High-Risk Payment Processing Statistics 2026

This page consolidates key data points about high-risk payment processing in the United States drawn from industry reports, card network publications, and Cybin Enterprises' own placement experience across 755+ industries.

Chargeback Statistics

• The Visa/Mastercard chargeback threshold that triggers the High Chargeback Program (HCP) is 1.0% of monthly transactions.
• The Visa Dispute Monitoring Program (VDMP) kicks in at 0.9% chargeback ratio and 100+ chargebacks per month.
• Merchants in excessive chargeback territory face fines from $5,000 to $50,000+ per month from card networks.
• Average chargeback rate across all card-not-present transactions: approximately 0.60% (Visa risk data, 2024).
• Industries with the highest chargeback rates: iGaming (1.5–3%), adult entertainment (1–2%), nutraceuticals (1–2%), travel (0.8–1.5%).
• Ethoca and Verifi alert services resolve disputes before they become chargebacks, reducing ratios by 20–40% for participating merchants.

Rolling Reserve Data

• Typical rolling reserve for new high-risk merchants: 5–10% of daily processing volume held for 90–180 days.
• Rolling reserves are released on a rolling schedule — funds held 90 days from Day 1 release on Day 91.
• MATCH-listed merchants may face reserves of 10–15% for 180+ days.
• Merchants with 12+ months of clean processing history can often negotiate reserve reduction to 3–5%.
• Some offshore acquiring relationships require upfront reserves (cash held) rather than rolling reserves.

Processing Fee Benchmarks

• Standard (low-risk) processing: 1.5–2.5% + $0.10–$0.30 per transaction.
• High-risk processing (domestic): 2.5–4.5% + $0.20–$0.50 per transaction.
• High-risk processing (offshore acquiring): 3.5–6.0% + $0.30–$0.60 per transaction.
• Adult entertainment industry average: 3.5–5.0%.
• CBD and hemp industry average: 3.0–4.5% (card-not-present).
• Firearms FFL dealers (card-present, in-store): 2.0–3.5%.
• iGaming and online gambling: 4.0–7.0% depending on jurisdiction.

Approval Timelines

• Standard high-risk merchant account approval: 3–10 business days.
• Complex cases (MATCH list, offshore, very high volume): 2–4 weeks.
• CBD and hemp (domestic ACH): 2–5 business days.
• Kratom: 5–14 business days (limited domestic processor options).
• Firearms FFL dealers: 3–7 business days with valid FFL documentation.
• Adult entertainment (domestic): 5–10 business days.
• iGaming: 7–21 business days depending on state licensing requirements.

MATCH List (TMF) Data

• MATCH list entries remain active for 5 years from the date of placement.
• Primary MATCH reasons: excessive chargebacks (Reason Code 4), fraud (Reason Code 8), PCI violations (Reason Code 14).
• Merchants placed for chargeback violations cannot request early removal — the 5-year term is non-negotiable except in cases of error.
• Erroneous MATCH placements can be disputed with the placing acquirer under Mastercard rules.
• MATCH-listed merchants still have domestic and offshore processor options.

Industry Market Size (US, 2024–2025)

• CBD retail market size (2026 estimate): approximately $8.1 billion in US sales (Hemp Business Journal, 2024 projection).
• US online gambling gross gaming revenue (2025): approximately $14.4 billion (AGA State of the States report).
• US firearms and ammunition retail sales (2024): approximately $19.5 billion (NSSF industry data).
• US dietary supplement market (2024): approximately $65.9 billion (CRN Annual Survey).
• US telehealth market (2025): approximately $30 billion in annual revenue (McKinsey Digital Health report).

PCI DSS 4.0.1 Compliance

• PCI DSS 4.0.1 is now fully enforceable — all 47 new requirements apply to assessments conducted after March 31, 2025.
• SAQ A applies to e-commerce merchants that fully outsource card data to a PCI-compliant third-party processor.
• SAQ D applies to merchants that store, process, or transmit cardholder data directly.
• Non-compliance penalties: $5,000–$100,000 per month from card networks.

NACHA ACH Rule Changes 2026

• NACHA Phase 1 (effective March 20, 2026): Covered parties must monitor ACH transactions for fraud. ACH return rates ≥ 3% trigger inquiry.
• NACHA Phase 2 (effective June 19, 2026): Extended fraud monitoring requirements apply to third-party senders and smaller originators.
• High-risk merchants using ACH must implement account validation and debit authorization workflows to stay compliant.

Sources and Methodology

Data sourced from: Visa Risk Data (2024), Mastercard Rules publication, NACHA Operating Rules 2026 amendment, American Gaming Association State of the States Report (2025), National Shooting Sports Foundation (NSSF) Firearms Retailer Survey (2024), Council for Responsible Nutrition (CRN) Annual Survey (2024), Hemp Business Journal market reports, and Cybin Enterprises proprietary placement data (2024–2026). Industry fee ranges reflect Cybin Enterprises' experience placing merchants with partner acquirers; individual quotes vary by underwriting profile.