You run a business that touches crypto, and your card processor either declined you outright or approved you and then froze the account a few weeks later. Before you apply anywhere else, figure out which crypto problem you actually have. The underwriting for each one is completely different.
Two very different businesses get called "crypto merchants"
The first is a merchant that wants to accept crypto as payment. You sell furniture, software, or consulting, and some customers would rather pay in bitcoin or a stablecoin. Crypto is a payment method for you, not your product.
The second is a crypto business that needs to accept cards. You run an exchange, a fiat-to-crypto on-ramp, a wallet top-up service, or an NFT marketplace. Customers pay with Visa or Mastercard, and what they receive is crypto or something tied to it.
Processors treat these as separate universes. The first is mostly a technology and settlement question. The second is a regulated-money question, and that is where nearly every painful decline comes from.
If you only want to accept crypto as payment
Start with the good news. Under FinCEN's 2019 guidance on convertible virtual currency, a business that accepts crypto solely as payment for its own goods or services is a "user," not a money transmitter. Taking bitcoin at checkout generally doesn't require you to register as a money services business.
That status can change if you start moving crypto for other people. Receiving coins and then transmitting them onward to third parties as a service is the kind of activity that turns a user into a money transmitter under the same guidance.
For most merchants in this camp, the real decisions are practical: which crypto payment provider you use, whether you convert to dollars instantly, and how you handle refunds and taxes. Your card processing looks like any other business in your industry, unless what you sell is high-risk on its own.
If crypto is your product, you're underwriting a money business
When a customer uses a card to buy crypto, the acquiring bank is funding the purchase of a liquid, transferable asset that can leave your platform in minutes. That single fact explains almost every decline you've received.
Card networks treat the category as elevated risk. Visa's Integrity Risk Program places cryptocurrency merchants in its Tier 2 group, which brings extra registration and control obligations for any acquirer that boards them. Many acquirers decide the overhead isn't worth it and stop the conversation at the industry question.
Then there's fraud. A stolen card used to buy crypto produces an asset a fraudster can move instantly and irreversibly. When the real cardholder disputes the charge weeks later, the merchant absorbs the chargeback and the coins are long gone.
Processors don't decline crypto businesses because they dislike crypto. They decline because a card purchase of crypto is the fastest way for a stolen card to become untraceable money.
Why mainstream processors say no, or say yes and then no
Aggregators like Stripe, Square, and PayPal onboard in minutes because they underwrite lightly up front and monitor heavily afterward. Their terms restrict many virtual currency activities, and their risk models watch for exactly the patterns crypto platforms produce: large first purchases, brand-new customers, and volume spikes that follow market moves.
That's why so many founders tell the same story. Approved on Monday, payouts paused on Thursday, account closed with funds held for months the week after. Our breakdown of why Stripe turns away high-risk businesses walks through that mechanism step by step.
The fix isn't a friendlier aggregator. It's a dedicated merchant account where the bank reviews your licensing, controls, and volume before it says yes, through a provider offering card processing built for crypto platforms.
MSB registration and state licensing come first
If you exchange crypto for dollars, or dollars for crypto, as a business, FinCEN considers you a money transmitter. That means registering as a money services business within 180 days of establishing the business and renewing the registration every two years.
Federal registration is the floor, not the ceiling. Most states run their own money transmitter licensing, and a few add crypto-specific rules on top. An underwriter will want to see which states you serve and what license or exemption covers each one.
Arriving without your MSB registration number, a state licensing map, and a named compliance officer is the quickest route to a decline. Arriving with them changes the tone of the whole review.
What KYC and AML expectations look like in practice
As a registered MSB, you're subject to the Bank Secrecy Act. That means a written anti-money-laundering program, a designated compliance officer, staff training, independent testing, and suspicious activity reporting. Expect your acquiring bank to ask for each piece.
Underwriters typically look for:
- Identity verification before a customer's first purchase, not after a withdrawal request.
- Sanctions screening of customers and, where possible, destination wallet addresses.
- Blockchain analytics or transaction monitoring that flags mixers, darknet exposure, and odd flows.
- Velocity limits for new accounts, such as lower card-funded limits during the first days or weeks.
- Withdrawal holds on card-funded crypto, so a stolen card can't be cashed out on-chain within minutes.
That last control matters more than most founders expect. A short delay between a card purchase and an on-chain withdrawal tells an acquirer you understand where the fraud comes from. Pair it with transaction-level fraud screening, and your file starts to look like something a bank can approve.
The 2025 to 2026 regulatory shifts that changed the conversation
The US posture toward crypto shifted meaningfully over the past eighteen months, and some of it works in your favor.
Bank regulators pulled back their warnings
In March 2025, the OCC's Interpretive Letter 1183 confirmed that national banks can engage in crypto custody, stablecoin, and node activities without first getting supervisory non-objection. The FDIC and the Federal Reserve also withdrew earlier guidance that had steered banks away from crypto. Banks have more room to serve the sector than they did a few years ago.
The GENIUS Act created a federal stablecoin framework
Signed on July 18, 2025, the GENIUS Act set rules for payment stablecoins. Only permitted issuers may issue them, reserves must back them one-to-one with cash, deposits, short-term Treasuries, and similar assets, issuers can't pay holders interest or yield, and issuers are treated as financial institutions under the Bank Secrecy Act.
The law takes effect on the earlier of 18 months after enactment or 120 days after final regulations. Regulators spent 2026 proposing those rules, including OCC proposals and a joint FinCEN and OFAC proposal on AML and sanctions programs for issuers. Digital asset service providers have three years from enactment to stop offering non-permitted stablecoins to US persons.
Tax reporting arrived
Brokers now report digital asset sales on Form 1099-DA, starting with transactions on or after January 1, 2025, with cost basis reporting phasing in for assets acquired from 2026. If your platform counts as a broker, this is part of your operational load, and underwriters may ask how you're handling it.
None of this makes card processing for crypto easy. It does make a well-documented, compliant crypto business a more legible risk to a bank in 2026 than it was in 2023. This is general information, not legal advice.
What a strong crypto merchant application includes
- FinCEN MSB registration and your state licensing map, or counsel's written analysis of any exemption.
- Your AML program, your compliance officer's name, and your most recent independent review.
- Your KYC vendor, your blockchain analytics provider, and a plain description of customer onboarding.
- Written card-funded limits, withdrawal holds, and refund rules.
- Prior processing statements with chargeback and fraud ratios, if you've processed before.
- Terms of service and a website that state clearly what customers receive and when.
If you've been shut down before, say so. Underwriters find out anyway, and an honest account of what happened and what you changed beats a surprise during a MATCH list check.
Keeping the account once you have it
Approval is the beginning. Crypto accounts get reviewed often, and the triggers are predictable: sudden volume jumps during rallies, climbing dispute ratios, and new products your bank never approved.
Give your processor a heads-up when you expect volume to change, such as a new asset listing, a marketing push, or a partnership launch. A spike your bank expected reads as growth. A spike it didn't expect reads as a risk event, and risk events get reviewed with funds on hold.
Clear any new product line with your processor before it goes live. Keep a dispute response process staffed, and consider chargeback protection so disputes don't quietly push you past network thresholds. Adding a bank-transfer funding option also reduces how much of your volume rides on cards alone.
Start with the right underwriting conversation
Whether you're adding crypto checkout to an existing store or running a platform that sells crypto for cards, the path looks the same. Know which problem you have, document your controls, and apply with a team that reads the file before it answers. Our crypto merchant underwriting team can tell you where you stand and what to prepare.
When your documents are ready, start your application with Karma Card Payments.