04.09.2026
KYC Documents for High-Risk Merchant Account: What Providers Require
If you are a high risk business owner wanting to apply for a high-risk merchant account, you have to know this is never a straightforward process. Merchants in this niche, which includes adult and dating sites among other verticals, are expected to complete a far more detailed Know Your Customer (KYC) review than regular low-risk businesspeople.
If you work in these sectors, you are already aware about the fact that finding a reliable acquiring partner can be difficult. Furthermore, it is only one part of the challenge. Providers will not only need to understand exactly who they're doing business with and how your company operates, but also whether your business meets the regulatory standards required to accept payments safely.
Before approving your application, underwriters will assess your company structure, ownership, financial history and business model. In many cases, they'll also carry out Enhanced Due Diligence (EDD), particularly if your business operates in a sector associated with higher fraud, chargeback or compliance risks.
Below, we guide you through the risks and challenges of the application process when it comes to high-risk businesses. If you are looking for answers and a checklist of what you need to prepare, keep reading.
What Is KYC in the Context of Acquiring?
KYC is often associated with verifying an individual's identity, but merchant acquiring involves much more than checking a passport or proof of address. When payment providers carry out KYC, they're assessing your business as a whole.
This includes confirming that your company is legally registered and identifying the people who ultimately own or control it. It also involves reviewing how your business generates revenue, and understanding the risks involved in processing its transactions.
This is not just a formality meant to prove that your business exists – by utilising this process, providers decide whether they can offer you their payment services without putting themselves at risk.
Why acquiring providers are required to verify merchants
Payment providers and acquiring banks don't just make up their own rules – they operate within a highly regulated global network. To keep the financial system safe, they must follow strict anti-money laundering (AML) and counter-terrorist financing (CTF) laws, alongside the specific requirements set by major card schemes like Visa and Mastercard.
The common misconception among high-risk business owners is these checks, like the high-risk label, are meant to prove some kind of illegality of your business. This couldn’t be further from the truth. While these processes are there to ensure that payment processors are not accidentally linked to illegal activities or sanctioned individuals which can lead to massive risks, including heavy fines, legal trouble, and a damaged reputation, the high-risk label itself is not a judgement, it’s just a financial classification.
Ultimately, the KYC process creates a clear paper trail. It proves to regulators and auditors that the provider has done their homework and performed the necessary due diligence before welcoming a new business into the financial ecosystem.
Standard due diligence vs. Enhanced Due Diligence (EDD)
Not every business goes through the same level of scrutiny – for a low-risk business, standard Customer Due Diligence (CDD) is usually enough. This process is much simpler and usually involves verifying the company's legal registration, confirming the identity of its directors or owners, and carrying out sanctions and compliance checks.
For high-risk merchants, the process is not as simple. Businesses operating in industries such as adult and dating sites, but also gambling, forex, cryptocurrency or others, providers usually carry out Enhanced Due Diligence (EDD).
EDD goes much further than standard identity checks. During the process, underwriters may review your source of funds, examine your processing history, verify licences and compliance procedures, and also ask you for additional information about your ownership structure and business operations. The aim is to build a complete picture of the business before approving the account.
Why Payment Providers Request So Much Information
The amount of documentation requested during onboarding can be very overwhelming. However, each document in the metaphorical “pile” serves a purpose. Payment processors use the information you supply to assess risk, verify compliance and make sure that your business meets both regulatory requirements and their own standards as a company. The more complex or higher risk your business is, the more detailed this review is likely to be, and the more documents you will be asked to provide.
Regulatory and AML requirements
Acquirers must comply with international AML standards which are established by organisations such as the Financial Action Task Force (FATF), alongside national regulators including the Financial Conduct Authority (FCA) in the UK and FinCEN in the United States.
These regulations require providers to take a risk-based approach when onboarding merchants. That means gathering enough information to understand who owns the business, how it operates, where the funds come from, and whether appropriate safeguards are in place.
For businesses in regulated sectors, providers may also ask for evidence of age verification, content moderation, licensing or other compliance procedures. Where ownership structures are particularly complex, analysts will often trace the corporate structure through multiple entities to identify the ultimate beneficial owners and ensure there are no hidden sanctions or compliance concerns.
How KYC affects your merchant account terms
Many high-risk businesses assume KYC is simply an approval exercise, but the outcome completely influences the future of your business.
Once the underwriting process is complete, the provider uses its risk assessment to determine processing fees, reserve requirements, monthly processing limits and, in some cases, settlement schedules.
Applications that are complete, accurate and well supported generally receive lower operational risk classification – they are approved more quickly and may qualify for more favourable commercial terms than applications containing missing information, inconsistencies or unanswered questions.
OPTIMIZE YOUR
ACQUIRING SETUP
Mandatory KYC Information for High-Risk Merchants
Submitting a complete application is one of the easiest ways to avoid unnecessary delays during underwriting.
Although requirements vary between acquiring banks and payment providers, most high-risk merchants will be asked to provide the same core information. This usually includes corporate documents, ownership details, website information, financial records and evidence that the business complies with relevant legal and regulatory requirements.
Preparing these documents in advance can significantly speed up the approval process and reduce the number of follow-up requests from underwriters.
Company registration, legal structure and corporate documents
The number one thing when it comes to any business bank account underwriting process is proving the legal existence and structure of your business entity. Underwriters need to verify that the company is legally formed, active, and operating in a supported jurisdiction. You'll typically need:
- Certificate of Incorporation: The official government document proving your company was legally formed.
- Articles of Association / Memorandum: The documents detailing how your company is governed and how shares are distributed.
- Company Registration Number and Registered Address: Which they will verify via public or private corporate registries.
- TIN/VAT Confirmation: Tax identification numbers are essential for compliance and reporting.
- Parent Company Disclosure: If you're applying as a subsidiary, you have to disclose the full corporate hierarchy.
- MCC Code Selection: Identifying the correct Merchant Category Code to accurately classify what you actually do.
Directors, beneficial owners and UBO verification
Because corporate vehicles can easily be misused, payment providers have to identify the real, natural persons who ultimately control and profit from the business. UBO verification merchant account checks are non-negotiable and an absolute must all around the globe. Be prepared to provide:
- Full Names and Dates of Birth: For all directors and anyone owning a significant percentage of the company (usually 10% or 25%, depending on the jurisdiction).
- Passport or Government ID Copies: These must be clear, unexpired, and often certified by a professional.
- Proof of Residential Addresses: Usually a utility bill or personal bank statement under three months old.
- Nationality and Tax Residency Declarations: Including specific declarations for US persons (FATCA compliance).
- PEP Status Declaration: A formal sign-off stating whether any owner or director is a Politically Exposed Person, which triggers mandatory PEP screening.
- UBO Confirmation Form: A signed document (like a Form C) certifying the beneficial owners.
- Ownership Structure Chart: A visual organogram, signed and dated by a director, showing the exact distribution of shares right up to the ultimate natural persons.
- Source of Funds: Proof of how the UBOs actually acquired the capital used to fund the business.
Website, platform and business activity documentation
Your website is your digital storefront. Underwriters will review it as if they were a customer, a regulator, and a card network auditor all rolled into one. You must provide:
- Domain Name and Proof of Ownership: Invoices or registrar screenshots proving your company actually owns the domain.
- Years of Operation: A bit of contextual background on your business history.
- Premium Access Credentials: If your site sits behind a login or paywall, you have to give the underwriter active test credentials so they can review the protected content.
- URLs to Terms and Conditions: Transparent outlining of terms for your users. If your platform involves creators, separate terms for them must be provided too.
- Website Disclaimer / Imprint: A clear display of your legal entity name, registration number, and contact details on the site.
- Refund and Cancellation Policy: Card networks require these to be highly visible to prevent unnecessary chargebacks.
- Privacy and Data Protection Declaration: Showing you comply with regional data laws.
- Business Description: A straightforward summary of the products or services you offer.
Processing history, financial statements and bank account details
To payment providers, your financial health and past processing behaviour are the strongest indicators of future risk. Expect to hand over:
- 6 Months of Processing History: Statements from your previous or current payment provider showing transaction volume, total transactions, refund rates, and a detailed chargeback history. This is absolutely critical for assessing fraud risk.
- Latest Financial Statements: A recent balance sheet and Profit & Loss (P&L) statement to prove the company is actually solvent.
- Bank Statement: A corporate statement not older than three months to confirm account ownership.
- Bank Details: The exact bank name, IBAN, and SWIFT/BIC code where your settlement funds will go.
Additional Data That Providers May Request
Beyond that mandatory core, underwriters apply a risk-based approach. Depending on your specific industry, processing volumes, and target markets, providers will likely ask for more information that you may expect.
Industry-specific requirements: adult, gambling, dating and other verticals
High-risk sectors are watched like a hawk by regulators and card networks. You'll need specific documentation to prove that your company operates legally and ethically.
- Adult Platforms: Adult content platforms accepting payments must provide rigorous, documented age verification procedures for both users and performers, which underwriters require during review. You also need a strict content moderation policy outlining how you review content, identify illegal material, and technically remove it.
- Gambling: Operators have to provide their gaming compliance certificates, specific jurisdictional licences, and evidence of responsible gambling protocols.
- Online dating: Providers look very closely at user verification flows to ensure the platform is actively trying to mitigate romance scams, friendly fraud and fake profiles.
Keep in mind that specific documentation requirements vary by provider, so always confirm this early in the application process.
Transaction flow, expected volumes and source of funds
Providers, including specialist adult payment processors, need to understand exactly how money moves through your ecosystem to monitor for potential money laundering. You will likely need to share:
- Expected Monthly Processing Volume: Honest predictions of how much you intend to process.
- Transaction Sizes: Your minimum, average, and maximum anticipated transaction amounts per customer.
- Geographic Distribution: Where your cardholders are located (different regions carry different risk weightings).
- Recurring Payment Disclosure: If you use a subscription model, you must disclose the frequency and amounts - whether billed by card or via bank-based methods such as SEPA Direct Debit - as recurring billing carries higher chargeback risks.
- Affiliate Programme Disclosure: If you rely on affiliates for traffic, how are you vetting and monitoring them?
Licences, age verification procedures and content policies
If you are an adult business operating in a highly regulated sector, you usually need formal permission from local authorities. Providers will ask for:
- Operating Licences or Permits: Where legally required for your vertical.
- Compliance Certificates: Proof you adhere to industry standards (like PCI DSS if you handle raw card data).
- Enforcement of Restrictions: Technical docs proving how you enforce age restrictions or geographic IP blocks.
- Data Protection: GDPR or applicable regional data protection compliance documentation.
- Fraud Prevention Measures: A rundown of the tools you use (e.g., 3D Secure, velocity checks) to stop fraud in its tracks.
Why Accuracy in KYC Directly Affects Approval
It’s a common misconception that underwriters just sit there ticking boxes against a list of submitted documents. In reality, modern underwriting is a highly analytical process.
How underwriters cross-check submitted data
When conducting KYC for high-risk merchant account approvals, underwriters cross-reference your application against your live website, your historical processing statements, public corporate registries, and global sanctions screening databases.
For instance, if your application states your average ticket size is €50, but your processing history shows it’s actually €250, that discrepancy triggers an immediate alert. Similarly, if your corporate documents list three directors, but a public registry shows four, the underwriter will pause the whole application until you explain it.
What happens when documents and application data conflict
Inconsistencies between what you say you do and what your website actually shows, mismatches in processing volumes, undisclosed UBOs, or hiding prior account terminations are the fastest ways to get rejected or severely delayed.
Omitting information, even minor details you think are irrelevant, creates massive red flags for the acquirers. Underwriters are trained to spot these gaps. If they feel a merchant is actively obscuring their business model, they will decline the account to protect their own risk portfolio.
Common KYC Mistakes That Delay or Block Approval
Even perfectly legitimate, fantastic businesses face prolonged delays if their application package is a mess. If you want to go through your approval process smoothly, avoid these errors:
- Submitting Incomplete Document Packages: Sending documents piecemeal over three weeks frustrates underwriters and kills your timeline. Send a complete package, all at the same time.
- Providing Outdated Documents: Bank statements and utility bills usually must be under 90 days old. An expired passport is an automatic fail.
- Mismatched Names or Addresses: If a director's name on their ID doesn't perfectly match the corporate registry, it causes delays.
- Failing to Disclose All UBOs: Trying to hide a beneficial owner (especially one in a high-risk jurisdiction) will almost always be uncovered and result in a decline.
- Missing Signatures: Forgetting to sign and date the ownership structure chart.
- Vague Business Descriptions: Giving a generic description that doesn't actually match the products sold on your website.
- Hiding Past Terminations: Failing to disclose that a previous acquirer dropped you, or hiding a terrible chargeback history.
- Incomplete Websites: Submitting a site that is still under construction, has broken links, or is missing mandatory legal policies.
- Ignoring Optional Fields: Treating optional fields on the form as unimportant. In high-risk acquiring, more context is always better.
KYC Document Checklist for High-Risk Acquiring
Use the practical checklist below to gather your documents for how high-risk payment processing works before you begin your application. Be sure to also learn more about setting up a business bank account for high-risk businesses to make sure that your settlement infrastructure is ready to go alongside your acquiring solution.
Company Documents:
- Certificate of incorporation / registration extract
- Articles of association / Memorandum
- Proof of registered corporate address
- TIN/VAT confirmation document
- Ownership structure chart (visually mapping shares, signed by a director)
Owners and Directors (for each individual):
- Certified passport or government ID copy
- Proof of residential address (utility bill/bank statement under 3 months old)
- PEP (Politically Exposed Person) declaration
- UBO confirmation form (Form C or equivalent)
- Source of funds statement for each UBO
Website and Platform Information:
- Domain ownership proof (registrar invoice or screenshot)
- Premium access credentials (if the site has a paywall/login)
- URLs to Terms of Service (for end users)
- URLs to Terms of Service (for content creators, if applicable)
- Clear refund and cancellation policy
- Privacy policy and data protection declaration
- Website legal disclaimer / imprint
Financial and Processing Data:
- 6-month processing statements (showing transactions, refunds, and chargebacks)
- Latest financial statements (Balance Sheet + P&L)
- Corporate bank statement (not older than 3 months)
Compliance and Security (Industry Dependent):
- Age verification procedure documentation
- Content moderation policy and technical documentation
- Operating licence or permit (e.g., gaming licence)
- GDPR / regional data protection compliance documentation
- Fraud prevention measures description
Ultimately, the speed of approval by the underwriters will solely depend on the honesty and thoroughness of your application. Don’t try to hide anything, and provide the underwriters with all the necessary documents, which also have to be up to date.
Before applying for a new merchant account, it also pays to map out your KYC, banking, and processing requirements to guarantee a smooth, delay-free setup. The specialists at delicato.io can evaluate exactly what your business requires and connect you with tailored payment solutions that understand your industry.
PASS UNDERWRITING
FASTER
FAQs
What is KYC in the context of merchant acquiring?
KYC (Know Your Customer) is basically a background check for your business. The bank needs to know exactly who they're working with, that you're operating legally, and that you won't bring them any financial or reputational trouble.
Why do high-risk merchants go through Enhanced Due Diligence?
High-risk industries naturally see more fraud and chargeback, and because of this, banks are legally required to dig deeper into your business, like checking where your funding comes from, just to make sure everything is transparent.
What documents are typically required to open a high-risk merchant account?
You'll generally need your company registration, IDs and proof of address for the owners, your last 6 months of processing history, recent financials, an ownership chart, and any licenses specific to your industry.
Who is considered a UBO (Ultimate Beneficial Owner) and why does it matter?
A UBO is a real person who owns or controls a big chunk (usually 10-25% or more) of the business, which banks have to verify to ensure bad actors aren't hiding behind your company.
Why do providers ask for 6 months of processing history?
It's your financial track record. Banks look at your sales volume, refund rates, and chargebacks to see how stable your business is and how often your customers dispute their charges.
What is a PEP check and why is it part of KYC?
A PEP (Politically Exposed Person) checks flags of anyone in a prominent public position. Since politicians and public officials carry a higher risk for bribery or corruption, banks are required by law to know if any of them are tied to the business.
Why does a website review matter during merchant onboarding?
Banks want to see that your website actually matches what you told them you sell. They also check that your refund policies, terms of service, and checkout processes are clear and easy for customers to find.
Does KYC apply differently depending on the vertical (adult, gambling, dating)?
Yes. The basic company checks are the same, but the bank will ask for extras based on what you do. For example, gambling sites need specific licenses, while adult or dating platforms must prove they have strong age verification and content moderation.
What happens if documents submitted in KYC are inconsistent?
Mismatched addresses or numbers that don't add up are huge red flags. It will immediately delay your application while the bank asks for explanations, and it could easily get you rejected.
How long does a KYC review take for a high-risk merchant?
It can take anywhere from a few days to a few weeks. The easiest way to speed it up is to make sure your document package is complete, accurate, and perfectly organised from day one.
