You applied for a business bank account. Got rejected. And nobody told you why.
That’s not unusual. It’s actually how the system works. Banks assess every high-risk business against a specific set of criteria, and most applicants never see the checklist the underwriter is actually using. You’re just left guessing.
This post gives you that checklist. We’ll walk through the exact red flags banks and payment processors look for, with the specific numbers and thresholds that trigger rejection. By the end, you’ll know which flags apply to your business and what to do about each one.
(If you want the full breakdown of which industries get classified as high-risk, we’ve covered that separately in our guide to high-risk industries.)
Why Do Banks Reject High-Risk Businesses in the First Place?
Banks reject high-risk businesses because the compliance cost of maintaining the account outweighs the revenue it generates. It’s an economic calculation, not a moral one.
It seems obvious (high-risk is in the name), but high-risk usually means high reward, so why do banks take the opportunities more often?
Quite simply, the math isn’t close.
Under BSA/AML requirements, banks must monitor transactions, investigate alerts, and file Suspicious Activity Reports for anything unusual. In FY 2024 alone, financial institutions filed 4.7 million SARs — that’s nearly 13,000 per day.
Each one requires investigation, narrative writing, and review. High-risk accounts generate a disproportionate share of those alerts.
Then there’s the penalty risk.
BNP Paribas paid $8.9 billion in 2014 for processing transactions involving sanctioned entities. TD Bank paid $3.09 billion in 2024 for enabling money laundering networks. HSBC paid $1.92 billion. Binance paid $4.3 billion.
After fines like those, the banking industry concluded that dropping entire categories of businesses was cheaper than managing them individually.
This is called “de-risking.”
Both FinCEN and FATF have cautioned against it. The U.S. Treasury’s own 2023 De-Risking Strategy acknowledges it disproportionately hurts legitimate businesses. But the incentive structure still rewards it, so it continues.
Context matters. When your application gets rejected, it usually isn’t personal. It’s a bank deciding your account category isn’t worth the compliance overhead. Cold comfort, I know. But understanding the reason helps you find the right solution.
Does Your Industry Automatically Flag You as High Risk?
The clearest way to think about this is in tiers.
Some industries face near-automatic rejection from mainstream processors like Stripe, Square, and PayPal. Online gambling, cannabis and marijuana, adult content, payday lending, cryptocurrency exchanges, firearms and ammunition, and MLM companies all fall here.
Check Stripe’s restricted business list or PayPal’s Acceptable Use Policy if you want to see the specifics. If your business falls into one of these categories, mainstream processors were never going to work for you.
Then there are the industries that require enhanced due diligence but aren’t automatically excluded. Travel agencies, nutraceuticals and supplements, subscription SaaS with free trials, CBD (even zero-THC products), debt collection, credit repair, e-cigarettes, telemarketing, dating services, coaching and consulting, and tech support all sit here.
Visa’s Integrity Risk Program classifies merchants into tiers based on harm potential, and many of these industries end up in Tier 1 or Tier 2. These are the ones that surprise people.
And some businesses become high-risk based on their model rather than their industry: high-ticket items over $1,000, card-not-present transactions, recurring billing, international customers, or cash-intensive operations like restaurants and car washes.
One example: a CBD business owner in Milwaukee was rejected by two banks despite selling products with zero THC. She considers her business “health and wellness.” But the word “cannabis” anywhere in the application triggers automatic rejection at most institutions, regardless of the actual product.
What Chargeback Rate Gets You Rejected or Shut Down?
Visa’s new VAMP program flags merchants at a 1.5% dispute-to-transaction ratio (effective April 2026), and Mastercard’s threshold is 1.5% with 100+ chargebacks per month. But most banks start getting nervous well before those numbers.
The specifics matter here, so let’s get into them.
Visa consolidated its old monitoring programs into VAMP (Visa Acquirer Monitoring Program), effective April 2025. The “excessive” threshold is currently 2.2,% but drops to 1.5% for most regions from April 2026. Fines start at $100 per dispute during the first three months, escalating from there, with potential $25,000 review fees.
Mastercard’s Excessive Chargeback Program has two tiers. ECM triggers at 1.5% ratio with 100+ chargebacks per month (fines from $1,000 escalating to $100,000/month). HECM triggers at 3.0% with 300+ chargebacks (fines up to $200,000/month plus $5 per chargeback over 300).
To exit either program, you need to stay below thresholds for three consecutive months.
But here’s the part that really stings. Exceed those thresholds, and you don’t just lose your current processor.
You get placed on the MATCH database (maintained by Mastercard), which is effectively a shared blacklist across the payments industry. It has 14 reason codes, listings last 5 years, and only the original placing acquirer can request removal. Mastercard doesn’t verify accuracy. Visa runs a parallel system called VMSS.
Once you’re on either list, getting a new merchant account becomes extremely difficult.
The industry consensus: keep your chargeback ratio below 0.65% to stay safe. And be aware that about 75% of all disputes are “friendly fraud” (customers disputing legitimate charges).
High-risk industries see more of this because of subscription billing, buyer’s remorse on expensive purchases, and delayed delivery windows.
Can Your Processing Volume or Business Model Trigger a Rejection?
Monthly processing volume over $20,000, combined with average tickets above $500 and card-not-present transactions, will flag most underwriting systems for enhanced review, even if your industry is otherwise low-risk.
Card-not-present transactions carry significantly higher fraud rates than in-person sales. That’s why Visa’s VAMP program applies specifically to CNP transactions. If most of your revenue comes from online sales, you’re already starting with a higher risk from the underwriter’s perspective.
Recurring billing and subscription models add another layer.
“Forgot to cancel” chargebacks are one of the most common dispute types, and free-trial-to-paid conversions are a known trigger. Merchants with MCC 5968 (subscription services) are required to register with card networks before processing, which tells you how seriously the industry takes this risk category.
And then there’s the growth problem. Multiple business owners described being shut down precisely because their business grew.
One SaaS startup had $50,000 frozen by PayPal after users from India, Brazil, and Southeast Asia signed up organically. Revenue growth should be a good thing. But to automated risk systems, a sudden volume spike looks identical to fraud.
The founder described skipping meals to make ends meet while PayPal held the funds.
Does Your Personal Background Affect Your Business Banking Application?
Your personal credit score, criminal history, bankruptcy record, and any previous appearance on the MATCH or VMSS databases all factor directly into business banking and merchant account decisions.
Credit score thresholds vary by provider.
Traditional bank merchant accounts typically want 680 or above. Below 630 usually triggers manual review or rejection from automated systems. Specialised high-risk processors may accept scores in the 500-600 range, but expect higher fees and rolling reserves (typically 5-10% of transactions held for 6 months).
Fraud convictions on your personal record are near-automatic disqualifiers. Bankruptcy filings affect business applications because underwriters assess the ultimate beneficial owner, not just the company.
If your personal finances are messy, the bank assumes the business carries similar risk.
Time in business matters too.
Under six months makes standard accounts very difficult to obtain. Two years is where most banks start feeling comfortable. Five years is preferred. New businesses can sometimes get approved through specialised providers, but usually with lower processing limits and higher reserves.
Are You Being Flagged for Geographic or Sanctions Risk?
If your business operates in, transacts with, or has beneficial owners connected to FATF-blacklisted or grey-listed jurisdictions, most banks will reject your application or require extensive enhanced due diligence.
All banks screen transactions against OFAC’s sanctions lists.
Full embargo programs apply to Cuba, Iran, North Korea, Syria, and Russian-occupied regions. The FATF Black List (as of February 2026) includes North Korea, Iran, and Myanmar. Transactions involving these countries face near-certain refusal.
The FATF Grey List is longer and includes 22 countries: Algeria, Angola, Bolivia, Bulgaria, Cameroon, Côte d’Ivoire, DR Congo, Haiti, Kenya, Kuwait, Lao PDR, Lebanon, Monaco, Namibia, Nepal, Papua New Guinea, South Sudan, Syria, Venezuela, Vietnam, British Virgin Islands, and Yemen.
Being on the grey list doesn’t mean automatic rejection, but it does mean the bank needs to perform enhanced due diligence on every transaction involving those jurisdictions.
There’s also the 50% Rule: OFAC considers any entity owned 50% or more by a sanctioned person to be blocked as well, even if the entity itself isn’t listed. Complex ownership structures with connections to sanctioned jurisdictions trigger deep investigation.
For businesses in crypto, FX, and remittance (a big chunk of our clients at Capitalixe), transactions involving grey-listed countries are common and manageable. But you need a banking partner who already has compliance frameworks for those geographies.
Applying to a bank that doesn’t? That’s a wasted application and a potential red flag on your record.
What Documentation Should You Prepare Before Applying?
Come to every banking application with 6 months of bank statements, processing history, a fully compliant website, and proof of at least $15,000 in the bank to cover risk exposure.
Most rejections we see aren’t because a business is un-bankable. They’re because the application was incomplete or the documentation didn’t match what the underwriter needed to see.
Therefore, this is perhaps the most useful part of this checklist.
The standard documentation list for high-risk merchant underwriting includes: legal business registration, government-issued ID for all beneficial owners, EIN or tax documentation, 3 to 6 months of bank statements, financial statements and tax returns (ideally 2+ years), processing statements from any previous processors, all relevant business licenses, and a business plan or description of operations.
Your website matters more than you’d think for card-not-present merchants. Underwriters check for clear product descriptions, a visible refund policy, terms of service, a privacy policy, and real contact information.
A vague or incomplete website triggers rejection at many processors. And the website content has to match what’s on the application. Discrepancies are an immediate red flag.
Just ensure you’re transparent about any issues upfront. Previous processor terminations, chargeback history, and regulatory actions. If the underwriter finds it during due diligence (and they will), not disclosing it looks worse than the issue itself.
What Can You Actually Do If You Keep Getting Rejected?
Stop applying to mainstream banks that were never going to accept you, and start working with specialised providers who already have acquiring bank relationships for your industry.
If you’re a high-risk business and you’ve been applying to Chase, Bank of America, or Stripe, you’ve been wasting time. Those providers were never going to say yes. And every failed application can leave a trace that makes the next one harder.
Specialised high-risk merchant account providers exist specifically for this market. PaymentCloud (adult, CBD, firearms, credit repair), Durango Merchant Services (travel, fantasy sports, offshore), Easy Pay Direct (coaching, supplements), and PayKings (50+ industries, claims 86-99% approval rates) all maintain acquiring bank relationships for industries that mainstream processors won’t touch.
Fees run higher (typically 3.5-6.5% versus 2.87-3.95% for low-risk), but stability matters infinitely more than rate when you’ve experienced a freeze or shutdown.
EMIs (Electronic Money Institutions) are another option worth knowing about. Regulated under EU and UK frameworks, EMIs often have broader risk appetites than traditional banks. They can issue IBANs, payment cards, and e-wallets.
They can’t lend money or take traditional deposits, but for operational banking, they’re increasingly the answer for businesses that traditional banks won’t serve.
Before your next application, get your chargeback ratios below 0.65%, implement fraud prevention tools like 3D Secure 2.0, Verifi CDRN, or Ethoca Alerts, and make sure your documentation package is complete.
Small things make a difference too: keeping your website compliant, matching your application details exactly to your online presence, and having proof of adequate funds in your bank account.
And one more thing: never rely on a single provider. Always have a backup processor and a backup bank account. Transfer funds out of processor accounts frequently.
That SaaS founder who lost $50,000 in a PayPal freeze? He’d have been fine with a second processor and a policy of sweeping funds daily.
The Bottom Line
The checklist banks use isn’t secret. You’ve just seen it. Industry classification, chargeback history, processing patterns, personal background, geographic exposure, and documentation readiness.
Most of these aren’t things you can change overnight, but knowing which flags apply to your business completely changes how you approach the banking conversation.
At Capitalixe, we specialise in helping businesses in complex and high-risk industries find the right banking and payment solutions. We work with over 100 financial institutions worldwide, and our consultations are free.
Get in touch to talk through your options.
