⚠️ RISK ALERT: OCC hits sponsor bank CFSB with AML/BSA enforcement

The OCC issued a consent order against Community Federal Savings Bank (CFSB), a Queens, N.Y. sponsor bank, citing systemic breakdowns in customer due diligence, suspicious-activity monitoring, independent testing, and BSA staffing.

📍 CFSB must appoint a compliance committee within 15 days
📍 A written action plan is due within 90 days
📍 CFSB sponsors Wise's U.S. dollar accounts and Crypto.com's prepaid card program

What this means: The order does not impose a fine or restrict new partner onboarding, per the bank. Acquirers and PayFac operators using small sponsor banks should expect continued scrutiny of BSA/AML program scalability as onboarded volumes grow.

🔗 Source: https://www.americanbanker.com/payments/news/sponsor-bank-for-wise-crypto-com-told-to-fix-aml-program

Industry information only. Not legal, financial, or compliance advice.

@processormatchai

💳 Klarna Goes Live on J.P. Morgan Payments in the U.S.

Klarna has launched its first integration with J.P. Morgan Payments, giving merchants on J.P. Morgan’s Commerce Platform access to Klarna’s flexible checkout options without needing a separate custom integration.

📌 Why it matters: This expands BNPL access deeper into enterprise payment infrastructure and shows how major processors are increasingly bundling alternative payment methods directly into merchant platforms.

Source

@processormatchai

⚠️👇👇👇RISK ALERT — FTC Warns Visa, Mastercard, PayPal & Stripe on "Debanking"

On March 26, 2026, the FTC sent formal warning letters to Visa, Mastercard, PayPal, and Stripe, flagging alleged denial of payment services to consumers based on political or religious views.

⚠️ Warning letters — not formal enforcement actions.

What this may mean:
• Card networks and processors may face added scrutiny over account-closure practices
• Documentation of termination reasons may matter more under future FTC review
• No new rule is in effect — this is a warning, not a mandate

🔗 Source: https://www.hklaw.com/en/insights/publications/2026/03/ftc-issues-debanking-warning-letters-to-payment-industry

Industry information only. Not legal, financial, or compliance advice.

@processormatchai

⚠️👀👀💯INDUSTRY UPDATE — Square to end hemp/CBD sales support

Square has told hemp and CBD merchants to remove those products from its platform by Oct 15, 2026, citing a federal hemp law change taking effect Nov 12, 2026.

📌 What changes: CBD/hemp items must be removed from Square catalogs (in-person & online) by the deadline.

📌 What's unchanged: Square accounts stay open; other products are unaffected.

📌 Status: Confirmed processor policy — not a card-network rule.

Hemp and CBD merchants should confirm alternate processing arrangements before the deadline.

🔗 Source: https://www.marijuanamoment.net/square-tells-businesses-to-stop-selling-hemp-and-cbd-products-in-light-of-upcoming-federal-ban/

Industry information only. Not legal, financial, or compliance advice.

@processormatchai

⚠️ RISK ALERT: Mastercard Raises High-Risk Merchant Fees

Mastercard confirmed multiple fee increases for its Specialty Merchant Registration Program:

🔹 Registration fee doubled: $500 → $1,000 (effective May 1, 2026)
🔹New $50,000 annual High-Risk Acquirer License Fee — levied on the acquiring bank, expected to be passed through to high-risk portfolios
🔹 $0.02 per-transaction Specialty Merchant Fee on GCMS and MDS (effective June 3, 2026; first billing June 14)

Who may be affected: Acquirers, PayFac operators, ISOs, and merchants in MCC 5967, 5993, 5122, and similar high-risk categories.

What to watch: Increased cost allocation may affect pricing, reserve requirements, and acquirer willingness to serve certain verticals.

🔗 Source: https://paymentcloudinc.com/blog/mastercard-raises-high-risk-registration-fee-what-to-know/

Industry information only. Not legal, financial, or compliance advice.

@processormatchai

⚠️ RISK ALERT: Mastercard SMMP Now Enforceable

Mastercard's Scam Merchant Monitoring Program rules took effect July 24, 2026, per a Payments Dive report from an industry conference panel.

What changed:
• Acquirers and PayFac operators must open investigations within 72 hours of a qualifying trigger
• Triggers include authorization approval rate collapse (50pp drop or below 30%), GRIP letters, and MMSP alerts
• Merchants under 6 months of processing history face an added trigger: combined refund + chargeback rates above 5% over 30 days (min 500 transactions)
• Successful representments are not credited in that calculation

Impact: If an investigation confirms scam activity, Mastercard and Maestro processing must stop.

🔗 Source: https://www.paymentsdive.com/news/mastercard-bolsters-scam-defense/826259/

Industry information only. Not legal, financial, or compliance advice.

@processormatchai

RISK ALERT: State AGs Demand Processors Cut Off Illegal E-Cigarette Merchants

A coalition of state attorneys general sent formal letters to payment processors demanding they identify and remove merchants selling unlawful e-cigarettes.

⚡ What's new: Letters cite FDCA, PACT Act, and FTC Act violations and call on processors to deny access to and investigate noncompliant merchants.

✍️ What's cited: Alleged failures in onboarding KYB, due diligence, and ongoing transaction monitoring against state flavor bans and product registries.

🔍 Who may be affected: PayFac operators, acquirers, ISOs, and underwriting teams serving tobacco, vaping, or ENDS merchants.

🔗 Source: https://www.tobaccolawblog.com/2026/04/state-ags-turn-up-the-heat-on-payment-processors-over-unauthorized-e%E2%80%91cigarette-sales/

Industry information only. Not legal, financial, or compliance advice.

@processormatchai

RISK ALERT — Card Networks Reportedly Scrutinizing ENDS Market

LegitScript reports card networks are signaling heightened concerns around Electronic Nicotine Delivery Systems (ENDS) merchants, with warnings reaching processors on compliance and monitoring.

⚠️ What this means:
• No official network rule change confirmed
• Processors serving ENDS/vape merchants may face tighter underwriting and monitoring
• Acquirers should review existing ENDS portfolio oversight

Status: Reported — not a confirmed rule or effective date.

🔗 Source: https://www.legitscript.com/high-risk-and-problematic-products/card-networks-are-on-notice-what-concerns-about-the-ends-market-means-for-payment-processors/

Industry information only. Not legal, financial, or compliance advice.

@processormatchai

🌎 Brazil Looks to Take Pix Global

Brazil’s central bank is exploring ways to connect Pix with international instant-payment systems, potentially expanding the payment rail beyond Brazil.

Pix processed nearly 80 billion transactions in 2025, showing how instant bank payments continue to compete with traditional card networks.

📌 Why it matters: More countries are building payment infrastructure that can move money without relying entirely on Visa or Mastercard.

🔗 Source:
https://www.reuters.com/world/americas/brazil-central-bank-eyes-expansion-pix-payment-system-us-trade-scrutiny-2026-08-10/

@processormatchai

🇮🇳 India Opens Door to Fees on UPI Payments

New legislation could allow service fees to be introduced on India’s UPI instant-payment network.

No final merchant pricing has been announced yet, but the move could reshape the economics of one of the world’s largest real-time payment systems.

📌 Why it matters: Even low-cost payment rails eventually need a sustainable business model for banks, processors and infrastructure providers.

🔗 Source:
https://www.ft.com/content/243e39bd-089a-4977-9383-962d9095d9d0

@processormatchai

🛒 Shopify Ties Partner Earnings More Closely to Payment Volume

Starting August 10, Shopify’s updated partner model can reward eligible partners with subscription revenue share plus a percentage of merchant GMV and payments activity.

📌 Why it matters: Shopify is increasingly aligning partner incentives with the actual transaction volume merchants generate—not just software subscriptions.

🔗 Source:
https://www.shopify.com/sg/partners/blog/a-new-partner-earning-model

@processormatchai

⚠️ Merchant Monitoring Remains a Major Payment Risk in 2026

Mastercard’s newer monitoring framework requires acquirers and PayFacs to investigate certain scam-risk signals quickly, with merchant termination possible when prohibited activity is confirmed.

📌 Why it matters: For high-risk merchants, getting approved is only the first step. Ongoing monitoring, transaction behavior and business-model compliance matter just as much.

🔗 Source:
https://www.mastercard.com/global/en/news-and-trends/stories/2026/merchant-trust-services.html

@processormatchai

⚠️⚠️⚠️💯Section 781 Hemp Rule: Compliance Shift for CBD/Hemp Payments

Section 781 of P.L. 119-37 amends the federal hemp definition, shifting from delta-9 THC only to total THC (including THCA). Enacted November 2025; takes effect November 12, 2026.

What this may mean:
🗽 Some products marketed as compliant under the 2018 Farm Bill may fall outside the new hemp definition

🍁 CBD/hemp merchants could see changes to onboarding, underwriting, and account risk review

🏦 Processors and sponsor banks may need updated due-diligence and product-screening procedures

Status: Law is enacted, not yet in effect. FDA guidance and enforcement details remain pending.

🔗 Source: https://qredible.com/the-781-hemp-rule-is-a-wake-up-call-for-payment-processors-and-banks/
🔗 Background: https://www.congress.gov/crs-product/IF13136

Industry information only. Not legal, financial, or compliance advice.

@processormatchai

RISK ALERT: Pharmacy CNP High-Risk Exemption — Unverified Claim

A trade advisory (RM Solutions) claims Visa, Mastercard, and Discover rescinded exemptions that let accredited pharmacies skip high-risk registration for card-not-present transactions. This has not been independently confirmed by the card networks.

⚠️ If confirmed, may affect:
• Pharmacies with higher CNP volume (phone, mail, online refills)
• Possible added registration steps, costs, or scrutiny
• Processing restrictions if registration isn't completed

📌 Status: CLAIM — based on a single industry source; no Visa/Mastercard/Discover bulletin located. Confirm directly with your acquirer or processor.

🔗Source: https://www.rm-solutions.com/did-you-know/did-you-know...-the-major-card-brands-recently-changed-their-rules-surrounding-classification-of-high-risk-merchants

Industry information only. Not legal, financial, or compliance advice.

@processormatchai

⚠️ RISK ALERT: IRS Finalizes Backup Withholding Rules for TPSO Transactions

Treasury and IRS issued final regulations (T.D. 10053) amending backup withholding under 6050W and Section 3406.

✍️ Key details:
• Effective date: August 10, 2026
• Applies to calendar years beginning after Dec 31, 2024
• Reporting threshold reverts to $20,000 AND 200 transactions (pre-ARPA levels)
• Aligns with the One Big Beautiful Bill Act

💳 Who is affected: Third-party settlement organizations, PayFac operators, processors, acquiring banks, and ISOs must configure reporting and withholding systems for the updated thresholds.

Backup withholding applies when a merchant exceeds both the $20,000 aggregate payment and 200-transaction thresholds in a calendar year.

🔗 Source: https://kpmg.com/us/en/taxnewsflash/news/2026/08/tnf-final-regulations-backup-withholding-on-third-party-network-transactions.html

Industry information only. Not legal, financial, or compliance advice.

@processormatchai

⚠️ RISK ALERT: Ireland Proposes Closed-Loop Payment Rules for Gambling Firms

The Irish coalition government is preparing rules requiring gambling operators to use closed-loop payment systems — deposits and withdrawals must move through the same payment account.

📌 Status: Proposed, not yet final
🗓 Reported: Aug 13, 2026

Who may be affected:
• Gambling merchants operating in Ireland
• Acquiring banks & processors serving them
• Fintechs and PayFac operators in gambling
• AML and compliance teams

What may change: Split payment rails for deposits vs withdrawals could be restricted. Onboarding, settlement, and monitoring workflows may need updates once finalized.

What's unchanged: No effective date yet — this is a proposal under development.

🔗 Source: https://www.irishtimes.com/crime-law/2026/08/13/tougher-rules-for-gambling-firms-as-part-of-coalition-drive-to-tackle-money-laundering/

Industry information only. Not legal, financial, or compliance advice.

@processormatchai

⚠️ RISK ALERT: Visa Cuts VAMP Chargeback Threshold for 2026

Visa's Acquirer Monitoring Program (VAMP) merchant 'Excessive' threshold dropped from 2.2% to 1.5% (NA/EU/APAC) effective April 1, 2026, per Visa's official fact sheet. Mastercard runs a similar chargeback monitoring structure (ECM/HECM tiers).

📉 What changed: Fewer disputes now trigger monitoring, reserve increases, or account review.

🎯 Who's exposed: High-risk verticals — subscription billing, nutraceuticals, online gaming — face increased scrutiny.

🗓 Status: Confirmed, already in effect.

🔍 Next step: Review current chargeback ratios against the new thresholds.

🔗Source: https://beancount.io/blog/2026/07/10/visa-mastercard-vamp-chargeback-monitoring-2026-guide
🔗 Also see: https://developer.paypal.com/braintree/articles/risk-and-security/compliance/network-updates/2026

Industry information only. Not legal, financial, or compliance advice.

@processormatchai

⚠️ RISK ALERT: FinCEN Removes Beneficial Ownership Reporting Requirement

FinCEN issued a final rule (Aug. 11, 2026) permanently eliminating the requirement for U.S. companies and persons to report beneficial ownership information under the Corporate Transparency Act.

📌 What changed: The federal BOI reporting obligation for domestic companies is eliminated.
📌 Who is affected: Acquirers, PayFac operators, ISOs, and compliance teams that built BOI verification into KYB/AML onboarding.
📌 What to watch: Processors should confirm whether internal risk standards, contracts, or state rules still require equivalent ownership checks.

High-risk merchants previously asked for BOI documentation may see streamlined onboarding as processors update requirements.

🔗 Source: https://www.digitaltransactions.net/five-years-later-the-beneficial-ownership-rule-will-end/

Industry information only. Not legal, financial, or compliance advice.

@processormatchai

⚠️⚠️⚠️💯Mastercard Specialty Merchant Fees Now Active

Mastercard's new Specialty Merchant fees are live and billing:

• $0.02 per purchase transaction
• 10 bps volume-based fee
• Annual registration: $1,000 (up from $500, effective May 1)
• Effective June 3, 2026 — first billing June 14, 2026

Affected categories include adult, gambling, crypto, pharma, tobacco, lottery, skill games, and negative-option products. Fees apply across GCMS and MDS networks.

If processor or ISO agreements are silent on pass-through fees, acquirers and PayFac operators face immediate margin impact.

🔗 Source: https://www.cardtraq.com/blog/ma-specialty-merchant-registration-fee/

Industry information only. Not legal, financial, or compliance advice.

@processormatchai

⚠️🖥🖥💯Mastercard Proposes 50% Payout in Will Bank Dispute

Mastercard is reportedly proposing to pay half the amount still owed to Brazilian acquirers affected by the January collapse of Will Financeira (Will Bank), tied to failed Banco Master.

🔹 Total network liability: ~$950M
🔹 Mastercard has already settled roughly half
🔹 Remaining balance is disputed
🔹 New proposal: 50% cash, remainder via multi-year fraud-protection services

Status: reported proposal, not a finalized settlement.

Brazil's central bank rules now hold payment networks responsible for ensuring transactions are paid to receiving users — a point of contention in this dispute.

Affected: Brazilian acquirers, payment networks, merchants with cross-border settlement exposure to Brazil.

🔗 Source: https://www.pymnts.com/mastercard/2026/mastercard-offers-brazilian-acquirers-50percent-payout-services-will-bank-dispute/

Industry information only. Not legal, financial, or compliance advice.

@processormatchai

⚠️RISK ALERT — Visa VIRP Daily Monitoring Requirements

Visa's Integrity Risk Program (VIRP), under Visa Rules §10.4.5.2, requires acquirers and PayFacs sponsoring high-integrity-risk merchants to retain at least four data points per day — including gross sales volume.

Non-compliance can trigger audit failures and Visa enforcement action.

VIRP replaced the Global Brand Protection Program in May 2023. This is a reported review of existing requirements, not a new rule announcement.

Who's affected: Acquirers, PayFacs, ISOs, and high-integrity-risk merchants.

🔗 Source: https://finqub.io/learn/visa-integrity-risk-program/

Industry information only. Not legal, financial, or compliance advice.

@processormatchai