Peptide Compliance for Payment Processing

Compliance is the primary reason peptide merchants lose merchant accounts. Understanding what the FDA, card networks, and acquiring banks require - and maintaining that documentation - is what separates businesses that process for years from those that get shut down in months.

What does "research use only" mean for peptide payment compliance?

The "research use only" (RUO) designation is the FDA's classification for compounds sold for laboratory and scientific research purposes, not for human or veterinary consumption. Peptide merchants that sell under this designation are operating legally under federal guidelines - but that designation must be clearly communicated at every stage of the customer experience to remain compliant.

Compliance under RUO requires 4 mandatory disclosures: a product page disclaimer, a checkout confirmation acknowledgment, an order confirmation email statement, and a terms-of-service clause. Missing any of these 4 elements gives acquiring banks grounds to terminate a merchant account for misrepresentation, even if the products themselves are legal.

Peptide Payments reviews all 4 disclosure points during onboarding and flags missing compliance language before the account goes live.

What card network rules apply specifically to peptide merchants?

Visa and Mastercard classify peptide merchants under the nutraceuticals and dietary supplements category (MCC 5912 or 5122), which triggers 3 additional requirements beyond standard merchant processing rules.

• Enhanced due diligence (EDD): acquiring banks must collect and retain business registration documents, product supplier agreements, and customer complaint logs.
• Monthly volume limits during probation: new peptide merchants typically receive a processing cap of $25,000 to $50,000 per month for the first 90 days.
• Reserve requirements: Visa's high-risk merchant guidelines allow acquirers to hold 5% to 15% of gross monthly volume in a rolling reserve for a minimum of 180 days.

Merchants that exceed their monthly volume cap without prior approval risk mid-cycle account suspension. Volume cap increases require a formal request to the acquiring bank and typically take 5 to 10 business days to approve.

What compliance documentation does a peptide merchant need to collect and retain?

Acquiring banks and card networks can request documentation during any audit. Peptide merchants must maintain a compliance file with 6 categories of documents, retained for a minimum of 5 years.

1. Business registration: articles of incorporation or LLC operating agreement, EIN confirmation, and state business license.
2. Product documentation: Certificate of Analysis (COA) for each SKU, supplier agreements, and laboratory testing results.
3. Website compliance screenshots: timestamped captures of RUO disclaimers, terms of service, refund policy, and checkout acknowledgment language.
4. Customer records: full order history with customer-accepted terms at checkout.
5. Complaint and refund logs: all customer disputes, refund decisions, and resolution timelines.
6. Chargeback correspondence: all representment filings, supporting evidence packets, and card network rulings.

Peptide Payments provides all merchants with a compliance document checklist and a secure document portal for storage and retrieval during audits.

How do acquirers evaluate peptide business risk during underwriting?

Underwriting for a peptide merchant account evaluates 5 risk dimensions: product legality, market classification, owner history, business history, and website compliance. Each dimension is scored, and the combined score determines approval status, reserve requirements, and monthly volume caps.

Owner history is often the most overlooked factor. Processors check all owners with more than 10% equity stake against the MATCH list (Mastercard's terminated merchant database), OFAC sanctions lists, and industry blacklists. A prior high-risk merchant account termination on any owner reduces approval probability significantly, but it does not automatically result in denial - context and documentation matter.

Website compliance is evaluated in real time. Underwriters visit the live domain and check for RUO disclaimers, age gates (if applicable), shipping policies, and contact information visibility. A non-compliant website at the time of underwriting review will delay or deny the application regardless of all other factors.

Can a peptide merchant operate across multiple states and countries without additional compliance steps?

Domestic multi-state operations do not require additional payment compliance steps beyond standard business licensing in each operating state. However, international sales to countries in the European Union, Canada, Australia, and the United Kingdom trigger 3 additional requirements.

• GDPR and CCPA data handling: customer consent documentation for personal data collection.
• Cross-border transaction disclosures: currency conversion notification and billing descriptor clarity on the customer's card statement.
• Country-specific import regulations: some peptide compounds are controlled substances in certain countries. Selling internationally without reviewing each destination country's import rules creates legal exposure that can result in merchant account termination.

Peptide Payments flags high-risk destination countries in real time during checkout and can route international transactions through specialized acquiring banks with cross-border expertise.