How to Recognise and Avoid Merchant Account Scams

Merchant account scams are fraudulent schemes where fake providers or criminals hijack payment processing channels to steal corporate funds or cardholder data. While many business owners only worry about fake customers, merchant services fraud regularly targets legitimate companies instead. You can safeguard your revenue by learning the warning signs of processor fraud.

Merchant Services Provider Scams

Not all merchant account providers advertising online are legitimate businesses or operate in a transparent way. Protect your business by learning how to choose a trustworthy merchant account provider.

Merchant accounts and payment gateways are both necessary for processing credit card payments. Scammers regularly exploit the confusion around how these two tools work. Ensure you understand the difference between merchant accounts and payment gateways to help you spot provider scams.

Fake Merchant Account Providers

Fake merchant account providers use realistic copycat websites to steal upfront deposit fees or harvest your business banking credentials. Scammers build these cloned platforms to target businesses globally.

Falling for these traps leads directly to severe merchant account fraud. Once criminals steal your corporate financial data, they use your business identity to run completely illegal transactions.

How to Protect Yourself

Spot fake providers by checking their security credentials, business registrations, and fee structures. Protect your business by using these verification steps:

• Watch out for “too-good-to-be-true offers” like extremely low or “free” merchant accounts.
• Verify site security by checking for authentic security trust badges on their homepage.
• Look for a secure URL with a valid SSL certificate.
• Avoid sites hosted on free subdomains like WordPress or Wix.
• Verify their registration with their local chamber of commerce.
• Confirm they possess third-party validation to verify PCI compliance.
• Check for an established, large online footprint with a clear business history.
• Read independent customer ratings and reviews across neutral platforms like Google and Yelp.

A legitimate merchant services provider always conducts a thorough underwriting process to weed out applicants who are trying to commit merchant fraud.

Sales Call & Phishing Scams

Merchant services scam calls are deceptive phone solicitations where fraudsters pose as bank representatives or major processors to steal your corporate banking data. Scammers use aggressive high-pressure tactics or fake security alerts to trick you into revealing sensitive account credentials. These phishing attacks aim to hijack your existing payment channels or deploy a fake merchant account under your business name.

How to Protect Yourself

Protect your accounts with these simple rules:

• Hang up immediately on cold callers demanding immediate action or threatening to shut down your terminal.
• Never share your merchant identification number (MID), password, or banking data over the phone.
• Verify the caller by hanging up and dialling the official customer service number listed directly on your monthly statement.
• Ignore urgent emails directing you to log into your processing account via a provided link.
• Train your team to recognise social engineering tricks designed to bypass standard security steps.

Hidden Fees & Pricing Scams

Hidden fees and pricing scams occur when unethical processors deliberately conceal junk charges inside complex merchant contracts to silently drain business revenue. These tactics make dishonest providers a lot of money without you even realising what’s happening.

Lack of Transparency About Pricing

Unfair pricing scams happen when a merchant account provider hides their true cost structures and locks you into expensive tiered rates. These confusing models make it impossible to calculate your true cost per transaction.

How to Protect Yourself

Protect your business by taking control of the pricing discussion early with these steps:

• Request a complete list of all of their fees, charges, and rates when you initially talk with a merchant provider.
• Negotiate your pricing model and transaction rates before signing any final service agreement.
• Learn what to look for in a provider to easily identify unfair tiered structures.

Long Contracts That Are Nearly Impossible to Cancel

Predatory long-term agreements contain dangerous contract terms, including automatic renewal clauses and high termination penalties designed to trap business owners. Unethical merchant services providers use high-pressure sales tactics and push limited-time deals to lock businesses into multi-year commitments. These contracts contain steep early termination fees that make cancellation nearly impossible without paying thousands of dollars.

How to Protect Yourself

Protect your business flexibility with these steps:

• Refuse high-pressure, limited-time deals that demand immediate signature or verbal commitment.
• Read the merchant agreement carefully and clarify any concerning terms.
• Ask account representatives to provide a sample monthly statement and a written fee list.
• Demand the explicit removal of liquidated damages clauses or automatic renewal terms before finalising the deal.

Changing the Terms of the Contract

Contract alteration scams occur when a provider changes your negotiated processing rates right when it comes time to sign the final document. Once you’ve signed the contract, you’re locked in for the length of the contract or faced with hefty cancellation fees.

How to Protect Yourself

Before signing anything:

• Review all of the terms of the contract carefully.
• Have a commercial lawyer look over the contract to catch hidden cancellation penalties or altered rates.
• Cross-reference your original written quote with the final processing agreement to verify every fee matches perfectly.

Adding or Raising Fees Without Your Knowledge

Rate inflation scams happen when a provider raises your fixed fees or percentage rates months after signing without notifying your business. This often goes on for months before you even suspect that anything is wrong. By that time, you’ve potentially lost thousands of dollars.

How to Protect Yourself

Protect your revenue with these steps:

• Review your monthly merchant statement carefully every single month to discover unexpected changes.
• Compare your current effective rate against your original contract terms to spot slow fee inflation.
• Contact your provider immediately to challenge any unfamiliar charges or unannounced rate adjustments.

Backdoor Scams

Backdoor scams occur when a company insider or a hacker alters your payment gateway source code to steal customer credit card details. The fraudster then gains full access to your sensitive data. They use these stolen card numbers and addresses to make unauthorised purchases across the internet.

According to an official update on Operation Chargeback from Europol, a major sting arrested six corrupt payment processing executives and compliance officers who used their insider access to run over €300 million in fraudulent transactions.

How to Protect Yourself

The best ways to prevent a backdoor scam are to:

• Make sure your provider is PCI compliant and offers 24-hour chargeback protection as part of their merchant services package.
• Check third-party reviews of the provider before signing up.
• Maintain strict data security standards on your own digital systems to keep your checkout secure.
• Run a separate antivirus program on your site to detect bugs, viruses, and source code changes on your website.

Other Common Merchant Account Scams

Unethical processors use a variety of niche merchant services scams to trap business owners and freeze their revenue streams.

• Account Coding Fraud: Sales reps misclassify high-risk businesses under incorrect, low-risk industry codes to force fast approvals. The acquiring bank will eventually catch the lie, freeze your funds, and shut down your account.
• Hidden Rolling Reserves: Shady providers hide rolling reserve terms during negotiations. They then suddenly withhold a massive percentage of your daily credit card sales once you start processing transactions.
• Equipment Leasing Traps: Fraudsters bundle your processing account with an expensive, non-cancelable hardware lease through a third-party company. Even if you legally close your merchant account, you remain locked into paying for the equipment for years.
• Fake PCI Compliance Penalties: Scammers send official-looking phishing emails claiming your account is non-compliant. They demand immediate payment of an artificial “fine” or fee to avoid immediate account suspension.

Merchant Fraud

Most merchant account scams come from providers, but fraudulent merchants and shady business partners will cheat you out of money, too.

Identity Theft and Identity Swap

Merchant identity theft occurs when fraudsters steal your business data to open a shadow processing account in your company name. In an identity swap, banned businesses buy or “borrow” your processing credentials to run illegal transactions. Both tactics leave you completely liable for massive chargeback fees, unpaid taxes, and criminal penalties.

How to Protect Yourself

Protect your entity with these security steps:

• Secure your corporate Tax ID, Employer Identification Number (EIN), and business banking records behind strict access controls.
• Monitor your business credit reports regularly with major bureaus to spot unauthorised merchant account inquiries.
• Review your processing statements every month to ensure no unknown terminals or DBA (Doing Business As) names are tied to your profile.
• Never share your processing credentials, API keys, or gateway logins with third parties.
• Report any unexpected merchant account approvals or verification letters to the acquiring bank immediately.

Scams That Bypass Anti-Money Laundering Laws

Anti-money laundering bypass scams happen when a third party uses your payment gateway to launder money or process forbidden sales. They typically use your setup for illegal, high-risk, or forbidden activities. This leaves you liable for the fraud and risks an immediate account shutdown.

How to Protect Yourself

Protect your business with these steps:

• Do strict due diligence before giving any third party access to your website or gateway.
• Review your transaction statements often to look for unusual sales spikes or unfamiliar customer names.
• Verify the identity and corporate standing of every business partner before integrating their software.

Industry-Specific Scams That Hurt Legitimate Merchants

A high number of merchant scams in a specific country or industry causes widespread damage to legitimate businesses. Even if you are not involved in fraud, these regional risks result in higher processing fees or cause you to be barred from accessing a merchant account entirely.

How to Protect Yourself

Maintain your account access with these steps:

• Abide by the terms of your merchant contract completely.
• Refrain from putting forbidden transactions through your payment gateway.
• Consider an offshore merchant account as a backup solution if your industry faces widespread local restrictions.

Due Diligence Helps to Prevent Fraud

Merchant processing fraud comes from dishonest providers or shady business partners. Stop these scams early by vetting new merchant services providers or business partners on independent review sites. Always read and understand every contract clause before you sign anything.

Once your account is active, audit your monthly statements to catch hidden issues early. Investigate any unexplained fees or sudden transaction spikes immediately with your provider. Finally, report any confirmed fraud to your industry association and local authorities.

Published: August 31, 2022
Last updated: July 16, 2026