High-risk payment methods: the options merchants really have

High-risk merchants have seven main ways to take payments: cards through a high-risk merchant account, cards through a card-to-crypto checkout, crypto paid directly, pay by bank and bank debits, e-wallets, prepaid vouchers, and plain bank transfers. They differ in four things that matter most when you're labelled high-risk: what each payment costs, how quickly you're paid, whether a buyer can pull the money back, and whether a provider will take your business at all.

This guide goes through each method with its costs, who it suits and its risks. It also says where our own product, Caravel Pay, fits and where it doesn't. If you're choosing a gateway for a WooCommerce store, our high-risk payment gateway guide covers that side.

The options at a glance#

Why high-risk merchants need more than one method#

"High-risk" is a label each processor applies on its own, based on what you sell, how you bill and how often your buyers dispute. Our high-risk gateway guide lists the usual reasons. Three things make the label expensive:

• Dispute limits. Card networks watch every merchant's disputes. Stripe says the card industry treats dispute activity above 0.75% as excessive, and that merchants who stay over the networks' thresholds for months can be fined. Too many disputes affects your ability to process with other providers too.
• Closures follow you. If a processor ends your account for breaking its agreement, it can list your business on MATCH, Mastercard's database of businesses that broke merchant agreements. Entries stay for five years. Some specialists still accept listed businesses, but fewer doors are open.
• Money gets held. Processors protect themselves with reserves and holds, so part of what you've earned can sit with them for months.

So most high-risk stores do three things: they pay more for cards, they add methods where a buyer can't pull the money back, and they keep two or three methods running so that one closure or one provider's refusal doesn't stop every sale.

1. Cards through a high-risk merchant account#

A specialist processor or acquiring bank reviews your business and, if it accepts you, lets you take cards like any other store. This is the classic answer to "how do high-risk businesses accept cards", and it's the only one on this list that pays card money straight into your bank account.

• What it costs. Usually interchange plus a markup. NerdWallet's 2026 roundup lists processors for high-risk businesses with markups of up to about 1.1% plus $0.08 to $0.50 per payment on top of interchange, monthly fees from about $15 to $250 and more, and in some cases termination fees. Each chargeback also costs a fee.
• Reserves. Many high-risk accounts hold back a share of every sale in a rolling reserve. On a six-month rolling reserve, the amount held from January's sales is paid out in July.
• Chargebacks. A buyer can dispute a card payment with their bank. The disputed amount and a dispute fee are taken from you while the dispute runs, which can take two to three months. Card networks typically allow 120 days to dispute, and longer in some cases: for tickets and travel the clock starts on the event date.
• Getting approved. An application with business documents, bank statements and often processing history. It can take days to weeks, and approval isn't guaranteed.

Suits: established businesses that can pass underwriting, need money in a bank account, or bill buyers' cards automatically every month. Watch out for: reserves, contract terms, and an account that can still be closed if your dispute rate climbs.

2. Cards through a card-to-crypto checkout#

Your buyer pays by card, Apple Pay or Google Pay on a hosted checkout. An independent on-ramp provider takes the card payment and sells the buyer USDC as part of it, and the gateway sends that USDC to your wallet. You don't apply for a merchant account, because you aren't the one acquiring the card payment. Caravel Pay works this way; the card-to-crypto gateway guide explains each step.

• What it costs. Your buyer pays the order total. Most card providers keep their fee and exchange-rate spread out of that amount, so a little less arrives as USDC. Then the 2% Caravel fee comes off. On a $100 order where the provider keeps $5, 95.00 USDC arrives and you receive 93.00 USDC. About 5% is typical of the card orders paid through Caravel Pay so far; most were between 4% and 6%, and it varies with the provider, the method, the buyer's country and the order size. On-ramp fees explained lists published tariffs.
• Payouts. Each paid order goes to your own wallet as soon as the payment confirms. There's no payout schedule and no reserve, and the Polygon gas for your payout is included in the 2% Caravel fee.
• Chargebacks. None reach you. Your payout is a final on-chain transfer, so nobody, Caravel Pay included, can pull it back. A buyer's card dispute is between the buyer, their bank and the card provider that sold them the USDC, and the provider never learns who you are.
• Getting started. No application, no documents and no KYC for your business. You add a Polygon wallet in a plugin, or make one API call, and a new merchant is normally active straight away.

In some countries the checkout also offers pay by bank through an on-ramp provider: open banking in euros in the euro area, UPI in India and SPEI in Mexico, on orders between $12 and $2,500 when you carry the fees (the default). Those payments settle to you in USDC too.

Suits: stores that card processors decline or close, sellers who are happy to be paid in a dollar stablecoin, and stores with buyers in many countries. Watch out for: the card provider's fee, which is higher on small orders because of minimum fees; the provider's own checks, which can decline a payment and may ask a buyer to verify their identity, usually only the first time; and refunds, which you send yourself from your wallet.

3. Crypto paid directly#

The buyer sends crypto from their own wallet to an address made for the order. A crypto payment gateway detects it, checks the amount and settles it to you. There's no card network in the chain, so there are no chargebacks: an on-chain transfer can't be pulled back.

• What it costs. No card fee. You pay the gateway's fee, and the buyer pays a small network fee. With Caravel Pay, a buyer can send USDC, USDC.e or POL on Polygon; you receive the same token minus the 2% Caravel fee, never swapped, so a $100 order paid in USDC pays out 98.00 USDC.
• Who can pay. Only buyers who already hold crypto, on the right network. For most stores that's a small share of shoppers.
• Volatility. A coin such as bitcoin can move between the sale and your next step. Stablecoins such as USDC are designed to track the US dollar instead.

Mainstream processors offer this too. Stripe's stablecoin payments, for example, settle in your Stripe balance in local currency and have no disputes that turn into chargebacks, but you still need a Stripe account in a country where it's offered (the US, with others in preview), and its restricted-business list applies.

Suits: stores whose buyers already use crypto, or as a cheap second method next to cards. Watch out for: payments sent on the wrong network or in the wrong token, and keeping records for tax.

4. Pay by bank and bank debits#

Both take money straight from the buyer's bank account, but they behave very differently when something goes wrong.

Pay by bank (open banking)#

The buyer picks their bank, approves the payment in their banking app, and the money is pushed to you. Because the buyer authenticates in their own banking app, the risk of fraud is low. Stripe says its Pay by Bank payments have no dispute process that can end in a chargeback, and bank payments usually cost less than cards. The limits are coverage (it depends on the buyer's country and bank) and the provider: a pay-by-bank provider still has to accept your business, and its restricted list applies.

Bank debits: ACH and SEPA Direct Debit#

The buyer gives their account details and authorises you to debit the account. Debits suit recurring billing, but for a high-risk store they behave much like chargebacks:

• ACH (US). A customer can generally dispute a debit on a personal account through their bank for up to 60 calendar days. Those disputes are final and can't be contested through the ACH network. Confirmation takes up to 4 business days on Stripe.
• SEPA Direct Debit (Europe). A customer can get a debit refunded without giving a reason for 8 weeks, and as unauthorised for up to 13 months. On Stripe, payments take at least 6 business days to confirm, and adult content, weapons and several other categories are restricted from using it.

Suits: pay by bank, for buyers in countries where it's common and providers that accept your category. Debits, for subscriptions with a low dispute rate. Watch out for: debit reversals, slow confirmation, and provider approval.

5. E-wallets#

Wallets such as PayPal let a buyer pay from a balance or from a card or bank account linked to the wallet. Buyers know them and trust them, which helps conversion. For high-risk merchants the catch is the wallet's own rules:

• Approval first. PayPal's acceptable use policy lists activities that need its approval before you take payments for them, such as gambling and some adult content, alongside activities it prohibits.
• Disputes. PayPal gives buyers 180 days from the payment date to open a dispute, and holds the disputed payment until it's resolved. A buyer who paid with a card can also go to their card issuer for a chargeback.
• Your balance. Money you're paid sits in an account the provider controls until you withdraw it.

Other wallets accept categories the largest ones restrict. Each needs its own merchant contract, and your buyers need to have that wallet.

Suits: stores whose category the wallet approves and whose buyers already use it. Watch out for: disputes, holds, and a policy change that ends your account.

6. Prepaid vouchers and cash#

The buyer buys a prepaid code, or gets a barcode and pays it in cash at a shop, then enters it at your checkout. Paysafe's paysafecard is a well-known example: a 16-digit prepaid code sold at more than 650,000 points of sale in over 50 countries, aimed at digital providers of apps, games, entertainment and iGaming. Paysafe advertises a 100% payment guarantee and no risk of chargebacks for its cash products.

Suits: digital goods and smaller amounts, for buyers who prefer cash or have no card. Watch out for: you need a contract with the voucher provider, which has its own acceptance rules, and buyers have to get a voucher before they can pay, so it suits only some baskets.

7. Bank transfers#

The oldest option: you show your bank details and the buyer sends the money by hand. It costs little or nothing, and a transfer that has arrived is hard for the buyer to take back. But it's slow, you match payments to orders by hand, buyers are often wary of paying a new store this way, and conversion suffers. Your bank also applies its own rules to the businesses it banks.

Suits: large orders from repeat or business buyers. Watch out for: manual work, and buyers who don't complete the payment.

How to choose: match the method to the problem#

Whatever you choose, compare what you keep per $100 on the methods your buyers actually use, not the headline rate. And keep a second method running, so you can still take payments if one provider stops working with you.

Where Caravel Pay fits, and where it doesn't#

Caravel Pay is a card-to-crypto checkout (method 2), with direct crypto (method 3) on the same page.

• It fits if you want buyers to pay by card, Apple Pay or Google Pay without a merchant account; if you want each order paid to your own wallet in USDC, with no reserve; and if you want disputes not to reach you. There's no application and no KYC for your business. The fee is the 2% Caravel fee, and there's no monthly fee. It works through plugins for 11 storefronts and billing systems, payment links you can make without code, and an API. Prices can stay in your store's own currency. Pricing has the details, including how to pass the fees to your buyer where that's allowed.
• It doesn't fit if you need the money in a bank account automatically, since payouts arrive as USDC on Polygon (see choosing a payout wallet); if you need stored cards and automatic monthly charges, since every payment is a checkout the buyer completes; if your orders are under $1.00, the smallest order a checkout takes, or so small that providers' minimum fees take a large share; or if most of your buyers are in countries the card providers don't serve.
• It can't be used for anything on our acceptable use policy, and card providers apply their own rules on top. We can pause a merchant we suspect of fraud.

High-risk is fine; illegal isn't#

Every method on this page has a prohibited list, and each provider decides for itself what it will process. Being high-risk is a commercial label, not a legal one. Selling illegal goods is something no payment method makes acceptable. Before you add a method, check the rules where you and your buyers are: consumer rights, tax, licensing for your category, and limits on surcharging. When you're unsure, ask a local adviser.

Sources#

1. NerdWallet: what is a high-risk merchant account (processor pricing, rolling reserves, the MATCH list; last updated 10 September 2026), checked 2026-11-14.
2. Stripe docs: measuring disputes (0.75% "excessive" dispute activity, monitoring programs and fines), checked 2026-11-14.
3. Stripe docs: how disputes work (funds and fee taken during a dispute, 120-day window, 2 to 3 months to resolve), checked 2026-11-14.
4. Stripe docs: Pay by Bank (open banking, no dispute process that ends in a chargeback), checked 2026-11-14.
5. Stripe docs: ACH Direct Debit (60-day disputes on personal accounts, up to 4 business days to confirm), checked 2026-11-14.
6. Stripe docs: SEPA Direct Debit (8 weeks without a reason, 13 months as unauthorised, restricted categories), checked 2026-11-14.
7. Stripe docs: stablecoin payments (settlement in local currency, no chargebacks), checked 2026-11-14.
8. Stripe: prohibited and restricted businesses, checked 2026-11-14.
9. PayPal developer docs: disputes overview (180 days to dispute, disputed payment held until resolved) and PayPal acceptable use policy, checked 2026-11-14.
10. Paysafe: cash online (paysafecard, payment guarantee, no chargebacks), checked 2026-11-14.
11. Caravel Pay: Pricing, Payouts, refunds and no chargebacks, Checkouts, acceptable use policy.