Peptide underwriting: what acquirers actually check
- Peptide underwriting reads your product pages and marketing, not just your application form, and consumption language on a research label fails you faster than anything else.
- Your first 90 days of chargeback history set your reserve and rate for the next year, so a clean launch matters more than a low quoted rate.
- Single-brand operators get underwritten at a specialist ISO; only 3+ brand portfolios fit a parent-account structure.
On this page
An acquirer's risk analyst has your application open in one tab and your storefront open in another. They are reading your "research use only" disclaimer, then scrolling to a product page where the copy says "take 250mcg before bed." That contradiction is the single most common reason a peptide file gets declined, and it happens in the first ten minutes of review. The application form is the easy part. The underwriting is what happens when a human reads your actual business the way a customer would, then prices the risk of standing behind your transactions.
This is what that review actually checks, in the order it usually happens, from the desk that writes the decline letters.
Underwriting is risk pricing, not a yes/no gate
Operators treat underwriting like a bouncer at a door — you either get in or you don't. That framing costs you money. Underwriting is the acquirer deciding how much it will cost them if you go bad, then pricing that into your rate, your rolling reserve, and the chargeback threshold they'll tolerate before they pause you.
Two operators with identical SKUs can get wildly different terms. One submits a clean file — matching disclaimers, visible refund policy, 4 months of statements under 0.6% chargebacks — and gets 3.8% with a 10% reserve. The other submits the same products with consumption-framed marketing and no processing history and gets 4.6% with a 15% reserve held 180 days. Same products. The difference is the file, not the peptide.
So your job in underwriting is not to hide risk. It's to make the analyst's risk estimate as low and as confident as the truth allows. Surprises raise the estimate. A clean, complete, internally consistent file lowers it.
What they read first: your website
Before anyone looks at your bank statements, the analyst opens your store. For peptide operators this is where most declines are won or lost. They are checking specific things:
- Label-to-marketing consistency. If your label says research use and your product copy, blog, or email funnel implies human dosing, that contradiction reads as misrepresentation risk. Pick one framing and hold it across every page.
- Disclaimer presence and placement. An "FDA has not evaluated" statement where health claims appear, plus research-use language where applicable. Missing disclaimers on a peptide store get noticed immediately.
- Age gate and consent. A visible age confirmation and terms-of-sale acceptance at checkout.
- Refund and shipping policy. Findable in two clicks. A buried or absent refund policy predicts disputes, and the analyst knows it.
- COA availability. Certificate-of-analysis access per SKU signals a legitimate operation. Vague sourcing reads as the opposite.
None of this is about your chemistry. It's about whether your public-facing business matches what you wrote on the application. The website compliance checklist walks the full page-by-page version.
Why Stripe and Square never run this review
It is worth understanding what you are walking into, because it is the opposite of what most operators expect from payments. Stripe and Square approve generic ecommerce in minutes with almost no human review, which is why operators assume approval is a formality. For peptides it isn't — and those two never run the review at all, because they decline peptides outright under their acceptable use policies. So do PayPal, Braintree, and Shopify Payments. Sneaking a peptide store through Stripe's instant approval is not passing underwriting; it is deferring it to a closure 3-6 months later, often with a MATCH report attached. The slower, document-heavy review at a peptide-friendly acquirer is the one that actually keeps your account open. If you are weighing the two paths, the multiflow vs Stripe comparison lays out why instant approval is the wrong thing to optimize for here.
Your SKU list against regulatory status
The analyst maps your product list against what raises flags. Not every peptide is treated the same. Growth-hormone variants, SARM-adjacent compounds marketed with consumption framing, and anything with DEA-scheduled precursor overlap draw extra scrutiny. A clean injectable-research line is a very different file from a SARM-and-peptide combo store with dosing guides.
If you run SARMs alongside peptides, expect them underwritten as a separate risk band — see the SARMs operator notes. The cleaner you can describe your catalog, and the more it matches your labeling, the lower the risk estimate.
Processing history and chargeback ratio
If you have history, this is the heart of the file. The analyst pulls your chargeback ratio and reads its shape, not just its number.
Card-network ceilings frame the conversation. Visa's VAMP excessive threshold sits at 0.9%, Mastercard's ECM at 1.0%, with severe tiers around 1.8-2.0%. Specialist acquirers pause peptide merchants well below those network ceilings — many reserve or pause at 0.5-0.8%. What matters as much as the ratio is the reason-code mix.
| Signal | Reads well | Reads as risk |
|---|---|---|
| Chargeback ratio | Under 0.6%, flat or falling | Over 0.9%, or spiking |
| Dominant reason code | Fraud / unauthorized | Product not as described / quality |
| Refund rate | Visible, proactive | Near zero with high disputes |
| Volume trend | Steady or smooth growth | Sudden 5x spike from one funnel |
| Processing tenure | 3+ months of statements | Brand-new, no history |
Product-quality and "not as described" disputes hurt you more than fraud disputes. Fraud is the customer's problem; quality is yours. A book full of quality reason codes tells the analyst your customers are unhappy, and unhappy customers keep filing. Tighten the offer before you apply, not after.
Ownership, banking, and the principal check
Underwriting runs the people, not only the company. The analyst checks the principal's history across acquirers, which is where the MATCH list matters. MATCH is operated by Mastercard, retains entries for five years, and carries fourteen reason codes. If a prior closure put you on it, the next acquirer sees it at intake. Lying about a prior closure is worse than the closure itself.
They also verify the business bank account matches the legal entity, that the entity is in good standing, and that the principal's name on the application matches the one tied to any prior processing. Mismatches here read as the kind of obfuscation that precedes losses, so keep ownership and banking boringly consistent.
The documents that make or break the file
Underwriting is a documentation exercise as much as a judgment call, and incomplete files are what stretch a 5-day review into three weeks. The analyst wants to verify, not take your word. Have these ready before you apply:
- Three-plus months of processing statements. The single most valuable document. They show real chargeback ratios, real refund rates, and real volume, which beats anything you assert on the form.
- Voided check or bank letter. To confirm the settlement account matches the legal entity exactly.
- Business formation and ownership docs. Articles, EIN, and the ownership breakdown for any principal over the disclosure threshold.
- A live, finished website. Not a coming-soon page. The analyst reviews the real storefront, so disclaimers, refund policy, and product pages all need to be live at submission.
- Fulfillment proof. Tracking data or a shipping-provider relationship that shows you actually deliver, which preempts the "is this a real business" question.
A complete file submitted once moves faster than a thin file that triggers three rounds of follow-up. If you want the full mechanics of how a file moves from application to live account, our how-it-works walkthrough lays out the sequence. Treat the document pack as the application, not an afterthought to it.
How the file becomes your reserve and rate
Everything above resolves into two numbers: your effective rate and your reserve. Peptide year-one terms commonly land at 10-15% rolling, held 180 days, with effective rates of 3.5-4.5% at a specialist ISO. A weak file pushes both up; a strong one with clean history pulls both down at the 6-12 month review.
The lever you control is the file, and the highest-leverage 90 days are your first. A clean launch — modest volume, tight disputes, consistent labeling — locks in a better reserve for the next year. An aggressive affiliate launch that clusters chargebacks in week three does the opposite, and you carry that reserve for twelve months. If you want the reserve math itself, the reserve calculation guide breaks it down.
Where underwriting differs for multi-brand portfolios
Single-brand operators get underwritten once, at a specialist ISO. That's the right path and you should take it. Multi-brand peptide operators face a structural question instead: underwrite each brand as its own merchant account, or underwrite one parent account with brand-level descriptors.
The separate-account path means a fresh underwriting cycle and a fresh reserve every time you add a brand. The parent-account path concentrates the underwriting into one relationship with consolidated history. multiflow sits on top of the acquirer as the orchestration layer for that model — we don't process the payment, we coordinate brand descriptors and the ledger above Stripe, Authorize.net, or NMI. We don't onboard single-brand peptide operators; that's a specialist-ISO job. The tradeoffs are in the peptide operator playbook.
How to walk into underwriting clean
Reconcile your labels and your marketing to one framing. Make your refund and disclaimer pages findable. Export three or more months of statements before you apply. Know your chargeback ratio and your dominant reason code, and have an answer for any prior closure. Then apply to the right tier — specialist ISO for one brand, parent-account evaluation for three or more.
If you're running multiple peptide brands and want a read on whether a parent-account structure changes your underwriting math, start the application for an honest fit check. Twelve questions, no hard pull, a straight answer inside 48 hours — including "stay with your specialist ISO" when that's the right call.