MCC misclassification

MCC misclassification is the assignment of a merchant category code (MCC) that does not accurately describe the business a merchant actually runs, whether by honest error, a lazy default to a "miscellaneous" code, or deliberate disguise of a higher-risk activity.

Why it matters in KYB and fraud review

The MCC travels with every card transaction. Networks, issuers and acquirers use it for pricing, reporting and risk controls. Visa's Merchant Data Standards Manual says Visa and its members use MCC data for "activity tracking, reporting, and risk management," and that "it is an important requirement that Acquirers (and their Agents) assign the correct MCC to each of their Merchants." Visa retains the right to require corrections.

A wrong code weakens every control that keys off it. A gambling operator coded as a software store avoids the extra registration and monitoring that its real category triggers. Visa's Payment Facilitator and Marketplace Risk Guide lists "illegal or miscoded gambling" as a named risk and describes a Visa compliance program that monitors for "merchants with miscoded MCCs." For a payment facilitator or acquirer, a miscoded merchant is a network compliance exposure, and often the first visible sign of transaction laundering.

What an analyst checks

• Stated business vs. observed business. Compare the application's business description with the live website, product catalogue, checkout flow and terms of service.
• The coding rules themselves. Visa's manual says to select the MCC that "most accurately describes the Merchant's business," and to use "miscellaneous" codes (usually ending in 99) only when no specific code applies.
• Multiple lines of business. A merchant with several lines either uses the code for its highest-volume line or separate codes per line.
• Risk-sensitive codes. If the real activity falls in a category the networks treat as high risk (see high-risk business categories), check whether the code chosen avoids that treatment.
• Transaction pattern fit. Ticket size, refund rate and time-of-day patterns should look like the declared category once the merchant is live.

Common pitfalls

• Accepting the MCC the merchant self-selected in an onboarding form without testing it against the website.
• Coding a platform with many sellers under a single retail code. Visa's guide notes marketplaces that span many lines of business can use MCC 5262 (Marketplaces).
• Reviewing the homepage only. Miscoded activity often sits behind a login, a second domain or a "partners" page.
• Treating a code change after onboarding as routine. A request to change MCC deserves the same scrutiny as a new application.

Related terms

Transaction laundering, high-risk business categories, payment facilitator, sub-merchant.

Sweat AI is an AI-native BPO for banks and fintechs, working onboarding and fraud queues. For payment platforms, our analysts compare each merchant's declared business with what its website and documents show, and flag code mismatches with the evidence attached, so your team makes the call. See KYB review for payments platforms.