Payment processing for research peptides: what the bank underwrites

Why do processors keep shutting down peptide sellers?

Because their own rules, the FDA and brand owners all point the same way. Merchants describe it as "banned by all major platforms within about two weeks" (r/PaymentProcessing). The reasons are on the record:

• Platform rules. Stripe's prohibited list bans "incorrectly labeled research chemicals" and pseudo-pharmaceuticals or nutraceuticals "that are not safe or make harmful claims" (Stripe Prohibited and Restricted Businesses, updated Sep 22, 2026). Stripe's support FAQ allows research peptides only "as long as there are preventive measures in place to ensure these are not accessible to those who would purchase research chemicals for nonresearch purposes" (Stripe support FAQ). Adyen's prohibited list names "peptides, research chemicals" outright (Adyen). In the US, Shopify Payments runs on Stripe and PayPal (Shopify processor list). → Does Stripe allow peptides?
• The FDA reads your website. In 2026 warning letters the FDA disregarded "research use only" labels when the site showed human use. It treated bacteriostatic water sold alongside peptides as evidence, and cited a "peptide calculator" and "peptide guide" (Gram Peptides, Mar 31, 2026; PekCura Labs, Mar 31, 2026; Royal Peptides, Aug 24, 2026). Underwriters read the same pages.
• Brand owners are pushing payment companies. On Aug 12, 2026 Eli Lilly announced six lawsuits and called on "credit card companies, payment processors" to cut off sellers (Lilly press release). Mastercard's BRAM program opens investigations from "intellectual property rights holder" referrals, and can assess the acquiring bank USD 200,000, or USD 2,500 per day retroactive, per merchant (Mastercard SPME §8.8, Feb 11, 2025). That cost is why banks screen hard.

Who will give a peptide store a high-risk merchant account?

A bank that knowingly underwrites research-use-only sellers, and only for a business it can understand and monitor: an honest research-use-only site, a known supplier, a clear customer base, and a clean history. Visa treats card-absent sales under MCCs 5122 and 5912 as high-integrity risk and requires the acquiring bank to register those merchants and meet capital requirements (Visa Core Rules §1.9.5.1, Apr 18, 2026). Regulators expect banks to make sure they are "not facilitating fraudulent or other illegal activity" (FDIC FIL-43-2013). So the file has to answer every question before it's asked:

1. A real research-use-only site. RUO statements on product pages, cart and invoices. No dosing, no "protocols," no calculators, no human-use testimonials, no bacteriostatic water bundled with peptides: the exact things the FDA letters cite. Honest product names, too. FDA letters quote renamed products like "GLP-3 RT (Retatrutide) Research Peptide" (NuScience Peptides, Aug 24, 2026) and "GLP-3-R" (PekCura Labs).
2. Certificates of analysis for each product, ideally by lot.
3. Entity documents. Formation documents, EIN, ID for the principal owners, and a business bank account in the company's name. Mastercard requires acquiring banks to verify the business and its principal owners and check MATCH before signing you (SPME §7.1.1). → Banking for high-risk businesses
4. Statements. Recent processing statements if you've processed before, plus business bank statements. Startups should expect to show whatever revenue evidence they have; each bank sets its own list.
5. Supplier records. A contract or invoices from your manufacturer or importer.
6. B2B evidence, if you have it. Lab, institution or reseller customers, invoices, purchase orders, buyer verification.
7. Your history, disclosed. Every prior processor and why it ended. Mastercard requires acquiring banks to collect that statement (SPME §7.1.2).
8. Checkout basics. Customer-service contact and merchant country on the checkout page itself: Visa says "a link to a separate web page does not meet this requirement" (Visa Core Rules §5.8.4.1). Clear refund and shipping policies.

Full checklist: High-risk merchant account requirements.

What are the options for taking cards?

How much does peptide payment processing cost?

The bank sets the rate and any reserve after underwriting, so expect a reserve at first. Merchants describe offers like "25% reserves, almost 5 % processing fees" (r/PaymentProcessing). Bank examiners name reserves and delayed settlement as standard controls for higher-risk merchants (OCC Merchant Processing handbook). Negotiate the reserve before you sign → Rolling reserves.

Which MCC do peptide sellers use?

The acquiring bank assigns it, and it has to describe what you actually sell. Visa's high-integrity list covers card-absent sales under 5122 (drugs, drug proprietaries and druggist sundries) and 5912 (drug stores and pharmacies) (Visa Core Rules §1.9.5.1). Don't ask for a code that hides what you sell: inaccurate data, MCC included, is MATCH reason code 10 (SPME §11.14.1).

Do I need LegitScript to sell research peptides?

Not as a rule. LegitScript's certification programs cover addiction treatment, healthcare merchants and CBD (LegitScript certification); research-use-only peptides aren't one of its listed programs. Some banks ask for it anyway, so ask the bank what it requires.

Why do peptide merchant accounts still get shut down?

Usually the bank's monitoring catches something new. Merchants put it as "freeze the balance the second their risk team clocks what I sell" (r/PaymentProcessing). What banks watch:

• Daily activity. Visa requires acquiring banks to set a baseline for high-integrity-risk merchants and monitor daily from day 31 (Visa Core Rules §10.4.5.2).
• Your website. Mastercard's Merchant Monitoring Program describes monitoring "the Merchant and all URLs," including members-only areas (SPME §8.9). Change your site after approval and the bank can see it.
• Chargebacks. Visa's merchant "Excessive" threshold in the US is 1.5% for card-not-present sales, and its acquiring-bank portfolio thresholds start at 0.5% (Visa VAMP fact sheet). Your bank acts long before you reach 1.5%. → Chargeback ratio thresholds
• Concentration. The OCC tells banks to set limits on high-risk merchant concentrations (OCC Merchant Processing handbook). A bank at its limit can exit a whole vertical, which is why a second rail matters.

How do I set up peptide payment processing, step by step?

Fix the site, build the file, then apply with full disclosure to a bank that knowingly underwrites RUO. In order:

1. Audit your site first. Strip human-use content, BAC water bundles, dosing tools and renamed GLP products. Add RUO statements, COAs, checkout contact details and policies.
2. Decide what you are. Research or B2B supplier, or consumer store? Underwrite the business you actually run.
3. Build the file (list above) before you apply anywhere.
4. Apply with full disclosure to a bank that knowingly underwrites RUO.
5. Ask before you sign: Who is the acquiring bank, and has it reviewed my actual site? What MCC? What reserve, held how long, released how? What happens to the reserve if the account ends? What will my descriptor say? Get the answers in the contract.
6. Keep a second rail ready, like ACH or a second disclosed account.
7. Run it clean. Visa tells card-absent merchants not to deposit receipts until the goods ship (Visa Dispute Management Guidelines). Answer customers fast; refund before they dispute.

What do sellers report?

The same story in many forms: "through no less than 12 processors" (r/PaymentProcessing), "our acceptance rate is sitting at 15% this month" (r/PaymentProcessing), and "All legal federally or in most states. But effectively unbankable through normal channels." (r/fintech). Those are merchants' words, not statistics. The fix they point to is the same: a bank that approved you for what you actually sell.

What gets peptide accounts terminated?

• Processing peptides through a "clean" site or another company's account. That's misrepresentation, not a workaround.
• Renaming products to slip past keyword filters. The FDA letters quote renamed products by name.
• Sending a large deposit to an aggregator you can't verify.
• Treating a verbal approval as an approval. As one merchant put it, "verbal approval means nothing" (r/PaymentProcessing). Only a signed agreement with a named bank counts.
• Opening a new company to get past a closure. The FTC's order against Paddle bans using shell companies to apply for additional merchant accounts (FTC v. Paddle order).

How Break Free Finance helps

We don't process payments and we don't publish rates. We connect RUO peptide sellers with banks that underwrite disclosed research-use-only merchants, drawing on decades of relationships with 40+ financial institutions and solution providers, and we'll tell you what your file is missing before a bank sees it. Send us your site. Every account is subject to the bank's underwriting; no approval is guaranteed.

Sources (last checked October 10, 2026)

• Stripe, Prohibited and Restricted Businesses (updated Sep 22, 2026)
• Stripe support, Prohibited and restricted businesses FAQ (checked Oct 10, 2026)
• Adyen, Restricted and prohibited products and services
• Shopify, Payment processors for Shopify Payments
• FDA warning letter, Gram Peptides (Mar 31, 2026)
• FDA warning letter, PekCura Labs (Mar 31, 2026)
• FDA warning letter, Royal Peptides (Aug 24, 2026)
• FDA warning letter, NuScience Peptides (Aug 24, 2026)
• Eli Lilly press release (Aug 12, 2026)
• Visa Core Rules and Visa Product and Service Rules (Apr 18, 2026)
• Visa Acquirer Monitoring Program fact sheet (2025)
• Visa Dispute Management Guidelines for Merchants (2024)
• Mastercard Security Rules and Procedures, Merchant Edition (Feb 11, 2025)
• FDIC FIL-43-2013
• OCC Comptroller's Handbook, Merchant Processing
• FTC v. Paddle, stipulated order (2025)
• LegitScript certification programs
• Merchant quotes (language only, not facts): Reddit threads linked inline

General information, not legal or compliance advice.