Ecommerce merchant account: what you need to get approved

An ecommerce merchant account is a merchant account set up for card-not-present sales: the orders where a customer types a card number into your website or app instead of handing you the card. It works alongside a payment gateway, it is priced differently from in-store processing, and it gets a closer look in underwriting because fraud risk is higher when nobody sees the card. The encouraging part: many approval problems show up on your own website, so you can fix them before you apply.

What is an ecommerce merchant account?

It's the same kind of agreement as any merchant account. An acquiring bank approves you, assigns a merchant ID, and settles your sales to your bank account. The ecommerce version adds a gateway to carry card data from your checkout to the processor, usually a merchant ID dedicated to online sales, and a risk review that leans heavily on your website.

The term gets used loosely. Some providers say "ecommerce merchant account" when they mean a sub-merchant account under a payment facilitator. This guide is about your own account with an acquirer; our payment facilitator comparison covers the other route.

What do acquirers check on your website?

Underwriters read your site the way a skeptical customer would. Fiserv, a card acquirer and processor, publishes the list its credit and risk team checks on every merchant website that processes ecommerce sales, and says the team will reach out if items are missing (Fiserv). It makes a good template even if you apply elsewhere.

Visa adds a rule many stores miss. An online merchant must prominently display the country it will process from, either on the checkout screen that shows the final amount or within the checkout steps, and a link to a separate page doesn't count (Visa). The point is that customers know whether a purchase is domestic or international before they pay. Visa's guidance on this dates from 2017, so confirm the current wording with your acquirer.

Your site is also part of a background check. When an acquirer screens a prospective online merchant through Mastercard's MATCH database, the inquiry has to include the website's URL (Mastercard Security Rules and Procedures).

Common reasons a website gets flagged:

• A "coming soon" page, placeholder text, or a checkout that doesn't work.
• Prices listed as "contact us" for products sold online.
• Policies copied from another store that mention products you don't sell.
• A business name on the site that doesn't match the application.
• No email address or phone number anywhere.

Why does card-not-present processing cost more?

Interchange is set by the card networks, and on Visa's schedule many card types cost more when the card isn't present. The US schedule with rates effective April 18, 2026 shows the gap plainly for purchasing and corporate cards: 2.50% + $0.10 when the card is present and 2.70% + $0.10 when it isn't (Visa USA Interchange Reimbursement Fees).

Here's what that gap looks like on real volume. Say you sell office supplies online from Austin and $20,000 a month arrives on corporate and purchasing cards. At Visa's published rates, interchange on those sales runs $40 a month higher than the same sales would cost at a counter (0.20% of $20,000), before per-item fees. Your own gap depends on your card mix, which is why a statement review beats any headline rate.

Your pricing model matters more online, too. Flat-rate pricing charges the same percentage on every card. Interchange-plus passes through each sale's actual interchange and network fees and adds a disclosed markup, so the cheaper cards in your mix stay cheap. We walk through the math in interchange-plus vs flat-rate pricing, and our Clearo vs Stripe page compares an all-in-one online provider with a merchant account.

How much fraud risk comes with online sales?

A lot. In the Federal Reserve's latest report on debit card transactions at issuers with $10 billion or more in assets, card-not-present fraud made up 54.3% of fraud losses in 2023, more than every other fraud type combined, and merchants absorbed 65.1% of those card-not-present losses (Federal Reserve). Across all fraud types, the merchant share of losses reached 49.9% in 2023, up from 38.3% in 2011.

The tools that cut that exposure:

• Address verification (AVS) compares the billing address the customer enters with the issuer's records. Coverage is limited outside the US, Canada, and the UK, and many international issuers answer "not supported" (Chase).
• The card security code (CVV2, CVC2, or CID) is the three- or four-digit code on the card. Check it at authorization and never store it afterward; Chase's merchant guide notes that PCI rules forbid storing or reusing it.
• 3-D Secure asks the card issuer to confirm the buyer. EMVCo built EMV 3-D Secure so issuers and merchants can verify that the person paying is the legitimate cardholder and guard against card-not-present fraud (EMVCo). Use it on riskier orders.
• Velocity rules cap attempts per card, email address, or device, which stops bots that test stolen card numbers.
• Manual review catches what rules miss: rush shipping to a new address, billing and shipping countries that don't match, or several cards tried on one order.

Clearo's online payments include fraud screening with AVS, CVV checks, and velocity rules.

How do chargebacks affect an ecommerce merchant account?

A chargeback reverses a sale after the customer disputes it with their card issuer, and the money comes back out of your account. For an online store, a rising chargeback rate is what turns an ordinary account into one with a reserve, slower funding, or a termination notice. The OCC calls chargeback credit risk a significant risk to an acquirer's earnings and capital, and it lists delayed settlement and reserves among the tools for merchants with heightened fraud and chargeback risk (OCC).

Visa watches the same numbers. Its Acquirer Monitoring Program divides fraud reports plus disputes on card-not-present transactions by settled transactions. A US merchant is flagged as excessive when both that ratio and its monthly count of fraud reports and disputes pass Visa's thresholds, and the ratio threshold fell from 2.2% to 1.5% on April 1, 2026 (Visa).

Run your own number. Say you settle 4,000 online orders in a month and receive 30 fraud reports and 34 disputes. That's 64 divided by 4,000, or 1.6%, above the 1.5% line. Whether Visa itself flags a store that size also depends on the monthly count, but your acquirer carries the loss on chargebacks it can't recover from you, so it watches your ratio either way.

Habits that keep the ratio down:

• Use a statement descriptor customers will recognize.
• Refund quickly when you can't deliver. A refund costs you the sale; a chargeback costs the sale plus a fee and a mark on your record.
• Ship with tracking and keep proof of delivery.
• Spell out renewal terms and make cancellation easy if you bill subscriptions.
• Answer support email the same day.
• Respond to every dispute your processor sends you before its deadline.

Clearo offers chargeback management tools if you want help staying on top of disputes.

How do you choose a gateway for online sales?

Your gateway decides how much card data touches your site, and that decides your PCI workload. A hosted payment page, or embedded payment fields from a validated provider, can qualify you for SAQ A, the shortest questionnaire, though embedded forms now come with a requirement to confirm your page is protected from malicious scripts (PCI SSC). Build your own payment form and you move to a longer questionnaire. Our guide to what a payment gateway is compares the setups side by side.

Before you commit, check that the gateway:

• Works with your processor and your shopping cart platform.
• Tokenizes cards for repeat customers and subscriptions.
• Lets you tune AVS, CVV, velocity, and 3-D Secure rules.
• Includes a virtual terminal and payment links for orders that arrive by phone or email.
• Lets you export stored cards if you ever switch.

To compare processors on these points, our best payment processor for ecommerce list ranks seven options, Clearo first, and explains the criteria.

Checklist before you apply

1. Website live, with a working checkout, real product pages, and prices in the currency you'll charge.
2. Refund, privacy, and shipping policies posted and linked in the footer, plus renewal terms if you bill on a schedule.
3. Business name, DBA, and statement descriptor matched across your site, your application, and your bank account.
4. A customer service email address and phone number on every page.
5. Your country shown during checkout.
6. Your last three months of processing statements, if you've taken cards before.
7. Monthly volume, average order, and largest expected order, written down and realistic.
8. Delivery timelines, including pre-orders and backorders.
9. A fraud plan: which AVS and CVV results you'll accept and when you'll review orders by hand.
10. Your expected PCI questionnaire, based on how your checkout is built.

Why do ecommerce applications stall?

Watch for the avoidable delays: missing policies, a business name that changes between the site and the application, volume estimates that don't match your history, and pre-orders or long fulfillment windows that weren't disclosed up front. Subscription sellers also get questions when renewal and cancellation terms are hard to find.

Some product categories need extra paperwork or aren't accepted by every acquirer, so ask before you apply rather than after. Card network rules apply nationwide (US overview), so the checklist above works the same whether you ship from Texas or from Salt Lake City.

How do you keep an ecommerce account healthy after approval?

Approval isn't the end of the review. Your acquirer keeps watching your volume, refunds, and disputes for as long as you process, so a few habits protect your funding as much as your margins:

• Tell your processor before a product launch, a big promotion, or a holiday push. A planned spike looks very different from an unexplained one.
• Ask whether your approval came with a monthly volume cap, and request an increase before you need it, not the week you hit it.
• Check your dispute ratio every month: fraud reports plus disputes, divided by settled orders.
• Review your fraud rules after the first 30 days. Look at the good orders you declined as well as the bad ones that got through.
• Keep your website, policies, and descriptor in step with what you actually sell, and tell your processor before you add a product line.
• Save delivery confirmations and customer emails. They're your evidence when a sale is disputed.

None of this takes long once it's routine. Skipping it is how a healthy account ends up with a reserve it didn't need.

Your next step

If you already sell online, send us a recent statement for a free statement review and we'll show you what your card-not-present sales are really costing. If you're opening a new store, see how we work with ecommerce businesses, or contact us to start an application with your checklist in hand.