High-risk merchant account for payment service providers and EMIs with a Cyprus company

Our process begins with a detailed review of your Cyprus entity's profile. We assess your specific payment institution or EMI licence, the nature of the merchants you serve, your processing history including chargeback and refund ratios, and the beneficial ownership structure. This allows us to understand the specific risks and merits of your operation from an acquirer's perspective.

Next, we build a complete underwriting file. This includes your full corporate (KYB) pack, director and shareholder KYC, CySEC or other regulatory licence, and operational documents like your merchant onboarding policies and safeguarding account details. We also conduct a compliance check of your websites to ensure they meet card scheme rules. The file is structured to pre-empt underwriter questions, demonstrating that your business is lawful, licensed, and manages portfolio risk effectively.

With a robust file, we identify and approach suitable providers. These are typically EEA-licensed acquirers or international acquiring banks with an appetite for regulated payment intermediaries and the technical capability to manage sponsored processing flows. We manage the formal application and underwriting Q&A process, ensuring clear communication and a smooth path to approval. Post-approval, we help establish appropriate reserves and monitoring.

Underwriters focus on two main areas: the legitimacy of your licensed operation and the risk within your merchant portfolio. They will scrutinise your payment institution or EMI licence to confirm it is active and authorises your proposed activities. A key document is your merchant onboarding policy, which must show you have a rigorous process for vetting and monitoring the businesses you serve.

They will demand at least six months of recent processing statements to analyse transaction volumes, chargeback rates, and refund patterns. If your chargeback ratio is elevated, you must provide a clear explanation and a mitigation plan. Evidence of your safeguarding arrangements, proving that you correctly segregate client funds, is also mandatory. Underwriters will also verify your corporate structure and substance in Cyprus, reviewing director profiles and ensuring the operation is managed appropriately.

Finally, your website and payment flows are reviewed for compliance with card scheme regulations. This includes clear terms of service, refund policies, and transparent business descriptions. For a Cyprus PSP, underwriters need to be certain that your operations are transparent and that you are not facilitating any form of undisclosed aggregation or nested processing.

Using a Cyprus company provides a credible EU-based corporate structure, which is a prerequisite for many EEA-licensed financial partners. The Cyprus Registrar of Companies maintains publicly accessible records, and the requirement for audited annual accounts adds a layer of financial transparency that acquirers value. Your entity will need to be registered on the UBO register, a standard anti-money laundering control.

For a PSP or EMI, holding a licence from the Central Bank of Cyprus or CySEC is a significant advantage, signalling a high standard of regulatory oversight. This is often a condition for securing accounts with top-tier acquirers. From a substance perspective, having local management, directors, and a physical office in Cyprus is critical. It not only supports your corporate tax residency but also demonstrates to banks and payment partners that the company is a genuine, well-managed Cyprus operation, not just a brass-plate entity. While local Cyprus banks are conservative, the EU framework allows Cyprus firms to access a wide range of EU-based EMIs and banks for operational and safeguarding accounts, which complements acquiring relationships. Principal processing currencies are typically EUR and USD.

Accounts are often declined because the application fails to demonstrate sufficient control over the sub-merchant portfolio. If your onboarding policies are weak or you cannot produce a clear breakdown of your merchants by industry and risk level, acquirers will assume the worst. High or erratic chargeback ratios without a convincing explanation are another major red flag, suggesting poor risk management. Any hint of undisclosed nesting or processing for prohibited merchant types will lead to immediate rejection.

Closures of live accounts frequently happen after a compliance review reveals a divergence between the approved business model and actual activity. For example, if you were approved to process for low-risk ecommerce merchants but your traffic is now dominated by high-risk industries, the acquirer may terminate the relationship for breach of contract. A sudden spike in chargebacks or fraud reports can also trigger suspension and closure. Our file preparation process mitigates these risks by presenting a transparent, accurate picture of your business from the start and establishing clear communication protocols with the acquirer to manage any changes in your portfolio profile over time.

From the point we have a complete file, securing a merchant account for a Cyprus-based PSP or EMI typically takes between two and six weeks. The initial week is spent on our side, reviewing your documents, analysing your processing history, and preparing the underwriting submission. Once submitted, the acquirer's underwriting and compliance review usually takes one to four weeks, which can include a Q&A phase. The final week is for technical integration and account activation.

Onboarding involves the designated UBOs and directors completing the acquirer's KYC verification. You will also need to provide details of the settlement bank account, which must be held in the name of the Cyprus company. Once live, maintaining the account depends on keeping your operations consistent with what was approved. This means adhering to your own onboarding policies, keeping chargeback rates below the industry threshold (typically 0.9% by volume), and notifying the acquirer of any significant changes to your business model or merchant portfolio. Regular reporting and open communication are key to a long-term, stable processing relationship.