Gregg Morrow

Stripe, PayPal, Square and Shopify Payments do not give US CBD sellers a dependable way to take cards in November 2026. Stripe treats CBD as a restricted business that needs its approval, PayPal bars products it sees as a consumer safety risk, Square’s current terms prohibit cannabinoid products, and Shopify Payments follows its processors’ lists.

If your account was just closed, or you want to move before it is, apply for a CBD merchant account through Paymotile. It is free to apply. Paymotile is not a bank or processor: it matches sellers with processors and acquiring banks that underwrite CBD on purpose.

Every policy below was read on each company’s own legal pages on November 10, 2026. For the general playbook that applies to any industry, see what to do when Stripe, PayPal or Square closes your account. This guide covers only what is specific to CBD, hemp and supplements.

Does Stripe allow CBD?

Only with Stripe’s approval, and not for every product. Stripe’s list, last updated September 22, 2026, puts low-THC CBD under restricted businesses that need extra due diligence. It prohibits CBD products above the local legal THC limit, including CBD edibles. Stripe’s own FAQ adds that support is limited to licensed users in specific countries.

The restricted entry reads “CBD products containing only negligible amounts of THC, per local limits” (Stripe). Restricted does not mean allowed: Stripe says it might not grant approval, and any approval can be modified or revoked later.

The companion FAQ is blunter: Stripe’s restrictions cover products with CBD or THC in them, and it supports only limited sales to licensed users in specific countries (Stripe Support). The FAQ does not name those countries, so a US store should not assume it qualifies. A seller who removes every unsupported item can ask Stripe for a second look.

Supplement sellers have a separate line to watch. Stripe prohibits pseudo-pharmaceuticals and nutraceuticals that are not safe or that make harmful claims.

What is PayPal’s CBD policy?

PayPal’s Acceptable Use Policy, last updated November 4, 2026, never mentions CBD or hemp by name. It bans transactions involving narcotics, certain controlled substances and products PayPal believes put consumers at risk, and it has no approval category for CBD. That leaves the decision to PayPal’s discretion, with no published route to pre-approval.

The clause that matters covers narcotics, steroids, certain controlled substances or “other products that present a risk to consumer safety” (PayPal). The same policy lists 18 categories that can be pre-approved, including alcohol and non-cigarette tobacco. CBD, hemp and dietary supplements are not among them.

The practical reading: there is no form a CBD seller can file to get written permission. An account may run until a review, and if PayPal decides the products fall under the consumer safety clause, the User Agreement lets it limit or close the account.

Is Square’s CBD program still open?

No. Square emailed CBD sellers on August 7, 2026 that CBD and hemp-derived products would no longer be permitted, and told them to remove those items from their catalogs by October 15, 2026. Seller accounts stay open for other products. Square’s Payment Terms dated November 6, 2026 now list cannabinoid products as prohibited.

Square’s email, as reported by Marijuana Moment, tied the change to the new federal hemp definition. Square’s CBD program help article now redirects to its support home page.

The new item bars “products containing CBD, THC, or other cannabinoids” (Square). Compare it with Square’s archived Payment Terms, where the list stopped one item short.

Square used to be the mainstream exception: sellers applied to a CBD program and were reviewed before processing. Guides that still send you there describe terms that have been replaced. If you sell CBD alongside other goods on Square, read the current terms and any notice Square sent you.

Does Shopify Payments allow CBD?

Shopify lets US stores list hemp-derived CBD if they meet its hemp requirements. Shopify Payments is a separate question. Its terms say prohibited and restricted business types are set by each country’s payment processor, and for the United States Shopify names Stripe and PayPal. Their CBD rules, described above, decide whether you get paid.

Shopify’s requirements for US hemp sellers are a set of compliance statements (Shopify Help Center). The merchant confirms that:

• the store has every required state and local license and operates where online hemp sales are legal;
• products hold no more than 0.3% THC on a dry weight basis, or less where state or local law requires;
• products are tested, labeled and marketed under all federal, state and local law, and are legal everywhere they ship;
• nothing is marketed with medicinal, disease-related or therapeutic claims unless the FDA has approved the claim.

Meeting those statements covers the storefront, not card processing. The Shopify Payments terms point to the Payment Processor List for the business types each processor prohibits or restricts. The usual fix is to keep the storefront and connect a third-party gateway tied to a CBD merchant account.

How do Stripe, PayPal, Square and Shopify compare on CBD?

None of the four publishes a clear yes for US CBD sellers. Stripe requires approval and bans edibles. PayPal’s policy is silent on CBD and has no approval category. Square’s terms now prohibit cannabinoid products. Shopify allows the storefront, but Shopify Payments applies Stripe’s and PayPal’s rules.

Platform	What the published policy says about CBD	Can you get approved?	Policy date
Stripe	Restricted: CBD with negligible THC. Prohibited: CBD over the local THC limit, CBD edibles	Case by case. Stripe may decline, and approval can be revoked	September 22, 2026
PayPal	CBD is not named. Bans controlled substances and products that present a consumer safety risk	No pre-approval category covers CBD	November 4, 2026
Square	Prohibited: products containing CBD, THC or other cannabinoids	No. The earlier CBD program article is no longer published	November 6, 2026
Shopify Payments	Defers to the processor’s prohibited and restricted lists (Stripe and PayPal in the US)	Storefront: yes, with the hemp requirements. Payments: follows the processor	Read November 10, 2026

What happens to your held funds after a CBD closure?

Each platform’s terms let it keep your balance after closing the account to cover refunds and chargebacks. Stripe typically pauses payouts for 120 days and then reviews. PayPal can hold a balance for up to 180 days. Square and Shopify Payments set reserve terms at their own discretion, with no fixed end date.

Platform	What the terms allow	Where it is written
Stripe	Payouts typically paused for 120 days from the first notice, then a formal review that can release, keep holding or cancel the balance	Unacceptable Risk Policy
PayPal	Balance held “for up to 180 days” after an Acceptable Use Policy violation, and longer under a court order or regulation	User Agreement
Square	May delay payouts or require a reserve in an amount it reasonably determines. No time limit is stated	Payment Terms, section 14
Shopify Payments	Sets reserve terms at its discretion and may hold up to the full amount of a transaction	Shopify Payments terms

A closure for a prohibited product is a policy violation, so plan your cash as if the money will arrive late. Lost disputes come out of the held balance, so keep answering them. Our guide to merchant account reserves explains how holds and releases work.

What should a CBD seller do in the first 48 hours?

Save your records, read the notice for the exact policy cited, keep serving customers, and start a CBD merchant account application the same day. Do not open a second account on the same platform or relabel products to hide the CBD. Platforms link accounts, and a second closure can extend the hold.

1. Export everything. Transactions, payouts, customer and subscription lists, dispute records and three to six months of processing statements.
2. Save the notice. Note the policy it cites and the date. A new underwriter will ask why the account closed.
3. Pause recurring billing. Tell subscribers what is happening before auto-ship charges fail.
4. Ask about the balance in writing. Request the hold period, the review date and what documents would support an earlier release.
5. Keep fulfilling orders and answering disputes. Refund what you cannot ship.
6. Pull your compliance file together. Current lab reports, label photos, product list and the states you ship to.
7. Apply for a CBD merchant account now. Recent statements lose value as they age. Be honest about the closure.

A platform closure is not the same as a MATCH list entry.

What does a CBD-friendly processor ask for?

A CBD-friendly processor wants proof that every product is legal hemp, honestly labeled and sold only where allowed. Expect to provide a certificate of analysis for each product, labels and web copy with no disease claims, an age gate, shipping blocks for restricted states, and clear refund and subscription terms.

Requirement	What to provide	Why it matters
Certificates of analysis (COAs)	Recent third-party lab reports per product and batch, with total THC and THC per container	Shows each product meets the hemp definition, including the new per-container cap
Labels and claims	Label photos and every product page, with no claim to treat, cure or prevent a disease	Underwriters decline files that make disease claims
Age gate	An age check on the site and the method you use to verify age	States set different minimum ages for hemp products
Shipping blocks	The states you ship to and the ones your checkout blocks	Some states restrict or ban certain hemp products
Billing terms	Refund, shipping and auto-ship terms shown before checkout	Unclear recurring billing drives disputes
Business and history	Owner ID, business registration, bank and processing statements, the closure notice	Shows who stands behind the account

Supplement sellers get the same scrutiny. The FDA’s position is that CBD cannot be sold as a dietary supplement (FDA), so capsules and gummies get closer review than topicals. The full checklist by product type is on our CBD merchant account page. Brands without CBD should start with the nutraceutical merchant account page.

How does the federal hemp definition change affect CBD payments?

It shrinks what counts as hemp, and every policy above leans on that definition. Most of the change takes effect December 11, 2026. Cannabinoids the plant cannot naturally produce lose hemp status on November 12, 2026. From December 11, a final product with more than 0.4 mg of combined THC per container is not hemp.

A November 2025 appropriations law narrowed the definition. According to the FDA, hemp will exclude cannabinoids the plant cannot naturally produce, cannabinoids synthesized or manufactured outside the plant, and final products with more than 0.4 milligrams per container of combined THC and similar cannabinoids.

The change was set for November 12, 2026. H.R. 6500, the funding law signed on September 2, 2026 (The White House), moved the effective date to December 11, 2026, but kept November 12 for cannabinoids that are not capable of being naturally produced by the plant (Foley Hoag). That analysis lists full-spectrum CBD among the products the cap reaches.

Why this matters for payments: Stripe’s rule turns on local THC limits and Shopify’s statements require compliance with federal law. A tincture that passed at 0.3% by dry weight can still exceed 0.4 mg per container, so ask your lab for THC per container on every product now. Congress could change the rules again, so check the current status before you plan inventory.

What will a CBD merchant account cost, and how long does it take?

Through Paymotile, typical high-risk rates run 3.25% to 3.99% in 2026. A rolling reserve of 5% to 10% of sales is common and is held about 90 to 180 days before release. Typical approval takes about 5 to 10 business days once your application is complete. It is free to apply.

In return you get a bank that approved CBD knowingly. You still have to stay inside card network limits. Since April 1, 2026, Visa labels a US merchant “Excessive” at a 1.5% ratio of fraud reports plus disputes to settled card-not-present transactions, with at least 1,500 of them in a month (Visa). See our VAMP threshold guide and chargeback prevention page.

How do you apply through Paymotile?

You fill out one free application. Paymotile reviews your products, site and closure history, matches you with processors and acquiring banks that underwrite CBD or supplements, and helps you fix gaps before the file reaches underwriting. Approval is never guaranteed, and the bank makes the final decision.

1. Tell us what you sell. Products, sales channels, monthly volume and which platform closed you. Start here or call (888) 542-4147.
2. Send your documents. COAs, label photos, owner ID, business registration, bank and processing statements.
3. Clean up the site. Remove disease claims, link COAs, add the age gate and shipping blocks.
4. Get matched. Your file goes to the processors and banks most likely to approve your product mix.
5. Review terms and connect. Compare rate, reserve and contract length, then connect the gateway. Our guide to high-risk merchant account setup covers the details.

CBD payment processing FAQs

Does Stripe allow CBD in the United States?

Not by default. Stripe lists low-THC CBD as a restricted business that needs its approval, prohibits CBD edibles, and says in its FAQ that it supports only limited sales to licensed users in specific countries.

Does Square still have a CBD program?

Square’s Payment Terms in effect since November 6, 2026 prohibit products containing CBD, THC or other cannabinoids, and its CBD program help article now redirects to the support home page. Check Square’s terms for the current wording.

Will PayPal give my money back after closing a CBD account?

Usually, less refunds, chargebacks and fees. PayPal’s User Agreement allows a hold of up to 180 days, and longer if a court order or regulation requires it.

Can I get a merchant account after Stripe or PayPal closed me for CBD?

Often, yes. A closure for product type is a common reason sellers move to a high-risk account. See all high-risk merchant account options.

This guide is general information about payment processing, not legal advice. Confirm your obligations with a licensed attorney.

Sources

Statistics and legal references in this guide come from the sources below. We review them regularly and update the page when newer data is published.

1. Stripe, Prohibited and Restricted Businesses (September 22, 2026).
2. Stripe Support, Prohibited and Restricted Businesses List: FAQs (accessed November 10, 2026).
3. Stripe, Stripe Unacceptable Risk Policy (July 29, 2026).
4. PayPal, Acceptable Use Policy (November 4, 2026).
5. PayPal, PayPal User Agreement (November 4, 2026).
6. Square, Payment Terms (November 6, 2026).
7. Square, Payment Terms, archived version (July 30, 2026).
8. Shopify Help Center, Requirements for selling hemp and hemp-derived products in the United States (US) (accessed November 10, 2026).
9. Shopify, Shopify Payments Terms of Service (accessed November 10, 2026).
10. Shopify, Payment Processor List (accessed November 10, 2026).
11. U.S. Food and Drug Administration, Hemp-Derived Cannabidiol Products in Medical Research Models (April 1, 2026).
12. The White House, Congressional Bill H.R. 6500 Signed into Law (September 2, 2026).
13. Foley Hoag LLP, A Temporary Reprieve for Hemp-THC Products… But what now? (September 15, 2026).
14. U.S. Food and Drug Administration, FDA Regulation of Cannabis and Cannabis-Derived Products, Including Cannabidiol (CBD) (July 16, 2024).
15. Visa, Visa Acquirer Monitoring Program Overview (May 2025).
16. Marijuana Moment, Square Tells Businesses To Stop Selling Hemp And CBD Products In Light Of Upcoming Federal Ban (August 7, 2026).

Stripe does not allow adult content. Its Prohibited Businesses list names adult content and services, including pornography, adult live chat and AI-generated adult content. PayPal requires pre-approval for digital adult content, and Square’s terms bar adult entertainment. Adult merchants need a merchant account from an acquiring bank that registers adult businesses with Visa and Mastercard.

Apply free with Paymotile to be matched with processors and acquiring banks that underwrite adult businesses.

This guide is for adult merchants: creators, clip and membership sites, cam platforms and adult stores. Policy wording was checked against each company’s live terms on November 10, 2026. For the general playbook, see what to do when Stripe, PayPal or Square closes your account.

Does Stripe allow adult content?

No. Stripe’s Prohibited and Restricted Businesses list, last updated September 22, 2026, places adult content and services in the prohibited group, not the restricted group that can be approved after extra review. The entry covers pornography, adult services, adult live chat, adult video stores, strip clubs and AI-generated content that meets the same description.

Stripe describes restricted businesses as categories that need additional due diligence, so approval is possible. Prohibited businesses cannot use Stripe at all (Stripe).

Three details from the list catch adult merchants out:

• Selling on your own site does not exempt you. Stripe says individual creators who distribute their own content do not need preapproval, but they must still follow the list, and it uses the ban on selling adult content as its example.
• The definition turns on purpose. The entry covers literature, imagery and other media designed for sexual gratification, so written erotica is inside it.
• AI content is named. AI-generated material that fits the adult description is prohibited in the same way as filmed content.

Physical products are less clear. The main list does not name sex toys or lingerie, although the Brazil and India sections prohibit sex accessories. Get Stripe’s answer in writing before you build a store on it.

What does PayPal’s adult content policy say?

PayPal’s Acceptable Use Policy, last updated November 4, 2026, handles adult businesses in two places. It prohibits transactions for certain sexually oriented materials or services and for items considered obscene. It also lists Mature Audience Content, meaning adult content delivered digitally such as video on demand and webcams, as an activity that requires PayPal’s pre-approval.

In practice, a digital adult seller who has not been pre-approved is already outside the policy, because the policy also prohibits any activity that needs pre-approval when that approval was never obtained. PayPal adds that it may be restricted from processing payments in certain jurisdictions for adult DVDs, magazines and other adult themed products or services (PayPal).

The policy does not publish approval criteria and directs businesses that need pre-approval to PayPal’s sales team. Without written approval, treat every adult sale through PayPal as a closure risk.

Does Square allow adult businesses?

No. Square’s Payment Terms, last updated November 6, 2026, list the business types that may not use its payment services. Item 22 covers adult entertainment in any medium, including internet, telephone and printed material. Item 27 covers escort services. The terms contain no pre-approval route for either category.

The exact wording of item 22 is “adult entertainment oriented products or services” (Square). That wording reaches products as well as content, so adult stores and clubs should read it before relying on a Square reader.

Platform	Where adult content sits	Can it be approved?	Policy last updated
Stripe	Prohibited Businesses list: adult content and services, including AI-generated content	No. Prohibited, not restricted	September 22, 2026
PayPal	Acceptable Use Policy: certain sexually oriented materials or services are prohibited. Digital Mature Audience Content needs pre-approval	Only with pre-approval from PayPal	November 4, 2026
Square	Payment Terms, prohibited items 22 (adult entertainment) and 27 (escort services)	No route in the terms	November 6, 2026

What happens to your money after an adult content closure?

Each platform’s terms let it keep your balance for a period to cover refunds and chargebacks. Stripe typically pauses payouts for 120 days under its Unacceptable Risk Policy. PayPal can hold a balance for up to 180 days, including when you violated its Acceptable Use Policy. Square’s terms set no fixed period.

Platform	What the published terms say about held funds	What can happen at the end
Stripe	For accounts handled under the Unacceptable Risk Policy, payouts are typically paused for 120 days from the first notice email. Refunds and disputes are paid from the balance during that time	A formal review can release the balance, keep holding it or cancel the payout. Stripe notes the balance can reach zero
PayPal	May hold the balance for up to 180 days if reasonably needed to protect against liability or if you violated the Acceptable Use Policy	The hold can run longer under court orders, regulatory requirements or other legal process
Square	May require a reserve for any reason related to your use of the services, in an amount it reasonably determines. No time limit is stated	Funds in custody at closure are paid out on the payout schedule, but Square may keep holding them while an investigation is pending

Sources: Stripe’s Unacceptable Risk Policy (last updated July 29, 2026), the PayPal User Agreement (last updated November 4, 2026) and Square’s Payment Terms.

Subscription sites keep producing refund requests and disputes after billing stops, and those are paid out of the held balance. Your notice states which policy applies, so read it before you assume a release date.

What should you do in the first 48 hours?

Stop sending adult sales through the closed platform, save your data, keep answering refunds and disputes, and start an application with an adult-friendly acquirer the same day. Do not open a second account or relabel your products. A prohibited category will not be reinstated on appeal, so time spent arguing is time without payments.

1. Switch off checkout on that platform. Every new sale adds to a balance you cannot withdraw.
2. Export everything. Download transactions, payouts, subscriber lists, dispute records and the closure notice. A new underwriter will ask for recent processing history.
3. Record the balance. Screenshot the held amount and note the date of the first notice email, since Stripe’s 120 days run from it.
4. Keep serving customers. Answer support requests and respond to disputes. Unanswered disputes drain the held balance.
5. Do not disguise the business. Opening a new account under another name or describing adult content as something else is the fastest way to a permanent ban. Visa says it uses AI tools to detect merchants that conceal the true nature of their business, and reports a 5x increase in acquirer remediation and terminations for merchant noncompliance between 2020 and 2024 (Visa).
6. Ask whether you were reported. Find out in writing whether the closure was added to a terminated merchant file. See what the MATCH list is.
7. Apply for an adult merchant account. Approval takes days, not minutes, so start now.

Why do Stripe, PayPal and Square turn adult merchants away?

They board thousands of businesses under shared accounts with light upfront review, and adult content does not fit that model. Visa and Mastercard require the acquiring bank to register adult merchants, verify performer age and consent, and monitor content. Visa classifies the category under its own code, MCC 5967 (Adult Content and Services).

Visa says adult content merchants go through an enhanced registration process and are subject to closer performance monitoring (Visa). The October 2026 Visa Core Rules go further. An acquirer must not accept cards for adult content under MCC 5967 when the merchant does not meet the adult requirements in the Visa Integrity Risk Program Guide, and the merchant agreement itself must contain those provisions (Visa Core Rules).

Disputes are the second reason. In the US, the same rules say that 3-D Secure transactions from MCC 5967 merchants are not eligible for dispute protection against card-absent fraud claims. Visa’s monitoring program also treats a US merchant as excessive at a 1.5% ratio of fraud reports plus disputes with at least 1,500 cases in a month (Visa). See our guide to the Visa VAMP threshold.

What does an adult-friendly acquirer require?

Expect to show four things: age and identity records for every performer, a way to keep minors out, a content review and complaint process that meets Visa and Mastercard standards, and clean billing. An acquirer has to certify these controls to the card networks, so it will ask for written policies and proof before approval.

Requirement	Where it comes from	What to have ready
Performer records	18 U.S.C. 2257 and 28 CFR Part 75: producers of actual sexually explicit visual content must keep identifiable records for every performer, based on an ID showing name and date of birth	Custodian of records statement, ID and release for each performer, a records location
Age and identity verification of people depicted and uploaders	Mastercard adult content requirements. Visa also requires age and consent verification records	Verification vendor or process, sample records, creator onboarding steps
Review before publication	Mastercard: a content review process prior to publication	Moderation policy, who reviews, how live streams are monitored
Complaints and takedowns	Mastercard: resolve complaints about illegal or nonconsensual content within seven business days, plus an appeals process for anyone depicted. Visa: resolve within five business days and remove illegal content immediately	Public reporting form, takedown log, response times
Viewer age checks	State laws. The Supreme Court upheld the Texas age-verification law, H.B. 1181, on June 27, 2025	Age-verification method and the states you serve or block
Clear billing	Acquirer underwriting and card network dispute monitoring	Recognizable descriptor, visible terms, simple cancellation, refund policy

The Mastercard items come from its announcement of expanded Specialty Merchant Registration requirements, under which banks certify that an adult seller has controls to monitor, block and take down illegal content (Mastercard). The Visa items come from its Network Integrity page, which also says acquirers that support adult content merchants must register with Visa and regularly confirm that their merchants comply (Visa).

The federal record rule is 18 U.S.C. 2257, with the detail in 28 CFR Part 75. The age-verification ruling is Free Speech Coalition v. Paxton. For site-level detail, see how to get a porn site merchant account.

Underwriters also review the standard file: government ID for each owner, business registration documents, a voided check or bank letter, recent bank statements and any processing statements you exported. Include the closure notice.

What do adult merchant accounts cost, and will there be a reserve?

Adult merchant account rates through Paymotile typically run 2.95% to 5% per transaction in 2026, depending on volume, billing model and chargeback history. Most adult approvals include a rolling reserve, often 5% to 10% of sales, held about 90 to 180 days and then released on a schedule.

A reserve is not a platform hold. It is a disclosed percentage in your merchant agreement with a stated release schedule. Our merchant account reserve guide explains the types and release terms.

How do you move to an adult merchant account through Paymotile?

Paymotile is a high-risk merchant account agent, not a bank. You apply free, and Paymotile matches your file with processors and acquiring banks that register adult merchants. Typical approval takes about 5 to 10 business days once the application is complete, so begin while your old balance is still on hold.

1. Apply online. Complete the free application or call (888) 542-4147. Say plainly what you sell.
2. Send your file. Owner ID, business documents, bank statements, exported processing history, the closure notice and your compliance policies.
3. Website review. Underwriters check your terms, refund policy, descriptor, age gate, 2257 statement and complaint form.
4. Review the offer. You receive the rate, reserve terms and any volume cap in writing before you sign.
5. Connect and test. Your gateway is connected, test transactions are run and billing resumes.

Paymotile works with OnlyFans creators and SextPanther models as well as site operators. If you sell on a creator platform and want to bill fans directly, read our guide to the OnlyFans payment processor question. The adult merchant account page covers every adult vertical, and the high-risk merchant account setup guide walks through the application.

Stripe and PayPal adult content FAQs

Does Stripe allow adult content?

No. Adult content and services are on Stripe’s Prohibited Businesses list, last updated September 22, 2026. The entry includes pornography, adult live chat, pay-per-view and AI-generated adult content.

Can I use Stripe for OnlyFans-style content on my own website?

No. Stripe says creators who distribute their own content do not need preapproval, but they must still comply with its list, which prohibits the sale of adult content.

Does PayPal allow adult content?

Only with pre-approval, and only for some of it. PayPal’s Acceptable Use Policy requires pre-approval for digitally delivered adult content and prohibits certain sexually oriented materials or services outright.

What is the best Stripe alternative for adult content?

A merchant account with an acquiring bank that registers adult merchants under MCC 5967. Unlike a general platform, the bank reviews your content controls before approval, so the category itself is not a reason to close you later.

Will Stripe or PayPal release my funds after closing an adult account?

It depends on the outcome of their review. Stripe’s policy describes a typical 120-day payout pause followed by a formal review. PayPal’s agreement allows a hold of up to 180 days. Refunds and disputes are deducted first.

Can I get approved if my chargebacks are already high?

Sometimes. Underwriters look at the cause and your fix, and a higher reserve is common. Start with our chargeback prevention guide. No agent can guarantee approval.

Get back to taking payments

A closure for adult content is a policy decision, and the fix is an account built for the category. Apply free with Paymotile or call (888) 542-4147 to be matched with an adult-friendly processor.

Sources

Statistics and legal references in this guide come from the sources below. We review them regularly and update the page when newer data is published.

1. Stripe, Prohibited and Restricted Businesses (last updated September 22, 2026).
2. Stripe, Stripe Unacceptable Risk Policy (last updated July 29, 2026).
3. PayPal, Acceptable Use Policy (last updated November 4, 2026).
4. PayPal, PayPal User Agreement (last updated November 4, 2026).
5. Square, Payment Terms (last updated November 6, 2026).
6. Visa, Visa Core Rules and Visa Product and Service Rules (October 24, 2026).
7. Visa, Visa Network Integrity (accessed November 2026).
8. Visa, Visa Acquirer Monitoring Program Overview (May 2025).
9. Mastercard, Protecting our network, protecting you: Preventing illegal adult content on our network (April 14, 2021).
10. Legal Information Institute, Cornell Law School, 18 U.S. Code 2257: Record keeping requirements (current statute).
11. Electronic Code of Federal Regulations, 28 CFR Part 75: Record keeping and record inspection provisions (current regulation).
12. Supreme Court of the United States, Free Speech Coalition, Inc. v. Paxton, No. 23-1122 (June 27, 2025).

Visa’s VAMP threshold for US merchants is a VAMP ratio of 1.5% (150 basis points), in effect since April 1, 2026. Visa labels a merchant “Excessive” when card-not-present fraud reports plus disputes reach 1.5% of its settled card-not-present Visa transactions in a month, and the merchant also has at least 1,500 fraud reports and disputes that month. From June 1, 2025 to March 31, 2026, the line was 2.2% (Visa).

Many guides still quote retired programs or conflicting numbers. This one uses only the card brands’ own documents: Visa’s VAMP fact sheet, the October 2026 Visa Core Rules and Mastercard’s August 2026 Security Rules and Procedures.

What is Visa’s VAMP?

VAMP, the Visa Acquirer Monitoring Program, is Visa’s single program for tracking fraud, disputes and card testing on card-not-present payments. On June 1, 2025, it absorbed the old Visa Fraud Monitoring Program and Visa Dispute Monitoring Program. Visa measures each acquiring bank and its merchants every month, and anyone over a threshold must add risk controls.

It is an acquirer program because Visa’s contract is with your acquiring bank, not with you. Visa measures the bank’s portfolio and each merchant in it, and the bank must fix problem merchants. The advisory period ended September 30, 2025, so the program is fully in force (Visa).

What are the VAMP thresholds in 2026 for merchants and acquirers?

In the US, Canada, Europe and Asia Pacific, a merchant is “Excessive” at a VAMP ratio of 1.5% or higher with at least 1,500 fraud reports and disputes in the month. Latin America also uses 1.5%. CEMEA uses 2.2% with at least 150 cases and USD 75,000. Acquirer portfolios are flagged at 0.5% (Above Standard) and 0.7% (Excessive).

Who is measured	Region	VAMP ratio	Minimum monthly count	In effect
Merchant	US, Canada, Europe, Asia Pacific	1.5% (150 basis points)	1,500 fraud reports and disputes	Since April 1, 2026
Merchant	US, Canada, Europe, Asia Pacific	2.2% (220 basis points)	1,500 fraud reports and disputes	June 1, 2025 to March 31, 2026
Merchant	Latin America and Caribbean	1.5% (150 basis points)	1,500 fraud reports and disputes	Since June 1, 2025
Merchant	CEMEA	2.2% (220 basis points)	150 fraud reports and disputes, and at least USD 75,000	Since June 1, 2025
Acquirer portfolio	All program regions	0.5% is Above Standard, 0.7% is Excessive	1,500 in the US, Canada, Europe and Asia Pacific	Since June 1, 2025

Source for every row: Visa’s VAMP fact sheet (Visa). Three details most guides miss:

• The merchant line depends on your bank. Visa applies the Excessive Merchant thresholds when the acquirer itself is not Above Standard or Excessive. If your bank’s whole portfolio is flagged, the bank is in the program and has to cut risk across its book.
• Card testing has its own limits. Acquirers must also keep merchants under two enumeration limits (bots testing stolen card numbers): an enumeration ratio of 20% of all authorization attempts (2,000 basis points) and a count of 300,000 enumerated transactions.
• Not every country is covered yet. Visa says programs for Brazil, Chile and India will be announced later.

How do you calculate your VAMP ratio?

Add the fraud reports (TC40) and disputes (TC15) on your card-not-present Visa sales, then divide by your settled card-not-present Visa transactions (TC05) for the month. Multiply by 100 for a percentage or by 10,000 for basis points. It is a count ratio, so a $5 dispute weighs exactly as much as a $5,000 one.

The formula from Visa’s fact sheet: VAMP ratio = (fraud reports + disputes) ÷ settled transactions, all counted on card-not-present Visa transactions, domestic and cross-border. Two things come out of the top of the fraction:

• Disputes resolved through pre-dispute solutions, such as Visa’s Rapid Dispute Resolution, which the Visa Core Rules define as a service that lets merchants automatically accept liability for a disputed transaction (Visa Core Rules).
• Fraud reports that qualify for Compelling Evidence 3.0, Visa’s process for showing that the same cardholder made earlier undisputed purchases.

Both exclusions depend on the timing of Visa’s data extract, so a late resolution may still count. Refunds are not in the formula: a refund before the customer disputes prevents the dispute, but it does not erase a fraud report the issuer already filed. A fraudulent sale that is also disputed can show up in both counts.

Three hypothetical US merchants, measured after April 1, 2026:

Merchant	Settled CNP transactions	Fraud reports	Disputes	VAMP ratio	Excessive under Visa’s merchant test?
A	100,000	800	800	1.6%	Yes: over 1.5% and 1,600 cases
B	100,000	600	700	1.3%	No, but 0.2 points from the line
C	20,000	200	300	2.5%	No: only 500 cases, but every one counts toward the bank’s portfolio ratio

Merchant C is the trap. The 1,500 floor keeps a small merchant off Visa’s list, but its cases still push up the bank’s portfolio ratio, and your merchant agreement can set a stricter limit. Read it.

What happens when you exceed the VAMP threshold?

Visa identifies your acquirer, and the acquirer makes you fix it. Expect a remediation plan, required fraud or dispute tools, a higher reserve, and any costs your merchant agreement lets the bank pass on to you. If the ratio stays high, the bank can terminate the account and, when the listing criteria are met, add you to Visa’s terminated merchant file.

• Required tools. Visa may require an acquirer or its merchant to deploy remediation tools or technologies for activity flagged in VAMP (Visa Core Rules).
• A bigger reserve. Banks protect themselves from rising disputes by holding back more of your sales. High-risk rolling reserves often run 5% to 10%, and a flagged merchant should expect the high end or more. Ask your bank how its reserve is calculated and when it is released.
• Termination and blacklisting. When an acquirer terminates a merchant, Visa’s rules require it to add the merchant to the Visa Merchant Screening Service if the listing criteria are met, and the termination file must include all VAMP reports about that merchant (Visa Core Rules). Mastercard keeps a similar list. See what the MATCH list is and how to get off it.
• Penalties for gaming the program. If Visa finds that merchant names, data or performance were altered to get around VAMP, it may charge the acquirer USD 25,000 per merchant per month, permanently disqualify the merchant and its principals from the Visa system, or both (Visa Core Rules).

What are Mastercard’s Excessive Chargeback Program thresholds?

Mastercard’s Excessive Chargeback Program flags an Excessive Chargeback Merchant (ECM) after two consecutive months at a chargeback ratio of at least 150 basis points (1.5%) with at least 100 chargebacks in each month, per Mastercard’s 2019 public edition. The current manual also names a higher tier, High Excessive Chargeback Merchant (HECM). Unlike VAMP, the program counts chargebacks, not fraud reports.

Mastercard’s current manual, dated August 4, 2026, defines the ratio as chargebacks received in a calendar month divided by Mastercard transactions in the preceding month, multiplied by 10,000. It names both tiers but points to its Data Integrity Monitoring Program manual, which acquirers read through Mastercard Connect, for the exact cutoffs and fees (Mastercard). The 150 basis point and 100 chargeback figures, which had to be met in each of two consecutive months, come from the September 2019 public edition (Mastercard). Ask your acquirer to confirm the current ECM and HECM numbers in writing.

Two more points from the August 2026 manual. After a merchant has been an ECM or HECM for six months, consecutive or not, Mastercard may tell the acquirer what action plan to follow or require a Franchise Management Program review at the acquirer’s expense. And the Global Merchant Audit Program, listed in the same chapter of the manual, “has been suspended until further notice” (Mastercard).

	Visa VAMP	Mastercard ECP
What is counted	Fraud reports plus disputes	Chargebacks
Divided by	Settled card-not-present transactions, same month	Mastercard transactions, preceding month
US merchant line	1.5% (150 basis points)	1.5% (150 basis points) in two consecutive months for ECM, per the 2019 public edition
Minimum monthly count	1,500 fraud reports and disputes	100 chargebacks in each of those months
Card-present sales	Not counted	Counted in the transaction total

The count floors are the big difference. A merchant with a few hundred disputes a month can stay under Visa’s 1,500 minimum while already over Mastercard’s 100.

Why do high-risk merchants have less room under VAMP?

High-risk merchants sell almost entirely card-not-present, in categories that draw more disputes, through banks whose own portfolios Visa flags at 0.5% and 0.7%. A bank near its own line acts on a merchant long before that merchant reaches 1.5%. Usually that means a higher reserve, tighter limits or a closed account.

• Every sale is in the formula. VAMP only measures card-not-present payments. A restaurant has few. An adult content site, a tech support company or a nutraceutical brand selling free trials has almost nothing else.
• Disputes come built in. Unrecognized billing names, rebills after a trial and family members using a saved card all produce disputes without any wrongdoing by the merchant.
• The bank is watching its own number. Banks that specialize in high-risk accounts carry many of them, so their portfolio ratio can sit closer to Visa’s 0.5% Above Standard level. One merchant drifting up can cost the bank its own standing.
• Second chances are rare. A termination that lands you on Visa’s screening file or Mastercard’s MATCH list shuts the door at mainstream processors. If that has already happened, see what to do when Stripe, PayPal or Square closes your account.

That is why the right bank matters as much as the right controls. Paymotile matches high-risk merchants with acquiring banks that knowingly underwrite their category, so a normal dispute pattern for your industry is more likely to be priced in up front than to trigger a freeze. Typical high-risk rates run 3.25% to 3.99% in 2026 (adult 2.95% to 5%).

How do you bring your VAMP ratio down fast?

Stop disputes before they are filed instead of trying to win them later. Resolve them through Visa pre-dispute tools so they drop out of the ratio, send Compelling Evidence 3.0 data so qualifying fraud reports are excluded, refund unclear charges quickly, fix your billing descriptor and block card testing. A chargeback you win still counts.

1. Get your real numbers. Ask your processor for three months of fraud reports, disputes and settled card-not-present transactions, split by product and reason code, to find the offer or billing step causing the spike.
2. Turn on pre-dispute resolution. Rapid Dispute Resolution and similar tools settle a dispute before it becomes one, and Visa excludes those from the ratio. Set rules so low-value or obviously valid claims are refunded automatically.
3. Send Compelling Evidence 3.0 data. Make sure your gateway passes device, IP and account details so Visa can match a “fraud” claim against the same cardholder’s earlier undisputed purchases.
4. Make refunds easier than disputes. Put a phone number or URL in your billing descriptor, answer support requests the same day and refund anything the customer does not recognize.
5. Block card testing. Add velocity limits, bot checks and CVV and address verification on payment forms. Testing attacks feed both the enumeration limit and future fraud reports.
6. Clean up recurring billing. State trial terms plainly, send a reminder before the first full charge and make cancellation one step.
7. Tell your bank first. An acquirer that sees a written plan and a falling ratio has more reason to work with you than one that finds the problem in a Visa report.

For a fuller playbook, see our guide to credit card chargeback prevention, and for the basics of the dispute cycle, what a chargeback is.

VAMP FAQs

What is the VAMP threshold in 2026?

1.5% for US, Canadian, European and Asia Pacific merchants with at least 1,500 fraud reports and disputes a month, since April 1, 2026. It was 2.2% before.

Does VAMP count card-present transactions?

No. The ratio only uses card-not-present Visa transactions. In-store chip and tap sales are left out of both sides.

Do the old VDMP and VFMP thresholds still apply?

No. Visa folded the Visa Dispute Monitoring Program and the Visa Fraud Monitoring Program into VAMP on June 1, 2025. Any guide still quoting their thresholds is out of date.

What is the Mastercard excessive chargeback threshold?

Mastercard’s 2019 public edition: 150 basis points (1.5%) and at least 100 chargebacks in each of two consecutive months for an Excessive Chargeback Merchant. The current manual does not print the cutoffs, so confirm them with your bank.

How do I get out of VAMP?

The Visa Core Rules say an acquirer exits VAMP as specified in the Visa Acquirer Monitoring Program Guide, and the public rules do not reproduce that guide (Visa Core Rules). Ask your bank which months must fall below the line and what reporting it needs from you.

Can I get a merchant account if my ratio is already high?

Sometimes, yes. High-risk acquiring banks review the cause and the fix, and an approval usually comes with a reserve. Typical approval takes about 5 to 10 business days once your application is complete. You can apply with Paymotile or call (888) 542-4147.

Sources

Statistics and legal references in this guide come from the sources below. We review them regularly and update the page when newer data is published.

1. Visa, Visa Acquirer Monitoring Program Overview (May 2025).
2. Visa, Visa Core Rules and Visa Product and Service Rules (October 24, 2026).
3. Mastercard, Security Rules and Procedures: Merchant Edition (August 4, 2026).
4. Mastercard, Security Rules and Procedures: Merchant Edition (September 10, 2019).

OnlyFans processes fan payments itself. Fenix International Limited, the UK company that owns OnlyFans, charges fans through its own payment providers, keeps a 20% fee and pays creators the rest. OnlyFans has not publicly named those providers. A creator only needs a payment processor of their own when they sell to fans outside the platform.

This guide covers what is confirmed about OnlyFans billing, why you cannot connect your own processor to it, when a creator or fan site owner does need a merchant account, what underwriters check, and how the costs compare. If you perform live on cam platforms, also see our guide on how to become a cam girl and start your webcam business.

Who is OnlyFans’ payment processor?

There is no public, confirmed answer. The OnlyFans Terms of Service say fan payments are handled by its “payment or service providers” without naming them, and the company has not published its processor or acquiring bank. Any page that names one processor as fact is guessing. What is confirmed is that OnlyFans, not the creator, charges the fan.

Here is what the OnlyFans Terms of Service (last updated October 2026) do state:

• OnlyFans is owned and operated by Fenix International Limited, a company registered in England and Wales. Its U.S. subsidiary is Fenix Internet LLC in Wilmington, Delaware.
• Fans authorize OnlyFans to pass their card details to its payment providers, which take recurring subscription payments and one-time payments such as tips and pay-per-view.
• Prices are typically charged in USD.
• The OnlyFans fee is 20% of each fan payment and is deducted before the creator is paid.
• Creators can withdraw earnings once their balance meets a minimum payout amount.
• If a fan wins a refund or chargeback, OnlyFans may deduct the creator’s share of that amount from the creator’s earnings.

For a creator, the practical point is simple: the card charge runs through OnlyFans’ payment setup, not through an account in your name.

Why can’t creators plug their own processor into OnlyFans?

Because OnlyFans runs the checkout. Fans pay OnlyFans, OnlyFans’ providers process the card, and creators receive their share as a payout. The terms describe no option for a creator to connect an outside gateway or merchant account, so a creator merchant account only applies to sales you make on a site or channel you control.

On the platform, you do not choose the processor, the fee, the checkout page, the payout minimum, or how refunds and chargebacks are settled. In exchange, the platform handles card network registration, fan billing and dispute handling for every creator at once.

Before you send fans from any platform to your own payment link, read that platform’s current terms and acceptable use rules on outside payments. Rules change, and breaking them can cost you the account you built your audience on.

When does a creator need their own merchant account?

You need your own merchant account when you charge fans directly: a membership or clip site on your own domain, custom videos sold by invoice, paid texts and calls sold through your own checkout, or a fan site you run for several creators. If every sale happens inside a platform, the platform’s payout is your income.

The most common cases for creators and fan site owners:

• Your own fan or membership site. Subscriptions and pay-per-view on your domain need recurring billing and an adult-approved merchant account.
• Custom content and direct sales. Custom videos, photo sets and fan requests billed outside a platform are card-not-present adult sales.
• Paid texting and calls. Models on SextPanther and similar apps are paid by the app, just like OnlyFans. The merchant account question starts when you sell the same services through your own site.
• Multi-creator fan sites and agencies. A site that hosts several creators and pays them out is a platform. It needs platform-level underwriting, covered in our guides to adult live streaming merchant accounts and porn site merchant accounts.
• Backup income. Creators who rely on one platform often want a direct channel so a policy change or account review does not stop all income.

What do underwriters check for creator and fan site merchants?

Underwriters check that every person in your content is a verified adult who consented, that you keep 18 U.S.C. 2257 records, that people can report illegal content, and that billing is clear: descriptor, pricing, cancellation and refunds. They also review your identity, business entity, bank account and any past processing history.

Card network rules drive most of this. Visa says adult content merchants go through an enhanced registration process and closer performance monitoring. Through its Visa Integrity Risk Program, Visa also requires acquiring banks to make sure adult merchants keep records showing that every person depicted is of legal age and consented, offer a way to report potentially illegal content, and resolve those complaints within five business days.

What a typical creator or fan site file includes:

• Performer records. Under 18 U.S.C. 2257, producers of sexually explicit content must create and keep records proving each performer’s age and identity. The detailed rules are in 28 CFR Part 75. Underwriters ask who your custodian of records is and how collaborators are verified.
• Consent and collaborator releases. Signed releases for every person who appears, including collaborations with other creators.
• Viewer age checks. In Free Speech Coalition v. Paxton (June 27, 2025), the Supreme Court upheld Texas’s age verification law for adult sites. Expect questions on how you handle states with similar laws.
• Billing clarity. A recognizable billing descriptor, clear prices, a visible cancel option for subscriptions and a written refund policy. Unclear billing is a top source of adult chargebacks; our adult industry guide to reducing chargebacks covers the controls banks look for.
• Your site. Terms of service, privacy policy, 2257 statement, contact details and a content policy, all live on the site before you apply.
• Business basics. Government ID, business registration if you have one, a business bank account, and processing statements if you have sold by card before.

Platform payouts vs your own merchant account: fees, control and risk

Platform payouts are simpler: OnlyFans keeps 20% of each fan payment and handles billing, compliance and disputes, though chargebacks can be deducted from your earnings. Your own merchant account typically costs 2.95% to 5% per transaction for adult content in 2026, plus a reserve, but you control pricing, checkout and the customer relationship.

Factor	Platform payout (e.g. OnlyFans)	Your own merchant account
Who charges the fan	The platform, through its own payment providers	You, through your processor and acquiring bank
Main cost	20% of each fan payment (OnlyFans terms)	Typically 2.95% to 5% per transaction (2026), plus gateway and monthly fees that vary by provider
Reserve	None stated; earnings paid after the payout minimum is met	Often 5% to 10% of sales held on a rolling basis
Card network registration and compliance	Handled by the platform	Your responsibility, reviewed by the bank
Chargebacks	Platform handles disputes; your share can be deducted	You respond to disputes and must stay under network limits
Pricing and checkout	Set within platform rules	Your choice, within card network rules
Customer data and relationship	Stays with the platform	Yours
Setup time	Platform account approval	About 5 to 10 business days once your application is complete
Main risk	Policy changes or account review can stop income	Account closure if disputes or compliance slip

The fee gap is not a like-for-like comparison. A platform also gives you hosting, discovery, age checks and fan billing. On your own site you pay for hosting, age verification, marketing and a gateway, and you carry the compliance work. Most creators who go direct keep both: the platform for discovery, their own site for loyal fans and custom work.

Can creators use PayPal, Stripe or Square for adult content?

No, not for adult content. Stripe lists pornography, pay-per-view and adult live-chat among its prohibited businesses, Square prohibits adult entertainment oriented products or services in any medium, and PayPal’s Acceptable Use Policy bars certain sexually oriented materials or services. Accounts used this way are often frozen or closed, with funds held.

• Stripe’s Prohibited and Restricted Businesses list (updated September 22, 2026) names adult services, pay-per-view, adult live-chat features and pornography, including AI-generated content of the same kind.
• Square’s Payment Terms (updated November 6, 2026) list adult entertainment oriented products or services, in any medium, including internet, telephone or printed material, among the unsupported industries.
• PayPal’s Acceptable Use Policy (updated November 4, 2026) prohibits transactions involving certain sexually oriented materials or services.

These are aggregators: they approve accounts fast and review the business later, so an adult seller can be shut down after sales start. If that has already happened to you, read what to do when Stripe, PayPal or Square closes your account.

How does Paymotile match creators and fan site owners with adult processors?

Paymotile is a free merchant account agent. You apply once, we review your site, content controls and expected volume, then match you with adult-friendly processors and acquiring banks that fit. We work with OnlyFans creators selling off platform, SextPanther models and fan site owners, and approval typically takes about 5 to 10 business days once your file is complete.

1. Apply free. Tell us what you sell, where, and your expected monthly volume.
2. Pre-review. We check your site, 2257 records process, billing pages and refund policy against what adult underwriters ask for, and flag gaps before a bank sees them.
3. Match. We place your file with processors and banks that approve adult content at your size, from solo creators to multi-creator platforms.
4. Go live. You get a gateway, recurring billing for subscriptions and fraud tools, with rates typically 2.95% to 5% for adult content.

For the full picture of adult underwriting, see our adult merchant account guide. Ready to start? Apply free or call (888) 542-4147.

OnlyFans payment processor FAQs

Does OnlyFans use a high-risk payment processor?

OnlyFans has not named its providers. Card networks treat adult content as a higher-risk category that needs enhanced registration, so any processor handling adult content billing works under those rules.

Can I use my own merchant account for OnlyFans subscriptions?

No. OnlyFans charges fans through its own checkout. Your merchant account covers sales you make on your own site or checkout.

What does a merchant account for OnlyFans creators cost?

For adult content, typical rates run 2.95% to 5% per transaction as of 2026, often with a 5% to 10% rolling reserve. Your rate depends on volume, content and dispute history.

Do I need an LLC to get a creator merchant account?

Not always, but a registered business with its own bank account is easier to underwrite and keeps creator income separate from personal funds.

Can a fan site with many creators use one merchant account?

Yes, but it is underwritten as a platform. Banks review how you verify every creator, handle content complaints and pay creators out.

Can SextPanther models get their own merchant account?

Yes, for sales made directly through their own site or checkout. Income earned inside SextPanther is paid out by the app.

What gets a creator’s merchant account closed?

The usual causes are high chargeback ratios, missing performer records, unclear billing and selling content outside what was approved. A closure for excessive disputes can put you on the MATCH list.

Closed by Stripe or PayPal? Read what their adult content policies say and what to do next.

Sources

Statistics and legal references in this guide come from the sources below. We review them regularly and update the page when newer data is published.

1. OnlyFans (Fenix International Limited), Terms of Service (last updated October 2026).
2. Visa, Visa Network Integrity (accessed November 2026).
3. Legal Information Institute, Cornell Law School, 18 U.S. Code 2257: Record keeping requirements (current statute).
4. Electronic Code of Federal Regulations, 28 CFR Part 75: Child protection restoration and penalties enhancement act of 1990; protect act; Adam Walsh child protection and safety act of 2006; record keeping and record inspection provisions (current regulation).
5. Supreme Court of the United States, Free Speech Coalition, Inc. v. Paxton, No. 23-1122 (June 27, 2025).
6. Stripe, Prohibited and Restricted Businesses (last updated September 22, 2026).
7. Square, Square Payment Terms, section 3: Unsupported Industries (last updated November 6, 2026).
8. PayPal, Acceptable Use Policy (last updated November 4, 2026).

A merchant account reserve is money your processor or acquiring bank keeps from your card sales as a cushion against chargebacks, refunds and unpaid fees. It is still your money: the bank holds it for a period set in your merchant agreement, then releases it. High-risk merchants are asked for reserves far more often than low-risk businesses.

Below: how rolling, upfront and capped reserves work, typical sizes, when the money comes back and how to negotiate.

What is a merchant account reserve?

A merchant account reserve, also called a holdback, is a share of your sales deposits that the acquirer sets aside to cover future exposure or existing chargebacks. The Office of the Comptroller of the Currency defines a holdback exactly that way. The bank can fund it with a lump sum or by withholding part of each day’s proceeds.

When a customer disputes a payment weeks after the sale, the acquiring bank pays first and then collects from you. If you cannot pay, the bank takes the loss. The OCC’s Merchant Processing handbook says many acquirers use reserve or holdback accounts to limit that risk on higher-risk merchants, and its examination procedures check that merchant reserves are kept in individual deposit accounts, separate from settlement proceeds, and refunded according to the terms of the merchant agreement.

A reserve is not a fee. You do not pay it to anyone. It is a timing cost: cash you have earned but cannot use yet.

Rolling reserve: how do the percentage and hold period work?

A rolling reserve withholds a fixed percentage of every settlement, then releases each day’s withheld amount once the hold period ends. With a 10% rolling reserve, 10% of each deposit is held. After the hold period, the oldest held amounts come back to you each day, so the balance levels off instead of growing forever.

Here is a hypothetical example, not a quote. A merchant processes a steady $50,000 per month with a 10% rolling reserve and a 180 day hold:

• Each month, $5,000 is withheld (10% of $50,000).
• For the first six months, nothing is released, so the reserve grows to about $30,000.
• From month seven, the $5,000 withheld six months earlier is released each month as a new $5,000 is withheld. The balance stays near $30,000.

The lesson: the hold period matters as much as the percentage. Cutting the hold from 180 to 90 days in this example roughly halves the cash tied up, even at the same 10%.

Upfront reserve vs capped reserve: which one costs you more cash?

An upfront reserve costs more cash on day one, because you deposit the full amount before you process a single sale. A capped reserve builds the same balance gradually from your sales, then stops withholding once the cap is reached. A rolling reserve usually ties up the most cash over time for a growing business, because it scales with volume.

An upfront reserve (sometimes called a security deposit) is a lump sum you fund from your own bank account at approval. A capped reserve, sometimes called a fixed or minimum reserve, withholds a percentage of each deposit until the balance hits an agreed dollar amount. After that, your deposits arrive in full, and the balance is usually held until the account closes or the bank agrees to reduce it. The OCC handbook describes both funding methods: a lump sum, or withholding a portion of each day’s proceeds until a specific balance is reached.

Using the same hypothetical $50,000 per month merchant:

Reserve type	How it is funded	Cash held in the example	When funds come back	Best for
Rolling (10%, 180 day hold)	10% of every deposit	Builds to about $30,000, then stays near that level; rises if volume grows	Daily, on a rolling basis, after the hold period	Merchants with strong cash flow and growing volume who want releases to start on a set date
Upfront ($15,000)	One deposit before processing starts	$15,000 from day one; does not grow with volume	Usually after account closure, once the post-closure period ends, or earlier if renegotiated	Merchants with cash on hand who want full deposits from the first day
Capped (10% up to $20,000)	10% of deposits until the cap is reached	Reaches $20,000 in about four months, then stops growing	Usually after account closure or a scheduled review	Growing merchants who want a known maximum

If volume doubles, a rolling reserve doubles with it; an upfront or capped reserve does not. Short on cash at launch? A capped reserve comes out of sales rather than savings.

Why do underwriters ask for a reserve?

Underwriters ask for a reserve when they expect chargebacks or losses the bank might not be able to collect from you. The usual triggers are a high-risk industry, no processing history, a past chargeback problem, weak finances or credit, large tickets, and products delivered weeks or months after the customer pays.

The OCC handbook points to the same factors banks are examined on:

• Industry. Businesses with historically high refund and chargeback rates, a high likelihood of consumer fraud, or products regulated by the government (such as gambling or tobacco) are treated as high risk.
• Future or delayed delivery. Airline tickets, health club memberships, travel clubs and other future-delivery sales carry risk because disputes are not triggered until the delivery date.
• Selling online. The handbook tells underwriters to decide whether heightened fraud and chargeback risk on internet merchants warrants delayed settlement or reserves.
• Financial condition. A bank may require a holdback reserve or security deposit from a financially unstable merchant.
• Chargeback history. Banks are asked whether they require reserves from high-risk merchants or merchants with significant chargebacks.

Card network monitoring adds pressure. Under Visa’s Acquirer Monitoring Program, explained in the VAMP fact sheet, US merchants with a card-not-present fraud and dispute ratio of 1.5% or more, and at least 1,500 fraud and dispute transactions in a month, have counted as excessive since April 1, 2026. A merchant approaching that line is a common candidate for a new or larger reserve.

How big is a typical reserve for high-risk merchants?

For high-risk merchants, a rolling reserve is often 5% to 10% of sales as of 2026. Where you land depends on your industry, your processing history, your dispute ratio and your delivery timeline. Upfront and capped reserves are set as a dollar amount, usually sized to the bank’s estimate of your chargeback exposure.

New businesses, businesses moving from a closed account and industries with long delivery windows tend to see the higher end. Clean processing statements and low dispute ratios push toward the lower end, or no reserve at all.

Because the percentage is only half the cost, always compare offers on total cash held. A 5% reserve with a long hold can hold more cash than a 10% reserve with a short one.

When does a processor release reserve funds, including after account closure?

During the account, a rolling reserve releases each slice when its hold period ends. Upfront and capped reserves are usually held until closure. After closure, the bank normally keeps the reserve for a set period to cover disputes that arrive late, then releases what is left minus chargebacks, refunds and fees owed.

The post-closure hold exists because disputes keep coming after you stop processing. In the Visa Core Rules (24 October 2026 edition), the time limit for many dispute conditions is 120 calendar days from the transaction processing date. For goods or services not received, the limit can run 120 days from the date the customer expected delivery, up to 540 calendar days from the transaction. That is why merchants selling preorders, memberships or travel often see the longest post-closure holds.

To get your money back faster after closure:

1. Ask for the release date and any amount the bank intends to deduct, in writing.
2. Keep answering every dispute with evidence. Lost disputes come out of the reserve.
3. Keep your contact and bank details current with the processor. The OCC handbook asks examiners to check that banks follow abandoned property and state escheat laws when a reserve cannot be refunded.
4. Request a final statement showing every deduction.

If your account was closed by Stripe, PayPal or Square rather than a merchant bank, the rules come from that platform’s own terms. Our guide on what to do when Stripe, PayPal or Square closes your account covers how long each one can hold funds.

How can you negotiate a lower reserve or a shorter hold?

Give the underwriter proof that your chargeback risk is lower than your category suggests, then ask for specific terms in writing: a lower percentage, a shorter hold, a cap instead of a rolling reserve, and a review date when the reserve steps down or ends. Negotiate before you sign, not after.

• Bring processing history. Recent statements with low dispute and refund ratios are the strongest evidence you can offer.
• Ask for a cap. A capped reserve puts a ceiling on the cash held, which matters most when you expect to grow.
• Ask for a step-down clause. For example, a lower percentage or shorter hold after a set number of months with dispute ratios under an agreed level.
• Show chargeback controls. Clear billing descriptors, easy refunds, delivery tracking and dispute alerts all reduce risk. See our guide to credit card chargeback prevention.
• Compare more than one acquirer. Banks price the same risk differently. An agent such as Paymotile can put your file in front of several acquiring banks that accept your industry, so you can compare reserve terms side by side.

What are the reserve red flags in a merchant agreement?

The biggest red flags are reserve terms that appear only at the last minute, a percentage or hold the processor can change at its sole discretion without notice, no cap, and no written release date after closure. Each one lets the processor hold your cash longer than the dispute risk requires.

• A reserve added to the final agreement that was not in the quote.
• Language allowing the processor to raise the reserve or extend the hold at any time, for any reason, without notice.
• No maximum balance on a reserve that scales with volume.
• No release date, or a post-closure hold far longer than the dispute windows for what you sell.
• Early termination fees or other charges that can be taken from the reserve.
• No reporting: you should be able to see the reserve balance on your statements.

Read the funds-holding clauses alongside the rest of the contract. See how to choose a high-risk merchant account provider for the questions to ask before signing. A reserve is also very different from a closure for excessive disputes, which can put a business on the MATCH list.

Merchant account reserve FAQs

Is a reserve the same as a hold or frozen funds?

No. A reserve is a planned, partial holdback written into your agreement. A hold or freeze stops some or all payouts, usually while the processor reviews suspected fraud or unusual activity. The OCC handbook treats them separately: apart from reserves, its examination procedures ask whether a bank can hold merchant funds pending the resolution of suspected fraudulent activity.

Do reserves earn interest?

Only if your agreement says so. Read the reserve clause. If it is silent on interest, assume the reserve does not earn any and plan your cash flow around that.

Can a reserve change after approval?

Yes, if your agreement allows it. The OCC handbook asks examiners how often banks review the reserves they set up, and a jump in disputes, a big change in volume or a new product line can lead to a higher reserve. Clean history can lead to a lower one. Ask for any change in writing.

What is a good rolling reserve percentage?

For high-risk merchants, 5% to 10% is common in 2026. Judge an offer on total cash held (percentage times hold period times volume), plus whether it has a cap and a step-down date.

Get reserve terms you can live with

Paymotile is free to apply. We match high-risk merchants with processors and acquiring banks that accept their industry, and typical approval takes about 5 to 10 business days once your application is complete. You see the reserve terms before you sign. Apply free or call (888) 542-4147.

Sources

Statistics and legal references in this guide come from the sources below. We review them regularly and update the page when newer data is published.

1. Office of the Comptroller of the Currency, Comptroller’s Handbook: Merchant Processing (Version 1.0, August 2014; reputation risk references removed March 20, 2025).
2. Visa, Visa Core Rules and Visa Product and Service Rules (October 24, 2026).
3. Visa, Visa Acquirer Monitoring Program Fact Sheet (2025; US merchant threshold lowered to 1.5% on April 1, 2026).