Visa High-Risk Merchants: VIRP Rules, MCC List & Registration Requirements

If Visa classifies your business as high risk, the rules of payment processing change: your acquirer must register you with Visa, annual fees apply, and your operations face ongoing oversight. This guide explains how Visa defines high-risk merchants under the Visa Integrity Risk Program (VIRP) — the successor to the Global Brand Protection Program (GBPP) — which merchant category codes (MCCs) are on Visa’s high-risk list, how registration works, and how to keep processing without interruption.

What Is a Visa High-Risk Merchant?

Visa high-risk merchants are businesses flagged by Visa’s compliance framework as carrying heightened financial, legal, or reputational (brand) risk. Classification is driven by:

• The merchant category code (MCC) assigned to your business
• Your industry’s history of chargebacks, fraud, and regulatory scrutiny
• Transaction profile, including card-not-present sales, recurring billing, and cross-border volume
• Exposure to illegal transactions or deceptive marketing practices

A high-risk designation does not mean you cannot accept Visa. It means your acquiring bank must register your business with Visa, apply enhanced due diligence, and demonstrate that effective controls are in place before — and while — you process payments.

From GBPP to VIRP: Visa’s Evolving High-Risk Framework

Visa previously governed high-risk acceptance through the Global Brand Protection Program (GBPP), documented for acquiring banks in the Global Brand Protection Program Guide for Acquirers. Under the GBPP, flagged businesses were known as high-brand risk (HBR) merchants, and acquirers had to complete high-brand risk registration before boarding them.

Key Updates with VIRP:

1. Enhanced Oversight: VIRP introduces more rigorous oversight processes, including regular Periodic Control Assessments to ensure merchants comply with Visa’s standards and deter illegal transactions.
2. Merchant Category Codes (MCCs): High-risk MCCs, such as those associated with industries like telemarketing (MCC 5966) and escort services, now face stricter compliance requirements.
3. Annual Registration Fees: High-risk merchants must pay annual registration fees to maintain compliance and transparency within the Visa ecosystem.

Visa has since replaced the GBPP with the Visa Integrity Risk Program (VIRP). If you are researching GBPP rules or high-brand risk registration today, VIRP is the framework that now applies. Key updates include:

• Enhanced oversight: VIRP introduces more rigorous review, including Periodic Control Assessments that verify merchants and their acquirers maintain required controls and deter illegal transactions.
• Tiered high-integrity-risk MCCs: High-risk MCCs — for example, outbound telemarketing (MCC 5966) — are grouped into tiers with escalating due-diligence and control requirements. Your acquirer confirms which tier applies to your business.
• Annual registration fees: High-risk merchants must be registered with Visa and pay annual registration fees to remain in good standing.
• Acquirer accountability: Acquirers face direct consequences for boarding non-compliant merchants, which is why underwriting for high-risk MCCs is more demanding.

What This Means for High-Risk Merchants:

The practical takeaway: the terminology changed from high-brand risk to high integrity risk, but the obligations — registration, fees, and demonstrable controls — remain, and enforcement is stricter. Partnering with a high-risk payment processor like PayKings can simplify the transition and keep your business aligned with the latest Visa standards.

The Visa High-Risk Merchant List: MCCs Flagged Under VIRP

Visa does not publish a public list of high-risk company names. Instead, VIRP designates specific MCCs as high integrity risk; if your business operates under one of these codes, registration is mandatory. Commonly flagged categories include:

• MCC 5966 — Outbound telemarketing and direct marketing
• MCC 5967 — Inbound teleservices, including adult content
• MCC 7995 — Betting and gambling, including off-track betting
• MCC 5122 / 5912 — Pharmaceuticals and drug stores
• MCC 5993 — Cigar and tobacco sales (vape and e-cigarette sellers are also treated as high risk)
• MCC 7273 — Dating and escort services
• MCC 6051 — Quasi-cash and cryptocurrency merchants

This list is not exhaustive — Visa maintains and updates its designated MCCs in its rules, and your acquirer confirms current designations and the applicable tier. Note the distinction from prohibited activity: merchants selling illegal products or services cannot be registered at all.

Not sure whether your MCC is on the list? PayKings works with these categories daily and can confirm your classification before you apply for a high-risk merchant account.

Visa High-Risk Registration: How It Works

Registration follows a predictable sequence once your MCC is confirmed as high integrity risk:

• 1. Underwriting and due diligence. Your acquirer collects corporate documents, licenses, processing history, and website disclosures to verify your business is legal and transparent.
• 2. Registration with Visa. The acquirer registers your business under the applicable high-integrity-risk MCC; annual registration fees apply and are typically passed through to the merchant.
• 3. Control implementation. Expect requirements such as clear billing descriptors, transparent terms, age or geographic restrictions where relevant, and fraud and chargeback monitoring.
• 4. Ongoing monitoring. Under VIRP, Periodic Control Assessments confirm that controls stay in place. Failures can trigger remediation demands, penalties for the acquirer, or account termination.

Because acquirers carry the compliance burden, many mainstream processors simply decline high-risk MCCs. A processor that specializes in high-risk registration keeps approvals fast and compliant.

High-Risk Business Industries

Beyond specific MCCs, these high-risk business industries most often require Visa registration and specialized processing:

• Adult entertainment and dating services: High chargeback rates and brand risk keep these merchants under scrutiny.
• Tobacco, vape, and e-cigarette sales: Regulatory complexity, age verification, and cross-border transactions drive the classification.
• Outbound telemarketing and direct marketing: Deceptive-marketing exposure puts MCC 5966 under Visa’s strictest oversight.
• Gambling and off-track betting: Licensing and jurisdiction rules add layers of review.
• Cryptocurrency: Quasi-cash transactions carry elevated fraud and chargeback risk.
• Travel services: Cancellations and refund disputes make travel a chronic chargeback category.

PayKings supports these and dozens of other high-risk industries with underwriting relationships built for hard-to-place merchants.

Common Challenges for Visa High-Risk Merchants

High-risk businesses often struggle with:

1. Higher Transaction Fees: Payment processors often charge increased rates to offset the risks.
2. Chargebacks and Fraud: High chargeback rates can lead to penalties or account termination.
3. Reputational Risks: Non-compliance with Visa's guidelines can cause significant harm to the brand.
4. Complex Compliance Requirements: Navigating Visa’s compliance measures, such as those under the VIRP, can be overwhelming.

Acquirers price in registration costs and elevated risk, sustained high chargeback ratios can trigger penalties or account termination, and VIRP’s registration, control, and assessment requirements are difficult to navigate without specialist support.

How to Thrive as a Visa High-Risk Merchant

While challenges exist, high-risk businesses can flourish with the right strategies:

1. Partner with the Right Payment Processor

Collaborating with an experienced high-risk processor means compliance is handled as part of onboarding — not discovered after a violation. PayKings supports your account with:

• Advanced fraud prevention tools
• Real-time transaction monitoring
• Custom payment solutions built for your vertical

You can maintain compliance and streamline your payment processes.

2. Invest in Robust Controls

Implementing appropriate controls helps businesses pass Visa’s Periodic Control Assessments. These controls include:

• Multi-factor authentication for payments
• Tokenization to secure customer data

3. Understand Merchant Category Codes (MCCs)

Correct MCC assignment determines your registration obligations, and miscoding is itself a compliance problem. Visa’s high-risk MCCs — such as those for crypto merchants and off-track betting — demand stricter oversight, so partnering with experts who understand MCC nuances is vital.

4. Minimize Chargebacks

Chargebacks are a significant challenge for high-risk merchants, and sustained high ratios can put your registration at risk. Steps to reduce chargebacks include:

• Transparent pricing and terms
• Proactive customer communication
• Leveraging fraud detection tools

PayKings offers chargeback prevention and management services, enabling businesses to minimize risk and keep merchant accounts in good standing.

Why High-Risk Merchants Choose PayKings

PayKings specializes in high-risk merchant accounts, with a 86% approval rate and compliance tooling built around Visa’s requirements. From underwriting through Visa registration and ongoing VIRP oversight, our team manages the process on your behalf.

Benefits of Partnering with PayKings:

• Quick account approvals with no setup fees
• Industry-specific payment solutions for high-risk verticals
• Fraud and chargeback prevention tools built around VIRP control expectations

FAQ: Visa High-Risk Merchants

Ready to process Visa payments in a high-risk category? Get started with PayKings and get matched with an acquiring bank that understands your industry.