⚠️⚠️⚠️💯Section 781 Hemp Rule: Compliance Shift for CBD/Hemp Payments

Section 781 of P.L. 119-37 amends the federal hemp definition, shifting from delta-9 THC only to total THC (including THCA). Enacted November 2025; takes effect November 12, 2026.

What this may mean:
🗽 Some products marketed as compliant under the 2018 Farm Bill may fall outside the new hemp definition

🍁 CBD/hemp merchants could see changes to onboarding, underwriting, and account risk review

🏦 Processors and sponsor banks may need updated due-diligence and product-screening procedures

Status: Law is enacted, not yet in effect. FDA guidance and enforcement details remain pending.

🔗 Source: https://qredible.com/the-781-hemp-rule-is-a-wake-up-call-for-payment-processors-and-banks/
🔗 Background: https://www.congress.gov/crs-product/IF13136

Industry information only. Not legal, financial, or compliance advice.

@processormatchai

RISK ALERT: Pharmacy CNP High-Risk Exemption — Unverified Claim

A trade advisory (RM Solutions) claims Visa, Mastercard, and Discover rescinded exemptions that let accredited pharmacies skip high-risk registration for card-not-present transactions. This has not been independently confirmed by the card networks.

⚠️ If confirmed, may affect:
• Pharmacies with higher CNP volume (phone, mail, online refills)
• Possible added registration steps, costs, or scrutiny
• Processing restrictions if registration isn't completed

📌 Status: CLAIM — based on a single industry source; no Visa/Mastercard/Discover bulletin located. Confirm directly with your acquirer or processor.

🔗Source: https://www.rm-solutions.com/did-you-know/did-you-know...-the-major-card-brands-recently-changed-their-rules-surrounding-classification-of-high-risk-merchants

Industry information only. Not legal, financial, or compliance advice.

@processormatchai

⚠️ RISK ALERT: IRS Finalizes Backup Withholding Rules for TPSO Transactions

Treasury and IRS issued final regulations (T.D. 10053) amending backup withholding under 6050W and Section 3406.

✍️ Key details:
• Effective date: August 10, 2026
• Applies to calendar years beginning after Dec 31, 2024
• Reporting threshold reverts to $20,000 AND 200 transactions (pre-ARPA levels)
• Aligns with the One Big Beautiful Bill Act

💳 Who is affected: Third-party settlement organizations, PayFac operators, processors, acquiring banks, and ISOs must configure reporting and withholding systems for the updated thresholds.

Backup withholding applies when a merchant exceeds both the $20,000 aggregate payment and 200-transaction thresholds in a calendar year.

🔗 Source: https://kpmg.com/us/en/taxnewsflash/news/2026/08/tnf-final-regulations-backup-withholding-on-third-party-network-transactions.html

Industry information only. Not legal, financial, or compliance advice.

@processormatchai

⚠️ RISK ALERT: Ireland Proposes Closed-Loop Payment Rules for Gambling Firms

The Irish coalition government is preparing rules requiring gambling operators to use closed-loop payment systems — deposits and withdrawals must move through the same payment account.

📌 Status: Proposed, not yet final
🗓 Reported: Aug 13, 2026

Who may be affected:
• Gambling merchants operating in Ireland
• Acquiring banks & processors serving them
• Fintechs and PayFac operators in gambling
• AML and compliance teams

What may change: Split payment rails for deposits vs withdrawals could be restricted. Onboarding, settlement, and monitoring workflows may need updates once finalized.

What's unchanged: No effective date yet — this is a proposal under development.

🔗 Source: https://www.irishtimes.com/crime-law/2026/08/13/tougher-rules-for-gambling-firms-as-part-of-coalition-drive-to-tackle-money-laundering/

Industry information only. Not legal, financial, or compliance advice.

@processormatchai

⚠️ RISK ALERT: Visa Cuts VAMP Chargeback Threshold for 2026

Visa's Acquirer Monitoring Program (VAMP) merchant 'Excessive' threshold dropped from 2.2% to 1.5% (NA/EU/APAC) effective April 1, 2026, per Visa's official fact sheet. Mastercard runs a similar chargeback monitoring structure (ECM/HECM tiers).

📉 What changed: Fewer disputes now trigger monitoring, reserve increases, or account review.

🎯 Who's exposed: High-risk verticals — subscription billing, nutraceuticals, online gaming — face increased scrutiny.

🗓 Status: Confirmed, already in effect.

🔍 Next step: Review current chargeback ratios against the new thresholds.

🔗Source: https://beancount.io/blog/2026/07/10/visa-mastercard-vamp-chargeback-monitoring-2026-guide
🔗 Also see: https://developer.paypal.com/braintree/articles/risk-and-security/compliance/network-updates/2026

Industry information only. Not legal, financial, or compliance advice.

@processormatchai

⚠️ RISK ALERT: FinCEN Removes Beneficial Ownership Reporting Requirement

FinCEN issued a final rule (Aug. 11, 2026) permanently eliminating the requirement for U.S. companies and persons to report beneficial ownership information under the Corporate Transparency Act.

📌 What changed: The federal BOI reporting obligation for domestic companies is eliminated.
📌 Who is affected: Acquirers, PayFac operators, ISOs, and compliance teams that built BOI verification into KYB/AML onboarding.
📌 What to watch: Processors should confirm whether internal risk standards, contracts, or state rules still require equivalent ownership checks.

High-risk merchants previously asked for BOI documentation may see streamlined onboarding as processors update requirements.

🔗 Source: https://www.digitaltransactions.net/five-years-later-the-beneficial-ownership-rule-will-end/

Industry information only. Not legal, financial, or compliance advice.

@processormatchai

⚠️⚠️⚠️💯Mastercard Specialty Merchant Fees Now Active

Mastercard's new Specialty Merchant fees are live and billing:

• $0.02 per purchase transaction
• 10 bps volume-based fee
• Annual registration: $1,000 (up from $500, effective May 1)
• Effective June 3, 2026 — first billing June 14, 2026

Affected categories include adult, gambling, crypto, pharma, tobacco, lottery, skill games, and negative-option products. Fees apply across GCMS and MDS networks.

If processor or ISO agreements are silent on pass-through fees, acquirers and PayFac operators face immediate margin impact.

🔗 Source: https://www.cardtraq.com/blog/ma-specialty-merchant-registration-fee/

Industry information only. Not legal, financial, or compliance advice.

@processormatchai

⚠️🖥🖥💯Mastercard Proposes 50% Payout in Will Bank Dispute

Mastercard is reportedly proposing to pay half the amount still owed to Brazilian acquirers affected by the January collapse of Will Financeira (Will Bank), tied to failed Banco Master.

🔹 Total network liability: ~$950M
🔹 Mastercard has already settled roughly half
🔹 Remaining balance is disputed
🔹 New proposal: 50% cash, remainder via multi-year fraud-protection services

Status: reported proposal, not a finalized settlement.

Brazil's central bank rules now hold payment networks responsible for ensuring transactions are paid to receiving users — a point of contention in this dispute.

Affected: Brazilian acquirers, payment networks, merchants with cross-border settlement exposure to Brazil.

🔗 Source: https://www.pymnts.com/mastercard/2026/mastercard-offers-brazilian-acquirers-50percent-payout-services-will-bank-dispute/

Industry information only. Not legal, financial, or compliance advice.

@processormatchai

⚠️RISK ALERT — Visa VIRP Daily Monitoring Requirements

Visa's Integrity Risk Program (VIRP), under Visa Rules §10.4.5.2, requires acquirers and PayFacs sponsoring high-integrity-risk merchants to retain at least four data points per day — including gross sales volume.

Non-compliance can trigger audit failures and Visa enforcement action.

VIRP replaced the Global Brand Protection Program in May 2023. This is a reported review of existing requirements, not a new rule announcement.

Who's affected: Acquirers, PayFacs, ISOs, and high-integrity-risk merchants.

🔗 Source: https://finqub.io/learn/visa-integrity-risk-program/

Industry information only. Not legal, financial, or compliance advice.

@processormatchai

🔥🔥

RISK ALERT: Mastercard Global Payment Outage — Aug 15, 2026

Mastercard confirmed a worldwide card-payment outage starting ~04:01 UTC. Worldpay (Global Payments) opened incident INC0619188 at 04:28 UTC citing Mastercard Debit network errors.

📌 At least 5 processors (Worldpay, Stripe, Adyen, Windcave,
Cybersource) reported failures

📌 Mastercard told media the disruption stemmed from a scheduled system update

📌 Recovery began ~05:30 UTC per at least one gateway; resolved within hours

Impact: Merchants, acquirers, and PayFacs on Mastercard routing saw authorization failures and possible settlement delays. High-risk merchants on single-network setups face added chargeback exposure during downtime.

This was a temporary outage, not a permanent shutdown.

🔗 https://statusisdown.com/en/articles/mastercard-outage-payment-failures-processors-august-2026

Industry information only. Not legal, financial, or compliance advice.

@processormatchai

⚠️ RISK ALERT: Danish FSA Orders Inpay to Halt New Online Gaming Onboarding

Denmark's Financial Supervisory Authority ordered Inpay A/S to immediately stop establishing new business customer relationships in online gaming after a March 2026 inspection found serious AML violations.

🔎 What was found:
• Insufficient customer due diligence when circumstances changed
• Inadequate assessment of purpose and nature of high-risk gaming relationships

📌 What this means:
• New iGaming merchants cannot be onboarded by Inpay until violations are resolved
• Existing customers, including current gaming clients and all private customers, are unaffected
• Acquirers and PSPs with Danish gaming exposure may face heightened scrutiny

🔗 Source: https://fxnewsgroup.com/forex-news/payments/danish-fsa-orders-inpay-to-stop-establishing-new-business-customer-relationships-within-online-gaming/

Industry information only. Not legal, financial, or compliance advice.

@processormatchai

⚠️⚠️⚠️💯

Treasury Proposes Stablecoin Rules Under GENIUS Act

Treasury published a proposed rule on Aug 17, 2026 implementing Section 3 of the GENIUS Act.

🗓️ Issuers must obtain federal/state licenses by Jan 18, 2027
🗓 Platforms barred from selling non-licensed stablecoins to US customers starting Jul 18, 2028
🗓 Public comments due Oct 19, 2026

The proposal extends to offshore activity involving US customers. Helping buyers bypass location checks (e.g., IP) would be treated as a potential violation.

⚠️ Acquirers and PayFac operators with crypto portfolios should monitor which stablecoin products may remain processable.

🔗 Source: https://decrypt.co/375817/treasury-rules-sell-stablecoins-us

Industry information only. Not legal, financial, or compliance advice.

@processormatchai

🚨 ⚠️🖥🖥💯

Visa Seeks New Stablecoin Settlement Partner After Mastercard Acquired BVNK

Visa is actively searching for a stablecoin settlement and OTC partner with crypto exchange licenses in the U.S., Canada, UK, and Singapore, per documents seen by CoinDesk.

🔹 Mastercard's BVNK acquisition removed Visa's prior settlement partner

🔹 New partner would also settle the Open USD project (backed by Stripe, Visa, Mastercard)

🔹 Status: reported, not officially announced by Visa

Potential impact for crypto merchants, PayFac operators, and fintechs exploring stablecoin rails: settlement infrastructure options may shift as networks compete for digital-asset partners.

🔗 Source: https://www.coindesk.com/business/2026/08/18/visa-is-looking-for-a-new-stablecoin-settlement-partner-now-that-bvnk-is-owned-by-mastercard

Industry information only. Not legal, financial, or compliance advice.

@processormatchai

⚠️ RISK ALERT: Mastercard Announces GMAP, Revises QMAP (July 28, 2026)

Mastercard confirmed a new merchant monitoring strategy:

🔹 GMAP — Global Merchant Audit Program announced; standards take effect April 1, 2027
🔹 QMAP — Questionable Merchant Audit Program revised: lower thresholds, shorter investigation window, greater risk for enrollment
🔹 SMMP — Scam Merchant Monitoring Program entered enforcement phase July 24, 2026

Who may be affected:
High-risk merchants, PayFac operators, acquiring banks, processors, and risk/compliance teams.

What to watch: GMAP takes effect April 1, 2027 — acquirers and processors should map reporting workflows ahead of that date. Merchants already under SMMP now face an additional audit layer.

🔗 Source: https://www.altopay.com/mastercard-monitoring-programs-2026/

Industry information only. Not legal, financial, or compliance advice.

@processormatchai

⚠️ RISK ALERT: Danish FSA Orders Inpay to Freeze New iGaming Customers

Finanstilsynet has ordered Inpay A/S to halt new relationships with online gaming companies after a March inspection found serious AML control failures.

📌 What happened: Regulator found gaps in how Inpay assessed and documented iGaming customer relationships, especially those with higher money-laundering exposure.

📌 What's required: Inpay must demonstrate corrective action before expanding its gaming customer base.

📌 Who should care: Processors, PayFac operators, and acquiring banks with iGaming exposure should review onboarding documentation and ongoing monitoring procedures.

Status: Confirmed enforcement. Inspection occurred in March 2026; order announced Aug 20, 2026.

🔗 Source: https://www.casinonewsdaily.com/blog/2026/08/20/inpay-faces-denmark-igaming-business-restriction/

Industry information only. Not legal, financial, or compliance advice.

@processormatchai

⚠️ RISK ALERT: Visa Tightens VIRP MCC Enforcement for Adult, Escort & Dating Merchants

Visa has reportedly updated its Visa Integrity Risk Program (VIRP) guidance, tightening MCC enforcement for adult, escort, and dating merchants.

📌 What's changing:
• Stricter MCC classification scrutiny
• Higher fees, tighter compliance expectations
• MCC accuracy now key to Tier 1 monitoring

📌 Who's affected:
• Adult, escort & dating merchants under VIRP
• PayFacs/ISOs serving these verticals
• Acquirers with adult/escort portfolios

📌 What to watch: Miscoded merchants risk escalation and added fees. Verify MCC assignment aligns with current VIRP guidance.

Status: Reported by LegitScript; not yet confirmed via an official Visa bulletin reviewed by this channel.

🔗 https://www.legitscript.com/regulatory-and-card-brand-compliance/adult-escort-and-dating-merchants-are-your-practices-in-line-with-virp-updates/

Industry information only. Not legal, financial, or compliance advice.

@processormatchai

⚠️ RISK ALERT: UK PSR Issues Specific Direction 22

The UK Payment Systems Regulator published Specific Direction 22, requiring Mastercard and Visa to give acquirers clearer scheme and processing fee information — and to report compliance progress to the PSR.

✍️ Affected: UK acquirers, sponsor banks, PayFacs, processors, ISOs, and the card networks themselves.

🔍 What changes: Networks must improve fee disclosure to acquirers over time. The reporting obligation sits with Mastercard and Visa, not acquirers; merchant pricing is not directly altered.

🗓 Status: Direction confirmed, in force since 30 July 2026. Substantive requirements take effect 30 July 2027.

🔗 https://www.psr.org.uk/media/sllkoc5r/specific-direction-22-itc-july-2026.pdf

Industry information only. Not legal, financial, or compliance advice.

@processormatchai

RISK ALERT | Mastercard Confirms GMAP Timeline

Mastercard confirmed its technology platform will include required GMAP data elements by October 2026, giving acquirers time to build monitoring strategies.

🗓 GMAP standards effective: April 1, 2027

🗓 First billing: May 2027 (for April violations)

🗓 Threshold revisions: Jan 1, 2029 / 2030 / 2031

Acquirers and PayFac operators sponsoring high-risk merchants should prepare systems for GMAP data capture before the October 2026 platform update.

🔗 Source: https://www.altopay.com/gmap/

Industry information only. Not legal, financial, or compliance advice.

@processormatchai

💸UK FCA BNPL Rules Now Effective — Acquirer Compliance Burden Shifts

FCA rules governing Buy Now Pay Later took effect July 15, 2026, bringing Deferred Payment Credit agreements into the mainstream UK consumer credit regime with mandatory affordability checks.

Industry analysts note the deeper challenge sits in acquiring rails:

🔹 Regulated and unregulated BNPL travel on the same processing infrastructure
🔹 Acquirers must now distinguish between them at the transaction level
🔹 New Section 75 refund exposure, dispute/reporting obligations, and consumer duty requirements apply

Processors lacking granular transaction data may face compliance gaps. Merchants offering BNPL should verify their acquirer can properly attribute and report under the new framework.

🔗 Source: https://thefintechtimes.com/bnpl-regulation-shifts-compliance-burden-onto-payment-processors/

Industry information only. Not legal, financial, or compliance advice.

@processormatchai