Licensing
FinCEN MSB registration, state money transmitter licenses or exemptions, and any foreign licenses.
Payments High-risk industries Crypto
HIGH-RISK GUIDE / CRYPTO AND DIGITAL ASSETS
Card processing for crypto in 2026.
Most crypto business models are restricted, not prohibited, for card acquiring. Selling crypto for card payments is generally classified as quasi-cash, which brings issuer declines, reserves and enhanced monitoring. Underwriters approve businesses that hold the right licenses for where they operate, document their flow of funds end to end, and run real KYC and AML programs. Missing flow-of-funds documentation is the most common reason applications fail.
WHY IT IS HIGH RISK
Why processors flag crypto businesses.
- Crypto transfers are irreversible, so the acquirer carries the chargeback exposure.
- Quasi-cash is one of the most restricted categories for Visa and Mastercard.
- Licensing varies by state and country, and the entity that holds the license must match the entity that processes.
- Fraudsters target card-to-crypto flows to cash out stolen cards.
WHAT UNDERWRITERS REVIEW
What an underwriter will ask you for.
Flow of funds
A diagram showing how card receipts move to operating accounts, liquidity providers and custody.
KYC and AML
Your KYC vendor, sanctions screening, transaction monitoring and compliance officer.
Fraud controls
3-D Secure, first-purchase limits, velocity rules and wallet screening.
RULES THAT APPLY NOW
How card networks and issuers treat crypto.
Exchanges and on-ramps that sell crypto for card payments generally process under quasi-cash classification, which networks treat closer to a cash withdrawal than a retail sale. Card issuers may decline these transactions or treat them as cash advances, and the acquirer cannot prevent that. Some businesses, such as software, infrastructure or certain NFT marketplaces, may qualify for standard categories if the business genuinely sells a product or service. Misrepresenting the model to get a friendlier code is a common reason for fines and termination.
The entity that holds the acquiring agreement should hold the relevant license and run the AML program. Expect enhanced due diligence on ownership and source of funds at onboarding, followed by ongoing transaction monitoring. In the US, the GENIUS Act (signed July 2025) created a federal framework for payment stablecoins; it does not replace state money transmission rules for other activity.
CARD-NETWORK RULES / CURRENT AS OF OCT 2026
Card-network thresholds every high-risk merchant should track.
Most processors act well before these limits. Track your own ratios weekly.
| Program | What triggers it | What it means for you |
|---|---|---|
| Visa VAMP (merchant "Excessive") | From April 1, 2026 in Asia Pacific, Canada, Europe and the US: a VAMP ratio of 150 basis points (1.5%) or higher AND at least 1,500 fraud plus dispute counts in the month. The VAMP ratio is fraud reports (TC40) plus disputes (TC15) divided by settled card-not-present transactions, by count. It is not a simple chargeback ratio. Other regions and earlier periods differ. | Per-event fees once enforced, a remediation plan, and pressure from your acquirer to fix it or exit. |
| Mastercard ECP: Excessive Chargeback Merchant | Chargeback ratio of 1.5% or higher and at least 100 chargebacks in a month, in two months (not necessarily consecutive). Ratio = this month's chargebacks ÷ last month's transactions. | Monthly fines that escalate from $1,000 in month two to $25,000 by month seven. |
| Mastercard ECP: High Excessive | Chargeback ratio of 3% or higher and at least 300 chargebacks. | Fines that escalate to $50,000 a month by month seven and $200,000 after month 19. |
| MATCH list (Mastercard) | Your acquirer terminates the account for a listed reason, such as excessive chargebacks, fraud or rule violations. | The listing stays for five years and most acquirers will decline a listed business or principal. |
WHAT TO EXPECT
Terms high-risk merchants are commonly offered.
Owner-confirmed Rebar field observations. These ranges are not guaranteed and are not quotes; every offer depends on the provider's underwriting and your file.
| Term | What it usually looks like | How to improve it |
|---|---|---|
| Rolling reserve | A share of each day's volume held for a set period. Owner-confirmed Rebar field observation: new high-risk accounts commonly see 5% to 10% held for 90 to 180 days. Not guaranteed; depends on underwriting. | Ask for a written step-down schedule tied to clean processing history. |
| Pricing | Higher markups than standard merchants. Interchange-plus pricing becomes available as volume and history grow. | Compare effective rate, not headline rate. Use our statement analyzer. |
| Volume caps | A monthly processing limit, often set below your forecast for the first months. | Bring 3 to 6 months of statements to support a higher cap. |
| Contract terms | Early-termination fees and, sometimes, liquidated damages. | Read the termination and reserve-release clauses before you sign. |
AVOID THESE
What gets crypto accounts frozen or closed.
- Processing under a merchant category that does not match the actual business.
- Fraud spikes from stolen cards used to buy crypto.
- Licensing gaps in states or countries where you serve customers.
- Flow of funds that changes without notice to the acquirer.
- Chargeback ratios that climb quickly on a new, low-volume account.
READINESS CHECKLIST
Get underwriting-ready in 7 steps.
- 01
Confirm FinCEN MSB registration and state licensing or exemptions for every market you serve.
- 02
Draw a flow-of-funds diagram covering card receipts, settlement, liquidity and custody.
- 03
Document KYC, sanctions screening and transaction monitoring, with a named compliance owner.
- 04
Require 3-D Secure and set first-purchase and velocity limits.
- 05
Use a recognizable descriptor to reduce friendly fraud.
- 06
Make sure the licensed entity, the AML program owner and the merchant of record are the same entity.
- 07
Plan for issuer declines: offer bank transfer or debit alternatives.
QUESTIONS
Crypto processing questions, answered.
Can a crypto exchange accept credit cards?
Yes, through specialist acquirers, usually under quasi-cash classification with reserves and volume limits. Expect a full review of licensing, KYC and AML, and flow of funds. Some mainstream payment providers exclude crypto businesses altogether.
Why do card issuers decline crypto purchases?
Many issuers treat crypto purchases as cash-like and either decline them or code them as cash advances. That is the issuer's decision and the acquirer cannot override it. Offering bank transfer or debit options helps conversion.
What licenses does a US crypto business need for card processing?
Generally FinCEN registration as a money services business and state money transmitter licenses where your activity requires them. Requirements depend on your model and the states you serve, so confirm with counsel. Acquirers will ask for proof.
What is the most common reason crypto applications are declined?
Incomplete flow-of-funds documentation: underwriters need to see exactly how card receipts move to operating accounts and how fiat is used to buy, hold or transfer crypto.
NO REBAR ADVISORY FEES
Get a free pre-underwriting review for your crypto business.
Tell us where you stand. We will flag what an underwriter is likely to question and suggest suitable processing options. Rebar charges no advisory fee; provider fees and terms apply.
SOURCES AND REVIEW
Where these facts come from.
These summaries come from the provided source dataset listed below and have not been independently verified by Rebar. Rules and enforcement change. We review this page at least quarterly and date every update. Confirm current requirements with your acquirer, card network rules and counsel before acting.
- Card acquiring for crypto businesses (DECTA) · Quasi-cash classification, permitted vs restricted models, flow-of-funds as top decline reason
- Payment processor due diligence for crypto merchant acquiring (Elliptic) · Due diligence for high-risk MCCs
- Visa Acquirer Monitoring Program fact sheet (Visa, 2025) · Primary source: merchant Excessive threshold of 150 bps from Apr 1, 2026 in AP, Canada, Europe and US, with at least 1,500 monthly fraud plus dispute counts; ratio uses settled card-not-present transactions
- Visa VAMP rules explained 2026 (Easy Pay Direct) · VAMP ratio method; 2.2% merchant threshold through Mar 31, 2026, 1.5% from Apr 1, 2026
- Mastercard Excessive Chargeback Program (Chargeflow) · ECM and HECM thresholds and fine schedule, citing Mastercard's ECP guide