Peptide Payment Processing & High-Risk Underwriting Explained

Key takeaways

Peptide merchants are underwritten as high risk because of product classification and regulatory exposure, not only chargebacks. Visa’s own merchant standards list card-absent MCCs 5122 (drugs) and 5912 (pharmacies) as “high integrity risk.”
Stripe’s restricted-business list (updated 22 September 2026) does not use the word “peptide,” but prohibits incorrectly labelled research chemicals and unsafe pseudo-pharmaceuticals, and puts pharmaceuticals and telehealth under additional due diligence. The underwriter decides which bucket you fall into.
Reserves are the price of approval. One high-risk processor publishes a typical reserve of 10% of each sale held 60–90 days, raisable to 40% if chargebacks spike. Your agreement, not a blog, sets your number.
Visa’s VAMP excessive-merchant threshold in the US, Canada, EU and Asia-Pacific dropped to a 1.5% fraud-plus-dispute ratio on 1 April 2026, with a 1,500 monthly count minimum. Acquirers usually act long before a network threshold is reached.
Underwriters and Google reviewers read the same website. Claims, identity gaps and catalogue scope that fail Merchant Center tend to fail underwriting too.

How does high-risk payment underwriting work for peptide companies?

A peptide company applying for card processing is assessed by an acquiring bank (directly, or through a processor, ISO or payment facilitator) that decides whether to accept the risk, which merchant category code (MCC) to assign, how much of each sale to hold as a reserve, and what chargeback limits apply. The decision rests on product classification, website claims, business identity, processing history and fulfilment evidence — and it can be revisited at any time after approval.

That last point is what catches operators out. Approval is not the end of underwriting; it is the start of monitoring. Acquirers and the vendors they use scan merchant websites continuously, and a change in catalogue, claims or dispute rate can move an account from approved to frozen.

Who is who

The acquirer is the bank that holds the card-network relationship and the liability. A processor moves transactions. An ISO or payment facilitator sells and manages accounts on an acquirer’s behalf. A MID is your merchant account identifier. A gateway or orchestration layer routes transactions to one or more MIDs but does not itself make you approved.

Why do Stripe and other mainstream processors decline or close peptide accounts?

Mainstream aggregators onboard quickly because they underwrite lightly at signup and rely on monitoring afterwards. When monitoring finds a category outside their risk appetite, the account is reviewed, often with funds held. For peptides, the relevant lines on Stripe’s Prohibited and Restricted Businesses page, last updated 22 September 2026, are:

Stripe list entry	Status	Why a peptide store might be read into it
Incorrectly labeled research chemicals	Prohibited	“Research use” labelling contradicted by the rest of the site
Pseudo-pharmaceuticals or nutraceuticals that are not safe or make harmful claims	Prohibited	Benefit, healing or weight claims on product pages
Substances designed to mimic illegal drugs	Prohibited	Rarely relevant, but part of the same review
Card-not-present prescription-only products and pharmaceuticals	Restricted (additional due diligence)	Products named after or sold as prescription drugs
Telemedicine and telehealth services	Restricted (additional due diligence)	Clinics prescribing peptide therapies

The word “peptide” does not appear on the page. Whether a given store is prohibited, restricted or acceptable is a judgement the processor makes from your website — which is why two peptide stores can have opposite experiences on the same platform. Other providers publish their own acceptable use policies; read the current version of each before you build on it.

Do not build on a platform that has told you no

Continuing to process in a category a provider prohibits risks a held balance and a termination record. Terminations for cause can follow a business to its next application.

What is an MCC, and why does it matter for peptide merchants?

The merchant category code tells the card networks what kind of business a transaction comes from. The acquirer assigns it from your application and website, and networks apply different rules by code.

Visa’s Merchant Data Standards Manual (April 2026 edition) lists “high integrity risk” MCCs for card-absent transactions. Two are directly relevant to this industry: 5122 (Drugs, Drug Proprietaries, Druggist Sundries) and 5912 (Drug Stores, Pharmacies). The same manual requires a merchant with several lines of business, one of which is high integrity risk, to put that line under the high-integrity-risk MCC rather than blending it into a lower-risk code.

Which code a peptide merchant receives depends on the acquirer’s reading of the business; there is no single “peptide MCC.” What matters for you is that the code is accurate. Processing peptide sales under a code describing some other business is the kind of mismatch acquirers and networks treat as misrepresentation.

What does a high-risk underwriter actually review?

Requirements vary by acquirer. The categories below are what we typically see requested; your provider’s checklist is the authority.

Area	Typical evidence	What they are testing
Entity and owners	Formation documents, EIN or equivalent, owner ID, beneficial ownership	Who is liable, and whether owners appear on terminated-merchant files
Processing history	Recent processing statements	Volume, refund and chargeback patterns, prior terminations
Banking	Business bank statements	Ability to absorb chargebacks and reserves
Website	Live review of product pages, claims, policies, checkout	Whether the site matches the application
Products	Product list, supplier invoices, certificates of analysis	Genuine sourcing, quality documentation, prohibited items
Fulfilment	Shipping process, carriers, delivery evidence	Ability to defend “item not received” disputes
Certifications	LegitScript or pharmacy licensing where applicable	Required for some pharmacy and telehealth models

The website row is where most applications are really decided, and it is the same review Google runs. See the peptide site remediation checklist — almost every item on it also reduces underwriting friction.

How do rolling reserves work, and how much will be held?

A rolling reserve holds back a percentage of each sale for a fixed period to cover future chargebacks and refunds, then releases it on a schedule. It is the acquirer’s protection against a merchant disappearing with customer money.

Published figures are rare, which is why TagadaPay’s processor page is useful as one concrete, primary-source example rather than a benchmark. It states a reserve of “usually 10% of each sale, held 60 to 90 days,” possibly lower or zero depending on history and category, and that its risk system can raise it to 40% if chargebacks or alerts spike. It also states that after a contract ends, remaining balances and reserves are held for up to 180 days. Other providers will differ; many quote figures only after underwriting.

Model the cash, not the rate

A 10% reserve held 90 days on a growing business ties up roughly three months of that percentage of revenue before the first release. For a fast-scaling store, reserves — not processing fees — are often the bigger cash-flow line. Put the reserve schedule in your plan before you scale ad spend.

What chargeback thresholds do the card networks enforce?

Program	Metric	Merchant threshold	Source
Visa VAMP — Excessive Merchant (US, Canada, EU, AP)	(Fraud reports + disputes) ÷ settled card-not-present transactions	≥150 bps (1.5%) from 1 April 2026, previously 220 bps; and ≥1,500 fraud + disputes per month	Visa VAMP fact sheet
Mastercard Excessive Chargeback Merchant	Chargebacks ÷ transactions	≥100 chargebacks and ≥1.5% in a month	Acquirer program guides
Mastercard High Excessive	Chargebacks ÷ transactions	≥300 chargebacks and ≥3.0%	Acquirer program guides

Two things are easy to miss. First, the count minimums mean small merchants rarely enter network programs by count alone — but acquirers set their own tolerances in your agreement and can act at any level. Second, VAMP counts fraud reports as well as disputes, and excludes disputes resolved through pre-dispute solutions, so fraud prevention and dispute-deflection tools change the numerator directly.

Termination for excessive chargebacks or fraud can lead to a listing on Mastercard’s MATCH file, which acquirers check at onboarding. That is why a chargeback problem on one account becomes a financing problem for the whole business.

Is it allowed to split volume across several merchant accounts?

Multiple MIDs are normal when they are disclosed and separate genuinely distinct things — different brands, product lines or channels, each with its own descriptor. Visa’s Payment Facilitator and Marketplace Risk Guide draws the line clearly: it describes load balancing as distributing payments and dispute or fraud activity across accounts “with the aim to remain undetected by risk-monitoring systems or Visa’s compliance programs,” and says multiple accounts for the same sales channel, often with identical descriptors, should be investigated.

Payment orchestration and routing tools are legitimate for redundancy and approval-rate optimisation. Ask any vendor exactly how routing is configured and make sure every MID you use was underwritten for the business actually running through it.

How does payment setup affect Google Ads and Merchant Center?

Descriptor and business name. Google’s guidance asks for consistent business name, address and contact details across your website, Merchant Center and payment profiles. A descriptor naming a different entity is an inconsistency reviewers can see.
Checkout transparency. Hidden subscription terms or unclear total cost fall under Merchant Center’s Misrepresentation policy and drive disputes.
Tracking. Hosted or third-party checkouts can break conversion tracking. Confirm how purchase events reach Google before switching processors — see conversion tracking for peptide ecommerce.
Scaling. Ad spend increases volume faster than reserves release. Coordinate growth with your processor; sudden spikes can trigger reviews.

For one example of a processor in this space, see our evidence-based profile of Tagada for peptide companies. To check whether your site is ready for both reviews, use the Google Ads Readiness Score or book a strategy call. We do not broker merchant accounts and cannot promise approval by any processor.

Sources

Visa — Visa Merchant Data Standards Manual (April 2026; high integrity risk MCCs)
Visa — Visa Acquirer Monitoring Program fact sheet
Visa — Payment Facilitator and Marketplace Risk Guide (load balancing)
Stripe — Prohibited and Restricted Businesses (last updated 22 September 2026)
Braintree developer docs — Mastercard Excessive Chargeback Program (acquirer-published thresholds)
TagadaPay — published processor terms (reserve, payout and termination terms)
Google Merchant Center Help — Request a review of your issues (business data consistency)

Checked 23 September 2026. Card-network thresholds and provider terms change; confirm with your acquirer.

Founder Question

“Stripe approved us instantly. Why would they shut us down later?”

Our Perspective

Instant approval means light underwriting at signup and heavier monitoring afterwards. When monitoring reads your site into a restricted or prohibited category, the account is reviewed, often with funds held. An instant yes is not a considered yes, and it is safer to know where you stand with a high-risk acquirer before your revenue depends on the answer.

Practical Recommendation

Remediate the website before applying. Underwriters review the same claims, identity data and catalogue scope that Google does.
Put the reserve schedule and post-termination hold into your cash-flow model before scaling ad spend. At growth rates, reserves can outweigh processing fees.
Hold more than one properly underwritten processor for redundancy, each disclosed and covering the business actually running through it. Never split volume to stay under monitoring thresholds.

What we learned

Operators tend to treat payments and Google as two separate problems with two separate vendors. In practice both are a stranger reading the same website and deciding whether they believe it. The businesses that get through underwriting cleanly are usually the ones whose sites would also survive a Merchant Center review — and the ones that lose a processor usually lost it for the same claims Google would have flagged.

Frequently asked

Can peptide companies use Stripe?

Stripe’s list does not name peptides, but it prohibits incorrectly labelled research chemicals and unsafe or harmful-claim pseudo-pharmaceuticals, and requires extra due diligence for pharmaceuticals and telehealth. Whether a specific store is acceptable is Stripe’s decision based on the business and website.

What MCC do peptide merchants get?

There is no single peptide code. The acquirer assigns it based on the business. Visa lists card-absent 5122 and 5912 among high integrity risk MCCs, and requires the high-risk line of a mixed business to be coded as such.

How long are rolling reserves held?

It depends on the agreement. One published example, TagadaPay, states a typical 10% reserve held 60 to 90 days. Other providers set different terms, and reserves can be increased if dispute rates rise.

What chargeback rate gets a merchant account terminated?

There is no single number. Visa and Mastercard monitoring programs have published thresholds, but acquirers enforce their own limits in the merchant agreement and may act well below network levels.

Does LegitScript certification help with payment processing?

For pharmacy and telehealth models it can be required or helpful. It does not apply to research-use suppliers, whose underwriting turns on product classification and website claims.

Next step

If you want this applied to your account and your site rather than read in the abstract, book a 30-minute strategy session. We will look at the domain before the call.

Book a Strategy Call

Payment Processing for Peptide Companies: How High-Risk Underwriting Actually Works