What Is an MCC Code for Online Merchants?

A declined application, higher reserve request or unexpected card-processing restriction can often be traced back to one small classification: the merchant category code. So, what is an MCC code? It is the four-digit code used by card schemes and payment providers to identify what a business sells. For online merchants, it influences far more than reporting. It can shape acquiring options, fraud rules, chargeback exposure and the payment methods available at checkout.

What is an MCC code?

An MCC, or Merchant Category Code, is a four-digit identifier assigned to a merchant when they are set up to accept card payments. It categorises the merchant according to its primary business activity. Card schemes such as Visa and Mastercard use MCCs to standardise how businesses are recognised across the payments ecosystem.

A hotel, for example, is classified differently from an online dating service, a telecoms provider or a subscription-based digital platform. The code allows issuers, acquirers, processors and payment gateways to apply the right commercial, regulatory and risk logic to a transaction.

The key word is primary. An MCC should reflect the activity that generates the main share of a merchant’s revenue, not simply the broadest description of the business. A travel platform that mainly sells accommodation may be classified differently from one that acts primarily as a booking intermediary. That distinction can materially affect its acquiring strategy.

MCCs are not the same as SIC or industry classification codes used for company registration, tax or statistical purposes. They are payment-specific classifications. A business may have one industry description in its corporate records and a more precise MCC for card acceptance.

Why MCC codes matter to payment acceptance

An MCC tells payment partners what type of transaction they are being asked to process. This helps them assess the expected risk profile, applicable scheme requirements and likely customer behaviour. The result is a more controlled and predictable payment environment, provided the code is accurate.

For merchants, an MCC can affect four practical areas:

• Acquiring eligibility: Some acquirers do not support certain business models, territories or regulated sectors. Others specialise in them.
• Pricing and reserves: Processing fees, rolling reserves and settlement terms may reflect the risk historically associated with an MCC.
• Fraud and chargeback controls: An acquirer or gateway may apply stronger monitoring, 3D Secure policies or velocity limits to categories with elevated fraud or dispute rates.
• Cardholder experience: Issuers can use MCC information when approving, declining or flagging a payment, particularly where spending controls, corporate cards or restricted-use cards are involved.

For a straightforward retail business, this may feel administrative. For gambling, adult, dating, travel, telecoms and recurring-billing merchants, it is a commercial decision that needs careful handling from the start.

How an MCC affects approval rates

Issuing banks assess every card transaction using a range of signals: the cardholder’s behaviour, transaction value, device data, location, fraud indicators, authentication results and merchant information. The MCC is one of those merchant signals.

That does not mean an MCC automatically causes a decline. A legitimate, well-authenticated transaction can be approved in any permitted category. However, some categories are more closely scrutinised because they are associated with higher fraud, higher refund volumes, delayed fulfilment or frequent chargebacks. Travel bookings, digital subscriptions and certain regulated services are common examples.

This is why a mismatched MCC can create avoidable friction. If a merchant’s website, descriptor, customer journey and transaction pattern do not align with its stated category, acquirers and issuers may see inconsistent risk signals. The outcome can be lower approval rates, delayed settlements, account reviews or terminated processing relationships.

Accurate classification also helps merchants configure payment flows appropriately. A subscription business may need recurring transaction indicators, account updater services and clear cancellation processes. A travel merchant may need delayed-capture logic and strong evidence of fulfilment. A marketplace may require a payment structure that reflects its role in the transaction rather than presenting itself as the underlying seller.

MCC codes and high-risk businesses

There is no universal list of “bad” MCCs. Risk depends on the acquirer, card scheme rules, jurisdiction, product type, transaction history and the merchant’s controls. Still, certain sectors require specialist underwriting because their operational and regulatory demands are more complex.

For example, a licensed gaming operator needs acquiring partners that understand licensing obligations, jurisdictional restrictions, responsible gambling controls and enhanced transaction monitoring. An adult-content business requires acquirers comfortable with the sector and payment flows designed to reduce fraud and disputes. A telecoms or subscription merchant needs strong recurring-billing governance, transparent descriptors and practical tools for managing cancellation-related chargebacks.

Trying to use an unrelated, lower-risk MCC to obtain easier terms is not a viable strategy. It can breach acquiring agreements and card-scheme requirements, and it places settlement continuity at risk. Payment partners expect the merchant’s application, website content, legal documentation, marketing and operational model to support the assigned category.

The better approach is to work with providers that can assess the actual business model, identify suitable acquiring routes and build controls around its genuine risk profile. This may involve multiple acquirers, regional routing, tailored fraud thresholds and clear escalation processes for disputes and compliance reviews.

Who assigns an MCC code?

In most cases, the acquirer or payment service provider assigns the MCC during merchant onboarding. The decision is based on the information submitted in the application and due diligence process. This can include the merchant website, terms and conditions, product catalogue, licences, processing history, expected sales volumes, refund policy and delivery model.

The card schemes maintain MCC frameworks, but the acquirer is responsible for classifying its merchants correctly. If a business changes materially – for instance, by moving from one-off retail sales into recurring digital services, adding regulated products or launching in new markets – its MCC may need to be reviewed.

Merchants should not assume that the initial code will always remain appropriate. A growing business can outgrow its original payment setup. New products, a change in fulfilment timing or expansion into higher-risk territories can alter the underwriting assessment even when the legal entity stays the same.

How to check whether your MCC is correct

Start by reviewing the commercial reality of your business. What do customers actually pay for? Is revenue mainly generated from physical goods, digital access, memberships, booking services, intermediary fees or recurring subscriptions? The clearest answer is usually the best basis for classification.

Next, compare that reality with your customer-facing materials. Your website should make the product or service clear, show the legal business name, provide accessible contact details and explain delivery, refunds, cancellation and billing terms. For regulated categories, relevant licensing and territorial eligibility information should also be visible where required.

Then ask your acquirer or payment provider to confirm the MCC recorded for your merchant account. If the classification seems too broad, outdated or inconsistent with the business model, raise it before it creates a compliance issue. A proper review may involve additional documents, but that is preferable to discovering the mismatch during a card-scheme audit or a sudden increase in declines.

For merchants using several acquirers, consistency matters. Different providers may use slightly different onboarding approaches, yet the underlying business description should remain aligned. An orchestration setup can route transactions intelligently, but it cannot correct a fundamentally inaccurate merchant classification.

Using MCC insight to build a stronger payment strategy

An MCC should be treated as an input to payment design, not a box-ticking exercise. It informs which acquirers are likely to support the business, what authentication approach is appropriate and which fraud controls need to be active from day one.

For international merchants, this becomes more important. Local card preferences, issuer risk appetite and regulatory expectations vary by market. A payment platform that combines acquiring access, configurable routing and real-time monitoring can help businesses use the right processing path without compromising control or visibility.

AllSecure works with merchants whose payment requirements do not fit a one-size-fits-all acquiring model, including businesses that need multi-currency acceptance, recurring billing and specialist risk management. The goal is not merely to process a transaction, but to create a payment operation that supports sustainable approvals and reliable settlement.

Your MCC will not determine the future of your business on its own. But when it accurately reflects what you sell and is supported by the right acquiring, fraud and compliance framework, it gives every payment partner a clearer reason to trust the transaction.