Peptide Payment Processing: The Complete Guide

if you sell peptides online, payments is not a checkout widget you install on launch day. it is the single load-bearing piece of your business. we have watched brands do $200k months and then lose everything for six weeks because they never built a second processor. the store still worked. the ads still ran. the checkout just said 'card declined' on every attempt.

here is the direct answer: aggregators (stripe, square, paypal, shopify payments) do not underwrite you individually. they place you in a shared risk bucket and their terms explicitly exclude unapproved pharmaceuticals, research chemicals, and health claims they cannot verify. you need a dedicated merchant account — your own MID — underwritten by an acquiring bank that has knowingly said yes to your category. that is the whole game.

aggregator vs. dedicated MID: why this distinction decides everything

stripe is not a bank. stripe is an aggregator that sits on top of an acquiring bank and lets thousands of merchants share one master merchant identification number. that is why onboarding takes four minutes and zero paperwork. it is also why they can drop you in four minutes with zero paperwork. you never had a relationship with the bank. you were a line item in someone else's risk pool.

a dedicated MID is the opposite. an acquiring bank reviews your specific business, your specific products, your specific website, and issues you your own merchant number under a signed agreement. the bank knows what you sell. that knowledge is your protection. a processor cannot 'discover' your product category later and panic, because it was in the application.

• —aggregator: instant approval, no underwriting, shared MID, terminated the moment a risk model flags your category
• —dedicated high-risk MID: 5-15 business days, real underwriting file, your own MID, reserve requirement, and a bank that already knows what you sell
• —aggregator: 2.9% + 30 cents and no negotiation
• —high-risk MID: typically 3.5-6% plus per-transaction, sometimes a monthly minimum, plus a reserve — you are paying for stability, not convenience

what underwriting actually looks at

underwriters are not reading your brand story. they are pricing the probability that they eat losses if you disappear. everything they ask for maps to that one question. once you understand it, the application stops feeling arbitrary.

1. 1.entity and ownership. registered LLC or corp, EIN letter, articles of incorporation, and government ID for anyone owning 25% or more. beneficial ownership rules are not optional and mismatches here kill files fast.
2. 2.banking. a business checking account in the exact legal entity name plus three to six months of statements. personal accounts get declined instantly.
3. 3.processing history. six months of prior statements if you have them: volume, average ticket, chargeback ratio, refund ratio. no history means you get a lower approved monthly cap to start.
4. 4.the website itself. underwriters open your site and click through checkout. they are looking for terms of service, privacy policy, refund policy, shipping policy, real contact info, and product pages whose claims match what you told them you sell.
5. 5.product documentation. certificates of analysis, supplier or lab relationships, and a clear statement of what the product is and how it is presented and sold.
6. 6.projected volume and average order value. do not sandbag and do not inflate. if you tell them $80k/month and you do $300k in week three, the risk team pulls the account for review.

the fastest way to blow this is to describe your business one way on the application and another way on the site. underwriters compare the two. that mismatch is the number one reason files come back declined, and it is entirely self-inflicted.

reserves: the part nobody explains before signing

almost every high-risk approval carries a reserve. the bank holds a slice of your settlements as collateral against future chargebacks and refunds. it is not a fee. it is your money, held, and eventually released. but if you do not model it, it will wreck your cash flow in month one.

• —rolling reserve — the common structure. 5-10% of gross volume held for 90-180 days, then released on a rolling basis. at 10% / 180 days doing $200k/month, roughly $120k of your cash is sitting with the bank at steady state.
• —capped reserve — they hold a percentage until a fixed dollar ceiling is reached, then stop. much friendlier. always ask for this.
• —upfront reserve — a lump sum deposited before you process. rare, usually for thin files or prior terminations.

negotiate the reserve, not just the rate. a 4.5% rate with a 5% capped reserve beats a 3.9% rate with a 10% rolling reserve for 180 days almost every time. run the cash math before you sign.

descriptors, and why yours is quietly costing you money

the billing descriptor is the text on the cardholder's statement. get it wrong and you manufacture chargebacks out of thin air. a customer who does not recognize a charge calls their bank instead of calling you, and that is a dispute you did not have to have.

1. 1.use the brand name the customer actually bought from, not your holding company LLC.
2. 2.include a phone number or short URL in the descriptor if your processor supports the extended field.
3. 3.keep it consistent across every MID. if you route between two processors and the descriptors differ, subscription customers see two different names and dispute one.
4. 4.put the exact descriptor on the order confirmation email and the thank-you page: 'this will appear on your statement as XXXXX.'

MID structure and redundancy: never run on one

one MID is a single point of failure on your entire revenue line. two MIDs with two different acquiring banks means a shutdown becomes an inconvenience instead of an extinction event. this is not a trick and it is not hiding anything — both banks fully know your business and both approved you. that is legitimate redundancy, and serious operators in every high-risk vertical run it.

• —primary MID handles the majority of volume; secondary MID stays warm with a real slice of traffic so it never goes dormant and gets closed for inactivity
• —keep both underwriting files current — same product descriptions, same site, same disclosures
• —separate settlement bank accounts per MID so a hold on one does not lock your operating cash
• —document a failover runbook: who flips the gateway, what the DNS/gateway change is, how long propagation takes

a warning on the line you do not cross: redundancy means multiple honestly-approved accounts. it does not mean shell entities set up to hide the product, running peptide volume through a MID approved for something else, or splitting transactions to dodge a ban. that is transaction laundering and it is fraud — it ends in permanent MATCH-list placement and, potentially, criminal exposure. not legal advice; talk to your attorney.

chargeback thresholds you have to live under

visa and mastercard both run monitoring programs, and once you are enrolled, fines and remediation costs stack fast. the practical operator rule is to stay under 0.65% of monthly transactions disputed, and treat 0.9% as the fire alarm. your processor will typically pull the plug before the card brands do.

1. 1.ship fast and send tracking the same day — 'item not received' is the largest chargeback category in supplements and peptides
2. 2.make refunds easier than disputes. a refund costs you the product. a chargeback costs you the product, the revenue, a $15-40 fee, and a tick toward termination.
3. 3.put support contact on the confirmation email, the packing slip, and the descriptor
4. 4.enroll in chargeback alerts (ethoca / verifi) so you can refund a dispute before it becomes a formal chargeback
5. 5.keep AVS and CVV mismatch declines on — friendly fraud loves a loose gateway

the sequencing most brands get wrong

founders build the store, film the creative, and then start shopping for a processor the week before launch. that ordering is backwards and it costs months. underwriting takes one to three weeks and your site has to be finished for it — policies live, product pages published, contact info real. build the compliance layer and the payments application in parallel with the store, not after it.

you do not have a business until the money can land. everything upstream of that — the creative, the funnel, the offer — is theoretical until a settlement hits your bank.

what good looks like at steady state

a mature peptide payments stack is boring, and boring is the goal. two live MIDs at two banks. a capped reserve you have already modeled into cash flow. descriptors that match your brand and appear in every customer touchpoint. chargeback alerts wired in. a support inbox that answers in under 12 hours. a monthly review of ratios before your processor's risk team does it for you.

none of that is exciting. all of it is why a store that does $19M does not go dark in week nine. this article is not legal or financial advice — consult your attorney and your accountant on entity structure, product claims, and regulatory obligations in your state.