Transaction Laundering Explained: What It Is and How Acquirers Detect It

Transaction laundering is processing card sales for a product, website or business the acquirer never underwrote, through a MID approved for something else. Most cases begin as shortcuts: a partner's store, a second catalogue, a client's sales. Acquirers find it through descriptor disputes, tickets that contradict the site, test purchases and settlement flows, then terminate for cause and can list the entity and its principals on MATCH.

Transaction laundering is the processing of card sales for a product, website or business the acquirer never underwrote, through a MID approved for something else. Other names are factoring and third-party processing; the networks also speak of undisclosed aggregation, and of undisclosed products when the hidden sales belong to the same seller. Whether the hidden sales are lawful, or whether one entity owns both businesses, changes nothing: the acquirer agreed to sponsor one specific business. Acquirers terminate for it, and a termination for laundering is a listed reason for a MATCH record. This guide covers the forms merchants drift into, how acquirers detect it and where a disclosed change ends and laundering begins.

What the acquirer approved, and why anything else counts as laundering

A MID is not a licence to process whatever the entity sells. It approves a specific file: a legal entity, a director and guarantor, a bank account of record, a website with its products, refund policy and descriptor, a billing model and a projected volume. The acquirer answers to the card network for that merchant. If the traffic belongs to a business the underwriter never reviewed, the acquirer has sponsored an unknown merchant without the KYB, the MCC and the reserves it would have received on its own file. That is why the networks treat laundering as a scheme violation, even when every hidden sale was a real purchase. Three elements make a case:

• An approved MID, underwritten for a named business, website and billing model.
• Sales that belong to something else: another company's orders, or the same company's undisclosed catalogue, site or billing model.
• No disclosure. A line the acquirer reviewed and accepted is not laundering; the same line processed without a word is.

The forms merchants drift into

A laundering case does not need a scheme to start. A MID with spare capacity and a problem that needs solving this week is enough. Each situation below sounds reasonable inside the business and reads as a violation to the acquirer's risk team.

How acquirers detect transaction laundering

Detection does not rest on one check. The risk team reads the transactions as evidence about the business, compares that evidence with the file and opens a case when the two disagree. The networks run monitoring and brand-protection programs on top and can fine the acquirer for undisclosed activity on its merchants, which is why acquirers look first.

1. Descriptor complaints and dispute reason codes. A cardholder who bought from site B and sees the descriptor of site A calls the issuer. The dispute arrives under a code for an unrecognised transaction, and the cardholder's account names the real product.
2. Tickets that contradict the website. A skincare store whose average ticket triples in a month produces a profile the underwritten site cannot explain; risk teams compare ticket size, card country mix and refund rate against the projections on the application.
3. Test purchases and website monitoring. Acquirers, the networks and their vendors crawl merchant sites and place test orders that show which MID and descriptor a sale lands on. A crawler that sees a compliant storefront while a real buyer reaches an undisclosed offer is the signature of a cloaked site.
4. Settlement and refund flows. Refunds to cards that never bought from the underwritten site, credits that outnumber sales for one product and, once the acquirer asks for bank statements, settlements forwarded to a third party after every batch show where the sales came from.
5. Issuer and network intelligence. Issuers report fraud and disputes by merchant, the networks aggregate them by MCC, and traffic that behaves unlike its code stands out.
6. The re-review and the verification call. Acquirers re-run parts of KYB on live accounts and call the signer when something does not add up. No single signal proves laundering; together they lead to a request for invoices and fulfilment records, and records that name another business answer the question.

What a laundering finding costs

Merchant agreements typically set out the sequence: a settlement hold while the acquirer sizes the exposure, then termination for cause, the reserve kept for the dispute window and a decision on what to report. Laundering is a reason for which Mastercard requires a MATCH record naming the entity and every principal on the application.

• Hold, then termination for cause. Settlement stops during the review, the reserve is held for the dispute window and the balance covers disputes and fees before any release.
• Network penalties passed through. Where the networks fine the acquirer, the agreement usually lets it recover the amount from the merchant.
• MATCH listing. The business and its principals are recorded under the laundering reason code for every acquirer that queries the file in the following years; the MATCH list guide on this blog explains the record.
• Both parties lose. The business whose sales were processed loses its outlet; the account holder loses a legitimate MID and carries the record.
• The next file is contaminated. Any principal, phone number, address, tax ID or website shared with a new application is a link the next underwriter finds; the guide on what happens after a MID termination covers rebuilding.

Where disclosure ends and laundering begins

Businesses change, and acquirers know it. The line is not whether you add products, brands or clients; it is whether the acquirer approved the change before the first sale under it. A disclosed change is re-underwritten: the acquirer may reclassify the MCC, adjust pricing and reserves, add a MID or decline, in which case the new activity needs its own file elsewhere.

1. One MID processes what its application described, under a descriptor and an MCC true to the sale; the billing descriptor guide and the MCC guide on this blog cover both.
2. Tell the acquirer before the first sale of anything new. A new catalogue, subscription tier, fulfilment model or brand on the same checkout is disclosed in writing first.
3. A separate business gets a separate file. Its own entity, director, bank account, website and MID; the guide on running multiple merchant accounts sets out the pattern.
4. Never process for anyone else, and never let anyone process for you. No contract between two businesses changes what the acquirer approved.
5. Agencies bill their fee, not the client's revenue. The client's customers pay the client's MID; a client's ad spend belongs on the client's card.
6. If the acquirer says no, change the acquirer, not the route. An offer one acquirer declines goes to another acquirer as its own application, on its own file; it never rides on the existing MID.

How a one-entity-per-MID package keeps the file honest

Everything above rewards a structure in which each business is its own underwriting file. An IBOCore package pairs one nominee director, the IBO (Independent Business Operator), with one US LLC or C-Corp incorporated in the director's home state, its EIN issued, one business bank account at Bluebanc or Relay in the company's name with full access, and the director and business documentation; the inventory page lists the rest. The director is a KYC-verified US resident with zero criminal record, a credit score of 650 or more and a fresh profile never used for another merchant, exclusive to one merchant. Each package is one file designed to open one MID at a time, so a second business that needs its own underwriting is a second package, not a second catalogue on the first MID.

• The IBO package costs $999 setup, then $2,999 per month from 30 days after delivery, whatever the vertical or the billing model.
• Declaring the billing model is the same rule from IBOCore's side. A subscription business presented as one-time e-commerce misleads the acquirer the same way transaction laundering does; say what you bill in your application.
• Refused verticals never enter a file. Adult content and cam, online gambling, pharmacy and Rx, firearms and ammunition, crypto exchanges and custody, and anything fraudulent are declined at contact.
• The director answers the verification call. The IBO takes acquirer queries throughout the life of the package and interferes with nothing else; when an underwriter asks what the company sells, the answer must match the application.

The documents show the director on the state filing and on the EIN letter, and stop there. At the time of writing, under FinCEN's interim final rule of March 2025, a US-formed company is exempt from beneficial ownership information reporting while a company formed under foreign law that registers in a US state is not; verify current FinCEN guidance and take your own reporting or tax questions to a qualified professional, because IBOCore gives no legal or tax advice. Packages ship from stock the same day the payment confirms, and IBOCore charges no clawback if an acquirer later terminates the MID.

Questions merchants ask

Is it laundering if the same company sells a second, lawful product?

It can be. The approval covers the business described on the application, not everything the entity may lawfully sell. A second product from a different category, with a different ticket, fulfilment or billing model, is an undisclosed product if it goes live without the acquirer's agreement. Describe the new line, let the acquirer reclassify or add a MID, and open a separate file if it declines. A new colour or size in the underwritten catalogue is an ordinary change.

Can I process a partner's sales if we sign a contract between us?

No. The merchant agreement with the acquirer governs the MID and limits it to the merchant it underwrote. An agreement between two businesses does not add the second one to the file; it documents the laundering. The partner applies for its own MID on its own entity, director and bank account. If the partner was terminated for cause, its customers, products and disputes now arrive on your file, and your account goes with it.

My MID was terminated for laundering. Will a new entity fix it?

A new entity gives the next acquirer a file with no record to find, provided nothing on it links back to the terminated one: a different principal, tax ID, address, phone number, website and bank account. A fresh package provides that file: a director who has never been on a merchant application and an entity that has never processed. It does not remove the listing, and it does nothing for a business that plans to route the same undisclosed sales again; the next termination lists the new entity and director too. Fix the routing first and read the MATCH list guide.

Compliance touchpoints that survive audit

Clean setups disclose beneficial ownership, file BOI, use genuine IDs, and keep the IBO informed of website and descriptor changes. Processors re-scan for prohibited products, undisclosed aggregation, and transaction laundering. Violations land on MATCH and kill future MID applications.

• AML / CDD: customer due diligence on the merchant entity.
• PEP screening: politically exposed persons get enhanced review.
• OFAC / SDN: sanctions lists checked on owners and signers.
• Website compliance: refund policy, terms, pricing visible before checkout.

Compliance shortcuts that trigger MATCH

Fake guarantors, borrowed SSNs, cloaked websites, and third-party processing through your MID are the fastest paths to MATCH listings. Recovery requires legal work and years of delay. Disclose, document, and keep the IBO in the loop.

FAQ: quick answers

How fast can I get an IBO package on IBOCore?

Available inventory ships the same day after payment. You receive Articles, EIN letter, registered agent details, bank onboarding pack and signer contact through your merchant dashboard. Processor onboarding typically follows over the next one to two weeks.

Where can I look up payment-processing jargon?

Use the Resources glossary on IBOCore (/resources) for 580+ definitions: MID, chargeback ratio, MATCH, rolling reserve, MCC, RDR, KYB and high-risk vertical vocabulary.