High-Risk Merchant Category Codes (MCC) Explained

A merchant category code, or MCC, is a four-digit number that labels the main type of goods or services your business sells. It travels with every card transaction you run and tells the banks and card networks what kind of merchant you are. You do not choose it. Your acquiring bank (the bank that approves your merchant account) assigns the code during onboarding, and that single number helps decide your processing rate, whether the card networks watch your account more closely, and, for a handful of codes, whether your business gets treated as high-risk from day one. Knowing which code you carry, and why, is the difference between guessing at your terms and understanding them.

Key takeaways

• An MCC is a four-digit code that classifies your business by what it sells. It is defined by an international standard and rides along with every card sale.
• You do not pick your MCC. Your acquiring bank assigns it during onboarding based on your website, products, and licenses.
• The code drives real costs. Banks use it to set interchange fees, apply rewards, restrict certain purchases, and report your income to the IRS on Form 1099-K.
• A small set of codes marks a business as high-risk. Card networks single these out for extra scrutiny, and the code alone can shape your rate and your reserve.

What is a merchant category code?

A merchant category code is a four-digit number that sorts your business by the type of goods or services it sells. A florist, a software company, and an online casino each carry a different code. The codes come from an international standard called ISO 18245, and the card networks (Visa, Mastercard, American Express, and Discover) each keep their own list built on that standard and set the rules for what each code means.

The MCC does not print on your customer’s receipt, and most merchants never see it in daily use. It works behind the scenes, attached to the transaction data that moves between your processor, the card network, and the customer’s bank on every sale. One place you can see your own code is on your Form 1099-K, the tax form that reports your card income. The IRS prints your four-digit MCC in Box 2 of that form (Internal Revenue Service, Instructions for Form 1099-K).

Who assigns your MCC, and can you pick it?

Your acquiring bank or payment processor assigns your MCC when it boards your account. You do not select it. During onboarding the bank reviews your business model, your website, your product descriptions, and any licenses you hold, then applies the code from the card-network lists that best matches your primary activity.

Because the choice is a judgment call, the same business can end up with different codes at different processors, and a company that sells more than one kind of product gets coded for whatever makes up the largest share of its sales. If your code clearly misreads what you sell, you can ask your acquirer to review it. What you cannot do is shop for a lower-risk code you do not qualify for. Deliberately running under the wrong MCC to dodge scrutiny or higher fees is called miscoding, and card networks treat it as a serious violation that can cost you the account. If your business genuinely fits a high-risk category, the honest path is to work with a processor that expects that model, which is the whole point of a high-risk merchant account approval built for your industry.

How your MCC gets used

That one code does more work than its size suggests. Banks and card networks lean on it for four main things.

• Interchange fees. Interchange is the wholesale fee baked into every card sale, and the MCC is one of the inputs that sets it. Codes tied to riskier or more regulated business types generally carry higher interchange, which is part of why high-risk merchants pay more to process.
• Rewards and card rules. Card issuers read the MCC to decide whether a purchase earns bonus points or cash back, and whether a particular card is even allowed to be used. A card limited to fuel or office supplies, for example, can be blocked at any merchant whose code falls outside that category.
• Risk monitoring. Card networks use the code to flag categories where fraud and disputes tend to cluster, and they hold merchants in those codes to tighter rules. We cover that group below.
• Tax reporting. In the United States, the MCC helps sort your card income for the IRS, and it is the figure printed in Box 2 of your Form 1099-K (Internal Revenue Service, Instructions for Form 1099-K).

Which MCCs flag a business as high-risk?

A small set of codes marks a business as high-risk before it processes a single sale. Visa keeps a formal list of these under a rulebook it calls the Visa Integrity Risk Program, or VIRP, which took effect on May 1, 2023 and replaced an earlier program. VIRP labels merchants in certain codes as “high-integrity-risk,” meaning the business is legal but sits in a category where illegal or fraudulent transactions have a history of slipping in. Visa sorts these codes into tiers by how much oversight they need (LegitScript, What You Need To Know About The Visa Integrity Risk Program).

The codes Visa singles out include, among others:

• 5967 for adult content.
• 7273 for dating and escort services.
• 7995 for gambling and betting.
• 5122 and 5912 for pharmacies and drugs.
• 6051 and 6012 for cryptocurrency merchants.
• 4816 for digital file-sharing and cyberlocker services.
• 6211 for high-risk financial trading platforms.
• 5966 for outbound telemarketing.
• 5968 for subscription “negative option” billing, where a free trial rolls into a paid plan unless the customer cancels.
• 5993 for tobacco sales.

That list is not the whole universe of high-risk coding, and Mastercard and the other networks keep their own overlapping views. But it maps closely onto the industries we work in every day, from adult and gambling to online pharmacies, nutraceuticals, and crypto. If your business lives in one of these codes, the label is not a surprise to a specialist, and it does not have to be a barrier. See the full list of industries we place accounts for.

What a high-risk MCC actually means for you

Landing in a high-risk code changes the terms around your account, not your ability to accept cards. Three things tend to shift.

First, underwriting digs deeper. A bank boarding a high-risk code looks harder at your finances, your website, your refund policy, and your processing history before it approves you. Second, the card networks watch the account more closely against their dispute and fraud limits, and some codes carry extra program fees or a registration step that a standard retailer never sees. Third, your pricing reflects the added exposure. Higher interchange on the code, plus the bank pricing its own risk, is why high-risk processing usually costs more than a low-risk storefront pays.

None of that means your business did anything wrong. A high-risk MCC prices the odds of a chargeback or a regulatory problem in your category. It does not grade your honesty or your health as a company. This is the same point we make in what is a high-risk merchant account, and it is worth repeating, because the label gets read as an insult when it is really just a line on an underwriter’s worksheet.

What to do if your business is in a high-risk code

The wrong move is to hide from your code or shop for a processor that will quietly miscode you into a lower tier. That approach unravels the moment a card network reviews the account, and it can end in a shutdown that lands your business on the MATCH list, the shared database of terminated merchants that makes the next account far harder to open. The right move is to go to an underwriter who expects your model and prices it fairly the first time.

That is the gap a specialist fills. A processor that already understands your code has boarded businesses like yours before, knows which documents the underwriter will ask for, and can set realistic terms instead of approving you and then freezing the account weeks later when it notices what you sell. It is the same reasoning behind opening an account without perfect credit or without an existing merchant account. Match yourself to a bank that wants your business, and the high-risk label stops being a wall and starts being a normal part of getting approved. If your code has you stuck, high-risk merchant account approval built for your industry is where to start.