A licensed firearms dealer with eight years of clean trading history logs in one Tuesday morning and finds the payment gateway disabled. No fraud. No chargeback spike. Just an email citing a prohibited-business clause buried in a terms-of-service document that was updated months ago. The funds from last week’s sales are held for review. The online store still takes orders, but none of them can be paid for.
This happens often enough that it has become a predictable operating risk rather than bad luck. Mainstream aggregators – Stripe, Square, PayPal – are built for volume and speed of onboarding, which means they accept merchants first and sort out risk later. For most retail and SaaS businesses, that trade works beautifully. For firearms retailers, CBD brands, sweepstakes operators, ammunition sellers, gunsmiths and a long tail of other regulated categories, it produces sudden account termination with little recourse.
“High-risk” is a banking label, not a judgment on your business
The term causes endless confusion because it sounds like an accusation. It is not. High-risk is an underwriting classification applied by acquiring banks and card networks based on how likely a merchant portfolio is to generate losses, disputes or regulatory attention. A business can be fully licensed, profitable and compliant and still land in the category.
Several factors drive the designation. Regulatory complexity is the big one: firearms sales involve federal licensing, state-by-state restrictions and age verification, while CBD sits in a patchwork of rules that differ across jurisdictions. Chargeback exposure matters too, as does average ticket size, the share of card-not-present transactions, and whether the product category has a history of reputational problems for banks. Sweepstakes and promotional contest operators attract scrutiny because the model resembles gaming to a compliance officer skimming a merchant application.
None of that means processing is unavailable. It means processing has to be arranged deliberately, with an acquirer that has already decided to serve the category, rather than acquired by accident through a sign-up form that never asked what you sell.
The real cost of a shutdown
Lost sales during downtime are the obvious hit, and the easiest to recover from. The deeper damage sits elsewhere.
- Held settlements. Reserve periods on terminated accounts commonly run 90 to 180 days. For a business with thin working capital, that alone can be existential.
- The MATCH list. Merchants terminated for certain reasons end up on the card networks’ internal terminated merchant file, which other acquirers check during underwriting. A listing typically persists for five years and makes future applications substantially harder.
- Customer trust. Checkout failures read as insolvency to buyers. Repeat customers who hit a dead payment page tend not to come back for a second attempt.
- Rebuild time. Proper underwriting for a regulated category takes days to weeks, not minutes. Starting that process after a shutdown rather than before is the most expensive version of it.
What proper underwriting actually looks like
A specialist application is heavier than a consumer sign-up form, and that is the point. Expect to supply licensing documentation, several months of processing statements or bank statements, a clear description of products and fulfilment, details of age or identity verification at checkout, and chargeback history if you have any. Underwriters also want to see your refund policy and your customer service contact routes, because both reduce dispute volume.
In exchange, you get an account that was approved knowing exactly what you sell. The pricing is usually higher than an aggregator’s flat rate and reserves may apply, but the account does not evaporate when a compliance review runs. Independent reviews of the market, including NerdWallet’s breakdown of high-risk payment processors, are a reasonable starting point for understanding how contract terms, reserve structures and cancellation fees differ between providers before you commit to anything.
Questions worth asking before you sign
- Who is the acquiring bank, and has it underwritten my category before?
- Is there a rolling reserve, and on what schedule does it release?
- What is the contract length, and what does early termination cost?
- Which gateway does this run on, and does it integrate with my existing store?
- What happens operationally if one of my merchant IDs is paused?
Redundancy beats optimisation
Merchants in regulated categories often spend their energy shaving basis points off processing rates. That is the wrong priority. The structural fix is not having a single point of failure at checkout.
Running more than one merchant ID and distributing transactions across them keeps volume on any individual account within comfortable limits and gives you somewhere to route traffic if one is paused. It is the same instinct that drives businesses selling into multiple countries to maintain several payment rails rather than one, a pattern worth reading about alongside the platforms cross-border merchants are building their stacks around this year. Diversification at the payments layer is unglamorous, and it is what separates a bad week from a closed business.
Finding a processor that was built for the category
For businesses in these verticals, the practical move is to work with a provider whose underwriting is designed around the category instead of one that tolerates it until a policy update. 2Accept operates in exactly that space, placing merchant accounts for firearms and ammunition sellers, CBD retailers, sweepstakes operators, gunsmiths and other specialised businesses that mainstream aggregators routinely decline or terminate. An FFL dealer setting up a firearms merchant account there goes through underwriting that expects licensing documentation and compliance detail up front, with gateway integration, chargeback defence and multi-MID load balancing available as part of the setup – which is a meaningfully different arrangement from hoping a general-purpose processor does not notice what is in the catalogue.
Reducing disputes is still your job
No processor can offset a weak dispute profile indefinitely. Card networks watch chargeback ratios closely, and sustained elevation above roughly one percent of transactions triggers monitoring programmes with fees and remediation requirements attached. Keeping that number low is operational work, not a processing feature.
- Use a clear, recognisable billing descriptor. A surprising share of disputes are customers who did not recognise the charge.
- Answer support requests fast. Most buyers call the bank because they could not reach you.
- Send tracking information automatically and make delivery timelines explicit before checkout.
- State restrictions plainly – age requirements, shipping limitations, transfer rules – so expectations are set before payment.
- Keep the records that win representments: AVS results, delivery confirmation, signed documentation, customer correspondence.
Move before you have to
The merchants who handle this well treat payment processing as infrastructure with a failure mode, the same way they treat inventory or insurance. They get properly underwritten while trading is calm, keep a second route live, document compliance as a matter of routine, and read the prohibited-business clauses in their agreements rather than assuming history protects them. Doing that work when nothing is broken costs a few weeks of admin. Doing it after a termination notice costs a great deal more.
