What Is an MCC Code and How Does It Affect Your Processing Rates?

Meta description: Your MCC code determines your interchange rates and card network risk profile. Here's exactly how it gets assigned, what it costs when it's wrong, and how to fix it.

TL;DR: Your MCC code is assigned by your processor at onboarding, and most merchants never look at it again. That's a mistake. A wrong code can lock you out of B2B interchange programs, add $950 per year in Visa fees, or quietly cost tens of thousands in excess processing charges. You can challenge it. Your processor won't volunteer that information.

Your merchant category code is a four-digit number your acquirer assigns at onboarding. It tells the card networks what kind of business you are, determines which interchange rate programs you qualify for, and shapes how much fraud and chargeback risk Visa and Mastercard believe you carry. Most merchants never see it. Some don't know it exists. The ones with the wrong code are usually paying for it on every transaction.

Where did MCC codes come from?

Merchant category codes descend from Standard Industrial Classification (SIC) codes, a federal classification system dating to 1937. ISO 18245 standardized MCCs for international card network use. The current version, ISO 18245:2023, was published in February 2023. The IRS adopted MCCs in 2004 for Form 1099-K reporting, requiring payment networks to use them when classifying merchant transactions. That's the most-cited reference point for MCCs, but the underlying structure predates it by decades.

Visa maintains 887 MCCs. Mastercard maintains 879. They share most codes but diverge in a few dozen categories — which matters if your acquirer is Mastercard-heavy and Visa classifies your business type differently.

MCC codes are grouped into industry ranges:

Who actually assigns your MCC code?

Your acquirer assigns your MCC at onboarding. Not Visa. Not Mastercard. Your acquirer or ISO — the entity you signed a processing agreement with.

Visa's Operating Regulations (April 2026 edition) and Mastercard's Rules (December 2025 edition) both require acquirers to assign the MCC that most accurately reflects a merchant's primary business activity. When a merchant sells across multiple categories, the MCC should reflect the category generating the majority of sales volume.

That last part is where misclassifications happen. A software company that also sells consulting gets lumped into whichever category the sales rep checks first. A contractor who sells both supplies and labor gets the category the acquirer's system defaults to.

Two MCCs function as catch-alls: MCC 7999 (Recreation Services, Not Elsewhere Classified) and MCC 5999 (Miscellaneous General Merchandise). Both are assigned when an acquirer can't identify the right code. Both trigger higher risk scoring by the card networks and block access to industry-specific interchange programs. If your processor assigned you either of these, it's worth verifying whether a more specific code applies to your actual business.

How does your MCC affect what you pay?

Your MCC determines which interchange categories your transactions qualify for. Get the code right and commercial card transactions qualify for business-rate programs. Get it wrong and those same transactions downgrade to the non-qualified rate.

Most B2B merchants in professional services, software, and advertising are eligible for CEDP — Visa's Commercial Enhanced Data Program — and most of them have no idea. MCCs like 7311 (Advertising Services) and 7372 (Prepackaged Software and SaaS) qualify. Travel and hospitality don't: MCCs 3000–3999, 4511, 4722, 5812, 7011, and related codes are explicitly excluded. The program launched April 12, 2025, with AI-based data validation and enforcement beginning October 17, 2025.

Getting "Verified" status means your processor submits Level 3 transaction data that passes Visa's validation checks at 90%+ over a rolling 30-day window. If the pass rate drops in a given month, you lose Verified status for that period. The rate that month reverts accordingly.

The actual numbers, from Visa's published interchange schedule (April 18, 2026):

Corporate and purchasing cards — CEDP Product 3 (Verified): 1.75% + $0.10. Non-verified fallback: 2.70% + $0.10. That's a 95 basis point spread.

Business credit cards — Product 3 Tier I (Verified): 2.40% + $0.10. Non-Qualified: 3.15% + $0.20. Spread: 75 bps, plus $0.10 per transaction.

Visa also charges a 5 bps participation fee on CEDP transactions, so the net on corporate and purchasing cards is roughly 90 bps. On business Tier I it's about 70.

At $500,000 a month in commercial card volume, 90 basis points is $54,000 a year. A merchant with the wrong MCC loses access to CEDP entirely — not just the preferred rate, but every commercial interchange program. They're paying non-qualified rates on the same transactions. Nothing on their statement explains why.

For a full breakdown of how interchange qualification works across card types, this post on why processing fees are so high covers the mechanics.

What does a wrong MCC actually cost?

The cost depends on which direction the misclassification goes.

High-risk assignment when you're low-risk. If your processor assigned you outbound telemarketing (MCC 5966) or inbound telemarketing (MCC 5967) when you run a consulting firm, you're enrolled in Visa's Integrity Risk Program. You probably don't know it. VIRP fees as of April 1, 2024: $950 per year just to stay registered, plus $0.10 on every transaction and 10 basis points on total processed volume. At $50,000 per month, that 10 bps adds $600 a year on top of the flat fee. Meanwhile, you're locked out of every B2B interchange program Visa offers.

Low-risk assignment in the wrong category. Some misclassifications don't put you in a high-risk category. They put you in the wrong low-risk category — one that doesn't qualify for CEDP or B2B programs. A management consulting firm assigned MCC 7389 (Services, Not Elsewhere Classified) instead of MCC 8742 (Management Consulting) won't trigger VIRP fees. But it will miss every commercial interchange program that 8742 qualifies for, year after year. (Note: MCC 8742 appears in ISO 18245 and legacy Visa/Mastercard documentation; confirm your acquirer's current taxonomy, as some network-specific code revisions have consolidated or renumbered codes in this category.)

On accounts we've reviewed, moving a misclassified agency from a direct marketing code to MCC 7311 removes the VIRP registration entirely, unlocks B2B-eligible interchange programs, and cuts the effective rate on commercial cards by 20-40 basis points depending on card mix. At $300,000 per month, that's $7,200 to $14,400 per year recovered. The correction takes 30-60 days once the acquirer submits the request to Visa.

Which business types get misclassified most often?

Five categories see the highest rate of misclassification based on the accounts we review.

Can you challenge your MCC code?

Yes. The process runs through your acquirer — not directly through Visa or Mastercard. Here's how it works.

Step 1: Find your current MCC. Your processor is required to provide this on request. Call your account manager and ask specifically for the Merchant Category Code assigned to your merchant ID. Some processors display it in the merchant portal under account details.

Step 2: Identify the correct code. Cross-reference Visa's published MCC list (in the Visa Operating Regulations) or ISO 18245:2023 against your actual primary business activity. The correct code describes what you sell, not how you sell it.

Step 3: Write a formal reclassification request. Submit in writing to your acquirer. Include your current MCC, the code you're requesting, and documentation of your primary business activity: articles of incorporation, business license, website, and recent invoices showing your actual transaction types.

Step 4: Support the documentation. The acquirer submits your request to the relevant card network for approval. They need enough evidence to justify the reclassification to Visa or Mastercard's acquirer compliance team. The stronger your documentation, the faster it moves.

Step 5: Wait 30-60 days. Standard processing time once the acquirer submits. Follow up in writing at 30 days if you haven't heard back.

One thing that will get your request denied: framing the change as a rate-shopping exercise. Acquirers are required to assign the MCC that accurately describes your business, not the one that optimizes your rate. If your request makes clear you understand the correct code and why it applies, approvals are routine. If it reads like you're trying to move to a lower-risk category for billing purposes, expect pushback.

When can Visa or Mastercard change your MCC without asking?

Both networks can reclassify merchants outside of the acquirer-initiated request process. Three main triggers:

Transaction pattern detection. Visa's AI-based transaction monitoring systems, rolled out in 2024, flag accounts when transaction patterns don't match the assigned MCC. A merchant classified as a hotel (MCC 7011) processing a high volume of small daily transactions consistent with retail or food service will get flagged. Reclassification can happen with no advance notice.

Chargeback pattern changes. A spike in chargebacks matching a higher-risk MCC's dispute profile can trigger review. Under VAMP — Visa's Acquirer Monitoring Program, which consolidated the prior VFMP and VDMP programs at full enforcement October 1, 2025 — acquirers carrying merchants above threshold chargeback rates are required to remediate. MCC correction is one of the remediation options.

Network audit activity. Both Visa and Mastercard run periodic merchant classification audits, particularly in high-risk and newly regulated categories. Gun retailers are a current focus following the April 2024 MCC 5723 addition.

If the network initiates a reclassification and the correct code is higher-risk, your rate structure and program access change from the reclassification date forward. You won't get a refund on past transactions.

What MCC changes should merchants know about right now?

Three developments from 2023 to 2026 affect a meaningful share of merchants.

ISO 18245:2023 (February 2023). The current international MCC standard. Acquirers that haven't updated their onboarding systems to the 2023 version may be assigning deprecated or incorrect codes. If your business opened a merchant account in 2022 or earlier, ask your processor which version of ISO 18245 their system references.

MCC 5723 — Firearms, Ammunition, and Related Products Dealers (April 2024). New code added to both Visa and Mastercard. As of May 1, 2025, firearms retailers in California, Colorado, and New York are required to use this code. Retailers still assigned MCC 5941 (Sporting Goods) or MCC 5999 in those states are non-compliant with state payment processing requirements. Even outside the three mandate states, 5723 is now the accurate code for firearms dealers.

CEDP and the end of the Level 2 incentive (April 2025, full enforcement October 17, 2025). Visa's Commercial Enhanced Data Program restructures how commercial card interchange works at B2B merchants. The old Level 2 incentive program — which rewarded processors for submitting basic enhanced data — was phased out, with Visa accelerating the retirement to January 2026 (formally April 2026). Level 3 data is not going away. Under CEDP, Level 3 is now required and AI-validated: processors must submit complete transaction-level data that passes Visa's machine-learning validation (90%+ pass rate required for "Verified" status) to unlock preferred commercial interchange rates. Merchants whose processors haven't migrated to CEDP-compliant data submission are likely defaulting to standard commercial rates with no notification. If your business processes a significant share of corporate, purchasing, or fleet cards, the deadline for initial qualification has passed — the question now is whether your processor is submitting data that clears Visa's validation threshold.

For more on how network fee structures work alongside interchange, this breakdown of Visa FANF and network fees covers what shows up on your statement beyond interchange.

Frequently Asked Questions

How do I find out what MCC code my business has?

Your processor is required to disclose your MCC on request. Call your account manager and ask specifically for the Merchant Category Code assigned to your merchant ID. Some processors display it in the merchant portal under account details. If your statement uses interchange-plus pricing, the MCC may appear on the detailed interchange fee breakdown. If you're having trouble getting an answer, request it in writing — your processor is required to provide it under Visa and Mastercard acquirer rules.

Who has the authority to change my MCC code?

Your acquirer does. Only your acquirer can submit a reclassification request to Visa or Mastercard. You cannot contact Visa or Mastercard directly as a merchant and request a change. The card networks process reclassification requests that come through the acquiring bank or ISO channel. If your acquirer is unresponsive about a misclassification, escalating in writing or switching processors may be your only practical options.

Does a wrong MCC code affect my chargeback threshold?

Yes, though not in the way most guides describe it. Visa's VAMP threshold does not vary by MCC: the merchant Excessive line is 1.50% of settled transactions across the board for the US, Canada, the EU, APAC and LATAM as of 1 April 2026, and it counts fraud reports and disputes together. What your MCC actually changes is how your acquirer underwrites and monitors you, and acquirers apply their own tolerances well below the network's. A high-risk code means tighter internal limits, more reserve pressure, and faster escalation, all from your processor rather than from Visa. Correcting the code will not undo past chargeback history, but it changes how your acquirer treats you going forward.

Can a merchant have more than one MCC code?

A single merchant account has one MCC. If you operate distinct business lines under separate legal entities, each entity can have its own merchant account with its own MCC. What processors cannot do is assign multiple MCCs to a single merchant ID. If a processor suggests this as a rate-optimization strategy, that's a red flag.

What happens if Visa reclassifies my MCC and I disagree?

You have 30 days from the notice date to dispute a network-initiated reclassification through your acquirer. The dispute process is the same as a standard reclassification request: submit documentation of your actual business activity and request reinstatement of your original MCC or a more accurate alternative. Network-initiated reclassifications are based on pattern analysis and can be wrong, particularly for businesses in mixed-use categories or those that recently changed their product mix.

Are MCC codes the same on Visa and Mastercard?

Most codes are shared, but Visa maintains 887 MCCs and Mastercard maintains 879. The networks use the same ISO 18245 base but add and retire codes on different schedules. For most common business categories, the code is identical. Where they diverge — primarily in financial services, specialty retail, and emerging categories — your acquirer's system handles the mapping. If you suspect a code is correct for one network but wrong for the other, ask your acquirer to verify both.

Will having the right MCC guarantee I can accept all card types?

No. MCC determines interchange rate category and program eligibility, but card acceptance is governed separately by your processing agreement and card network rules. Some high-risk MCCs carry restrictions on which card types can be processed or require additional underwriting. Getting the right MCC removes artificial program restrictions. It doesn't override legitimate card-type restrictions tied to your actual business category.

Rates and program details reflect Visa and Mastercard schedules current as of May 2026. Interchange rates, network fee structures, and monitoring program thresholds change regularly. Consult your processor or a qualified payments consultant before making decisions based on specific rate figures.

Kaleb Dickhaut — Founder, ClickWerxs. Kaleb works directly with merchants to identify and eliminate unnecessary payment processing costs. linkedin.com/in/kaleb-dickhaut

Sources

1. Card network monitoring thresholds — Visa's Acquirer Monitoring Program (VAMP) replaced the Visa Dispute Monitoring Program and Visa Fraud Monitoring Program effective 1 April 2025 and measures fraud reports and disputes combined; the merchant Excessive threshold is 1.50% above a floor of 1,500 combined events per month as of 1 April 2026. Mastercard's Excessive Chargeback Merchant tier is 100 chargebacks and 150 basis points. Visa distributes VAMP terms through acquirer bulletins rather than a public page; confirm current thresholds with your acquirer.
2. Processing rates, fee ranges and effective-rate figures in this post are industry-typical ranges compiled from published network schedules and from accounts reviewed in the ClickWerxs ISO portfolio. They are not quoted rates. Interchange itself is set by Visa and Mastercard on published schedules that change twice yearly; your actual cost depends on card mix, MCC, ticket size and volume.
3. ClickWerxs ISO portfolio, aggregate observation — patterns described from merchant accounts under ClickWerxs management. Anonymized and reported in aggregate; individual account terms vary. Operator data.

ClickWerxs facilitates merchant account applications and provides ongoing account management as an authorized representative of our banking and processing partners. Approval, rates, and terms are determined by the issuing processor and acquiring bank — ClickWerxs does not guarantee approval for any merchant account application. Processing rates and fee structures cited in this post reflect publicly available industry data and general ranges; your actual rate depends on your industry, volume, and card mix. This post is not legal or financial advice. For a custom quote, see clickwerxs.com/payments/get-a-quote.