Payments Glossary · Risk & Compliance

Prohibited and Restricted MCCs

Also called prohibited merchant category code, restricted MCC, MCC miscoding

Merchant category codes that an acquirer will not board or will only board under registration, and the coding games that get merchants terminated.

What it is

A merchant category code is a four-digit classification of what a business sells. It drives interchange rates, network program applicability, tax reporting, and issuer-side controls. It is also the field most often filled in incorrectly, sometimes carelessly and sometimes on purpose. Prohibited categories are those an acquirer will not board at all under its sponsor bank's policy. Restricted categories require network registration and additional diligence, such as those falling under the Visa Integrity Risk Program: adult, dating, gambling and gaming, pharmaceuticals and weight loss, crypto, telemarketing, negative option billing, tobacco, nutraceuticals, firearms and CBD. Miscoding is the recurring abuse. Boarding a business under a code that does not describe it, in order to obtain approval or a lower interchange rate, is a violation of network rules, and where the transactions belong to a different business entirely it is transaction laundering, which appears in the MATCH reason codes as illegal transactions and carries exposure well beyond a closed account. Coding also carries state-law overlays. After all four networks paused implementation of the firearms merchant category code in March 2023, several states legislated on the question, with Florida among those barring financial institutions from requiring the firearms code, while California moved in the opposite direction.

Why it matters to your business

Read the merchant category code on your application before you sign it and confirm it describes what you actually sell. If it does not, ask why, and do not accept it is better for your rate as an answer. The rate benefit is small and temporary; the consequence of a network review finding miscoded volume is losing your account and being listed. If your business genuinely spans multiple categories, that is a normal conversation with an underwriter and sometimes results in multiple merchant identification numbers. That is the honest solution to the problem miscoding pretends to solve. This is education, not legal advice; whether particular activity is lawful is a question for your own counsel.

Where it gets contested

The MCC has quietly become a political instrument. It began as a billing and interchange classification and is now used to decide who can be paid, what issuers can block, and what states will permit. The firearms code fight is the clearest example, with states legislating in opposite directions and the networks pausing implementation rather than being caught between them. Inside the sales channel, the argument is about intent versus effect. An agent who codes a restaurant with a large catering business as a caterer may be optimizing legitimately. An agent who codes a nutraceutical continuity biller as general retail is hiding it, and both the merchant and the agent are exposed. What is unresolved is who bears responsibility for miscoding. The merchant signs the application. The agent usually fills it in. The acquirer approves it. When the network finds it, the merchant is the one terminated and listed, which is why merchants should read the code on their own application even though almost none do.

How to check it yourself

Find the four-digit merchant category code on your merchant application or your monthly statement, look it up, and confirm the description matches your actual business. If it does not, email your processor and ask for the reason in writing.

Receipts

Claims above that are checkable, with where to check them. Published so you do not have to take anyone's word for it.

  • VIRP tiered categories requiring registration and acquirer diligence

    corepay.net ↗
  • Underwriters check merchant category code accuracy against actual operations, and mismatched MCC is a common decline reason

    paymentcloudinc.com ↗
  • MATCH reason codes include illegal transactions, which covers transaction laundering

    paymentcloudinc.com ↗
  • State laws on the firearms merchant category code diverge, with Florida barring required use and California requiring it

    paymentsdive.com ↗