Tribal Lending Merchant Account for Lenders

At a glance: tribal and online lender merchant accounts

Typical rates (2026): 3.25% to 3.99% per card transaction, depending on volume, risk and chargeback history
Rolling reserve: often 5% to 10% of sales, held about 90 to 180 days and released on a schedule
Typical approval time: about 5 to 10 business days once your application is complete
Repayment rails: ACH debits and debit cards. Visa does not allow credit cards for debt repayment in the US
What underwriters check: tribal authority documents or state licenses, loan disclosures, payment authorizations and return rates

Get a free quote in 2 minutesor call (888) 542-4147

A tribal lending merchant account is a high-risk payment account that lets a lender owned by a federally recognized tribe, or a state-licensed online lender, fund loans and collect repayments by ACH debit and debit card. A processor and sponsor bank underwrite the lender’s legal structure, licensing, disclosures and return rates before any payments run. Paymotile is free to apply: start an application.

This guide is general information, not legal advice.

What is a tribal lending merchant account?

It is a payment processing relationship built for consumer lenders that most mainstream processors decline. The account usually combines ACH origination for scheduled loan payments with debit card acceptance for one-time payments, and it comes with pricing, reserves and monitoring set for lending risk. People also search for it as an online lender or payday loan merchant account.

The same path covers tribal lending enterprises, state-licensed payday and installment lenders, and the companies that service or collect loans for them (collectors should also read our collection agency merchant account guide). Our high risk merchant account hub explains how this differs from an instant-approval processor.

What is a tribal lending enterprise, and how does sovereign immunity work?

A tribal lending enterprise is a lender formed under the law of a federally recognized tribe and owned by that tribe. Tribes have sovereign immunity from most lawsuits unless Congress or the tribe waives it, and courts may extend it to a business that qualifies as an “arm of the tribe.” Immunity from suit is not an exemption from law.

Four published opinions frame the area:

Immunity covers commercial activity. In Kiowa Tribe v. Manufacturing Technologies (1998), the Supreme Court held that tribes are immune from suits on contracts whether the activity is governmental or commercial, and whether it happened on or off a reservation.
Off-reservation conduct is still subject to state law. In Michigan v. Bay Mills Indian Community (2014), the Court upheld immunity but noted that, unless federal law provides differently, tribal members acting beyond reservation boundaries are subject to generally applicable state law, and that a state can seek an injunction against tribal officials responsible for unlawful conduct.
The entity has to prove it is an arm of the tribe. In Williams v. Big Picture Loans (2019), the Fourth Circuit placed the burden of proof on the lending entities, then found on that record that they were arms of the tribe.
Congress can remove immunity. In Lac du Flambeau Band v. Coughlin (2023), a case that began with a payday loan from a tribal lender, the Supreme Court held that the Bankruptcy Code abrogates tribal sovereign immunity.

Federal consumer finance law also reaches tribal lenders. In CFPB v. Great Plains Lending (2017), the Ninth Circuit enforced the Bureau’s investigative demands against three tribal lending entities.

Why do banks treat online and tribal lenders as high risk?

Banks restrict lending accounts because the sponsor bank answers for every payment it originates. Short-term loans produce more returned debits and disputes than ordinary retail, the rules differ in every state, and regulators and card networks hold the bank responsible for its merchants. Most banks decide the review costs more than the account earns.

Federal policy has recently pushed against blanket refusals: Executive Order 14331 (August 7, 2025) directs federal banking regulators to remove “reputation risk” from their guidance and examination materials. Banks can still decline an account for measurable financial or legal risk. Underwriters weigh each model differently:

Lending model	Legal basis	What underwriters focus on
Tribal lending enterprise	Tribal law and tribal ownership	Proof of tribal ownership and control, tribal regulator oversight, states served, consent orders or litigation
State-licensed online lender	A license in each state where borrowers live	Current licenses, rates within each state’s limits, complaint history

Already closed by a mainstream processor? See what to do after Stripe, PayPal or Square shuts you down.

What does the CFPB payday rule require for payment withdrawals?

Under 12 CFR 1041.8, after two consecutive failed attempts to withdraw a payment on a covered loan, a lender may not try again unless the consumer gives a new and specific authorization. The rule covers ACH debits, card payments and other transfer methods. The payment provisions became operative on March 30, 2025.

The rule applies to “covered loans” as defined in 12 CFR 1041.3: loans that must be substantially repaid within 45 days, longer-term loans with a balloon payment, and loans with a cost of credit above 36% a year where the lender can initiate transfers from the consumer’s account. Three points matter:

The two-attempt limit crosses channels. A failed transfer counts as the second consecutive failure even if the first attempt went through a different payment channel (12 CFR 1041.8). Switching from ACH to a debit card does not reset the count.
Notices are required. A lender must send a payment notice before the first withdrawal and before an unusual withdrawal, and a consumer rights notice after the limit is reached (12 CFR 1041.9).
Current status needs careful reading. On March 28, 2025, the CFPB said it would not prioritize enforcement or supervision of penalties or fines under these provisions and that it was contemplating a proposal to narrow the rule. As of the eCFR edition dated November 6, 2026, section 1041.8 is still in the Code of Federal Regulations.

Enforcement priorities do not repeal a regulation, and they can change. Expect a sponsor bank to ask how your system counts failed attempts.

How do state rate caps conflict with tribal lending?

Many states cap consumer loan interest or require a lending license, while a tribal lender’s contract usually says tribal law governs. Courts have not consistently accepted that choice. Sovereign immunity can block a damages suit against the tribe itself, but it has not stopped injunction claims against tribal officials or enforcement of federal law.

The clearest appellate example is Hengle v. Treppa (Fourth Circuit, 2021). Virginia law generally prohibited interest above 12%, and the loans at issue carried rates from 544% to 920%. The court refused to enforce the contracts’ choice of tribal law as contrary to Virginia public policy and let claims for prospective relief against the tribal officials proceed.

Federal law adds a fixed cap for one group of borrowers. Under the Military Lending Act, a creditor may not charge covered servicemembers or their dependents an annual percentage rate above 36% (10 U.S.C. 987).

The practical result is state-by-state scrutiny. Underwriters ask which states you lend into and whether a regulator has acted against you. Whether a loan program is lawful in a given state is a question for your attorney, not a processor.

ACH or debit card: which should lenders use for repayment?

Most online lenders use both. ACH debits handle scheduled installment payments at low cost and fall under Nacha rules and Regulation E. Debit cards handle one-time and same-day payments and fall under card network rules. Credit cards are generally not an option, because Visa prohibits using a credit card to repay a debt in the US.

Factor	ACH debit	Debit card
Best use	Scheduled recurring payments	One-time, catch-up and same-day payments
Rulebook	Nacha Operating Rules, Regulation E	Visa and Mastercard rules, Regulation E
Authorization	Written or similarly authenticated consent for preauthorized transfers	Cardholder consent, with the debt repayment indicator on the transaction
How failures are measured	Return rates (unauthorized, administrative, overall)	Disputes and fraud reports under Visa VAMP

Under Regulation E, preauthorized electronic transfers from a consumer’s account may be authorized only by a writing signed or similarly authenticated by the consumer, and no one may condition an extension of credit on repayment by preauthorized electronic transfers (12 CFR 1005.10). Offer another way to pay and keep proof of each authorization.

What are the Nacha return rate thresholds?

Nacha measures ACH debit originators on three return rates: 0.5% for unauthorized debits, 3% for administrative returns such as closed or invalid accounts, and 15% for all returns combined. The 0.5% figure is a hard threshold. The 3% and 15% figures are review levels that can open an inquiry by Nacha.

Return type	Level	What happens above it
Unauthorized debits	0.5%	The originating bank faces obligations and possible enforcement under the Nacha Rules
Administrative (return codes R02, R03, R04)	3.0%	Starting point for a review. Not an automatic violation
Overall (all debit returns, excluding RCK entries)	15.0%	Starting point for a review. A reduction is required only if the review panel directs it

All three figures come from Nacha’s ACH Network Risk and Enforcement Topics rule, effective September 18, 2015. Insufficient-funds returns count toward the overall level, and your bank may set tighter limits than Nacha does.

What do the card network rules say about loan repayments?

Visa treats a loan payment as a debt repayment transaction. Its rules prohibit credit cards for that purpose, require a debt repayment indicator and a specific merchant category code, and add conditions for payday lending in the US, including that the merchant be located in a state where payday lending is legal.

The October 2026 Visa Core Rules (section 5.8.13.1) set out the requirements:

No credit cards. A credit or charge card may not be used to repay a debt in the US.
MCC codes. Debt repayment transactions are assigned MCC 6012 (financial institutions), MCC 6051 (non-financial institutions) or MCC 7322 (collection agencies), and must carry the debt repayment indicator.
No installment transactions. A payday loan or advance must not be repaid using a Visa Installment Transaction.
US payday lending conditions. The acquirer must ensure the merchant is located in the US, in a state where payday lending is legal, and complies with applicable law. The acquirer must also notify Visa if the merchant becomes subject to a state or federal consent order.

Visa defines payday lending as a loan defined that way by applicable law, or one the consumer must repay within 60 calendar days. How an acquirer applies the state condition to a tribal lender is decided bank by bank. Mastercard publishes its own standards, which your acquirer can confirm.

Since April 1, 2026, Visa’s VAMP program labels a US merchant “Excessive” at a 1.5% ratio of fraud reports plus disputes to settled card-not-present transactions, with at least 1,500 combined counts in a month. See our VAMP threshold guide.

What documents do underwriters want from a lender?

Expect to provide the standard high-risk file plus lending-specific proof: your legal authority to lend, the exact loan agreement and disclosures borrowers see, your payment authorization language, and recent ACH return and card dispute data. Tribal lenders add documents showing tribal ownership, control and regulatory oversight.

Document	Who provides it	Why underwriters ask
Government ID for each owner or officer, business formation documents	All lenders	Identity and ownership checks
3 to 6 months of bank statements, recent processing statements	All lenders	Volume, cash flow and stability
ACH return reports by return code, card dispute reports	Existing lenders	Comparison with Nacha and Visa limits
Loan agreement, Truth in Lending disclosures, rate and fee schedule	All lenders	Disclosure and pricing review
ACH and card authorization language, sample payment notices	All lenders	Regulation E and 12 CFR 1041 review
State lending licenses and a list of states served	State-licensed lenders	Confirms authority to lend in each state
Tribal resolution or ordinance creating the lender, lending code, tribal regulator contact	Tribal lenders	Evidence of tribal ownership, control and oversight
Legal opinion letter, list of litigation and regulatory orders	Often requested	Counsel’s view of the model and any open exposure

Truth in Lending disclosures for closed-end loans, including the annual percentage rate and finance charge, are set by 12 CFR 1026.18. See also our high-risk merchant account setup guide.

What do rates and reserves look like for lending accounts?

Card processing for high-risk merchants typically runs 3.25% to 3.99% per transaction as of 2026. Most lending accounts also carry a rolling reserve, often 5% to 10% of volume, held about 90 to 180 days. ACH is priced separately. Exact terms depend on your history.

A reserve is money the processor holds back to cover later returns and disputes. Our merchant account reserve guide explains how the hold and release work.

How do you apply through Paymotile?

Paymotile is an agent, not a bank or processor. You apply once, free, and we match your file with processors and sponsor banks that accept your lending model. Typical approval takes about 5 to 10 business days once the application is complete. No approval is guaranteed, and the bank makes the final decision.

Submit the application. Apply online and tell us your model, loan products and states served.
Send your documents. Use the table above.
Matching. We present the file to processors and banks that underwrite your type of lending.
Underwriting. The bank reviews your legal basis, disclosures, website and payment history.
Terms and setup. You receive pricing, reserve and volume terms, then the gateways are connected.

New to lending? Read how to start a loan business online. Comparing options? See how to choose a high-risk merchant account provider.

Tribal and online lender merchant account FAQs

Can a tribal lender get a merchant account?

Some processors and sponsor banks work with tribal lending enterprises. Approval depends on your documents, states served, return rates and regulatory history, and is never guaranteed.

Can borrowers repay a loan with a credit card?

Generally not on Visa, whose rules prohibit credit and charge cards for debt repayment in the US. Debit cards and ACH debits are the usual methods.

Is the CFPB two-attempt rule still in effect?

12 CFR 1041.8 remains in the Code of Federal Regulations as of November 2026. The CFPB said in March 2025 that it would not prioritize enforcement of penalties. Check the current status with counsel.

Does sovereign immunity mean state law does not apply?

No. Immunity limits who can be sued and for what remedy. The Supreme Court has said off-reservation conduct is subject to generally applicable state law unless federal law provides otherwise. Ask your attorney how this applies to you.