High Risk Merchant Account Documents: The Underwriting Packet Checklist
By Robert Oswald, CEO of FindAProcessor.co - Published - Updated

Underwriters don't decline businesses because they're risky. They decline files they can't read. Missing formation papers, an ID that says "Mike" while the application says "Michael," a website with no refund policy - each gap costs you another email, another day, another look at your chargeback history.
Getting your high risk merchant account documents right the first time is the cheapest speed advantage you have. So here's the whole packet, section by section, with what each item proves and how to send it so nobody has to come back and ask.
Key takeaways
- The packet answers three questions: is the business real, is it who it says it is, and does the customer understand what they're buying?
- Expect ID for every beneficial owner at 25% or more, plus one control person - that's the standard covered financial institutions follow under FinCEN's customer due diligence rule.
- Bank statement requirements vary by processor. Ask how many months they want. There's no universal number, and guessing wastes a week.
- Your website is an underwriting document. Terms, refunds, privacy, contact details, pricing and recurring-billing disclosures get read and screenshotted.
- Send full PDFs, named clearly, in one folder. Screenshots of statements and phone photos of IDs slow files down.
What counts as underwriting documents for a merchant account
Underwriting documents for a merchant account are the records that let a processor confirm your legal identity, your ownership, your money flow, your sales model and your dispute history before it takes on settlement liability.
Two things to hold in your head while you assemble them:
- Everything has to match. Legal name, address, EIN and ownership percentages need to be consistent across your formation docs, your tax letter, your bank statements and your application.
- You're writing for a stranger with a checklist. Label files so a reviewer can find what they need without opening fifteen PDFs.
Business formation and ownership documents
This is the backbone of the file. Without it, nothing else gets evaluated.
- Articles of incorporation or organization - state-stamped, not a draft.
- Operating agreement or bylaws - the version that shows who owns what percentage and who can sign.
- Certificate of good standing - pulled recently, so it reflects current status rather than your launch year.
- DBA or fictitious name filings - whatever ties the name on your website to the legal entity on your application.
- Business license at the state or city level, if your jurisdiction requires one.
If a holding company, trust or partner entity sits above your operating company, include a simple ownership chart. A one-page diagram saves an underwriter twenty minutes and a round of questions.
IDs for beneficial owners - and the control person
Budget for this early, because it's the item that stalls files when an owner is traveling or offshore.
Under FinCEN's Customer Due Diligence rule, covered financial institutions must identify and verify each beneficial owner at 25% ownership or more, plus one individual with significant responsibility to control, manage or direct the entity - the control person. That person can be a manager who owns nothing.
So expect to supply a government-issued photo ID for:
- every individual at 25% or more,
- the control person, even at 0% ownership,
- and, depending on the processor's own policy, sometimes every signer on the account.
The names on those IDs must match the formation documents. If your license says "Michael R. Alvarez" and your operating agreement says "Mike Alvarez," add a note rather than hoping nobody notices.
EIN and tax documents
- IRS EIN confirmation letter (CP 575) - or a 147C letter if you've misplaced the original.
- State tax registration or sales tax permit where you collect tax.
- Any professional or category license that isn't a general business license.
Sole proprietors: you can apply under an SSN, but plenty of processors prefer an EIN and some require one. Ask before you file the application rather than after.
Business bank statements
Here's the part where merchants guess and get bounced. Processors set their own statement requirements. Some want one month, some want three, some want more for a business with no processing history. The number belongs to whoever is underwriting you, so ask straight out: "How many months of statements do you need, and do you need the account that settlement will land in?"
What they're reading for:
- deposits that are consistent with the volume you're projecting,
- an account in the legal business name,
- no pattern of overdrafts or unusual transfers.
Send complete, downloadable statements. Screenshots, spreadsheet exports and badly cropped mobile photos get sent back.
Prior processing statements and chargeback history
If you've processed before, your last few statements do more persuading than any paragraph you can write.
- Statements from your current and any previous processor - every month they ask for, not just your best one.
- Chargeback and retrieval counts, plus the ratio. Underwriters calculate this themselves, so understating it only makes them suspicious.
- Gateway or shopping cart transaction reports to fill gaps when statements are thin.
- ACH return history if you take echecks - return codes tell their own story, and our guide to high-risk ACH and echeck processing covers what a clean file looks like.
- Every MID you run. If you operate several, disclose them; our piece on multiple merchant accounts for high-risk businesses explains why hiding one backfires at the first audit.
Those statements are also where pricing gets discussed. High-risk card pricing commonly lands around 3-4.5% all-in, so a processor wants to see your current fee lines before quoting. If a reserve shows up in your offer, rolling reserves explained walks through how they're calculated and released.
Website compliance items
Underwriters open your site, click through checkout and take screenshots. Make their job easy.
- Terms and conditions - readable, linked in the footer.
- Refund and cancellation policy - specific: the window, how a customer requests it, who pays return shipping, how long refunds take. "Contact us for details" reads as a chargeback waiting to happen.
- Privacy policy - what you collect and who you share it with.
- Contact information - a real address, a phone number that rings, an email that gets answered. A contact form alone is thin.
- Clear pricing - what the customer pays today, what recurs, and any shipping or handling added at checkout.
- Recurring-billing disclosures - price per cycle, cycle length, trial-to-paid terms and how to cancel, all visible before the card is entered. Recurring-revenue rules have been moving; the FTC's Negative Option Rule page tracks the current status: a federal appeals court vacated the 2024 "click-to-cancel" amendments in July 2025, the FTC restored the prior rule text in February 2026, and it opened new rulemaking with an advance notice in March 2026.
- Product detail - ingredients, dosages, delivery windows, what's actually in the box.
Two more site checks worth doing yourself: confirm your MCC code matches what you sell, and make sure your claims survive scrutiny. Health and income claims are the fastest route to a decline in supplements, CBD and coaching.
Product- and vertical-specific documents
This bucket changes with what you sell:
- Licenses or permits your category legally requires.
- Certificates of analysis for ingestibles - batch-level, from a lab.
- Supplier invoices proving you actually buy the inventory you're selling.
- Fulfillment details - who ships, from where, typical delivery window.
- Provider credentials for telemedicine, therapy or clinical services.
- Supplier and consortium relationships for travel.
Start from our industry pages to see what your vertical typically gets asked for. A telemedicine file and a supplement file look nothing alike on paper, even though the underlying questions are identical.
Marketing and funnel materials
Underwriters are pricing chargeback risk, and chargeback risk lives in the funnel. Show them the funnel.
- Ad creatives and the platforms they run on.
- Landing pages, including the one the ad actually points to.
- Upsell, downsell and free-trial-to-subscription flows.
- Email and SMS sequences - especially anything that bills a saved card.
- Affiliate or influencer promotions, and call scripts if you sell by phone.
The test is simple: does the customer see the same price and terms in the ad, on the page and at checkout? If your ad says "risk-free" and checkout adds a subscription, that's the mismatch they'll flag.
Voided check or bank letter
Settlement has to land somewhere. Supply a voided business check or a bank letter showing the account and routing numbers, with the business name matching your formation documents. Some processors won't settle into a payment-only or third-party account, so ask first if that's your setup.
Explanation letter for a prior decline, shutdown or MATCH listing
One page. Signed and dated. Plain English.
- What happened and when.
- What the numbers involved were.
- What you changed afterward - new fulfillment partner, revised refund policy, lower chargeback ratio, different supplier.
- What you're asking for.
Don't relitigate the decision and don't bury the issue in paragraph four. If you've been declined or shut down before, or you're dealing with a MATCH/TMF listing, that letter plus honest statements does more for you than a polished narrative.
The checklist: copy, paste, work through it
| Document | Who provides it | Why underwriting wants it |
|---|---|---|
| Articles of incorporation/organization | Business owner | Proves the entity exists and where it's registered |
| Operating agreement or bylaws | Business owner | Shows ownership percentages and signing authority |
| Certificate of good standing | Business owner | Confirms the entity is active, not dissolved |
| DBA / fictitious name filing | Business owner | Connects your trading name to the legal entity |
| Photo ID - each beneficial owner at 25%+ | Each owner | CDD ownership verification |
| Photo ID - control person | Owner or authorized signer | Identifies who directs the business |
| Ownership chart (multi-entity or trust) | Business owner | Makes layered ownership legible |
| EIN letter (CP 575 or 147C) | Business owner | Confirms the tax ID on the application |
| State tax / sales tax registration | Business owner | Shows you're registered where you sell |
| Category licenses and permits | Business owner | Confirms regulated activity is licensed |
| Business bank statements | Business owner | Verifies cash flow and the settlement account |
| Voided check or bank letter | Business owner | Sets up settlement without errors |
| Prior processor statements | Business owner | Volume, ticket size, dispute ratio, current pricing |
| Chargeback and retrieval report | Business owner or prior processor | Shows the dispute pattern before they underwrite it |
| Gateway/cart transaction reports | Business owner | Fills gaps when statements are thin |
| ACH return history | Business owner | Return codes drive echeck approvals |
| Terms and conditions | Business owner / web team | Defines what the customer agreed to |
| Refund and cancellation policy | Business owner / web team | Predicts refund-driven chargebacks |
| Privacy policy | Business owner / web team | Data handling disclosure |
| Contact page with address, phone, email | Business owner / web team | Reachability affects how the file is scored |
| Checkout screenshots showing recurring terms | Business owner / web team | Proves the customer sees the billing terms |
| Product labels, COAs, supplier invoices | Business owner | Authenticates product and supply chain |
| Ad creatives, landing pages, email/SMS flows | Business owner / marketing | Shows the claims driving conversions |
| Explanation letter | Business owner | Context for a decline, shutdown or MATCH listing |
How to package it
- One folder, subfolders by section: 01-entity, 02-owners, 03-tax, 04-banking, 05-processing, 06-website, 07-vertical, 08-marketing, 09-letters.
- Name files like a human will search them:
2026-08-business-checking-statement.pdfbeatsIMG_4471.pdf. - Full PDFs, not screenshots. Bank portals export to PDF - use that.
- Redact sparingly. Mask an account number if policy requires it; blanking out balances gets the file sent straight back.
- Keep a master copy. Your next application, whether it's a second MID or a backup acquirer, starts from the same folder.
Before you send anything, run the questions to ask a high-risk processor list alongside it - a complete packet plus the right questions gets you a comparable offer instead of a vague "send it over and we'll see."
FAQ
Is this legal advice? No. This is a practical guide to what payment processors typically request. It isn't legal, tax or accounting advice, and it doesn't create any professional relationship. For questions about your entity structure, licensing obligations or the FinCEN rules, talk to a licensed attorney or CPA in your state.
How many months of bank statements do I need? However many the processor underwriting your file asks for. They each set their own requirement, and some ask for more when there's no processing history. Ask the rep directly and get the answer in writing.
Do all owners have to send ID? At minimum, every beneficial owner at 25% or more plus one control person. Some processors ask for all signers, and some ask for ownership documents for any parent entity. Send everything up front if you can.
Can I get approved with no processing history? Yes, though the file leans harder on formation documents, bank statements and your website. Our guide to a high-risk merchant account with no processing history covers how to compensate.
What if my website isn't finished yet? Say so before applying. An underwriter who finds a placeholder site with no policy pages after you claimed to be live will treat it as a red flag; an underwriter told upfront that the site launches with the processor will usually tell you what to have ready.
What if an owner lives outside the US? Expect to provide a passport plus whatever ownership or address verification the processor requests. Ask early - international ownership can add review steps.
Get matched with a processor whose underwriting fits your business
Assembling this packet once, properly, is worth more than applying to five processors with half a file each. If you want a second set of eyes before you submit, we'll read your packet, flag the gaps and match you to processors whose underwriting actually fits your vertical, geography and checkout.
Our advisory service is free to merchants because the processors pay us. Approval isn't ours to give - nobody can promise that - but a clean file and an honest read of your options are things we can do well.
Start with findaprocessor.co →
Sources
About Robert Oswald: Robert has worked in online payments for over 20 years, with companies like Braintree, Worldpay, Recurly, and PayPal. He has worked with companies such as Instacart, Everlane, Live Nation, Grubhub, AMC, Twitch, and Lululemon.