Most businesses can sign up for Square or Stripe in ten minutes and never think about it again.
For a coffee shop, a salon, or a retail boutique, that's a perfectly reasonable setup — and often the right one. (If that's your business, Square is frequently a great fit. We're an official Square partner and can get you set up — learn more here.)
But for a growing number of legitimate business types, that same setup carries a risk that only becomes visible at the worst possible moment — when funds are frozen, an account is under review, or a termination notice arrives with no warning and no obvious path to appeal.
The businesses most exposed to that risk aren't doing anything wrong. They're just operating in industries that payment aggregators treat differently. And most of them don't find out until it's already a problem.
Payment processors bear liability for the transactions flowing through their system. When something goes wrong — a chargeback, a regulatory issue, a pattern that looks like fraud — the processor is exposed, not just the merchant. So they think carefully about what kinds of businesses they approve.
With a traditional merchant account, that evaluation happens upfront. The processor reviews your business model, your industry, and your transaction profile before you take a single payment. They make a deliberate, informed decision to approve you.
Payment aggregators — platforms like Square, Stripe, or PayPal — work differently. You're live within minutes because most of that review doesn't happen at signup. You're not getting your own merchant account; you're a sub-merchant operating under their master account. The scrutiny comes later, triggered by your transactions.
That's a fine trade for a coffee shop. For certain industries, it's a structural vulnerability.
Every major payment platform publishes a list of prohibited or restricted business types. The categories that appear most consistently across major platforms include:
This isn't exhaustive — every processor maintains its own version, and the definitions can be surprisingly broad. If you're unsure whether your business qualifies, that uncertainty itself is worth a conversation.
And you don't have to operate squarely in one of these categories to be affected. If your product descriptions, website copy, or customer base resembles a restricted industry, you can still trip an automated risk filter. A supplement brand, a firearms cleaning kit, a wellness subscription, a CBD-adjacent product — all of it can look like a flag to a system that's running keyword and pattern matching, not reading context.
When you process through an aggregator, the platform vouches for you to the card networks. That's why onboarding is instant — they're not underwriting your specific business, they're extending you access under their umbrella.
The catch is that they can remove that access whenever their risk calculus changes. A card network policy update, a spike in chargebacks across your industry, an internal policy revision — any of it can trigger a hold or termination, sometimes with funds already deposited sitting frozen for days or weeks.
For a business with real overhead — payroll, supplier terms, inventory — that window isn't just inconvenient. It can be a genuine operational crisis. And the appeal process runs on the platform's timeline, not yours.
A traditional merchant account moves the scrutiny to the front of the relationship, not the middle of it.
You submit an application. An underwriting team reviews your business type, your processing history, your website, and your expected transaction profile. They may ask questions or request documentation. The process typically takes 1–3 business days, or longer for complex industries.
What you get on the other side is a processor that knowingly approved your business. They've reviewed your MCC code, they understand what you sell, and your approval is built around that. Your transaction patterns won't look unusual to them because they already know what to expect.
A $5,000 invoice is just a sale. A 15% month-over-month volume increase is just growth. Neither triggers an automated hold, because a real underwriter already established what normal looks like for your account.
A common misconception about restricted-industry processing is that proper underwriting means dramatically higher rates.
Sometimes there is a risk premium — genuinely high-chargeback industries like travel or nutraceuticals may carry one. But for many businesses in the restricted category, the rate difference is smaller than expected, and the stability more than offsets it.
More importantly, pricing on a dedicated merchant account is negotiable in a way that flat-rate aggregator pricing isn't. Once you're underwritten, you're typically on interchange-plus or tiered pricing that can be optimized for your actual card mix. Depending on your volume and transaction profile, you may end up paying less than you would on a flat-rate aggregator.
The better question is whether your business should be on an aggregator at all.
If any of the following describe your business, a dedicated merchant account is the right foundation — not an aggregator:
Not every processor works with every restricted industry, and finding the right match is the first practical step. We work with multiple processors and know which ones actively approve specific business types — rather than accepting an application and revisiting that decision six months in.
The underwriting application covers the basics: how long you've been operating, what you sell, how you sell it, your expected monthly volume, and your website. Most applicants are through underwriting in 1–3 business days. Once approved, you have a dedicated MID, a direct processor relationship, and a processing setup built around what your business actually does.
Aggregators like Square and Stripe are genuinely excellent products — for the businesses they were designed to serve. The problem isn't the platform; it's the mismatch. If your industry is anywhere near the restricted list, building real revenue on an account that can be reviewed or closed the moment someone else's risk math changes isn't a calculated risk. It's an unexamined one.
The fix is simple: get underwritten by a processor that knows exactly what you do and approves you anyway. For a restricted-industry business, that's the only kind of approval that actually protects you.
Want to know which processors work with your industry?
Reach out to Polaris Payments and we'll tell you exactly where you stand.
