High Risk Ecommerce Merchant Accounts in 2026

A high risk ecommerce merchant account lets an online store take Visa, Mastercard and wallet payments when its products or its billing model sit outside what mainstream processors accept. It covers supplements, CBD, vapes, alcohol, subscriptions, pre-orders and other restricted lines, and it settles in USD, EUR, GBP, CAD and other major currencies.

Getting approved is the hard part. Shopify Payments, Stripe and PayPal restrict or ban many of these products, and online sales carry card-not-present fraud and chargebacks that land on the merchant. Stores are often accepted at sign-up, then hit with a reserve or a closure at the first review.

Setting it up with us is simple. You fill in one intake form, Binderr Chooses, and we match your store with a regulated partner that already accepts your products. We prepare your KYC pack, check your website and handle the introduction. Most stores are live in 5 to 7 business days.

Why Are Ecommerce Merchant Accounts Considered High Risk?

Ecommerce merchant accounts carry more risk than in-store ones because the card is not present. The merchant cannot check the card or the buyer, fraud is much higher and most of the loss falls on the merchant. Add restricted products, subscriptions or long delivery times, and a store needs a high risk ecommerce merchant account.

Card-Not-Present Fraud Sits With the Merchant

Card-not-present fraud is the biggest single type of card fraud. UK Finance reported GBP 423.5 million of remote purchase fraud in 2025, 71% of all UK card fraud, with GBP 250.8 million of it on ecommerce. The EBA and ECB found that remote card payments made up around 83% of card fraud in the EEA in 2024, with a fraud rate about 13 times higher by value than in-store payments.

The merchant usually carries that loss. Federal Reserve data for 2023 shows that merchants absorbed 65.1% of card-not-present debit fraud losses in the US. So why are ecommerce merchant accounts considered high risk? Because every online sale is a sale the acquirer may have to refund if the card was stolen, and it prices that in.

Friendly Fraud and Chargebacks

Chargebacks are the second problem for high risk online merchants. Mastercard expects 261 million chargebacks worldwide in 2025, rising to 324 million by 2028, and says around 45% of merchant chargeback volume is fraud of one kind or another. Merchants in a Chargebacks911 study published in 2026 estimated that 43.8% of their chargebacks were friendly fraud: a real customer who bought the goods and then disputed the charge.

Each dispute costs more than the sale. Mastercard and Javelin put the merchant cost at about USD 46 in third-party fees and USD 82 in internal costs per chargeback. LexisNexis found in 2026 that every USD 1 of fraud costs US merchants USD 5.13 once fees, goods and labour are counted.

Delivery Times, Pre-Orders and Dropshipping

The longer the gap between payment and delivery, the higher the risk. If a store takes payment today and ships in six weeks, the acquirer carries six weeks of refund risk if the store fails. Shopify Payments names extended delivery timelines and extended billing cycles as reasons for a reserve, with examples such as 10% of sales held for 120 days. Pre-orders, made-to-order goods and dropshipping from overseas suppliers all fall into this group, and each needs a high risk online merchant account with the delivery gap declared upfront.

Subscriptions and Free Trials

Subscriptions are high risk because customers forget they signed up and dispute the renewal. Visa's rules, in force since 18 April 2020, require a reminder at least 7 days before a recurring charge after a trial, online cancellation and a clear descriptor. Mastercard requires a reminder 3 to 7 days before billing for cycles of 180 days or less, and registration under MCC 5968 for free trials of physical products. Visa's Integrity Risk Program also lists MCC 5968 in its third tier, as our guide to Visa and Mastercard high risk merchant registration explains.

The law is moving too. A US appeals court vacated the FTC's click-to-cancel rule in July 2025, but the FTC restarted the rulemaking in 2026, and the UK's new subscription rules are due from January 2027. Our guide on how subscription payment gateways work covers the billing side.

Payment Processing Challenges High Risk Retail Stores Face

Put together, these are the payment processing challenges high risk retail stores face online: a higher rate, a rolling reserve, a lower monthly limit at the start and closer monitoring. None of them is a reason to stay off cards. With the right high risk ecommerce merchant account, they are known terms agreed upfront, not surprises after launch.

Restricted Products That Make a Store High Risk

Some products put a store in the high risk band on their own, whatever its chargeback history. With a high risk merchant account, ecommerce restricted products can be sold with cards, but only through an acquirer that has approved that product line. The groups below cover most restricted ecommerce stores.

Supplements and Nutraceuticals

Stripe prohibits "pseudo-pharmaceuticals or nutraceuticals that are not safe or make harmful claims", and Shopify Payments bans pseudo pharmaceuticals that make health claims that are not verified. Legitimate supplement brands still get caught, because underwriters read the product pages and any claim about treating or curing a condition is a red flag. Our guide to payment gateways for supplements and nutraceuticals goes deeper, and peptide sellers face stricter rules again, as covered in our guide to high risk payment processors for peptides.

CBD and Hemp

Shopify Payments says it does not support the sale of hemp, CBD and THC products. Stripe lists CBD with negligible THC as restricted, which means case by case approval. A CBD store therefore needs a high risk ecommerce account from the start, with lab reports for every product and a website that avoids medical claims. See our guide on how to get approved for a CBD payment gateway.

Vapes and E-Cigarettes

Vapes are among the hardest products to process online. Since 27 March 2021, US online vape sellers fall under the PACT Act: they must register with the ATF and with each state they ship to, verify age on every order and use delivery that checks an adult ID. USPS has treated e-cigarettes as nonmailable since 21 October 2021. In April 2026, 25 state attorneys general wrote to the card networks and payment companies asking them to cut off illegal vape sellers, and only 45 vape products had FDA authorisation as of May 2026. Payment processors for high risk ecommerce merchants now ask for proof that every product is authorised.

Firearms, Knives and Adult Products

Shopify Payments prohibits firearms, ammunition and weapons, and PayPal prohibits firearms, certain firearm parts and certain knives regulated by law. Adult products are banned on Shopify Payments and restricted elsewhere. Stores in these categories need a high risk online merchant account with an acquirer that accepts the category in writing, plus strict age checks and a clear returns policy.

Brand Resale and High Ticket Electronics

Stripe prohibits the unauthorised sale of brand-name or designer products, so resellers need to show supply chain evidence, such as invoices from authorised distributors. High ticket electronics are not banned, but their fraud losses per order are large, so acquirers set lower limits and higher reserves. For a high risk merchant account, ecommerce restricted products like these are approved on evidence, not on promises.

Read more: the list of high risk merchant industries and MCC codes and whether Stripe and PayPal allow high risk merchants.

Alcohol and Online Liquor Sales

Online alcohol sales are legal in most of the US and Europe, but they carry state rules, age checks and carrier limits that most processors do not want to manage. That is why online wine and spirits stores are usually treated as high risk online merchants, even when they are fully licensed.

High Risk Merchant Account Providers for Liquor Stores

High risk merchant account providers for liquor stores look first at your licences. In the US, direct-to-consumer wine shipping is allowed in 49 states and Washington DC, with Utah the only full ban since Delaware opened on 15 August 2026. Spirits are far more limited, with direct shipping allowed in only around 10 states plus DC. The acquirer wants to see that you only ship where you are licensed, and that your checkout blocks the rest.

Mainstream processors treat alcohol cautiously. PayPal requires pre-approval for alcohol sales. WooPayments asks US and Canadian alcohol sellers to contact support for approval, which takes about 7 business days. Stores classified under MCC 5921, package stores for beer, wine and liquor, usually do better with high risk merchant account providers for liquor stores that already serve the category.

Age Checks and Carrier Rules

Age verification is the other half of the file. Shopify requires effective age checks so alcohol cannot be bought or received by anyone under 21. USPS does not carry alcohol at all. UPS and FedEx carry it only for licensed shippers with a signed alcohol agreement, and both require an adult signature from someone aged 21 or over. An underwriter will ask how your store checks age at checkout and at the door.

Beyond liquor, the same logic applies to small specialty retailers selling knives, vape accessories or adult products. These are the high risk merchant account options for small specialty retailers in practice: show the licence, show the age checks and show that you only ship where the product is legal. Our guide to high risk merchant accounts in the USA covers the US side in more detail.

Ecommerce Platforms That Support High Risk Payment Processing

Most ecommerce platforms that support high risk payment processing do it through third-party gateways rather than their own payments product. The platform decides how easy that is and what it costs, so it is worth knowing the rules before you choose or migrate. The platform is one of the payment processing challenges high risk retail stores most often underestimate.

Shopify

Shopify Payments prohibits many high risk products, including CBD, tobacco and vapes, firearms, prescription drugs and adult products. Stores in those categories need a high risk ecommerce account with a third-party gateway, and Shopify then charges an extra fee on every sale: 2% on Basic, 1% on Grow, 0.6% on Advanced and 0.2% on Plus. Build that into your pricing, and see our guide to banking for Shopify and marketplace sellers for the payout side. Our guide to high risk payment processors for Shopify covers the details.

WooCommerce

WooCommerce is open-source and says it does not limit how the software is used, so it is the most flexible of the ecommerce platforms that support high risk payment processing. Its own WooPayments service does not serve highly regulated products, but any compatible gateway plugin can be installed. See our guide to high risk payment gateways for WooCommerce.

BigCommerce

From 1 June 2026, BigCommerce charges an open payment provider fee on gateways outside its embedded list: 2.0% on Core, 1.0% on Growth and 0.6% on Scale, with no fee on Performance. Twenty-one embedded providers are exempt. Check whether your acquirer's gateway is on that list before you migrate.

Custom and Headless Checkouts

A custom checkout gives you full control and no platform fee, but you carry more of the PCI compliance work. Most high risk online merchants start with a hosted payment page or a plugin and build a custom checkout only once volume justifies it. Our explainer on ecommerce payment gateways sets out how the pieces fit.

Payment Processors for High Risk Ecommerce Merchants

Payment processors for high risk ecommerce merchants combine three things: an acquirer that has approved your products, a payment gateway that connects to your store, and the fraud and dispute tools that keep your ratios down. The acquirer is the part that decides whether a high risk ecommerce merchant account lasts.

E-Commerce High Risk Merchant Services

Good e-commerce high risk merchant services come as a bundle. You get the merchant account, the gateway, 3D Secure, fraud screening, chargeback alerts, recurring billing with card updates and settlement in the currencies you sell in. When these e-commerce high risk merchant services come from one matched partner, you connect once and the pieces are approved for the same business. Our guide on how to set up a high risk payment gateway explains the gateway side.

What the Right Setup Includes

The right high risk ecommerce merchant account has written approval for every product you sell, a reserve and a limit agreed before you sign, settlement in USD, EUR, GBP, CAD or the currencies you need, and a clear billing descriptor. A merchant selling across borders often benefits from more than one merchant ID and routing between them, so one limit or one bad month does not stop sales. Our guide on how to open a high risk merchant account walks through the approval steps.

High Risk Retail Payment Solutions for Physical Stores

Many specialty retailers sell in a shop and online. High risk retail payment solutions for a physical store usually cost less, because card-present payments carry far less fraud, but the acquirer still needs to approve the products. It helps to run high risk retail payment solutions and online sales through the same partner, so your history builds in one place.

Payment Methods Beyond Cards

High risk ecommerce payment solutions are not only about cards. Wallets such as Apple Pay and Google Pay, bank transfers, open banking and ACH all widen your options, and some carry lower chargeback exposure. Baymard found that 9% of shoppers who abandoned a checkout did so because their preferred payment method was missing. Our guide to high risk ACH payment processing covers bank payments.

Your card sales also need somewhere to land. The settlement account must accept your sector too, so read our guides on how to open a high risk bank account and banking for ecommerce businesses.

Chargebacks and Fraud for High Risk Online Merchants

High risk online merchants live or die by their dispute ratio. The card schemes watch it every month, and an account that crosses their thresholds pays fines and can be closed. Keeping the ratio low is part of running the store, not a task for later.

Visa and Mastercard Thresholds

Visa's Acquirer Monitoring Program, VAMP, covers card-not-present transactions only, which is exactly where high risk online merchants sit. Since 1 April 2026, a merchant with a combined fraud and dispute ratio of 1.5% or more and at least 1,500 cases in a month is flagged as excessive in the US, Canada, Europe and Asia Pacific, with fees reported at about USD 8 per case. Mastercard flags merchants at 1.5% and 100 chargebacks in a month, with fines starting at USD 1,000 in the second month. An account closed for excessive chargebacks can land on the Mastercard MATCH list for 5 years.

Tools That Cut Disputes

Visa Compelling Evidence 3.0, in place since 15 April 2023, lets a merchant defeat a card-not-present fraud dispute by showing two earlier undisputed orders from the same customer, 120 to 365 days old, with matching data such as the IP address or device ID. Verifi's services give merchants 72 hours to refund before a dispute becomes a chargeback, and disputes resolved that way do not count against Visa's ratio. Mastercard's Ethoca Alerts prevented more than 39 million chargebacks in 2025. With a high risk merchant account, online payment authentication through 3D Secure shifts fraud liability to the card issuer.

Our guides on chargeback management for high risk merchants and fraud prevention for high risk merchants cover the tools in detail.

Checkout Trust and Approval Rates

Chargebacks start at checkout. Baymard puts average cart abandonment at 70.22%, and among shoppers who abandon a checkout, 19% say they did not trust the site with their card details and 10% had a card declined. A clear descriptor, a visible refund policy, contact details on every page and a fast, familiar checkout reduce both abandonment and disputes. For a high risk merchant account, online payment approval rates matter as much as the rate you pay.

What a High Risk Ecommerce Merchant Account Costs

A high risk ecommerce merchant account costs more than a standard one because the acquirer carries more fraud and refund risk. Low risk online stores usually pay about 1.5% to 2.9% per sale. The ranges below are typical market figures on the lower side, taken from published industry guides in 2026.

The rate is the number everyone compares, but it is rarely the biggest cost. On USD 50,000 a month, a 10% reserve holds USD 5,000 of your cash every month. On Shopify Basic, the third-party gateway fee adds another 2%, or USD 1,000 a month on the same sales. Chargebacks add their own fees on top. Payment processors for high risk ecommerce merchants price the whole package, so compare the package, not the headline rate.

Your final price depends on your products, volume, chargeback history, platform and markets, and it is confirmed in writing before you sign. Our guide on high risk merchant account fees and rates breaks down each line.

Timeline to Open a High Risk Ecommerce Merchant Account

With a complete file, a high risk ecommerce merchant account is usually live in 5 to 7 business days with our partners. This is the timeline they work to.

Connecting the store comes on top. A plugin or hosted payment page can be live the same day the credentials arrive. Most delays come from website gaps or missing documents, so check both before you apply.

Documents and Website Checks for Online Stores

Underwriters approve a high risk ecommerce account on two things: the company file and the website. The website is often where a store fails, because it is checked against card scheme rules and against what you declared on the form.

The Company File

Expect to provide incorporation documents, a registry extract, proof of the business address, a business bank letter and a passport and proof of address for each owner with 25% or more. Most acquirers also want 3 to 6 months of bank statements and, if you already take cards, 3 to 6 months of processing statements. A new store without history can still apply, usually with a lower limit and a higher reserve at the start. If you are still choosing where to form the company, see our guide to the best jurisdictions for e-commerce company registration.

Product and Supplier Evidence

For restricted products, add the evidence behind them: lab reports for CBD and supplements, FDA authorisation for vape products, alcohol licences for every state you ship to, and supplier invoices for branded goods. A full product list with prices helps the underwriter match your store to the right category.

Website Rules Acquirers Check

Visa's rules require your website to show customer service contact details, your country and your refund policy before checkout, with a box the customer ticks to accept it. Acquirers also check your terms, privacy policy, shipping and cancellation terms, prices in the right currency, card logos and a working SSL certificate. Subscription stores must show the price and billing cycle clearly before payment. Our guide on how to set up an online payment gateway lists the website checks in full.

Common High Risk Ecommerce Merchant Account Mistakes

Most declined applications and closed accounts come from a few avoidable mistakes. Each one is easy to fix before you apply.

Hiding a Restricted Product

Leaving a CBD line, a vape accessory or an alcohol range off the application may get the store approved, but the acquirer will find it when it reviews your website or your transactions. The account is then closed for misrepresentation, which is far worse than an honest decline. Declare every product and apply for a high risk online merchant account where it is accepted.

Making Health Claims

Words such as cure, treat or prevent on a supplement or CBD page turn a manageable file into a decline. Remove medical claims, keep product descriptions factual and link to lab reports instead.

Starting on a Mainstream Processor

Opening a standard account because it takes 10 minutes often ends in a frozen balance at the first review. A termination for cause can also put you on the MATCH list for 5 years. If your products are on a restricted list, start with a high risk ecommerce merchant account.

Ignoring the Dispute Ratio

Many stores only look at chargebacks when the acquirer calls. Check your ratio every week, use alerts and refund quickly when a customer complains, because a refund costs far less than a chargeback.

Bottom Line

Online stores selling restricted products, running subscriptions or shipping on long lead times need a high risk ecommerce merchant account to take cards safely. Mainstream processors either refuse these stores or accept them and close them later, and the cost of that closure is far higher than the price of the right account.

The route that works is simple: declare what you sell, fix your website first, apply once to a partner that accepts your products and keep your dispute ratio low. With a high risk merchant account, ecommerce restricted products become a normal part of the catalogue. We handle the matching, the KYC pack and the introduction, and most high risk ecommerce accounts are live in 5 to 7 business days.