High-Risk Merchant Accounts for Crypto Exchanges and Wallet Services

Why crypto is high-risk to a card acquirer

Three structural issues: (1) chargeback exposure on irreversible asset purchases, (2) AML obligations on the operator that bleed through to the acquirer, and (3) regulatory variance — what's licensed in Switzerland is unlicensed in New York. Visa charges acquirers an additional registration fee for crypto on-ramp merchants.

Licensing — the gate

• US: FinCEN MSB registration + state-by-state MTLs (or sponsorship from a licensed partner). NY BitLicense for NY residents.
• EU: MiCA framework rolling out — CASP authorization required.
• UK: FCA registration under MLR 2017.
• Singapore: MAS PSA license.
• Offshore: Cayman, BVI, Seychelles — acceptable to some acquirers with full KYC stack.

No license = no card processing through any reputable acquirer.

KYC/AML stack acquirers expect

• Identity verification before first deposit (Tier 1 documents)
• Enhanced due diligence above defined thresholds
• Source-of-funds verification on large deposits
• Chain analytics (Chainalysis, Elliptic, TRM) on outbound transactions
• OFAC and sanctions screening on every customer
• Designated MLRO with documented program
• SAR/STR filing capability

Pricing

4.45%–7.95% + $0.30, 10–15% rolling reserve held 180 days. 3DS2 mandatory on most BIN ranges to push liability to issuers. Settlement T+5 to T+7.

Chargeback exposure

Crypto disputes cluster around "didn't authorize" (account compromise) and "product not received" (failed on-chain transaction). Acquirers expect:

• 3DS2 on all card purchases over $100
• Velocity controls (max purchases per card per 24h)
• Mandatory KYC before crypto leaves the platform
• 24-hour withdrawal delay on new accounts
• Verifi RDR + Ethoca alerts

Why Stripe doesn't work for most exchanges

Stripe supports a narrow band of crypto businesses — generally only NFT marketplaces and a few licensed exchanges with negotiated agreements. Standard self-serve crypto on-ramps and exchanges are explicitly prohibited.

What to submit

Corporate docs, all licenses and authorizations, full AML/KYC policy, chain analytics contracts, sample transaction logs, processing history if available, and a website walkthrough showing the KYC flow. Underwriting runs 7–14 business days.