Transaction laundering

Transaction laundering is the processing of payments for an undisclosed, usually illicit, business through a merchant account opened for a different business that looks legitimate. Visa's Payment Facilitator and Marketplace Risk Guide describes it as occurring "when an illicit business surreptitiously uses payment services through a front organization posing as a legitimate merchant," and notes it is also known as "factoring."

Why it matters in KYB and fraud review

The front merchant usually passes a document-only KYB check: the entity exists, the owners are real people, the website loads. The problem sits in what the account is used for after approval. Visa lists illegal gambling, illegitimate online pharmacies, illegal drugs and counterfeit goods among the typical hidden activities, and states that it holds acquirers, payment facilitators and marketplaces accountable for the illicit actions of the sellers they onboard. For a payment facilitator, one laundering sub-merchant can create network fines and put the whole portfolio under review.

What an analyst checks

At onboarding:

• Website substance. Real products with prices, a working checkout, contact details, refund and shipping terms that match the claimed business. Template sites with placeholder text are a common sign of a front.
• Business model fit. Does the expected volume and ticket size make sense for a business this size and age?
• Linked domains. Shared owners, registrant details, hosting, phone numbers or analytics IDs with sites that sell something else.
• Category fit. Whether the requested code matches the activity (see MCC misclassification).

After go-live:

• Volume that jumps far beyond the application's projection.
• Descriptors, refund reasons or cardholder complaints that mention products the merchant does not sell.
• Visa's guide also flags rounded-amount transactions on the same card in a short timeframe, which can indicate a seller splitting a transaction to avoid detection.

Common pitfalls

• Reviewing the website once at onboarding and never again. Fronts are often clean at approval and switch later.
• Treating a merchant's own website as the only source. Search for the domain, owners and phone number across the web.
• Confusing a legitimate multi-line business with a front. Ask for an explanation and evidence before declining.
• Closing an alert without recording what was checked. The next reviewer, or the acquirer's auditor, needs the trail.

Related terms

MCC misclassification, high-risk business categories, sub-merchant, alert escalation.

Sweat AI is an AI-native BPO for banks and fintechs, working onboarding and fraud queues 24/7. Our analysts review merchant websites, linked domains and business-model fit, and return findings with source excerpts and capture times. Your team decides. See fraud alert review and payments onboarding.