US High-Risk Merchant Account Application: Document Checklist

A high-risk MID application needs entity documents, the EIN letter, the signer's ID and proof of address, bank proof, processing statements or projections, a compliant website and a business description. Each answers one underwriting question. Files come back when two documents disagree, not only when one is missing. The IBO package delivers the entity, director and bank items as one set; you supply the website, description and projections.

A US acquirer underwriting a high-risk merchant account asks for the same core file: the entity documents, the EIN confirmation letter, the authorized signer's government ID and proof of address, proof of the settlement bank account, processing statements or volume projections, a website that matches the application, and a written business description. Every item exists to close one question before a MID is issued. A file comes back when a document is missing, and also when two documents disagree; the second case is the one applicants overlook. This checklist covers each item: what the underwriter checks, which ones the IBO package delivers, and the mismatches that send a file back.

The checklist at a glance

Entity documents and the EIN letter

The articles of organization (LLC) or articles of incorporation (C-Corp) prove that the entity exists, in which state, since when, and under which exact legal name. The operating agreement or the bylaws show who manages the company and who may sign for it. The underwriter reads them to match the legal name, the state and the manager's name against the EIN letter, the bank account and the signer's ID. In the IBO package the entity is an LLC or a C-Corp incorporated in the director's home state, with the articles and the operating agreement signed and the director named on them. That is deliberate: an entity formed in a state where nobody in the file lives is the pattern acquirers read as a shell, and Wyoming is the classic case. Watch the small mismatches: a legal name written with and without a period, an entity type on the application that differs from the articles, a manager on the operating agreement who is not the person signing the merchant application.

The EIN letter is the IRS notice, known as the CP 575, that confirms the tax ID assigned to the entity. Acquirers use it for tax reporting on settled volume and to tie the merchant account, the tax ID and the settlement account to one legal person. The package ships with the EIN already issued and the letter in the document bundle. What sends a file back is the detail around the letter: a legal name spelled differently from the articles, a retyped number instead of a copy of the notice, or an entity address that changed since issue with nothing explaining it.

Signer identity and proof of address

The authorized signer is the person the acquirer underwrites as an individual: KYC on the identity, a credit pull, sanctions screening, and usually a personal guarantee. In an IBOCore package that person is the nominee director, the Independent Business Operator (IBO), a real US resident whose documents are on file. The acquirer asks for a government photo ID and a proof of address such as a utility bill in the signer's name. The address on the ID, the utility bill, the bank account and the application is compared line by line.

• Government photo ID: current, issued in the state where the signer lives and where the entity is formed.
• Proof of address: a recent bill or statement in the signer's name at the same address as the ID.
• Credit and background: acquirers pull both; every IBOCore director has a clean record and a score of 650 or more.
• Reachability: the signer must take the verification call and sign follow-ups; the IBOCore director does both.

The package covers this block as a set, collected in-house before a package is listed, with the entity formed in the same state as the ID. On your side there is no KYC: nobody asks for your passport, your address or a selfie. IBOCore reviews merchants on business proofs before dashboard access, not on identity documents. The mismatches to watch are an expired ID, a proof of address older than the acquirer's freshness window, and a business address that is a mail drop.

Bank proof: voided check, bank letter or statement

Settlements have to land in a US business bank account that belongs to the applying entity. The acquirer asks for a voided check, a bank letter confirming the account holder and the account and routing numbers, or a recent statement. The underwriter checks three things: the account holder is the entity's legal name, the account is a business account, not a personal one, and the numbers typed on the application match the document. A personal or third-party account is a red flag: the acquirer needs recourse against the entity itself. The IBO package includes a business bank account opened at Bluebanc or Relay in the company's name, with full operational access handed to you: inbound and outbound wires, debit card, no minimum balance. A recent statement is also read for consistency, so keep the account free of personal transactions from day one.

Processing history, or projections when there is none

Processing statements from a previous processor tell the underwriter what the business actually did: monthly volume, average ticket, refund ratio, chargeback ratio. A fresh entity has no such history; acquirers underwrite it on the projections, the website and the signer instead. Do not manufacture history to fill the gap. Statements from another legal entity cannot simply be attached to a new one: if they are relevant, the relationship between the two businesses has to be explained in the application, or the file comes back. Projections are compared with everything else in the file. State the expected monthly volume, the average ticket, the highest single ticket, the share of one-time versus recurring billing, the expected refund rate and where the traffic comes from. A projection out of scale with the website, or rebills dominating the projection of a one-time offer, reads as an error or a hidden model. The same logic applies to IBOCore classification: subscription and continuity billing belongs on the Grey Hat plan, and the volume type declared at purchase has to be the one you process.

The website and the business description

• Legal entity name and contact details that match the application: same legal name, same address, an email on the company domain (the package includes one, such as contact@companyllc.com).
• Terms of service, privacy policy, and a refund and cancellation policy, easy to find and matching what the business actually does.
• Product pages with prices and delivery or fulfillment terms, so the average ticket in your projections is visible.
• Recurring billing disclosed before checkout when the model is a subscription: price, frequency, how to cancel.
• A working checkout on HTTPS and a billing descriptor the cardholder will recognize.
• No claims that contradict the business description, and no products the description leaves out.

The underwriter reviews the website as evidence, not as marketing. A policy page copied from another store, with another company name still on it, is a mismatch, not a formality. IBOCore sells two optional add-ons for this part of the file: a document template pack at $499 one-time (agreements, invoices, refund policy and terms of service templates) and, for sensitive verticals, bank pages at $2,499 one-time, twelve custom merchant-facing pages used during acquirer due diligence and KYB screenshots. Neither replaces a real store with real products.

The business description is the one document you write yourself, and the one the rest of the file is read against. Keep it factual: what you sell, to whom, how it is delivered, at what price, how it is billed, where the customers come from, what the refund policy is and why the business needs a dedicated MID. The MCC the acquirer assigns, the projections and the website all have to agree with it. The director in an IBOCore package takes the acquirer's verification call and answers questions about the business, so the description has to be something the director has read and can explain in plain words. A description the signer cannot repeat is as damaging as a missing document.

Mismatches that get a file sent back

1. The legal name written three ways across the articles, the EIN letter and the bank document.
2. An entity formed in one state, a signer whose ID is from another, a business address in a third.
3. A settlement account in a personal name or under a different company.
4. Processing statements from another entity attached without explanation.
5. One-time sales in the description, rebills in the projections, a subscription checkout on the site.
6. A website whose policies name a different company, or whose products are absent from the description.
7. An expired ID, or a proof of address older than the acquirer accepts.
8. A signer who does not take the verification call, or who cannot describe the business.

None of these is a document problem; each is a coherence problem, and coherence is what a packaged file is for. The entity, the director and the bank account in an IBO package are built together, in the director's home state, with one legal name on every document and a director never used for another merchant. What you add on top, the description, the projections and the website, has to meet the same standard. Then the acquirer's own timeline applies: onboarding typically takes 3 to 10 business days after delivery, and the decision belongs to the acquirer.

Questions merchants ask

Does a fresh entity with no processing history get declined?

A missing history is not a decline by itself. Acquirers underwrite a new entity on the rest of the file: with no statements to read, the signer, the website, the projections and the description carry the weight. What hurts a fresh entity is an attempt to hide the freshness: borrowed statements, an inflated history or projections nobody can justify. Say that the entity is new, project honestly and let the rest of the file speak. The decision stays with the acquirer.

What does my ISO still need from me once the package arrives?

The part the package does not contain. The document bundle, the director's details and the bank access arrive on delivery day, and IBOCore is processor-agnostic, so any ISO agent or a direct application works; the FAQ page covers that. Your ISO fills the application from the bundle and the director signs. What it needs from you is the website, the business description and the projections, written to match the bundle.

What if the acquirer asks for something that is not in the package?

It happens: a certificate of good standing, a corporate resolution, a W-9 or an ACH authorization. The director stays available for signatures and verification calls for the active life of the package; such requests go through the private Telegram group with your account manager. Anything the business itself has to write, such as a revised description or updated projections, stays on your side. Whatever is added must carry the same legal name, the same address and the same story as the rest of the file.

High-risk MID metrics acquirers watch

Once live, your chargeback ratio (CB ratio) is chargebacks divided by transactions; Visa VDMP and Mastercard ECP programs trigger when you breach network thresholds. Rolling reserves (often 10% for 180 days) protect the acquirer against future disputes. MATCH (Terminated Merchant File) is the industry blacklist after a forced termination. MCC (Merchant Category Code) must reflect your real vertical; miscoding is a scheme violation.

• Representment: fighting a chargeback with delivery proof and logs.
• RDR / Ethoca alerts: pre-chargeback refund tools that protect your CB ratio.
• Statement descriptor: keep it recognizable to cut "friendly fraud" disputes.
• Processing cap: volume limit until the acquirer trusts your history.

MID stacking without structure

Spreading volume across many MIDs without separate entities looks like ratio gaming or transaction laundering to risk teams. The durable pattern is one IBO package per MID, clean descriptors, honest MCC, and reserves treated as a cost of doing high-risk volume.

FAQ: quick answers

How fast can I get an IBO package on IBOCore?

Available inventory ships the same day after payment. You receive Articles, EIN letter, registered agent details, bank onboarding pack and signer contact through your merchant dashboard. Processor onboarding typically follows over the next one to two weeks.

Where can I look up payment-processing jargon?

Use the Resources glossary on IBOCore (/resources) for 580+ definitions: MID, chargeback ratio, MATCH, rolling reserve, MCC, RDR, KYB and high-risk vertical vocabulary.