A merchant category code (MCC) is a four-digit number that card networks use to classify what kind of business you run. Your acquiring bank assigns it when your merchant account is set up, and it travels with every card transaction you process. That small code affects your interchange rates, how underwriters view your risk, and even how your customers’ card issuers treat the charge. This guide explains how MCCs work, which codes commonly fit online business models, and how to check that yours is right.
Key takeaways
- An MCC is a four-digit code that describes your primary line of business, based on where most of your sales come from.
- Your acquiring bank (or its agent) assigns the MCC. You influence it through the business description, website, and products you list on your application.
- MCCs shape which interchange programs your transactions qualify for and whether your account is reviewed as higher risk.
- Visa names a short list of “high integrity risk” MCCs, including some subscription and direct-marketing codes, that carry extra requirements.
- If your business model changes, ask your provider to review your MCC. A wrong code can cause pricing, decline, and compliance problems.
What is a merchant category code?
Visa’s Merchant Data Standards Manual defines the MCC as a four-digit number assigned to describe a merchant’s primary business, based on annual sales volume. Visa says it and its member banks use MCC data for activity tracking, reporting, and risk management. Mastercard, American Express, and Discover use the same four-digit system, though each network keeps its own rulebook and some code titles differ slightly.
The code values themselves come from an international standard, ISO 18245, “Retail financial services — Merchant category codes”. ISO describes it as a way to classify merchants by the type of business, trade, or services they supply. The card networks build their own assignment rules on top of it.
Think of your merchant category code as a label on every transaction that says “online software company” or “travel agency.” Everyone downstream, from the card network to the customer’s bank, reads it.
Who assigns your MCC?
You don’t pick your merchant category code from a menu. Visa’s manual states that it is an important requirement for acquirers (and their agents) to assign the correct MCC to each merchant, and that Visa can require corrections. In practice, the acquiring bank’s onboarding team chooses the code based on what you told them on your application and what they see on your website.
That’s why the business description on your merchant account application matters so much. A vague description (“online sales”) forces the underwriter to guess. Describing exactly what you sell, how you deliver it, and how you bill makes an accurate code far more likely. Our guide to what merchant account underwriters check covers the rest of that review.
If you use a payment facilitator or marketplace instead of your own merchant account, the facilitator is responsible for evaluating your business and assigning the most appropriate MCC to you as a sponsored merchant.
Get matched with processing partners through one simple application. Interchange-plus pricing from 0.40% + $0.10.
How MCC assignment rules work
Visa’s general requirements give a clear picture of how banks decide. The key rules are:
- Most accurate description wins. The MCC should reflect the primary type of business you’re engaged in.
- Highest sales volume decides for mixed businesses. If you have more than one line of business, you either use the MCC for the line with the highest sales volume for all sales, or use a different MCC for each line.
- “Miscellaneous” codes are a last resort. Codes that usually end in “99” (for example, 8999 Professional Services, Not Elsewhere Classified) should only be used when no more specific code applies.
- Your website is a location. Visa treats each e-commerce website as a merchant location in itself, so an online store gets its own code just like a physical outlet.
- Higher-risk lines get their own code. If one of your lines of business falls into a high integrity risk category, it must carry that MCC, separate from your other lines.
Visa also strongly recommends reviewing MCCs periodically for accuracy. That’s a good habit for merchants too, especially after adding a product line.
Why your merchant category code matters
1. Interchange rates
Interchange is the fee the card-issuing bank receives on each transaction, and it’s the largest part of most processing costs. Visa’s published U.S. interchange reimbursement fee schedule includes separate rate programs for merchant types such as charity, government, education, healthcare, real estate, travel, and restaurants. Which program a transaction falls into depends partly on the merchant’s category, along with the card type and how the payment was taken.
With interchange-plus pricing, you see those network costs passed through at their actual rate, separate from your provider’s markup. That makes it much easier to notice if your MCC is putting transactions in an unexpected interchange category.
2. Risk classification and underwriting
Acquirers look at your merchant category code when deciding how closely to monitor an account. Some codes are tied to higher dispute or fraud rates across a whole industry. If yours is one of them, expect a deeper review and possibly a reserve, which is where a high-risk merchant account program comes in. Our article on what makes a business high-risk explains the other factors that matter alongside your MCC.
3. Authorization and cardholder controls
Card issuers see your merchant category code when deciding whether to approve a transaction. Corporate and purchasing card programs often let employers block entire merchant categories, so a wrong MCC can cause declines for legitimate B2B buyers. Many rewards cards also decide bonus categories (such as travel) based on the merchant’s MCC.
4. Tax reporting by business card payors
The IRS has also relied on MCCs. IRS Revenue Procedure 2004-43 gives payors an optional procedure that classifies businesses by MCC based on whether they mainly provide services or goods. Payors can use that classification when deciding whether a payment card purchase needs information reporting. It’s one more reason an accurate merchant category code matters for B2B sellers.
High integrity risk MCCs: what online merchants should know
Visa’s manual lists a set of “high integrity risk” MCCs. For card-absent (online and phone) transactions, the list includes 5122 (Drugs, Drug Proprietaries, Druggist Sundries), 5912 (Drug Stores, Pharmacies), 5966 (Direct Marketing – Outbound Telemarketing), 5967 (Adult Content and Services), 5993 (Cigar Stores and Stands), and 7995 (Betting). It also covers certain card-absent transactions under codes such as 5968 for subscription “negative option” merchants and 6051 for crypto merchants.
For most online businesses, the code worth understanding is 5968, Direct Marketing – Continuity/Subscription Merchant. Visa describes it as covering merchants that sell subscription products for delivery, such as cosmetics, food, clothing, and nutraceuticals, through direct mail, email, apps, or salespeople. Visa also clarifies two important points:
- Merchants that aren’t doing direct marketing but happen to offer recurring billing should use the MCC that best describes their actual business.
- Qualified merchants that directly sell subscriptions for digital goods or content may use the digital goods codes 5815, 5816, 5817, or 5818.
In other words, having a subscription doesn’t automatically put you in 5968. A software company billing monthly is still a software company. If you do run trials or negative-option offers, the FTC’s Restore Online Shoppers’ Confidence Act (ROSCA) page explains the disclosure, consent, and cancellation rules that apply. Our subscription payment processing page covers how to set up recurring billing the right way.
Common MCCs for online business models
The table below shows MCCs from Visa’s manual that often come up for online businesses. It’s a starting point for a conversation with your provider. Your acquirer assigns the code based on your full profile.
| Business model | MCCs often considered | Visa code title | What to watch |
|---|---|---|---|
| SaaS and software | 5817, 5734, 7372 | Digital Goods – Applications; Computer Software Stores; Computer Programming, Data Processing, and Integrated Systems Design | Downloadable apps vs. custom development vs. hosted services |
| Digital products and memberships | 5815, 5817 | Digital Goods Media – Books, Movies, Digital Artwork/Images, Music; Digital Goods – Applications | Streaming media subscriptions use 4899, per Visa |
| Online courses and coaching | 8299, 7392 | Schools and Educational Services (NEC); Management, Consulting, and Public Relations Services | Is it a course or a consulting service? |
| Supplements sold one-time | 5499 | Miscellaneous Food Stores (includes vitamin and health food stores) | Card-absent 5122 is high integrity risk |
| Subscription boxes and continuity offers | 5968 | Direct Marketing – Continuity/Subscription Merchant | High integrity risk for negative-option, card-absent sales |
| Telehealth and wellness | 8099, 8011 | Medical Services and Health Practitioners (NEC); Doctors and Physicians (NEC) | Pharmacy sales may need 5912, a high integrity risk code |
| Travel | 4722 | Travel Agencies and Tour Operators | Future delivery adds risk review |
| Events and ticketing | 7922 | Ticket Agencies and Theatrical Producers | Event date vs. charge date |
| Marketing and professional services | 7311, 7392, 8999 | Advertising Services; Management and Consulting; Professional Services (NEC) | 8999 only when nothing more specific fits |
The details matter. A supplement brand selling one-time orders, a supplement subscription box, and an online pharmacy could all end up with different codes and very different risk reviews.
Worked example: a business with two product lines
Say you run a fitness brand. About 70% of your card sales come from an online training program delivered through an app, and 30% come from one-time protein and vitamin orders. Under Visa’s rules, the bank has two options:
- One code for everything. Use the MCC for the higher-volume line (the app-based program) for all sales.
- One code per line. Set up a separate MCC, and usually a separate merchant ID, for the product store.
Now suppose you later launch a monthly “auto-ship” supplement plan sold through email campaigns. That new line may fit the continuity/subscription description in 5968, which is high integrity risk for negative-option, card-absent sales. Visa’s rules say a high integrity risk line must carry its own MCC. Tell your provider about a change like this before launch, not after.
How to find your merchant category code: step by step
- Look at your merchant statement. Many merchant statements show the MCC near your merchant ID or account details.
- Check your gateway or reporting portal. Some payment gateway and reporting dashboards show the code assigned to each merchant ID.
- Ask your provider in writing. Request the MCC for each merchant ID you have, plus the code title.
- Compare the title to what you actually sell. Use Visa’s manual to read the code’s description and its “similar merchants” list.
- Check your sales mix. Confirm the code matches the line of business that brings in the most card volume.
- Request a review if it doesn’t fit. Explain what changed and share updated product pages or sales data. The acquirer makes the final decision.
- Recheck after any big change. New product lines, a switch to subscriptions, or a new sales channel are all reasons to review again.
Checklist: signs your merchant category code may be wrong
- Your code ends in “99” even though a specific code clearly describes your business.
- Your code describes a product you stopped selling or never sold.
- Corporate card customers report declines that other customers don’t have.
- Your interchange categories on statements don’t match your business type.
- You added recurring billing, physical products, or a new service line since you applied.
- Most of your volume now comes from a different line of business than when you started.
Common MCC mistakes to avoid
- Describing your business vaguely. “E-commerce” or “online services” forces the underwriter to guess. Be specific about what you sell and how it’s delivered.
- Trying to “shop” for a lower-risk code. Misdescribing your business to land a different MCC can lead to account problems once the bank reviews your actual sales. Accurate is always safer than cheap.
- Forgetting your website. Underwriters compare your MCC to your live site. If the site shows products that aren’t in your application, expect questions.
- Not updating after a pivot. A SaaS company that adds hardware sales, or a coach who launches supplements, may need a new or additional code.
Having your documents and product details ready makes accurate classification easier. Our merchant account approval checklist lists what to prepare.
Related guides and next steps
- New to merchant accounts? Start with what a merchant account is and how it works.
- In a category that gets extra review? See our high-risk merchant account options and how a rolling reserve works.
- Selling software or digital goods? Explore SaaS payment processing and digital products and memberships.
- Comparing costs? Review our interchange-plus pricing tiers.
- Worried about disputes? Learn how to reduce chargebacks and see our chargeback management support.
- Ready to apply? Start your merchant account application.
Frequently asked questions
Can I choose my own merchant category code?
Not directly. Your acquiring bank or its agent assigns the MCC based on your application and website. You influence the result by describing your business accurately and completely, and you can ask your provider to review the code if your business changes.
Is an MCC the same as a NAICS or SIC code?
No. NAICS and SIC codes are industry classifications used for things like government statistics and some tax and licensing forms. MCCs are a separate payment industry system based on ISO 18245. Some code numbers look similar, but you shouldn’t assume they match.
Can a business have more than one MCC?
Yes. Under Visa’s rules, a business with more than one line of business can use separate MCCs for each line, usually with separate merchant IDs. If one line is high integrity risk, it must use its own high integrity risk code.
Does my MCC affect what I pay for processing?
It can. Card networks publish interchange programs for specific merchant types, so your category helps determine which rates apply. Your MCC also affects risk review, which can influence your provider’s pricing tier and whether a reserve is required.
Does a recurring billing model always mean MCC 5968?
No. Visa says merchants that aren’t doing direct marketing but happen to offer recurring purchases should use the code that best describes their business. Qualified sellers of digital subscriptions may use the digital goods codes instead.
Sources and further reading
- Visa: Visa Merchant Data Standards Manual
- Visa: Visa USA Interchange Reimbursement Fees
- International Organization for Standardization: ISO 18245 – Merchant category codes
- Internal Revenue Service: Revenue Procedure 2004-43
- Federal Trade Commission: Restore Online Shoppers’ Confidence Act
Get the right merchant category code from the start
Payment Circle helps new U.S. businesses apply for merchant accounts with a clear, accurate business profile, so the acquiring bank can classify you correctly from day one. We work with e-commerce brands, SaaS companies, course creators, subscription businesses, and the software houses and agencies that manage processing for their clients, with interchange-plus pricing and simple contract terms.
Apply for a merchant account or call (571) 274-7950 (9:00 AM–6:00 PM Eastern). You can also contact our team with questions about your business type.
Tell us about your business and we’ll match you with processing partners suited to your industry and volume.
