Home/Guides/High-risk industries list: why a bank marks a category
On this page
- Is there an official list of high-risk industries?
- Which categories do Visa and Mastercard flag?
- What did regulators say about industry lists?
- What makes a business high risk to a bank or processor?
- Does being on a list mean you can't get processing?
- How Break Free Finance helps
- Sources (last checked October 11, 2026)
Guides
High-risk industries list: why a bank marks a category
Last updated October 12, 2026
There is no single official list of high-risk industries. Visa and Mastercard flag specific categories for extra registration and monitoring. Regulators removed their example lists in 2014. Nacha's ACH limits aren't industry-based. Processors and banks publish their own restricted lists, and those differ. Your industry's risk depends on whose list you're on.
"High risk" isn't a legal category. It's whatever the institution in front of you says it is.
Is there an official list of high-risk industries?
No. There are several lists, written by different players for different reasons:
| Who | What they flag | Source |
|---|---|---|
| Visa | High integrity risk MCCs that need extra registration and monitoring | Merchant Data Standards Manual, Apr 2026 |
| Mastercard | Specialty merchant categories acquiring banks must register | Security Rules and Procedures, Ch. 9, Feb 11, 2025 |
| Nacha | None by industry. Limits are based on returns | Nacha |
| Regulators | No list. The FDIC removed its examples in 2014 | FDIC FIL-41-2014 |
| Processors and banks | Their own restricted and prohibited lists | e.g. Stripe |
Which categories do Visa and Mastercard flag?
Visa high integrity risk MCCs (card-absent): 5122 drugs, 5912 drug stores and pharmacies, 5966 outbound telemarketing, 5967 adult content and services, 5993 cigar stores, 7273 dating and escort services, 7995 betting. Plus certain transactions under 4816 (cyberlockers), 6211 (trading platforms), 5968 (negative option subscriptions), 5816 (skill game wagering) and 6051 and 6012 (crypto exchanges, wallets and on-ramps).
Mastercard specialty merchant registration: non-face-to-face adult content and services, non-face-to-face gambling, non-face-to-face pharmaceutical and tobacco sales, government-owned lotteries, skill games, certain cyberlockers, certain securities, crypto, and negative option billing. Mastercard charges the acquiring bank an annual USD 500 registration fee per merchant, and up to USD 10,000 for processing without registering.
What did regulators say about industry lists?
In 2013 the FDIC described higher-risk merchant activities and listed examples. In 2014 it removed those examples, saying they caused misunderstandings. It said banks that properly manage customer relationships are neither prohibited nor discouraged from serving lawful businesses (FIL-41-2014).
What makes a business high risk to a bank or processor?
The labels track exposure, not morality:
- Dispute and fraud exposure: card-absent sales, subscriptions, future delivery
- Legal exposure: licensing, age limits, health claims, state-by-state rules
- Network exposure: registration, monitoring and fines on the acquiring bank
- Brand exposure: the institution's own appetite
Does being on a list mean you can't get processing?
No. It means fewer institutions, more documents, and often a reserve. The question is which institutions serve your category and what they need. See high-risk merchant account requirements and industries we work with.
How Break Free Finance helps
We're not a bank, processor, or money transmitter. We structure the deal, build the file a bank can underwrite, and place it with institutions in our network: decades of relationships with 40+ financial institutions and solution providers. The institution makes the decision, and approval is never guaranteed. Talk to us.
Sources (last checked October 11, 2026)
- Mastercard Security Rules and Procedures, Merchant Edition (Feb 11, 2025), Ch. 9 Specialty Merchant Registration
- FDIC FIL-41-2014, FDIC Clarifying Supervisory Approach to Institutions Establishing Account Relationships with Third-Party Payment Processors
- FDIC FIL-43-2013, FDIC Supervisory Approach to Payment Processing Relationships With Merchant Customers That Engage in Higher-Risk Activities
- Nacha, ACH Network Risk and Enforcement Topics (return rate rule effective Sept 18, 2015)
- Stripe, Restricted Businesses list
- Visa Merchant Data Standards Manual (Apr 2026), high integrity risk MCCs
General information, not legal or compliance advice.
Sources
- Mastercard Security Rules and Procedures, Merchant Edition (Feb 11, 2025), Ch. 9 Specialty Merchant Registration · accessed 2026-10-11
- FDIC FIL-41-2014, FDIC Clarifying Supervisory Approach to Institutions Establishing Account Relationships with Third-Party Payment Processors · accessed 2026-10-11
- FDIC FIL-43-2013, FDIC Supervisory Approach to Payment Processing Relationships With Merchant Customers That Engage in Higher-Risk Activities · accessed 2026-10-11
- Nacha, ACH Network Risk and Enforcement Topics (return rate rule effective Sept 18, 2015) · accessed 2026-10-11
- Stripe, Restricted Businesses list · accessed 2026-10-11
- Visa Merchant Data Standards Manual (Apr 2026), high integrity risk MCCs · accessed 2026-10-11
What this means for your file
The facts above are what an underwriter can check. We use them to build the file and place it with an acquiring bank that already takes the MCC. The bank still decides.
How a file gets in front of an underwriter →Questions
Is there an official list of high-risk industries?
No single one. Card networks flag specific categories, and each processor and bank sets its own list. The FDIC removed its example list in 2014.
Which categories does Visa treat as high integrity risk?
Card-absent MCCs 5122, 5912, 5966, 5967, 5993, 7273 and 7995, plus certain transactions under 4816, 6211, 5968, 5816, 6051 and 6012, per Visa's April 2026 Merchant Data Standards Manual.
What is Mastercard specialty merchant registration?
Acquiring banks must register merchants in certain categories, like non-face-to-face adult content, gambling, pharmaceuticals and tobacco, skill games and crypto, before processing. Mastercard charges the acquiring bank USD 500 a year per registered merchant.
Does high risk mean illegal?
No. It means more fraud, dispute, legal or brand risk in the eyes of whoever drew the list. Plenty of lawful businesses are on someone's list.