It is in the code, not in you
Every business that accepts card payments gets a Merchant Category Code, or MCC. That is the four-digit sector code the card networks assign: a shop, an online casino, a dating platform and a supermarket each have their own. Banks and payment providers tie their risk policy to those codes. If your code falls into a category they label risky, you are flagged as high-risk, regardless of your own figures or your reputation. That explains the experience so many owners find unfair: you did nothing wrong, and still the bank says no.
That is why a healthy, well-run business can still be refused.
Why banks are so cautious
Behind that no sit three reasons. First, regulation: some sectors carry strict rules around age, licensing or product claims, and banks do not want the exposure. Second, chargeback risk: in sectors with subscriptions, long delivery times or impulse spending, customers reverse payments more often, and that costs the payment chain money and work. Third, plain risk policy: supervisors expect banks to manage their customer risk, and it is cheaper for a large bank to exclude a whole category than to assess each business individually. That last one is called de-risking, and it hits entire industries at once. That categorical exclusion is increasingly being challenged, though. Earlier this year a Netherlands court ruled, in a case between coffeeshops and payment provider Worldline, that excluding a whole sector without individual assessment is not allowed. What that case means, you read in our article on the Worldline case.
What high-risk means in practice
Once you are flagged as high-risk, you notice it in a few places. Mainstream banks and providers decline your application or terminate you one day. If you do get accepted somewhere, stricter conditions apply: a more thorough check of your business at the start (KYC), sometimes a rolling reserve, where the acquirer temporarily holds part of your revenue as a buffer against chargebacks, and more attention to your admin. That sounds heavy, but there is an upside: a provider that genuinely accepts your sector and does its homework will not drop you at the first setback either.
What you do about it
Being high-risk is not a dead end, it just calls for a different route. Three things make the difference. Choose a specialist that knows and accepts your sector, instead of keep knocking on the doors of parties that categorically say no. Make sure you do not depend on a single party: with multiple acquirers behind your acceptance, your revenue keeps running if one drops out. And keep your house in order: clear communication to customers, recognisable statements and honest delivery times keep your chargebacks low, and that is the language the payment world understands.