Written by Dale Erling | Digital Payment Strategist, IntelliPay
Quick Summary: Payment processors assign every merchant a risk score based on chargeback rate, industry type, business age, transaction patterns, and owner credit history. A higher score leads to rolling reserves, higher fees, transaction limits, and in severe cases, account termination. You can improve your score by lowering disputes, keeping volume consistent, and ensuring your MCC is correctly classified.
Contents
What Is a Merchant Risk Score?
A merchant risk score is a numerical assessment that payment processors and acquiring banks use to evaluate the likelihood that your business will generate chargebacks, fraud losses, or regulatory problems. It is not a one-time snapshot. Processors update it continuously based on your transaction history, dispute rates, industry classification, and dozens of other variables.
Think of it the way an insurance company thinks about a policyholder. A business with consistent sales volume, low disputes, and a long processing history gets favorable terms. A business that is new, operates in a high-dispute category, or shows irregular transaction patterns gets treated as a higher liability, even if nothing has actually gone wrong.
This scoring process happens before you ever process a transaction. It begins during merchant account underwriting and continues for the life of your account.
What Factors Determine Your Risk Score?
Processors use a combination of static and dynamic factors when calculating your score. Static factors are tied to who you are and what you sell. Dynamic factors reflect what is actually happening in your account over time.
Static Factors
Industry type and Merchant Category Code (MCC): Certain categories carry automatic risk flags regardless of your individual history. Subscription billing, travel, ticket resales, nutraceuticals, and any business that sells primarily online are examples of industries that start with a higher baseline score.
Business age: New businesses have no processing history, so processors have nothing to benchmark against. A brand-new merchant in a high-risk vertical may receive a high initial score simply due to uncertainty.
Owner credit history: Your personal and business credit profile is reviewed during underwriting. Past financial difficulties, bankruptcies, or problems with prior processors are significant negative signals.
Geographic location: Businesses that process a high volume of international transactions, particularly from regions associated with fraud, are scored higher.
Dynamic Factors
Chargeback rate: This is the single most watched metric. Visa’s VAMP (Visa Acquirer Monitoring Program) thresholds set a 0.5% dispute ratio as the standard monitoring threshold, with a 0.9% ratio triggering elevated scrutiny. According to Visa’s VAMP program guidelines, merchants who exceed a 0.9% dispute ratio face mandatory remediation and potential account suspension, and Visa reported in 2024 that chargeback-related losses to acquirers exceeded $1.5 billion annually across the U.S. network. Exceeding these levels can result in fines, reserve requirements, or account termination.
Refund and void rate: A high volume of refunds relative to sales can signal product quality problems, misleading marketing, or potential fraud.
Average ticket size consistency: Sudden spikes in transaction size relative to your historical average are a red flag. A merchant who normally processes $50 transactions and suddenly runs several at $2,000 triggers automated review.
Transaction velocity: A sharp increase in transaction volume over a short period, especially without a clear seasonal explanation, looks like a potential bust-out or account takeover to risk algorithms.
Card-not-present ratio: Businesses that process primarily online or by phone carry higher fraud exposure than those that take cards in person, which is reflected in your score.
What Happens When Your Risk Score Increases?
A higher risk score translates to direct operational consequences. Processors have several tools they use to manage what they see as elevated exposure.
Rolling reserves are the most common response. Your processor holds back a percentage of each transaction, typically 5 to 10 percent, in a reserve account for a rolling period of 90 to 180 days. This protects the processor against potential chargeback losses but directly reduces your available cash flow. If you have ever wondered why your merchant account has a reserve on it, a risk score increase is usually the trigger.
Higher processing fees are the second common consequence. Processors quote higher rates to merchants they view as riskier. Since the processor assumes liability for chargebacks that a merchant cannot cover, a higher risk score means higher cost to manage that exposure.
Transaction limits may be placed on your account, capping the dollar amount you can process in a day or month. For growing businesses, this can create serious operational problems during peak periods.
Account termination is the most severe outcome. If your chargeback rate or fraud rate crosses network thresholds, your processor is contractually required to act. Termination can result in placement on the MATCH list (Member Alert to Control High-Risk Merchants), which makes opening a new merchant account extremely difficult for up to five years.
How Nacha’s 2026 Rules Add Another Layer of Scoring
If your business accepts ACH payments, risk scoring now applies there too. Nacha’s new Risk Management Rules, with phases effective in March and June 2026, require all ACH participants to implement risk-based processes designed to detect and prevent fraudulent ACH activity. Originators and their processors are now required to monitor account behavior patterns, not just validate account numbers at onboarding. Businesses with irregular ACH debit activity will face increased scrutiny from their Originating Depository Financial Institution (ODFI), regardless of whether any fraud has actually occurred.
This means the risk scoring environment for merchants in 2026 is more comprehensive than it has ever been. Card processing, ACH, and even digital wallet transactions are all feeding into a continuous risk profile that processors maintain on your business. For more on what the new Nacha rules require, see Understanding the 2026 Nacha Risk Management Rules.
How to Improve Your Merchant Risk Score
The good news is that risk scores are not permanent. Processors update them based on current account behavior, and consistent, clean processing history improves your profile over time. Here are the most effective actions you can take right now.
Lower your chargeback rate. This is the highest-leverage move. Implement clear refund and cancellation policies, use address verification (AVS) on all card-not-present transactions, and respond to disputes promptly. Even reducing your chargeback rate from 0.8% to 0.4% can move you out of a monitoring category entirely.
Use accurate transaction descriptors. A significant percentage of chargebacks happen because customers do not recognize the charge on their statement. Your billing descriptor should clearly identify your business name, not a parent company or generic processor name.
Keep your processing volume consistent. Processors are not just looking at your chargeback rate. They are watching for unusual spikes that suggest operational instability. If you expect a large volume increase, communicate that to your processor in advance.
Verify your MCC is correct. Merchants are sometimes classified under the wrong Merchant Category Code, which can place them in a higher-risk tier unnecessarily. Confirm with your processor that your MCC accurately reflects your business type. An incorrect MCC can also affect your interchange rates.
Understand what is in your reserve agreement. If you have a rolling reserve, review the terms carefully. Know the percentage being held, the rolling period, and the conditions under which the reserve can be reduced or released. Review your merchant statement monthly and confirm that reserve releases are occurring on schedule.
Frequently Asked Questions
Can I see my merchant risk score?
Processors do not typically share a numeric score directly with merchants. However, the consequences of a high score are visible: reserve requirements, higher fees, and processing limits will appear in your account terms or statement. If you have experienced unexplained fee increases or fund holds, ask your processor directly for an explanation.
Does my personal credit score affect my merchant account?
Yes, especially at onboarding. Processors review the business owner’s personal credit as part of underwriting because it signals financial stability and the ability to cover losses. Ongoing credit monitoring is less common, but a significant financial event such as a bankruptcy can trigger re-underwriting.
What is the MATCH list and how do I avoid it?
The MATCH list (Member Alert to Control High-Risk Merchants) is a shared database maintained by Mastercard that processors check before approving new merchant accounts. Placement on the MATCH list typically results from account termination due to excessive chargebacks, fraud, or violations of card network rules. It makes opening a merchant account nearly impossible for up to five years. Avoiding it starts with managing your chargeback rate proactively before it reaches network thresholds.
How does switching processors affect my risk score?
Your processing history travels with you. When you apply to a new processor, they will review your prior chargeback history, any reserves held by previous processors, and whether you have ever been on the MATCH list. A clean history helps you qualify for better rates. If you are considering switching processors, do it from a position of strength, not after a risk event has already occurred.
IntelliPay’s underwriting team works with merchants across all risk profiles, including industries that standard processors decline. If you are unsure where your account stands or want a review of your current terms, talk to a consultant or start with a free statement audit to see exactly what you are paying and why.
Disclaimer: This article is for informational purposes only and does not constitute financial or legal advice. Processor risk policies, Nacha rules, and card network thresholds are subject to change. For current Nacha Risk Management Rule requirements, consult Nacha.org directly.
