Quick Answer
Ask one question for each element underwriters price in a rip site (prepaid credit, randomized outcome, delayed fulfillment, stored balances, buybacks), plus one on the whole shape and one on life after approval.
Get every answer in writing. A fast yes tells you little. What matters is whether the processor still holds your account, and your payouts, after a record weekend.
Key Points
- The SeamlessChex underwriting team prices a rip site on prepaid credit, randomized outcomes, delayed fulfillment, stored balances and buybacks, not on the trading cards it sells.
- Under a proposed FTC order announced September 8, 2026, Humboldt Merchant Services will pay $12 million and is permanently banned from processing for merchants with a heightened risk of fraud.
- FinCEN's 2012 advisory says due diligence should determine whether legal actions are pending against a processor or its owners and confirm it holds every required state license.
A rip site's real exposure sits between the payment and the shipped card.
A card approval is fast. The issuing bank's authorization engine settles card validity, available funds and fraud risk before the customer has left the checkout page. Keeping a rip site's merchant account open is slower work. It gets decided later, once the first record weekend lands in front of a risk team.
Below, I tie one question to each element underwriters price in a rip site: prepaid credit, randomized outcomes, delayed fulfillment, stored balances and buybacks. A seventh covers life after approval, and then the diligence turns around onto the processor itself, starting with who answers for its own legal history.
Most rip and break operators worry about getting declined. The question I would put first is what happens to your payouts while an account review is open. Since the FTC's Humboldt order, processors know their own exposure rides on who they board. Back in 2012, FinCEN already named high chargebacks and consumer complaints as fraud signals. The questions you ask before boarding decide which side of that line you land on.
Questions this article answers
What makes a business high-risk to payment processors?
For a rip site, the risk sits in the business model, not the product. Our underwriting team prices prepaid credit, a randomized outcome, delayed fulfillment, stored balances and buybacks, not trading cards.
Each of those five elements maps to one concrete exposure an underwriter has to cover:
- Prepaid credit: the customer funds a balance before buying, which creates future-delivery and refund exposure.
- Randomized outcome: the pack or break spot delivers an unknown card, which raises classification and chargeback questions.
- Delayed physical fulfillment: the card ships later or stays vaulted, which invites non-receipt disputes.
- Stored balances: customer money sits on the platform, which puts the flow of funds under review.
- Buybacks: the platform repurchases pulled cards, a cash-out path that draws money-movement scrutiny.
In our experience, a merchant that applies as a "card shop" misdescribes its own business. The application should describe this shape and explain how each element is controlled. A processor already comfortable with platforms like Courtyard or Triumph has underwritten this profile before.
The common assumption is that a clean dispute record earns standard pricing. The FFIEC's BSA/AML manual tells banks to restrict which types of merchants a processor may serve, so a whole category can be ruled out before anyone reads your own chargeback history. A review of 2 sources points one way. The category and its shape set your terms. Your history adjusts them.
So apply for merchant payment processing solutions as the business you actually run, and expect every question that follows to target one of those five elements, starting with whether the processor has seen this shape at all.
Which seven questions predict whether a rip site account survives?
Ask one question per element of the shape, then one about life after approval. Put them to underwriting, not only to sales, and get each answer back in writing.
- The whole shape: Which platforms with prepaid credit, randomized packs and buybacks have you already boarded?
- Prepaid credit: How do you treat customer balances that have not bought anything yet, and what refund exposure do you hold against them?
- Randomized outcome: What chargeback ratio triggers a review, a higher reserve or termination, and will you warn us before acting?
- Delayed fulfillment: Is the reserve one-time or rolling, at what percentage, for how long, and what releases it once vaulted cards ship?
- Stored balances: Who holds customer money between top-up and shipment?
- Buybacks: How do you review buyback payouts, and will a spike in them trigger a hold?
- After approval: What exactly starts an account review, and will you put that process in writing?
A June 2025 r/fintech checklist from a high-risk broker covers part of this ground. It tells merchants to ask whether a processor has onboarded businesses exactly like theirs, whether a reserve is one-time or rolling, and whether the processor will warn them or "shut you down instantly" on chargebacks. Useful. Generic, though. None of its six checks touches buybacks or stored balances.
Question five matters more than it looks. In 2021, the Electronic Transactions Association explained that payment facilitators settle either through a fixed-base operator structure with their sponsor bank or by sitting in the flow of funds, which is subject to money transmission regulations. The same guidance warned that sponsor banks can change their risk appetite at any time. If nobody can tell you where a customer's top-up sits overnight, I would treat that as an answer in itself.
Contrary to what most operators fear, the decline is rarely the real threat. High-risk merchants on r/fintech describe sudden freezes and payout holds as the usual headaches, and the most useful reply there said to judge a processor by how it handles the account after approval. A pitch for a competing crypto gateway put traditional high-risk reserves at 5 to 10% of revenue for 6 to 12 months. Treat that as a vendor's framing, not a quote you will receive. Your number comes from your own answers.
If a past processor already ended your account, ask about MATCH list merchant account approval before you ask about rates, because the next underwriter will look at the processor you left and, increasingly, at the processor you are joining.
How do you check that the processor itself will survive scrutiny?
Turn the diligence around. Before the processor finishes vetting you, ask for its sponsor bank's name, its state licenses, and any pending legal action against it or its owners.
The newest warning came on September 8, 2026. Under a proposed FTC order, Humboldt Merchant Services will pay $12 million in consumer redress and is permanently banned from processing for merchants with a heightened risk of fraud. The complaint alleged Humboldt boarded more than 1,000 shell merchants whose chargebacks ran almost 10 times what card brands treat as excessive, then moved them onto a lower-risk BIN so more transactions would clear. The order also bars misleading merchant applications and load balancing.
Enforcement now reaches the processor. That changes what you should ask.
- Legal history: FinCEN's 2012 advisory on payment processors says due diligence should determine whether investigations or legal actions are pending against a processor or its owners, and confirm it holds every required state license.
- Boarding discipline: the FFIEC's BSA/AML Manual tells banks to restrict which merchant types a processor may serve and to audit its merchant client lists. Ask how your processor's sponsor bank checks its book.
- Bank redundancy: in 2021, ETA guidance flagged that sponsor banks can change risk appetite at any time, and asked whether a provider kept relationships with multiple acquirers.
Think of it like hiring a roofer. A low quote means little if the license lapsed last spring. You want the permit on file before anyone climbs the ladder.
One red flag matters most to me. If a sales rep offers to describe your platform as something it is not, or to spread your volume across extra accounts, walk away. The research section below walks through what regulators now ban. Before you sign, ask the rep to show you, in writing, how your high-volume credit card processing application will describe prepaid credit and buybacks when it reaches underwriting.
Which processor red flags do regulators look for, and can you spot them before you sign?
In September 2026, federal regulators wrote out a list of things one payment processor may never do again. Several items describe shortcuts that a rip site could be tempted to accept.
On September 8, the Federal Trade Commission announced a proposed order against a processor accused of serving sham merchants. The FTC's complaint says it boarded more than 1,000 shell entities fronting for unauthorized billing scams, with chargeback rates almost 10 times what card brands treat as excessive. It then allegedly moved them onto an affiliate's lower-risk bank identification number so cardholders' banks would approve more transactions. Katherine White, deputy director of the FTC's Bureau of Consumer Protection, said the company kept processing "despite red flags indicating they were scamming consumers."
$12 million
- Paid for consumer redress under the proposed order.
- A permanent ban on processing for merchants with a heightened risk of fraud.
- No processing for four merchant categories, including straw companies and merchants on Mastercard's MATCH list for excessive chargebacks, laundering or fraud.
- No help with misleading merchant applications, and no load balancing to avoid risk monitoring.
All of the above comes from allegations settled through a proposed order, which takes on the force of law once a federal district judge approves and signs it. Source: FTC, September 8, 2026.
For a rip site, the bans matter more than the fine. The order forbids helping merchants supply "misleading information about merchants in applications for merchant accounts." It also forbids "tactics to avoid fraud and risk monitoring, including load balancing." The complaint reaches merchants the processor "knew, or consciously avoided knowing" were shells, so looking the other way counts too.
The application is where a rip site meets that risk. Our underwriting team puts it plainly: a processor "isn't really pricing 'trading cards'". It prices prepaid credit, randomized outcomes, delayed fulfillment, stored balances and buybacks. A salesperson who offers to file your platform as an ordinary card shop is offering the kind of help the FTC has now written into a ban.
One case shows a processor after it failed. Bank regulators have long told banks how to spot the warning signs earlier, often from public sources. The federal BSA/AML examination manual notes that "Processors generally are not subject to BSA/AML regulatory requirements," so the vetting falls to the banks that hold their accounts, and FinCEN's 2012 advisory says that vetting should continue after onboarding. The manual lists where to look: the FTC website, the Better Business Bureau, the NMLS licensing registry, NACHA, state incorporation departments and internet searches. You can search most of those yourself.
The same manual tells banks to limit which kinds of businesses a processor may serve, to set those limits when the account opens, and to audit the processor's merchant client lists from time to time. A rip site therefore needs two yeses: one from the processor's sales team, and one from the sponsor bank that decides whether a platform like yours belongs in that portfolio at all.
One question divides the sources: is a processor that banks with several institutions safer or riskier? FinCEN's advisory lists "redundant banking relationships" among the habits of suspicious processors, kept in case a bank "may recognize the suspicious activity and terminate" them. The advisory also flags consolidation accounts that can "conceal high return or chargeback rates," and processors that court troubled banks, often "smaller community banks that lack the infrastructure" to manage a high-risk relationship. In 2021, the Electronic Transactions Association's payment facilitator committee came down on the other side. It advised looking for relationships with multiple acquirers, because "sponsor banks can change their philosophy or adjust their risk appetite at any time."
| Backup banks as continuity | Backup banks as evasion | |
|---|---|---|
| Who describes it | ETA payment facilitator committee, 2021 | FinCEN advisory, 2012 |
| The reason given | A sponsor bank can change its risk appetite at any time | A bank may spot suspicious activity and cut the processor off |
| Warning signs nearby | None named | Consolidation accounts that hide chargeback rates, courting distressed community banks |
| What separates them | The processor names its banks and explains why it keeps more than one | The extra banks exist to stay ahead of a termination |
Read side by side, the sources show that a rip site's account rests on its processor's standing with a bank as much as on its own approval. Processors get into trouble through dressed-up applications, hidden chargeback rates, volume spread to dodge monitoring, and new banks found after old ones walk away. A high-risk merchant could easily hear each of those pitched as help. A backup bank can still be a strength when the processor discloses it and can explain it.
- Before you sign, search the processor and its owners on the FTC website, the Better Business Bureau, NMLS and state incorporation records, then ask in writing whether any investigation or legal action is pending.
- Put prepaid credit, randomized outcomes, delayed fulfillment, stored balances and buybacks on the application, and decline any offer to file you as a plain card shop.
- Treat an offer to spread your volume across extra accounts, or to move you onto a different BIN to lift approvals, as a red flag.
- Ask which sponsor bank will hold your account, and whether that bank has approved platforms with this business shape.
- If a processor mentions backup banks, ask why it keeps them and whether any bank has ever terminated it.
How we checked this
We read an FTC enforcement announcement from September 2026, a 2012 FinCEN advisory, the processor section of the federal BSA/AML examination manual, and a 2021 guide from the Electronic Transactions Association's payment facilitator committee. The view on how processors price rip platforms comes from our own underwriting team. None of the figures here is ours. The FTC case rests on allegations settled by a proposed order and was never proven at trial. The FinCEN and ETA sources are several years old. The manual was written for bank examiners, and the ETA guide was written for companies weighing the payment facilitator model. The ETA is an industry trade group. We board rip platforms ourselves, so we benefit when merchants hold processors to these standards. Still unknown: how often merchants lose their accounts when their processor faces enforcement, and how sponsor banks currently view rip platforms. None of our sources measured either.
- Federal Trade Commission, press release on a proposed order against a payment processor, September 8, 2026.
- FinCEN, Advisory FIN-2012-A010 on third-party payment processor risk, October 22, 2012.
- FFIEC, BSA/AML manual section on third-party payment processors, undated.
- Electronic Transactions Association, payment facilitator committee guide on becoming a PayFac, October 28, 2021.
- Seamless Chex underwriting team, perspective on rip and break merchants shared internally, September 2026.
What should a rip site do before its next big weekend?
Get written answers to the seven questions before you board. Then lay the answers side by side and pick the processor that commits to warning you before any hold.
I expect scrutiny to keep moving upstream. The FFIEC's BSA/AML examination manual already tells banks to restrict the types of merchants a processor may serve, to communicate those limits at account opening, and to monitor for significant changes in a processor's business strategy. Your processor's sponsor bank is asking its own version of these questions, about you.
One honest gap. Nobody has published survival rates for rip sites that asked these questions compared with those that skipped them, and I won't pretend a number exists. Until someone tracks it, the written answers are the best evidence you have.
So get the chargeback threshold, the reserve terms and the name of whoever holds stored balances on paper, then hand that paper to the person reconciling Monday's payouts.
Frequently Asked Questions
What else do rip site operators ask about processors?
Most follow-up questions come down to timing: when money actually moves, how fast onboarding happens, and what the processor's bank wants to know about you.
If a card payment is approved, has my rip site been paid?
No. Ricky Graziosi, in his Payments Demystified series on Substack, puts it bluntly: "Even after an approval, no money has moved yet." The issuer places an authorization hold, a temporary reservation of the cardholder's funds, and settlement flows from issuer to network to acquirer to merchant, usually the next day. Plan cash for sealed product around settlement, not approvals.
Why does the gap between approval and settlement matter for a break platform?
Graziosi notes that almost all credit, online and card-on-file transactions are dual-message transactions, where the clearing message arrives hours or days later with the final amount. That window is where a processor can still hold funds. It is also why I ask exactly when a payout is released, not just when a charge clears.
How quickly can SeamlessChex board a rip or break business?
We offer same-day onboarding with no contracts, and we approve high-risk businesses that other processors turn away. Underwriting still has to see how your model works first. Start through our contact page.
Can I take payments online and at live events?
Yes. SeamlessChex supports credit card processing online or in person, with ACH available as a second rail.
Will my processor's bank look at my business too?
Expect it. Bank examination guidance tells banks to have processors identify major customers by merchant name, principal business activity, location and transaction volume, so the way you describe a randomized-outcome product on your application travels all the way up the chain.
Written by
Lily Flanigan
Operations Manager, SeamlessChex
Lily Flanigan is Operations Manager at SeamlessChex, a credit card processing and fintech payments platform recognized on the Inc. 5000, where she focuses on operations and process optimization.
Connect on LinkedInSeamlessChex works with established businesses processing a minimum of $25,000 per month.