If you’ve had your merchant account terminated or you keep getting turned down by payment processors, you might be on the Mastercard MATCH list. It’s not something most businesses hear about until they’ve run into a problem. But once you’re on it, it can block you from accepting credit card payments through most providers.
The MATCH list is short for Member Alert to Control High-Risk Merchants. It’s a database used by acquiring banks to share information about businesses that have had serious issues with payment processing. Mastercard runs it, and every acquiring bank is expected to check it before approving a new merchant account.
This article explains how the list works, why businesses get on it, what it means for you, and how to respond. If you're dealing with a MATCH listing, or trying to avoid one, this is for you.
What is the MasterCard MATCH List?
The Mastercard MATCH list, previously known as the Terminated Merchant File (TMF), is a tool banks use to share information about businesses they consider too risky to work with. If your account was closed for cause such as fraud, chargebacks, rule violations, or other serious issues, your acquiring bank can add you to the list. Mastercard created it to help banks identify businesses that might cause financial or reputational problems.
Only acquiring banks and payment processors have access to the list. When you apply for a merchant account, the processor checks MATCH. If you’re on it, they’ll see your name, business details, and a reason code that explains why you were listed. Most of the time, they won’t approve your application. Once you're on the list, you stay there for five years. After that, the record is automatically removed, unless the bank that listed you takes it off sooner, but this is very rare.
Although Mastercard maintains the system and enforces its rules, Mastercard itself doesn’t put merchants on the list; that’s down to acquiring banks.
Reasons Merchants Are Added to the MATCH List
When a bank adds you to the MATCH list, it includes a reason code. Each code points to the issue that triggered your listing. These are set by Mastercard and cover everything from fraud to non-compliance.
Here’s a summary of the reason codes used:
01 – Account Data Compromise: Cardholder data was exposed or stolen.
02 – Common Point of Purchase: Fraud traced back to your business as the likely source.
03 – Laundering: You processed payments for another business, not your own.
04 – Excessive Chargebacks: Your chargeback rate went over Mastercard’s thresholds.
05 – Excessive Fraud: You had too many confirmed fraud cases in a short time.
06 – Reserved: Not currently used.
07 – Fraud Conviction: You or a business principal was convicted of a fraud-related crime.
08 – Mastercard Audit Program: You were flagged by Mastercard’s internal process.
09 – Bankruptcy or Insolvency: You couldn’t meet financial obligations.
10 – Violation of Standards: You broke Mastercard’s rules or your acquiring bank’s terms.
11 – Collusion: You were involved in fraudulent activity with other businesses or individuals.
12 – PCI Noncompliance: You didn’t follow the required card data security standards.
13 – Illegal Transactions: You processed payments for products or services that are illegal.
14 – Identity Theft: You opened the account using false or stolen information.
The most common reasons are excessive chargebacks (Code 04), fraud (Codes 02, 03, 05), and violations of card network rules (Code 10). These usually come from poor business practices, security issues, or high-risk behavior that a bank no longer wants to deal with.
In many cases, businesses don’t even know the exact reason until they ask the bank that listed them.
Match List Reason Codes Explained
MATCH List Reason Codes Explained
Each MATCH listing includes a reason code. This code tells other processors why your account was shut down. Some codes are easier to recover from than others. Here’s what each one means and what you can do about it:
01 – Account Data Compromise: Your systems were breached, and cardholder data was exposed.
What to do: You’ll need to prove you’ve fixed the security issue—usually by completing a PCI audit or hiring a forensic investigator.
02 – Common Point of Purchase (CPP): Fraudulent transactions were traced back to your business as the likely common source.
What to do: Review how you store and handle payment data. You’ll need to tighten your security and possibly work with your processor to show the issue has been resolved.
03 – Laundering: You processed transactions for another business, not your own.
What to do: This is taken seriously. If you believe it was a mistake or you didn’t understand the rules, you’ll need legal advice. You may have to show who the payments were for and why.
04 – Excessive Chargebacks: Your monthly chargebacks exceeded Mastercard’s limits.
What to do: Focus on reducing chargebacks going forward. Use alerts and response tools. If the volume has already dropped, gather that data before reapplying with another processor.
05 – Excessive Fraud: Too many fraudulent transactions, usually based on confirmed fraud reports.
What to do: Review fraud filters and customer verification steps. Processors will want to see that you’ve made real changes.
06 – Reserved: This code isn’t used right now.
07 – Fraud Conviction: Someone involved in your business was convicted of fraud.
What to do: There’s little room to fix this unless you can prove it was a mistake. If the person is no longer part of the business, document that clearly.
08 – Mastercard Audit Program: You were flagged by Mastercard’s internal monitoring.
What to do: You’ll need to understand why. This usually ties back to risk or compliance issues. Fixing it often involves showing you’ve changed how you operate.
09 – Bankruptcy or Insolvency: You couldn't meet financial obligations.
What to do: If the business has recovered, you can try applying with processors that handle past bankruptcies, especially if the financials have stabilized.
10 – Violation of Standards: You broke Mastercard’s or your acquirer’s rules.
What to do: These are often related to prohibited products or deceptive practices. You’ll need to clean up policies and possibly rebrand or restructure.
11 – Collusion: Your business was involved in organized fraud or worked with others to abuse the system.
What to do: This is serious. If you weren’t aware of the activity, you’ll need documentation to support your case. Legal advice is usually needed.
12 – PCI Noncompliance: You didn’t meet data security requirements.
What to do: Complete your PCI compliance checklist or certification. Show proof to any potential processors.
13 – Illegal Transactions: You were processing payments for illegal goods or services.
What to do: If there was a misunderstanding or a gray area, document everything. Some cases come down to regulation differences, but most processors won’t take the risk again.
14 – Identity Theft: The processor believes you used fake or stolen information to get the account.
What to do: If this was a mistake or someone else used your name, gather evidence and police reports if needed. You’ll have to prove it wasn’t you.
Each code tells a story. If you're trying to work with a new processor, they’ll want to know what happened and what’s changed. The more you can show that the problem has been addressed, the better your chances of getting approved again—even if you’re still on MATCH.
Implications of Being on the MATCH List
Once you’re on the MATCH list, your options for accepting card payments become limited. Most payment processors won’t take you on. Even the ones that handle high-risk merchants will see your listing and think twice, which could have serious consequences for your business.
- You’ll have trouble opening new merchant accounts. Processors check MATCH before approving anyone. If they see your name, they’ll likely reject your application without much explanation.
- You’ll face higher processing costs. If you do find a high-risk provider willing to work with you, expect higher fees, stricter contracts, and reserve requirements.
- Your cash flow may take a hit. Some processors will hold back a percentage of your sales as a reserve. That money is locked up in case of future chargebacks or losses.
- You might need to use alternative payment solutions. Aggregators or third-party platforms might be an option, but they often have volume caps and stricter monitoring.
- Even after you're removed, your record may follow you. Processors may still ask if you’ve been on MATCH before. It can affect future applications, even years later.
Being listed doesn't stop your business overnight, but it forces you to operate under more restrictions and with fewer options.
How to Check if You’re on the MATCH List
You can’t check the MATCH list yourself. Mastercard doesn’t make it public, and only acquiring banks and processors can access it. The usual way merchants find out is when they apply for a new account and get rejected.
If you suspect you’ve been listed, here’s what to do:
- Contact your former processor. Ask if they reported you to the MATCH list and, if so, which reason code they used.
- Be specific. When you call, say something like: “I believe I may have been placed on the Mastercard MATCH list. Can you confirm whether this happened and which reason code was reported?”
- Have your business details ready. This includes:
- Business name
- Merchant ID (MID), if you still have it
- Your name and contact info
- Keep a record. Write down who you spoke with, when, and what they said. If you need to challenge the listing later, this helps.
If you’re not sure who to call or need help starting the process, you can contact us ChargebackStop at +1 (929) 295-4246. We can walk you through the steps and help you figure out your options.
Removal from the Mastercard MATCH List
Most businesses remain on the MATCH list for five years. Once that period ends, the listing is removed automatically. There’s no application process; you’re simply taken off the list at the end of that term.
Early removal is possible, but it’s uncommon. It only happens if the listing was added by mistake or if the acquiring bank that placed you on the list agrees to remove it. Mastercard doesn’t handle removal requests directly. Only the original bank can submit a request to take you off. If that bank no longer exists, the listing will stay in place until it expires.
If you think you were listed in error, your first step is to contact the processor that shut down your account. Ask if they placed you on the MATCH list, and if so, what reason code they used. You'll need this information to decide your next move.
If the listing doesn’t match your situation or was based on incorrect information, you can try to have it removed early. This means preparing a written request to the bank that listed you. You’ll need to explain why you believe the listing is inaccurate or unfair, and include documents to back it up: contracts, emails, financial records, anything that helps make your case.
Keep the request clear and professional. You’re asking the bank to reconsider their report, so getting aggressive won’t help. Focus on facts. If the issue has already been resolved or the problem has been corrected, say so and show evidence.
If the listing was accurate, early removal is unlikely. In that case, your time is better spent finding a payment provider that works with MATCH-listed businesses. From there, focus on building a cleaner history so you're in a better position once the listing expires.
How to Avoid the MATCH List
Most MATCH listings happen because of preventable issues—chargebacks, fraud, or not following the rules. If you run a clean operation and stay alert to risk, you can avoid it. Here’s what you should focus on:
Keep Chargebacks Under Control
Chargebacks are one of the biggest red flags for processors. Mastercard expects merchants to stay below a 1 percent chargeback ratio, and under five thousand dollars in total chargeback volume per month. If you cross those limits, your processor can shut down your account and report you under Reason Code 04.
Track your chargebacks every month. Don’t wait until your processor raises concerns. Use chargeback alerts if they’re available. These give you a short window to refund a transaction before it becomes a chargeback. That alone can reduce your ratio quickly. Look at the reasons customers file chargebacks. Fix the gaps in your sales process, delivery, refunds, or communication.
Tighten Fraud Prevention
A sudden increase in fraud can get you listed for excessive fraud, data compromise, or being a common point of purchase. These are codes 01, 02, and 05. You should have basic fraud checks in place. Use CVV and AVS verification, monitor IP addresses, and flag suspicious transaction patterns. Set limits on transaction size, frequency, or geographic location.
If you run an e-commerce site, review orders manually when needed. If you offer digital goods, make sure customer accounts and logins are secure. If fraud reports spike, update your settings immediately. Fraud tends to snowball, and if you don’t stop it early, it can put you at risk of being shut down and listed.
Know the Rules
You have two sets of rules to follow. One from your processor, and another from Mastercard. Break either, and you could be listed under Reason Code 10, 13, or 03. These cover things like selling prohibited products, hiding terms, or processing transactions on behalf of someone else.
Make sure your terms of service are clear and available. If you sell anything high-risk or restricted, talk to your processor first. If you make any major changes to what you sell or how you bill customers, let them know in advance. Surprising your processor is a fast way to get flagged.
Stay PCI Compliant
If you accept, transmit, or store cardholder data, you need to meet PCI requirements. This is a security framework that includes system scans, access controls, encryption, and reporting. Failing to meet these standards can result in a MATCH listing under Reason Code 12. If you rely on a third-party provider for payment processing, confirm that they are compliant and that your setup is covered under their certification.
Do not assume you’re safe just because you use a popular platform. If you’re not sure whether your setup is compliant, get it reviewed. If you handle your own infrastructure, run regular PCI scans and fix anything that comes up.
Communicate With Your Processor
If something goes wrong in your business, do not wait until it affects your processing. If you start seeing more refunds, disputes, or failed deliveries, flag it internally and notify your processor. If you are facing a temporary cash flow issue, tell them before it leads to chargebacks or account holds.
Processors are more likely to work with you if you are upfront and trying to fix the issue. They are far less likely to help if you hide problems or ignore early warnings. If your account gets shut down because of how you handled a situation, it becomes much harder to explain it later.
What to Do Next If You’re on the MATCH List
Being listed on MATCH makes it harder to operate, but it doesn’t have to shut you down. If you’ve been listed, find out why, fix the root issue, and take steps to keep it from happening again. Most listings last five years, but how you handle things during that time matters.
To avoid MATCH in the future, focus on lowering chargebacks, preventing fraud, staying compliant, and flagging risk early. A steady operation and clear communication with your processor go a long way.
If you're listed now and need help managing the fallout, ChargebackStop can help. We work with MATCH-listed merchants to reduce chargebacks, protect against fraud, and rebuild a clean processing history. Call us at +1 (929) 295-4246 or contact us here to talk through your options.
You can get back on track. Let us help you get there faster.
