Merchant Category Codes (MCC) Explained: What They Are, How They Work and Why They Matter

Your card acquirer assigned a four-digit code (MCC) to your business at onboarding. It travels with every card transaction you process. It determines your interchange fees, shapes your approval rates, and triggers automatic declines at some issuing institutions before the transaction reaches your checkout. Most merchants never check it.

This article explains what MCCs are, how card acquirers assign them, how risk classification is determined by MCC and what to do if your MCC is wrong.

What is an MCC?

A Merchant Category Code (MCC) is a four-digit number classifying a business by the primary type of goods or services it sells. MCCs are defined under the ISO 18245 standard. Visa and Mastercard each maintain their own MCC lists.

Every business accepting card payments holds an MCC. It is not visible to end users at checkout. It operates within the transaction data exchanged between the card acquirer, the card network, and the issuing institution on every payment.

How MCCs are assigned

MCC assignment follows a four-layer chain. Understanding who does what explains why errors happen and who is responsible for fixing them.

ISO 18245 defines the standard. The International Organisation for Standardisation publishes the master list of MCCs and their definitions. This is the rulebook every other party in the chain follows.

Visa and Mastercard own the rules. Each network takes the ISO 18245 standard and maintains its own MCC list on top of it: the Visa Merchant Data Standards Manual (global reference 2026) and the Mastercard Quick Reference Booklet, Merchant Edition (February 2025). Visa and Mastercard add industry-specific codes, update definitions when new business types emerge, and set the commercial consequences for each code: interchange rates, chargeback thresholds, and certification requirements. They own the framework but do not assign codes to individual merchants.

Your card acquirer makes the actual assignment. The card acquirer reviews your business model, risk profile, website, product description, and applicable licences during onboarding, then applies the code from the Visa and Mastercard lists best matching your primary activity. VIALET, as a Principal Member of both Visa and Mastercard, assigns MCCs directly to its merchants as part of the onboarding process. The card acquirer carries direct responsibility for correct classification: if a merchant is misclassified, the card acquirer faces scheme consequences alongside the merchant.

Visa and Mastercard validate and enforce. Once the card acquirer submits the MCC, the card networks register it against the merchant’s Merchant Identification Number (MID). Reviews are not routine. They are typically triggered by suspicious activity, chargeback spikes, or complaints flagging a mismatch between a merchant’s actual business and their registered classification. When a mismatch is identified, the card network requires the card acquirer to correct the classification.

If your business covers multiple activities, the card acquirer applies the code for your dominant revenue stream. A platform selling digital games alongside a subscription tier would typically be classified under 5816 (Digital Goods: Games) rather than 5968 (Subscription Merchants), unless the subscription represents the primary commercial model.

You do not select your MCC. You do not pay for it. To understand how MIDs and MCCs connect within the acquiring relationship, read our guide on card acquiring in Europe.

How MCC risk classification is determined

Not all MCCs carry the same risk weight. Visa and Mastercard classify MCCs into risk tiers based on four main factors.

Chargeback rates. Industries with historically elevated chargeback rates receive higher-risk MCC classifications. Card networks track chargeback rates by MCC across the entire merchant population and use this data to set thresholds and interchange rates. Gambling (MCC 7995), subscription merchants (MCC 5968), and digital goods (MCC 5816) all carry elevated chargeback histories, per The Payments Association (2025).

Regulatory complexity. Industries subject to national or cross-border licensing requirements attract higher risk classifications. An iGaming operator requires a gambling licence valid in each jurisdiction where it accepts wagers. A forex broker requires financial services registration. A pharmacy requires a dispensing licence. When the regulatory burden is high, the risk of a merchant operating outside its permitted scope increases, and card acquirers price that risk into the MCC classification.

Intangible or non-deliverable goods. Industries selling goods or services the cardholder receives digitally or experientially carry higher dispute risk. A cardholder disputing a digital content purchase cannot return the item. A cardholder claiming they did not receive a service has no physical delivery record to counter. This asymmetry drives higher chargeback rates in MCCs covering digital goods, adult content, dating services, and similar categories.

Geographic and cross-border risk. Some industries face specific cross-border compliance challenges. Online pharmacies selling prescription medications across borders face varying legal standards by country. Crypto exchanges operating across jurisdictions face differing regulatory regimes. These cross-border complexities elevate MCC risk classification beyond the standard domestic benchmark.

How MCCs affect your business

MCCs influence four areas of payment operations.

Processing fees. Interchange rates, the base fee paid to the issuing institution on every transaction, vary by MCC. Low-risk MCCs such as 5999 (Online retail) attract lower interchange rates. High-risk MCCs such as 7995 (Gambling) attract higher rates. The fee difference between a low-risk and high-risk MCC classification on the same monthly volume runs into thousands of euros, per The Payments Association (2025).

Approval rates. Some issuing institutions apply blanket decline policies to specific MCC categories, irrespective of the individual merchant’s standing or the cardholder’s available funds. A merchant under MCC 7995 (Gambling) encounters declines from institutions with internal policies against gambling transactions, regardless of regulatory compliance.

Chargeback thresholds. Card networks set chargeback monitoring thresholds that apply to all merchants, but high-risk merchants enter the excessive tier sooner. Visa operates the Visa Dispute Monitoring Program with two thresholds: standard and excessive. A high-risk merchant reaching the standard threshold is placed directly into the excessive programme, while a low-risk merchant at the same level remains in the standard programme. Mastercard’s Excessive Chargeback Program works on a similar principle.

Rolling reserve requirements. Card acquirers set rolling reserve percentages partly based on MCC risk classification. Reserve hold periods typically range from 90 to 180 days depending on the industry. Low-risk merchants such as retail or SaaS businesses sit at the shorter end. High-risk industries including iGaming, forex, crypto, and subscription services sit at the longer end, because chargebacks in those sectors surface later and dispute resolution takes more time. The reserve directly ties up working capital for the full hold period.

MCCs for key industries

Card acquiring access varies significantly by industry. The table below covers MCCs for common e-commerce and digital business types, ordered from low to high risk classification. For merchants in regulated or high-risk categories, acquiring terms depend on the specific business model, licensing, and processing history. Contact VIALET to discuss your specific situation.

Disclaimer: Risk classifications reflect standard card acquirer underwriting practice and vary by institution, geography, and individual merchant profile. Actual classification decisions rest with the card acquirer.

How to check your MCC

Your current MCC appears on your merchant account statement, within your acquiring agreement, or is available on request from your card acquirer.

Cross-reference your code against the official Visa Merchant Data Standards Manual or the Mastercard Quick Reference Booklet to verify the classification matches your primary business activity.

How to request an MCC reclassification

Reclassification requests go through your card acquirer, not directly to the card networks. The card acquirer reviews the request and, if the case is justified, submits a reclassification to Visa and Mastercard on your behalf.

To make a successful reclassification request, prepare the following documentation:

• A written description of your primary business activity and revenue model
• Evidence of the percentage split between different product or service types
• Relevant operating licences (iGaming licence, financial services registration, pharmacy licence, etc.)
• Recent transaction data showing the nature of purchases

A card acquirer with direct scheme relationships and experience in your industry is better placed to navigate this process than a general-purpose processor.

Summary

Your MCC is not administrative background information. It directly sets your interchange fees, approval rates, chargeback thresholds, and rolling reserve requirements. An incorrect classification either costs you money on every transaction or exposes you to fines from the card networks.

Check your current MCC against Visa and Mastercard scheme documentation. If it does not match your primary activity, request a reclassification through your card acquirer.

Explore VIALET’s card acquiring or open a merchant account.

VIALET is a licensed Electronic Money Institution authorised by the Bank of Lithuania and a Principal Member of Visa and Mastercard. We provide direct card acquiring and merchant accounts for businesses across Europe, including high-volume, regulated, and complex industries. Talk to our team.