Visa High-Risk Merchants: VIRP Registration, Fees & MCC List - PayKings

Visa does not bar high-risk merchants from its network. It requires them to be registered, monitored, and sponsored by an acquirer willing to vouch for their controls. That distinction matters: a high-risk classification is a set of obligations, not a refusal.

This guide covers how Visa classifies high-risk merchants under the Visa Integrity Risk Program (VIRP), which MCC codes trigger registration, what the annual fee involves, and how to get registered.

Who Are Visa High-Risk Merchants?

A Visa high-risk merchant is a business whose merchant category code (MCC), industry history, or transaction profile carries elevated financial, legal, or brand risk under Visa's rules. Classification comes down to four things:

• The MCC your acquirer assigns to your business
• Your industry's record of chargebacks, fraud, and regulatory scrutiny
• Your transaction profile: card-not-present sales, recurring billing, cross-border volume
• Exposure to illegal transactions or deceptive marketing

Common examples include outbound telemarketing, gambling, dating services, pharmaceuticals, and tobacco and vape. The designation does not stop you from accepting Visa. It means your acquiring bank must register you with Visa, apply enhanced due diligence, and show that effective controls are in place before — and while — you process.

VIRP Meaning: The Visa Integrity Risk Program

VIRP stands for Visa Integrity Risk Program. It is Visa's current framework for overseeing merchants in high-risk categories, and it replaced the Global Brand Protection Program (GBPP). The program documentation is written for acquiring banks, which is why most published VIRP guidance reads like compliance material rather than merchant advice.

For a merchant, VIRP reduces to three obligations:

• Registration. Your acquirer must register your business with Visa under the applicable high-integrity-risk MCC before you process.
• Annual fees. Registration carries an annual fee, which acquirers generally pass through to you.
• Demonstrable controls. Clear billing descriptors, transparent terms, age or geographic restrictions where relevant, and fraud and chargeback monitoring — verified through Periodic Control Assessments.

From High-Brand Risk to High Integrity Risk: GBPP to VIRP

Under the GBPP, flagged businesses were called high-brand risk (HBR) merchants, and acquirers completed high-brand risk registration before boarding them. If you are researching GBPP rules or the Global Brand Protection Program Guide for Acquirers today, VIRP is the framework that now applies. What changed:

• Terminology. High-brand risk became high integrity risk. The obligations — registration, fees, controls — carried over, and enforcement got stricter.
• Tiered MCCs. High-integrity-risk MCCs are grouped into tiers with escalating due-diligence and control requirements. Your acquirer confirms which tier applies to your business.
• Periodic Control Assessments. Visa now verifies on a recurring basis that merchants and their acquirers maintain the required controls and deter illegal transactions.
• Acquirer accountability. Acquirers face direct consequences for boarding non-compliant merchants, which is why underwriting in these categories is more demanding — and why many mainstream processors decline these MCCs outright.

Which MCC Codes Are High Risk Under VIRP?

Visa designates specific MCCs as high integrity risk. If your business operates under one, registration is mandatory. Commonly flagged codes include:

• MCC 5966 — Outbound telemarketing and direct marketing
• MCC 5967 — Inbound teleservices
• MCC 7995 — Betting and gambling, including off-track betting
• MCC 5122 / 5912 — Pharmaceuticals and drug stores
• MCC 5993 — Cigar and tobacco sales, with vape and e-cigarette sellers treated the same way
• MCC 7273 — Dating services

The list is not exhaustive. Visa maintains its designated MCCs in its rules and updates them, and your acquirer confirms the current designation and tier. If you are unsure which code describes your business, start with how merchant category codes work and how to check yours — miscoding is itself a compliance problem.

Visa's Prohibited Merchant List vs. Its High-Risk MCCs

These two get confused, and the difference decides whether you can process at all. High-integrity-risk MCCs cover legal businesses that Visa allows on its network once registered. Prohibited activity — illegal products or services, or transactions structured to disguise them — cannot be registered under any MCC. No fee or control framework makes an illegal sale acceptable to Visa. If your business is legal and licensed in the markets you sell to, you are on the registrable side of that line, even if a previous processor told you otherwise.

How Visa High-Risk Registration Works

Registration follows a predictable sequence once your MCC is confirmed as high integrity risk:

• 1. Underwriting and due diligence. Your acquirer collects corporate documents, licenses, processing history, and website disclosures to verify the business is legal and transparent.
• 2. Registration with Visa. The acquirer registers you under the applicable MCC. The annual registration fee applies and is typically passed through to you.
• 3. Control implementation. Billing descriptors, terms, age or geographic restrictions, and fraud and chargeback monitoring are set up to match Visa's expectations for your tier.
• 4. Ongoing monitoring. Periodic Control Assessments confirm the controls stay in place. Failures can trigger remediation demands, penalties for the acquirer, or account termination.

Two things are worth knowing before you start. First, Visa registration does not cover Mastercard, which operates its own program and charges Mastercard's high-risk registration fee separately. Second, because acquirers carry the compliance burden, the fastest path is a processor that already holds acquiring relationships for your MCC. Ask any processor to confirm your classification before you apply for a high-risk merchant account, so registration happens as part of onboarding rather than surfacing as a problem afterward.

What Is the Visa High-Risk Registration Fee?

Visa charges an annual registration fee for each registered high-risk merchant, and acquirers generally pass it through. Visa sets the amount in its rules and it can change, so treat any figure you find online as unverified until your processor confirms the current fee for your MCC. What you should expect from any processor is the fee named in writing before you sign, not after. That is how we work: Every fee is disclosed in the merchant service agreement before you sign.

High-Risk Business Industries That Require Registration

Beyond individual MCCs, these high risk business industries most often need Visa registration and specialized processing:

• Dating services — chargeback rates and brand exposure keep these merchants under scrutiny
• Tobacco, vape, and e-cigarettes — regulatory complexity, age verification, and cross-border sales drive the classification
• Outbound telemarketing and direct marketing — deceptive-marketing exposure puts MCC 5966 under Visa's strictest oversight
• Gambling and off-track betting — licensing and jurisdiction rules add layers of review
• Travel services — cancellations and refund disputes make travel a chronic chargeback category

See the full list of high-risk industries we work with.

Does Visa Publish a List of Its Merchants?

No. Visa does not publish the names of its merchants, high-risk or otherwise. The public directory people usually find — the Visa Global Registry of Service Providers — lists registered third-party service providers and agents, not merchants. If you want to know whether your own business needs registration, the MCC list above is the right place to look, and your acquirer confirms your designation.

Staying Registered: Controls That Pass Assessment

Registration gets you on the network. Controls keep you there.

• Descriptors and disclosures. Your billing descriptor, terms, and refund policy should match what the cardholder saw at checkout.
• Fraud screening. Velocity checks, address verification, and tooling matched to your card-not-present volume.
• Chargeback management. Sustained high ratios put your registration at risk. Learn the reason codes Visa attaches to every chargeback so you can fix root causes instead of only fighting disputes.

Why High-Risk Merchants Work With PayKings

High-risk is the only thing we do. We maintain an 86% approval rate, and every fee is disclosed in the merchant service agreement before you sign.

If you are comparing options, our framework for choosing a payment processor for a high-risk business covers the questions to ask any provider — including us.

Ready to process Visa payments in a high-risk category? Get started with PayKings.

FAQ: Visa High-Risk Merchants