sit in the card network rules, why the category carries a reputation that well-run agencies inherit, how a ranking promise turns into a dispute under Visa's rules, and what the network rules require when you bill retainers, renewals and website builds. The Visa material is from the Visa Core Rules and Visa Product and Service Rules dated 18 April 2026 and the Visa Merchant Data Standards Manual dated April 2026.

Where SEO, web design and hosting sit in the card rules

Every merchant account carries a merchant category code that tells the networks and issuers what the business sells. Visa's Merchant Data Standards Manual has no entry that names search engine optimization, so an acquirer places an agency under the closest description of what it actually does. Three codes come up most often:

• MCC 7311, Advertising Services. The manual describes merchants that prepare advertising, including copy, artwork, graphics and other creative work, and place it in media including the internet, for clients on a contract or fee basis. Agencies that sell content, campaigns and search marketing as a package often fit here.
• MCC 7372, Computer Programming, Data Processing, and Integrated Systems Design Services. The manual's description expressly includes website design, alongside programming and systems design.
• MCC 4816, Computer Network/Information Services. This code covers internet service providers and computer network and information services, and the manual lists website management and maintenance among the merchants included in it. Hosting and managed website plans tend to land here.

One detail matters for hosting companies. Visa lists MCC 4816 as a high integrity risk code only for card-absent sales of access to cyberlockers or remote digital file-sharing services. Mastercard's Security Rules and Procedures (4 August 2026) separately require acquirers to register high-risk cyberlocker merchants under MCC 4816, and define them by traits such as paying uploaders based on how often their files are downloaded and offering premium memberships for faster downloads rather than more storage. Ordinary website hosting is not that business, but a host that also sells file storage and sharing should expect an underwriter to ask which side of the line it is on.

How you sell matters as much as what you sell. Visa's MCC 5966, Direct Marketing – Outbound Telemarketing Merchant, covers merchants that sell using outbound telemarketing, where the merchant initiates contact with prospective buyers by telephone or by a mailing (other than a catalog) that tells the cardholder to contact the merchant. Visa lists it as a high integrity risk code for card-absent transactions. An agency that wins clients mainly by cold calling small businesses should tell its underwriter so up front, because the sales channel can change the code and the program the account is boarded under.

Why the category starts with a reputation

Legitimate agencies share a sales pitch, and a customer base of small business owners, with some of the most persistent small-business scams the Federal Trade Commission has pursued. One case shows how the pattern looks from a processor's side.

In May 2018 the FTC obtained a temporary restraining order in the U.S. District Court for the Southern District of Florida against a group of companies operating as Pointbreak Media. According to the FTC, robocalls told small business owners that Google would label their businesses "permanently closed" unless they spoke to a "Google specialist". Telemarketers then claimed to act for Google, promised first-place or first-page placement in search results, and charged a one-time fee of $300 to $700, followed by an upsell of $949.99 upfront plus recurring charges. The FTC alleged that after the defendants temporarily lost the ability to take card payments because of high chargeback rates, they took money, usually $100, from at least 250 customers' checking accounts without their advance knowledge, consent or authorization.

In May 2019 the FTC announced that the court had found the scheme's two principal operators liable on every count it alleged. The order bans them from telemarketing, from using remotely created checks to debit consumers' accounts, and from marketing, promoting or selling search optimization products, and sets a judgment of $3,367,666.30 against them. In August 2020 the FTC mailed refunds totalling more than $700,000 to 4,467 small business owners.

Google's own guidance for site owners speaks to the same tactics. Its Search Central page on hiring an SEO, last updated in June 2026, says plainly that no one can guarantee a #1 ranking on Google, warns against SEOs that claim a special relationship with Google or advertise a "priority submit", and tells owners to be wary of SEO firms and web consultants that email them out of the blue. An underwriter reading your sales page and your ads is looking for exactly those claims.

How a ranking promise becomes a chargeback

Most SEO and web design disputes are not about stolen cards. They are about a client who paid and feels they did not get what they were sold, and Visa handles those under its consumer dispute conditions. Our guide to coaching merchant accounts walks through the same conditions for another service business; what follows is how they apply to agency work.

Not as described

Visa's dispute condition 13.3, Not as Described or Defective Merchandise/Services, lets an issuer dispute a transaction when the services did not match what was described on the receipt or another record presented at the time of purchase, and also when the cardholder disputes the quality of the services received. For US domestic card-absent transactions, the rule adds that the merchant's verbal description or other documentation presented at the time of purchase can be the description the services are measured against.

That is where a ranking guarantee does its damage. "Page one in 90 days", said on a sales call or written in a proposal, becomes part of what the client bought. If the site is on page three at day 90, the client has a description the service did not match, and the agency has promised an outcome that, by Google's own account, nobody can guarantee. Promises about traffic, leads or revenue work the same way.

The rule also has limits that work in the merchant's favor. Before the issuer can file, the cardholder must try to resolve the dispute with the merchant and cancel the services, and for services already rendered must request a credit. The dispute amount is limited to the unused portion of a cancelled service. The issuer generally has 120 days from the processing date or from the date the services were received, with an alternative 60-day window where the cardholder was negotiating with the merchant, and never more than 540 days after processing. Unless a credit was already issued or the dispute is invalid, the acquirer's response must include evidence that the services matched what was described, including their described quality, and the merchant's rebuttal of the cardholder's claims.

Services not received

Condition 13.1, Merchandise/Services Not Received, covers a merchant that was unwilling or unable to provide the services. It is the condition behind the "they never did anything" complaint about a monthly retainer, and behind a website build that was paid for and never launched. A dispute must be processed within 120 days of either the processing date or the last date the cardholder expected to receive the services, capped at 540 days from processing. Visa treats a complaint about the quality of services as invalid under 13.1, which pushes quality complaints to 13.3, but an agency that cannot show what it delivered month by month is exposed under both.

Retainers, renewals and website builds

Agencies bill in more ways than most service businesses, and Visa's rules on stored credentials, recurring billing and advance payments (Section 5.8.11.1, Tables 5-20 and 5-21) apply to each of them differently.

• Before you store a card for future charges, you need the cardholder's express informed consent to an agreement that includes a description of the services, the total purchase price, your cancellation and refund policies, the amount of future charges or how it will be worked out, and their timing and frequency. Those terms must be clearly displayed when the client consents and shown separately from the general purchase terms, not buried inside them.
• Monthly retainers and hosting plans are recurring transactions. Visa requires a simple cancellation procedure, an online cancellation option if the client signed up online, and fixed dates or intervals for the charges. If a trial, introductory or promotional period is ending, you must notify the cardholder at least 7 days before the next charge, with the amount, the date and a simple way to cancel online or by text message.
• Charging a card after the client withdrew permission is the basis for dispute condition 13.2, Cancelled Recurring Transaction. The amount is limited to the unused portion of the service, but it is still a dispute on your account, and a cancellation request that sits unanswered in an inbox can become one.
• Full payment before the work is done is restricted. Visa allows an advance payment of the entire purchase amount before delivery only for certain merchant categories, including custom goods or services, and requires the terms to state when the goods or services will be delivered. A bespoke website build may fit that description, but confirm with your acquirer how a prepaid build or a prepaid six-month SEO package will be treated before you sell one.
• Visa's general requirements for these transaction types also say that the merchant must refund the full amount paid if it has not adhered to the terms and conditions of the sale or service. A no-refunds clause in your contract does not remove that requirement.

What an underwriter will ask an agency

Expect a careful acquirer to want a clear picture of what you sell, how you sell it and how you prove you delivered it:

• A description of each service line: SEO retainers, content, paid search management, website builds, hosting and maintenance plans, and anything sold to resellers or other agencies.
• Your contracts, proposals or statements of work, and the terms the client accepts before paying, including how cancellation and refunds work.
• Your pricing model: monthly retainers, setup fees, prepaid packages, annual hosting renewals, and the share of revenue billed upfront.
• How you find clients: inbound leads, referrals, partnerships, or outbound calls and emails, and the scripts or templates you use if you sell by phone.
• Your website and a sample of your ads and sales materials, which an underwriter will read for ranking guarantees, claims of a relationship with Google and income promises.
• Processing statements and your chargeback and refund history, if you have taken cards before.

Keeping agency disputes winnable

Most agency chargebacks are decided on documents the agency either kept or did not. These practices line up with the Visa conditions above:

1. Do not promise rankings, traffic or revenue, on the site, in proposals or on calls. Describe the work instead: the pages you will optimize, the content you will publish, the technical fixes you will make and how often you will report.
2. Put deliverables in a statement of work and have the client accept it before the first charge, with the cancellation and refund terms shown separately from the rest of the agreement.
3. Send a dated report every billing period that lists the work done that month. It is the record that answers a 13.1 claim that nothing was delivered and a 13.3 claim that the work was not what was sold.
4. For website builds, get written sign-off at each milestone and keep the staging links, change logs and launch confirmation.
5. Make cancelling a retainer or hosting plan as easy as signing up, stop billing on the date the client cancels, and confirm the cancellation in writing.
6. Send a reminder before an annual hosting or maintenance renewal even where Visa's 7-day notice rule does not require one. A client who forgot the renewal is a likely dispute.
7. Use a billing descriptor the client will recognize, so a renewal charge does not look like fraud on a statement. Our guide to billing descriptors covers how.

SEO and web design are high risk because the work is ongoing, the results are not the agency's to control, and the category is crowded with operators who promise otherwise. An application that shows plain sales claims, written deliverables, monthly evidence of work and a clean cancellation process gives an underwriter a reason to separate a real agency from that crowd. PayKings works with SEO companies, web design studios and hosting providers and can help you present that picture to an acquirer.