The short answer
MATCH is Mastercard's list of businesses whose merchant accounts were closed by a bank for specific reasons, such as excessive chargebacks, fraud or a data breach. Visa keeps its own terminated merchant file. A listing lasts five years, then drops off automatically. It comes off early only if it was added in error, or, for a PCI listing (code 12), once you're compliant. You can ask the bank that listed you for its reason code, and you don't need a lawyer. Being listed makes approval harder, but banks are allowed to approve listed merchants.
What the MATCH List and Terminated Merchant File Are
MATCH stands for Member Alert to Control High-Risk Merchants. Mastercard runs it through a system called MATCH Pro. When an acquiring bank (the bank that holds your merchant account and pays out your card sales) closes a business for one of Mastercard's listed reasons, it must add that business to MATCH. The record includes the business name, address, owners and the reason code.
Visa keeps its own terminated merchant file, often called the TMF list. It works the same way: a bank that ends a merchant for listed causes must report it.
Banks check new applicants against these lists as part of underwriting. So a listing follows the business and its owners from one processor to the next. That's why a MATCH list merchant account application needs a different approach from a clean one, which we cover below.
If you're applying for a high risk merchant account, a MATCH listing is one of the factors that puts you in that category. Our guide to what makes a business high risk explains the others.
Mastercard MATCH List Reason Codes (2026)
Every MATCH listing carries a reason code. The code matters more than anything else when a new bank reviews your file. These are the codes in Mastercard's current rules.
| Code | Reason | What it means |
|---|---|---|
| 01 | Account data compromise | Card data was exposed through the business, such as a breach. |
| 03 | Transaction laundering | Running sales for another business, or for products the bank didn't approve, through your account. |
| 04 | Excessive chargebacks | Mastercard chargebacks above 1.5% of that month's Mastercard sales transactions, measured over the previous three months, and totaling at least USD 5,000. |
| 05 | Excessive fraud | A fraud-to-sales ratio of 8% or more, and at least 10 fraudulent transactions totaling USD 5,000 or more, over three months. |
| 06 | Coercion | Card transactions made under duress. |
| 08 | Questionable Merchant Audit Program | Identified by Mastercard under its program for merchants tied to fraudulent practices. |
| 09 | Liquidation or insolvency | The business is being liquidated or is insolvent, including bankruptcy. |
| 10 | Violation of standards | Breaking Mastercard's rules, including giving inaccurate business name or category code (MCC) data. |
| 12 | PCI DSS noncompliance | Not meeting the card industry's data security standard. |
| 13 | Illegal transactions | Processing transactions that are illegal. |
| 14 | Identity theft | The account was opened with a stolen or false identity. |
Last checked: September 27, 2026 (Mastercard Security Rules and Procedures, Merchant Edition, 4 August 2026 edition, Table 11.4). Mastercard updates this manual about twice a year.
Reading older articles? Codes 02, 07 and 11 are no longer listed in the current manual. Any guide that quotes them, or says the chargeback trigger is 1%, is out of date. For how card networks count chargebacks today, see our guide to chargeback ratio limits.
How and When a Business Gets Listed
The bank that closes your account decides whether to list you. The deadlines differ by network:
- Mastercard MATCH: within five calendar days of the bank's decision to terminate. The same deadline applies when the merchant ends the agreement itself, or when the bank learns of a problem that fits a reason code.
- Visa terminated merchant file: no later than close of business on the day after the bank gives notice that it intends to terminate. Only the bank that added the listing can ask Visa to delete it.
Closing your own account doesn't avoid a listing. If the reason fits a code, the bank can still add you.
Does a platform shutdown put you on MATCH?
Not automatically. A payment app closing you because it doesn't allow your product is different from a closure for fraud or chargebacks, and it doesn't fit most reason codes. But the listing decision belongs to the bank behind the platform, so don't assume either way. Ask in writing. Our guide for businesses shut down by Stripe, Square or PayPal covers the rest of that situation, including held funds.
How to Find Out If You're on the MATCH List
There's no public search. MATCH and the TMF list are only open to card-network member banks and their processors. Two routes work:
- Ask the bank or processor that closed you. Under Mastercard's rules, the bank that listed you must give you its listing ICA (the Mastercard ID number of the listing bank) and the reason code. It must answer your questions about the listing within 7 days.
- Watch for it in a new application. If a new processor declines you or asks about MATCH, ask which listing it found. Then go back to the listing bank with that information.
What to include when you ask: your current and any previous business names, business address, the principal owner's name and your website URL. Put the request in writing and keep a copy.
How to Get Off the MATCH List
The honest answer: most listings stay for the full term. A MATCH record lasts five years, and then it's purged automatically. You don't have to do anything for that to happen.
Mastercard allows early removal in only two cases:
| Situation | Who asks | What you need |
|---|---|---|
| Added in error | Ask the listing bank to request removal | Proof the listing is wrong: the wrong business, the wrong owner, or a reason code the facts don't support |
| Code 12 (PCI DSS noncompliance) | The bank, or you can submit it yourself | Proof you're now PCI compliant, such as a current PCI attestation of compliance |
If your listing is code 12, fixing compliance is the fastest way back. Our PCI compliance guide explains the steps.
For every other code, a listing that was accurate stays until the five years run out. What you can change is how the next bank reads your file (see the next sections).
Your Rights If You're Listed
Mastercard's current rules give listed merchants these protections:
- A 30-day answer. The bank must respond to a removal request within 30 calendar days.
- The facts of your listing. The bank must tell you who listed you and why, and answer questions within 7 days.
- No lawyer required. You can make a removal request yourself.
- No MATCH threats to collect money. The bank may not use MATCH as a collection tool. It can't threaten a listing, or hold one over you, to get you to pay a disputed balance.
A note on removal services. Some firms charge large fees to "get you off MATCH". They work under the same rules you do. If your listing wasn't made in error and isn't a PCI listing, no one can remove it early. A service may help you write a clear request, but you can send that request for free.
Getting a Merchant Account While on the MATCH List
A MATCH listing isn't an automatic ban. Mastercard's rules state that an acquirer may onboard a merchant listed in MATCH Pro. Whether a bank will is its own risk decision. These are the things that make a file approvable:
- The reason code. A PCI (12) or chargeback (04) listing with a clear fix is a very different file from fraud (05), laundering (03) or identity theft (14).
- Time since the listing. A listing from four years ago with clean processing since reads better than one from last month.
- What changed. New fraud tools, a clearer refund policy, better descriptors, a different fulfillment partner. Be specific.
- Documentation. Recent processing statements that show lower dispute rates, a PCI attestation, and a short written explanation of what happened.
Disclose the listing up front. The bank will find it during underwriting. A merchant who explains it first looks organized. One who hides it looks like a risk. Our high-risk approval checklist lists the rest of the documents to prepare.
Expect terms to reflect the risk. A bank that approves a listed merchant may ask for a reserve or a lower monthly limit at the start. Our guide to high-risk rates, fees and reserves explains how those work and what to negotiate.
START is a registered MSP/ISO of Elavon and has worked with Authorize.Net for more than 20 years. Whether we can place a MATCH-listed business depends on the reason code and the rest of the file.
How to Stay Off the List
Most listings come from problems a business can see coming. Match your prevention to the reason codes:
- Chargebacks (04): know your ratio every month and act well before 1.5%. Our guide to chargeback ratio limits shows how Visa and Mastercard count them.
- Fraud (05): use address and security code checks, velocity limits and order review. See our overview of fraud prevention tools, including the Authorize.Net Advanced Fraud Detection Suite.
- Data compromise (01) and PCI (12): keep card data off your servers with a hosted payment form, and file your PCI questionnaire every year. See PCI compliance requirements.
- Laundering (03) and standards (10): describe every product and sales channel accurately on your application, and tell your processor before you add new ones. Never run another business's sales through your account.
Talk to your processor early when numbers rise. A bank that sees a plan is more likely to work with you than to close the account.
This article is general payments guidance, not legal advice. Card-network rules change, usually twice a year, and your merchant agreement controls. If a listing affects a large amount of money or your ability to operate, talk to a business attorney about your specific situation.
Frequently Asked Questions
How long do you stay on the MATCH list?
Five years. Mastercard purges the listing automatically after that. It comes off earlier only if it was added in error, or for a PCI listing (code 12) once you're compliant.
Is there a public MATCH list search?
No. Only member banks and their processors can search MATCH or Visa's terminated merchant file. Ask the bank that closed your account. Under Mastercard's rules, it must give you its ID and the reason code.
Do I need a lawyer to get off the MATCH list?
No. Mastercard's rules say a lawyer isn't required to ask for removal. The bank must answer within 30 calendar days. A lawyer may still help if the listing is part of a larger dispute.
Can I get a merchant account if I'm on the MATCH list?
Sometimes. Mastercard allows banks to approve listed merchants, but each bank decides. Your chances depend on the reason code, how long ago it happened and what you've changed. Disclose the listing up front.
What's the difference between MATCH and the TMF list?
MATCH is Mastercard's list. The terminated merchant file (TMF) is Visa's. Both record merchants that banks closed for serious reasons, and banks check both. Mastercard's listing deadline is five calendar days; Visa's is close of business the day after notice.
Listed and need to process?
Tell us the reason code and what's changed since. We'll tell you honestly whether we can help. START has been in payments for 20+ years and has set up more than 60,000 Authorize.Net accounts.
New to this topic? Start with our High Risk Merchant Accounts overview.