Merchant underwriting is the process by which an acquirer, payment facilitator or other payment service provider evaluates a business before allowing it to accept card or other electronic payments. The underwriter asks two main questions: is the business genuine and lawful, and could it leave the provider with losses it cannot recover? Based on the answers, the provider approves or declines the application and sets the terms, such as pricing, processing limits, payout timing and reserves.
Underwriting is part of the wider merchant onboarding workflow. It combines compliance checks that any regulated firm must perform, such as know-your-business verification and sanctions screening, with a credit-style judgement about the merchant's financial exposure. Card networks require acquirers to underwrite their merchants and hold them responsible for the transactions those merchants process.
Why merchants are a credit risk
When a cardholder disputes a purchase, the acquirer pays the chargeback to the issuer and then tries to recover it from the merchant. If the merchant has closed, gone bankrupt or simply refuses to pay, the acquirer absorbs the loss. The risk is greatest where customers pay well in advance of receiving goods or services, such as airlines, travel agencies, event organisers, furniture makers and annual subscriptions. The total value of sales not yet delivered is often called the merchant's delayed delivery exposure, and it can be many times a month's processing volume.
Underwriting therefore resembles lending. The provider is effectively extending credit to the merchant for the period between payment and delivery, plus the time cardholders have to raise disputes.
Fraud risk sits alongside credit risk. A business may be financially sound but sell products that attract stolen cards, or it may be a front for another activity entirely. Underwriters therefore look not only at whether a merchant can pay its debts, but also at whether the sales it plans to process are what they appear to be.
What underwriters review
A typical review covers:
- Identity and ownership. Company registration, directors and beneficial owners, with identity checks and screening against sanctions, adverse media and terminated-merchant databases.
- Business model. What the merchant sells, how and where it sells, its website, its refund and delivery policies, and whether the products are legal in the countries served.
- Category and risk class. The correct merchant category code and an internal merchant risk classification, which determine the level of scrutiny.
- Expected activity. Monthly volume, average ticket size, share of card-not-present sales and expected chargeback levels.
- Financial strength. Bank statements, accounts and, for larger merchants, credit reports, to judge whether the business could cover refunds and disputes.
- Processing history. Previous statements from other providers, which show past fraud, refunds and chargebacks.
Terms and risk controls
Underwriting decisions are not simply yes or no. A provider may approve a merchant but apply controls that limit its exposure:
- A rolling reserve, in which a percentage of each day's sales is held for a set period, or a fixed reserve of an agreed amount.
- Delayed payouts, so that funds reach the merchant some days after the sale.
- Monthly volume caps or limits on individual transaction sizes.
- Higher pricing for riskier categories, reflecting expected losses.
- Personal guarantees from owners for some small businesses.
Merchants in sectors that providers consider risky, such as gambling, adult content, nutraceuticals, crypto or travel, may be referred to a high-risk acquirer that specialises in them.
Automated and ongoing underwriting
Payment facilitators and online providers that onboard many small merchants rely on automated underwriting. Data from company registries, identity services, website scans and bank account checks feed rules and models that approve most low-risk applicants instantly. Some providers let merchants start processing immediately and complete the review once volume builds, holding payouts until checks are finished.
Underwriting does not end at approval. Providers monitor each merchant's activity against what was declared and re-underwrite when volume jumps, the product line changes, chargebacks rise or the merchant asks for better terms. Sudden changes can signal growth, but they can also signal merchant fraud or transaction laundering.
Challenges
Underwriters must balance speed and safety. Strict checks reduce losses but frustrate legitimate businesses and send them to competitors, while light checks win customers but attract fraudsters. Smaller and newer businesses, which lack financial history, can find it hard to obtain fair terms. Reserves are a frequent source of complaints, as they tie up cash that merchants need to run their business. Clear, documented underwriting policies, regularly reviewed against actual losses, help providers make consistent decisions and explain them to merchants and regulators.