Acceptable
Use Policy

1. What we're happy to work with

multiflow is built for operators in verticals most processors will not touch. If you are running clean — legal product, honest offer, KYC-verified customers, chargeback discipline — we can usually get you approved. Vertical examples: peptides, nutraceuticals + supplements, nootropics, SARMs, CBD + hemp, kratom, TRT/HRT telemed, credit repair, coaching + courses, subscription boxes, vape, firearms accessories, adult creator platforms, debt consolidation, telemed compounding.

Each vertical has its own underwriting tolerance and approved product list. During onboarding we'll tell you exactly what your acquirer will and won't approve.

2. What we will not process — no exceptions

The following are prohibited. This list is not exhaustive, and card network rules and acquirer policies may further restrict it.

Illegal activity

• Any transaction that violates US federal law, the law of the transacting state, or the cardholder's jurisdiction.
• Cannabis (THC) products, recreational or medical, even in states where legal — federal banking restrictions.
• Unlicensed pharmacy, unlicensed compounding, unlicensed telehealth prescribing.
• Controlled substances outside of DEA-compliant pathways.

Fraud + deception

• Products or offers that materially misrepresent what the customer is buying.
• Undisclosed negative-option billing, hidden trial-to-subscription traps, or any descriptor that obscures the merchant.
• Fake scarcity, fake celebrity endorsements, fake before/after photos.
• Synthetic-identity fraud, transaction laundering, factoring, or any form of merchant concealment.

Financial crime

• Money transmission without appropriate MSB / state licensure.
• Gift-card resale platforms, prepaid-card cash-out, or cryptocurrency exchange / on-ramp without full MTL compliance.
• Ponzi schemes, pyramid schemes, "get rich quick" investment programs, unregistered securities offerings.

Prohibited products

• Firearms (complete weapons — accessories OK with approval), explosives, illegal weapons.
• Counterfeit goods, trademark-infringing merchandise.
• Spy / surveillance equipment marketed for unauthorized use.
• Age-restricted content sold without robust age verification (adult creators require KYC + documented age checks).

Reputation + brand safety

• Hate speech, content inciting violence or targeting protected classes.
• Live-animal sales, fighting or exploitation content.
• Escort services, in-person sex work, anything that crosses into Section 230 / SESTA-FOSTA territory.

3. Operational standards

Even for approved verticals, you must maintain operational hygiene. Violations can trigger reserves, suspensions, or termination.

• Chargeback ratio: stay below Visa VAMP (0.9%) and Mastercard ECM (1.5%). We monitor weekly and flag climbing ratios before the acquirer does. See our chargeback ratio entry.
• Refund policy: clear, prominently displayed, honored within the posted window.
• Billing descriptors: recognizable to the customer. No obfuscation. See our billing descriptor entry.
• Customer support: responsive to refund and dispute requests. Many chargebacks are preventable with a 24-hour response SLA.
• Accurate MCC: your Merchant Category Code must reflect what you actually sell. Misclassification is grounds for termination and can trigger acquirer action.
• Ad compliance: claims in marketing must match claims to the acquirer. "Miracle cure" language in ads but "general wellness" language to underwriting is not acceptable.

4. Security standards

• PCI-DSS applicable requirements per your level.
• Store no full PANs; use tokenization.
• Keep operator portal credentials secret; enable available authentication factors.
• Report suspected compromise to security@multi-flow.pro within 24 hours of discovery.

5. Data + customer treatment

You must comply with applicable consumer protection and privacy laws in every jurisdiction you sell to. You must have a privacy policy. You must honor opt-outs. You must not share customer card data with third parties outside of the payment flow.

6. How enforcement works

If we see evidence of an AUP violation, we will typically: (1) contact you with specifics and request a cure, (2) if the risk is immediate or cure is not possible, suspend new processing while we investigate, (3) if confirmed, terminate the MSA and surrender the merchant account to the acquirer for closure. Terminations for fraud, financial crime, or illegal activity are immediate and non-negotiable.

Reserve holds, chargeback write-downs, and network fines are imposed by your acquirer, not by multiflow — we facilitate, surface, and explain them, but the bank is the counterparty.

7. Changes to this policy

We update this AUP when card networks, acquirers, or regulators change their rules. Material changes are emailed with 30 days' notice. Continued use of the Service after the effective date constitutes acceptance.

8. Questions + edge cases

Unsure if your product, offer, or vertical fits? Email underwriting@multi-flow.pro with a description and representative URLs. We'd rather tell you "no, here's why" in writing before onboarding than have it surface as an acquirer rejection after you've committed to a build.