High risk payment gateway and processing stack: how to set one up

A durable high risk payment setup is three layers, an independent gateway, two or more acquirers and a settlement bank, and each layer is chosen separately.

A durable high risk payment setup is three separate layers: an independent payment gateway, two or more acquiring relationships behind it, and a settlement bank account that will accept the funds those acquirers pay out. Most businesses that get shut down bought all three as a single bundle from one provider, so a single risk review removed everything at once.

This page explains how to put each layer together in the right order, what each one costs in general terms, what underwriters check before they approve, and how to wire the stack so that losing one provider is an inconvenience rather than a shutdown. If you searched for a high risk payment gateway, this is the full picture of what that gateway has to sit on top of.

Short answer

Is a high risk payment gateway the same as a merchant account?

No. The gateway is the technology that captures and routes transactions. The merchant account comes from an acquirer, which is the regulated institution that approves your business and settles your funds. You need both, and choosing them separately gives you far more resilience than a bundle.

  • How many acquirers should a high risk business have: Two is the practical minimum and three gives real comfort for larger volumes. Each should be live and carrying part of your traffic, and ideally they should sit in different licence regions so a single regulatory change…
  • How long does it take to set up a full high risk payment stack: Timelines depend mainly on acquiring underwriting, which commonly takes from a couple of weeks to a few months depending on the sector and how complete your file is.
  • Can I keep my customers' saved cards if a processor closes my account: Only if the cards are tokenised in a vault you control, usually at an independent gateway, and that gateway can point those tokens at another acquirer.

The three layers and who decides what

The gateway is software. It takes card details at checkout, stores them as tokens and sends each transaction on to a processor. It does not approve your business and it does not hold your money.

The acquirer is the licensed institution with Visa and Mastercard membership. It underwrites your business, carries the chargeback risk, sets your reserve and decides whether you keep processing. When people say a payment provider closed their account, it is almost always the acquirer that made the call.

The settlement bank is where the acquirer pays your net proceeds. It runs its own compliance review, and a bank that is uncomfortable with your sector can close the account even while the acquiring is perfectly healthy. All three layers need to accept your business model independently.

The order to build it in

Start with the settlement account, because acquirers will ask where funds will land and a business without banking struggles to pass underwriting. For many high risk sectors this is an account with an EMI or a specialist bank that already serves the vertical.

Next, secure your first acquirer. This is the hardest step and the one that needs the best file: corporate documents, ownership, processing history, refund and terms pages, a working checkout and realistic volume forecasts.

Then choose a gateway that is independent of that acquirer and can connect to others. Integrate once, with tokenisation switched on from day one. Finally, add a second acquirer through the same gateway while the first is still healthy. Applying for a backup after a termination is far harder than applying before one.

What the stack typically costs

Costs come from each layer and should be compared separately. Gateways usually charge a fixed fee per transaction and sometimes a monthly platform fee. Acquirers charge a discount rate on volume plus per-transaction fees, and high risk pricing is noticeably above mainstream rates. Most high risk acquirers also hold a rolling reserve, a percentage of each settlement kept for a set number of days as chargeback cover.

All of these figures are indicative and provider-specific. They move with your sector, chargeback history, average ticket and the licence region of the acquirer. Be cautious of any quote that is far below the market or that arrives before anyone has reviewed your documents, because pricing given without underwriting is not a real offer.

Assessment

Get your profile assessed within 48 hours.

Send us your structure and MCC. We come back with a placement plan you can act on, not a pitch.

Start the assessment →

Why stacks fail

The most common failure is a single bundled provider. One review closes processing, gateway and often the vault of stored cards together, and subscription businesses lose their recurring billing overnight.

The second is misdescription. A business that is boarded under a generic category to look lower risk will eventually be noticed by scheme monitoring, and the termination that follows can lead to a MATCH listing that makes the next application much harder.

The third is chargebacks. Visa and Mastercard monitoring programmes work on monthly ratios, and a sudden spike from a promotion, a fulfilment delay or friendly fraud can push an account over the line quickly. Stacks without alerts, clear descriptors and fast refunds are the ones that get caught.

Building redundancy into the design

Redundancy means at least two live acquiring relationships, ideally with providers in different licence regions, for example an EEA-licensed acquirer alongside a UK FCA-authorised payment institution or a specialist domestic acquirer. Both should be routed through the same gateway and both should carry real volume, because an idle backup account is often closed for inactivity.

Keep card tokens in a gateway vault you control so they can be pointed at any acquirer. Keep a second settlement account so funds are not trapped if one bank exits. Document your setup clearly, because underwriters approve merchants who show they understand their own risk. Xavion prepares the file and places businesses with suitable regulated providers at each layer; you can start at xavioncapital.com/start.

Frequently asked

About high risk merchant accounts.

Is a high risk payment gateway the same as a merchant account?
No. The gateway is the technology that captures and routes transactions. The merchant account comes from an acquirer, which is the regulated institution that approves your business and settles your funds. You need both, and choosing them separately gives you far more resilience than a bundle.
How many acquirers should a high risk business have?
Two is the practical minimum and three gives real comfort for larger volumes. Each should be live and carrying part of your traffic, and ideally they should sit in different licence regions so a single regulatory change does not affect all of them at once.
How long does it take to set up a full high risk payment stack?
Timelines depend mainly on acquiring underwriting, which commonly takes from a couple of weeks to a few months depending on the sector and how complete your file is. The gateway integration is usually the quickest part once an acquirer has approved you.
Can I keep my customers' saved cards if a processor closes my account?
Only if the cards are tokenised in a vault you control, usually at an independent gateway, and that gateway can point those tokens at another acquirer. If the vault belongs to the processor that closed you, migration may be slow or impossible.
Should I trust a provider that guarantees approval?
No. Approval is an underwriting decision by a regulated acquirer, and nobody can guarantee it before reviewing your business. Guaranteed approval is a common sign of misdescribed boarding or an unstable sub-merchant arrangement that is likely to be terminated later.
Assessment

Ready to talk to a placement team?

We introduce assessed profiles to the institution best matched to your MCC, structure, and UBO. Warm intros, not cold applications.

Start the assessment →
Written and reviewed by

Kris — Partner, Xavion Capital

Partner at Xavion Capital. Runs the banking and payment-rails desk: account placement, high-risk onboarding files, and replacement banking after a termination.

Last reviewed
About the desk →