Merchant accounts for crypto businesses

Card acquiring for crypto businesses depends almost entirely on your regulatory status and how you handle client funds. Providers segment the industry into distinct risk categories. Non-custodial software wallets or analytics tools are the simplest to place, as they do not touch customer funds and often fall outside financial licensing requirements. Custodial exchanges, brokerages and on/off-ramps face the highest scrutiny. Acquirers will expect to see registration or licensing from a recognised regulator, robust KYC/AML policies, and evidence of controls to prevent sanctions violations and trace the source of funds.

Over-the-counter (OTC) desks have unique needs, often requiring high-value transaction support and manual settlement, which many e-commerce-focused acquirers cannot accommodate. NFT marketplaces and token issuers present their own challenges; underwriters will scrutinise the underlying asset, the legality of the sale in the buyer's jurisdiction and the risk of future disputes. Mining operations are generally not considered high-risk from a payments perspective unless they are selling directly to the public. Ultimately, specialist domestic acquirers in regions with clear digital-asset frameworks are the most likely to provide stable processing, but only for businesses that meet their stringent compliance criteria.

Underwriting for a crypto merchant account is an exercise in compliance due diligence, not a standard merchant review. The decision rests on three pillars: regulatory standing, anti-money laundering controls and chargeback risk. First, the underwriter verifies your corporate structure and licensing. They will expect to see a Money Services Business (MSB) registration, a virtual asset service provider (VASP) licence, or an equivalent authorisation from a credible jurisdiction. Unlicensed custodial businesses are typically an automatic decline.

Second, the underwriting team will forensically examine your compliance programme. This includes your KYC and customer due diligence processes, transaction monitoring systems, sanctions screening procedures and your source-of-funds verification policy. They need to be confident that you can detect and block illicit funds from entering the fiat financial system via their rails. This often involves demonstrating the use of blockchain analytics tools. Third, they assess the chargeback risk. Card purchases of crypto are treated as high-risk due to price volatility and the irreversible nature of crypto transfers, making them a target for friendly fraud. Underwriters will review your 3-D Secure implementation, your customer service process for handling disputes and your historical chargeback data if you have any.

Pricing for crypto payment processing is provider-specific and reflects the high-risk nature of the industry; there are no universal rates. Transaction fees for EEA or UK-licensed acquirers typically range from 2.5% to 5.5% plus a fixed per-transaction fee. Some specialist domestic acquirers in other regions may price higher, occasionally reaching 7% for specific business models or jurisdictions. These figures are indicative and vary based on your processing volume, transaction size and perceived risk profile. Be wary of any provider advertising fixed, low rates without a full review of your business.

A rolling reserve is standard practice. Expect a reserve of 10% held for a rolling period of 180 days. This protects the acquirer against future chargebacks, particularly given the extended dispute windows for card-not-present transactions. In some cases, a provider may require an upfront security deposit or an increased reserve for new businesses without a processing history. Settlement is rarely instantaneous. While some providers offer daily or T+1 settlement, weekly settlement (T+7) is more common for high-risk merchant accounts. Payouts may also be subject to volume caps, which limit the total amount you can process per day or month until you have established a stable processing history.

The most common reason for decline is a mismatch between the business model and the acquirer's risk appetite, often stemming from regulatory ambiguity. Operating a custodial service without a VASP or MSB licence in a jurisdiction that requires one is an immediate red flag. Similarly, offering services to residents of countries where those services are restricted or illegal will lead to rejection. Many declines also result from an inadequate compliance framework. If your KYC process is weak, if you cannot demonstrate robust transaction monitoring, or if your source-of-funds checks are superficial, underwriters will not take the risk.

Account termination often follows a spike in chargebacks or signs of lax compliance. A chargeback ratio exceeding the thresholds set by Visa or Mastercard (typically 0.9%) will trigger a review and likely lead to closure. Acquirers also terminate accounts for activity that violates their acceptable use policy, such as facilitating payments for privacy coins, unregistered security tokens or gambling-related tokens. A sudden change in business model without prior notification and approval from the acquirer is another frequent cause for termination. The provider underwrote a specific model; pivoting to a higher-risk activity breaks that agreement and their trust.

A file that clears underwriting is a comprehensive due diligence package that anticipates the acquirer's concerns. It begins with clear corporate documentation: certificate of incorporation, shareholder register, and identification for all ultimate beneficial owners (UBOs). Crucially, it must include proof of any required financial licensing or registration, such as a VASP authorisation from a European regulator or an MSB registration with FinCEN. Without the correct licences for your model, the application will not proceed.

The centrepiece of the file is the compliance manual. This document should detail your end-to-end AML/CFT policies. It must outline your customer identification programme (KYC), including how you verify identities and assess customer risk. It needs to describe your transaction monitoring procedures, specifying the software you use and the red flags that trigger a suspicious activity report. The file should also include your policies on sanctions screening, source-of-funds checks and your internal audit plan. Finally, include a clear business plan and a funds-flow diagram showing exactly how a card payment moves from the customer to your settlement account. A well-prepared file demonstrates that you are a serious, compliance-first operator.

Relying on a single crypto merchant account is a critical operational risk. A single provider can change its risk appetite, face pressure from its own banking partners, or terminate your account with little notice, leaving you unable to accept fiat payments. Building redundancy means establishing relationships with multiple, diverse payment providers across different jurisdictions and provider types.

An effective strategy involves securing at least two card acquiring solutions, ideally one with a specialist domestic acquirer and another with an EEA-licensed or UK FCA-authorised payment institution. This geographical and regulatory diversification protects you if one region's rules suddenly change. Beyond cards, consider integrating stablecoin settlement into your treasury operations. Allowing customers to pay via USDC or EURC, and using these to pay suppliers or manage treasury, reduces your dependence on the card schemes. You can also work with payment facilitators that specialise in your niche. While their fees might be higher, they can provide an essential backup. The goal is to create a payment stack where the failure of one component does not halt your entire business. Xavion can help you devise and implement such a strategy at xavioncapital.com/start.