# Merchant Category Codes (MCC): What They Are and Why They Matter

> What a merchant category code (MCC) is, how acquirers assign it, the MCCs used by SaaS and digital goods sellers, and how the wrong code raises declines and costs.
- **Author**: Deepak Jangir
- **Published**: 2026-10-21
- **Category**: Payments, Compliance
- **URL**: https://dodopayments.com/blogs/en/merchant-category-code-mcc

---

A merchant category code (MCC) is a four-digit number that classifies a business by the type of goods or services it sells, such as 5817 for digital applications or 7372 for computer programming services. The code is assigned by the merchant's acquiring bank or payment provider, travels with every card transaction, and tells the card networks and the customer's bank what kind of purchase is being made.

Most founders never see their MCC, yet it quietly shapes how their payments perform. Issuing banks feed it into fraud models and decline rules. Card networks use it to set interchange categories and decide which merchants need extra monitoring. Corporate card programs use it to block or allow spending. Pick the wrong one, or get assigned the wrong one, and you can see higher decline rates, unexpected costs, and compliance questions you did not know you were exposed to.

This guide explains how MCCs work, how they are assigned, which codes software and digital goods businesses usually fall under, and what changes when you sell through a merchant of record instead of holding your own merchant account.

## What a Merchant Category Code Actually Is

MCCs are defined in the international standard ISO 18245, "Retail financial services - Merchant category codes". The standard says the codes classify merchants "into specific categories based on the type of business, trade or services supplied". Visa and Mastercard each publish their own lists built on that standard, and Mastercard formally calls them Card Acceptor Business Codes. In practice, the two lists line up for nearly every code a software business will encounter.

The code is not about a single transaction. It describes the merchant's primary line of business, and it is set on the merchant account itself. Every authorization request the acquirer sends to the card network carries that MCC alongside the amount, currency, and card details.

The four-digit space is organized into broad ranges:

| MCC range | Category |
| --- | --- |
| 0001-1499 | Agricultural services |
| 1500-2999 | Contracted services |
| 3000-3299 | Airlines |
| 3300-3499 | Car rental |
| 3500-3999 | Lodging |
| 4000-4799 | Transportation services |
| 4800-4999 | Utility and telecommunication services |
| 5000-5599 | Retail outlet services |
| 5600-5699 | Clothing stores |
| 5700-7299 | Miscellaneous stores and services |
| 7300-7999 | Business services |
| 8000-8999 | Professional services and membership organizations |
| 9000-9999 | Government services |

Software and digital products usually sit in the 4800, 5700-5999, and 7300 ranges, which is where the codes in the next section come from.

## Common MCCs for SaaS, Software, and Digital Goods

Here are the codes most relevant to founders selling software, subscriptions, and digital products online.

| MCC | Description | Typical fit |
| --- | --- | --- |
| 5815 | Digital Goods - Media (books, movies, music) | Ebooks, streaming media, music downloads |
| 5816 | Digital Goods - Games | In-game purchases, game downloads |
| 5817 | Digital Goods - Applications (excludes games) | Apps, software downloads, many SaaS products |
| 5818 | Digital Goods - Large Digital Goods Merchant | Large platforms selling many kinds of digital goods |
| 5734 | Computer Software Stores | Software resellers and software sold as products |
| 7372 | Computer Programming, Data Processing, and Integrated Systems Design Services | B2B software services, dev shops, some SaaS |
| 4816 | Computer Network/Information Services | Hosting, online information services, data feeds |
| 5968 | Direct Marketing - Continuity/Subscription Merchants | Recurring shipments and subscription programs |
| 8299 | Schools and Educational Services (not elsewhere classified) | Online courses and training |
| 7399 | Business Services (not elsewhere classified) | Catch-all for services that fit no specific code |

The digital goods family (5815 to 5818) exists specifically for card-not-present sales of downloadable or streamed content. Visa's merchant data standards also let acquirers of digital goods merchants in these codes request additional merchant outlet locations, once they submit proof of relevant business activity in that country, such as where the servers are.

A note on 5968: it is designed for subscription and continuity programs, and it is one of the categories that networks watch closely for negative-option billing problems. A SaaS company that bills monthly is not automatically a 5968 merchant, and providers usually prefer the code that describes what is being sold over the code that describes how it is billed.

For context on how card-not-present transactions are treated differently from in-person ones, our guide to [card-not-present transactions](https://dodopayments.com/blogs/card-not-present-transactions) covers the liability and fraud rules that apply to all of these codes.

## How Your MCC Gets Assigned

You do not choose an MCC from a menu. The acquirer, or a payment facilitator acting on its behalf, assigns it during onboarding based on what you tell them and what they can verify about your business.

```mermaid
flowchart LR
    A["Merchant applies
(business description, website)"] --> B["Underwriting and
KYB review"]
    B --> C["Acquirer assigns MCC
to merchant account"]
    C --> D["Every authorization
carries the MCC"]
    D --> E["Network and issuer apply
rules by MCC"]
```

The inputs that usually decide the code:

- **Your business description and website.** Underwriters look at what is actually being sold, not just the label on the application.
- **Your product catalog and pricing model.** One-time downloads, subscriptions, and services can each point to a different code.
- **Your risk profile.** Some categories trigger extra registration or monitoring, so the acquirer has to decide whether it is willing to board you under that code at all.

This review sits inside the broader onboarding process covered in our guides to [merchant underwriting](https://dodopayments.com/blogs/merchant-underwriting-explained) and [KYB verification](https://dodopayments.com/blogs/kyb-verification). If your business changes, for example you move from selling templates to running a subscription product, the right MCC can change too, and the acquirer should be told.

## Why the MCC Matters More Than It Looks

The MCC is a small field with a long reach. Here is where it shows up after the merchant account is set up.

**Authorization and decline decisions.** Issuing banks use the MCC as a feature in their fraud scoring and as a hard filter in some rules. Certain cards, such as some prepaid, corporate, and regionally restricted cards, block specific MCCs entirely. If your code signals a category the issuer considers risky, you can see declines that have nothing to do with the customer. Our guide on [how to reduce payment declines](https://dodopayments.com/blogs/reduce-payment-declines) covers the other levers that affect approval rates.

**Interchange and network fees.** Card networks publish interchange programs, and in several markets the merchant category is one of the inputs that decides which rate applies. Two merchants with the same card mix can pay different interchange purely because of their MCC. For how those fees are built up, see our explainer on [interchange fees](https://dodopayments.com/blogs/interchange-fees-explained).

**Network monitoring and registration.** Visa and Mastercard require acquirers to register merchants in certain high-integrity-risk categories, such as 5967 (direct marketing inbound teleservices) and 7995 (betting and gambling), before they can process. These categories carry extra rules and closer scrutiny of dispute and fraud levels. Our post on [high risk merchant accounts](https://dodopayments.com/blogs/high-risk-merchant-account) covers what that classification does to rates and reserves.

**Corporate and virtual card controls.** Company spend programs routinely restrict cards to approved MCCs. If you sell B2B software and your code looks like a consumer entertainment category, employees with corporate cards may be blocked from paying you. Our guide to [B2B virtual card payments](https://dodopayments.com/blogs/b2b-virtual-card-payments) explains how those controls work on the buyer side.

**Cardholder statements and rewards.** Banks use the MCC to categorize spending in their apps and to decide which purchases earn bonus rewards. A clear MCC plus a recognizable [statement descriptor](https://dodopayments.com/blogs/statement-descriptor) reduces "I don't recognize this charge" disputes.

## What Happens When the MCC Is Wrong

An incorrect MCC is not just a labeling mistake. The card networks treat deliberately misrepresenting your category as a serious violation, because it lets high-risk activity slip past controls designed for it.

| Problem | What it looks like | Likely consequence |
| --- | --- | --- |
| Code is too broad (e.g. a catch-all like 7399) | Issuers lack context and score transactions conservatively | Higher false declines |
| Code is too risky for your business | Your SaaS is coded like a high-risk category | Unnecessary declines, corporate card blocks |
| Code hides a high-risk activity | Business sells something the code does not describe | Network fines for the acquirer, account termination, possible MATCH listing |
| Code is outdated after a pivot | Product changed but merchant account did not | Mismatch flagged in a later underwriting review |

If you hold your own merchant account and suspect the code is wrong, ask your processor which MCC is on the account and why. Most will review it if your product has changed. If you have been placed in a high-risk category by mistake, a clear product description and a short history of low disputes is usually the strongest argument for moving.

## MCCs, Disputes, and Network Monitoring

MCCs also matter after the sale. Dispute patterns differ sharply by category: digital goods see more friendly fraud and "item not received" claims, while subscription categories see more "cancelled recurring" disputes. Acquirers watch your dispute mix against what is normal for your code, and the card networks run monitoring programs that track fraud and dispute ratios per merchant.

If your business runs close to those thresholds, understanding the codes behind each dispute is the first step to fixing it. Our reference on [chargeback reason codes](https://dodopayments.com/blogs/chargeback-reason-codes) explains what each Visa, Mastercard, and Amex code means, and [dispute management for online businesses](https://dodopayments.com/blogs/dispute-management-guide) covers the response workflow.

## How MCCs Work When You Sell Through a Merchant of Record

When you sell through a [merchant of record](https://dodopayments.com/blogs/what-is-a-merchant-of-record), the merchant of record is the legal seller on every transaction. Payments run through its merchant accounts, which means the MCC on each authorization belongs to the merchant of record, not to you.

That changes your exposure in a few ways:

- **You do not apply for or maintain an MCC.** The merchant of record manages its acquiring relationships, the categories it is boarded under, and any network registrations those categories require.
- **Acceptance is reviewed at the product level instead.** Rather than an acquirer reviewing your MCC, the merchant of record reviews whether your products fit its acceptance policy. On Dodo Payments that happens during [account verification](https://docs.dodopayments.com/miscellaneous/verification-process), and the [merchant acceptance policy](https://docs.dodopayments.com/miscellaneous/merchant-acceptance) lists supported and prohibited product categories.
- **Network monitoring is handled at the platform level.** Dispute and fraud ratios are tracked on the merchant of record's accounts, and the platform runs prevention tools across all of its sellers. On Dodo, Visa Rapid Dispute Resolution is on by default for disputes up to $100, and disputes are handled through the [disputes dashboard](https://docs.dodopayments.com/features/transactions/disputes).

This is one reason founders without a US entity or a payments team often choose a merchant of record over a direct processor. Our comparison of [merchant of record vs PayFac](https://dodopayments.com/blogs/merchant-of-record-vs-payfac) explains where that responsibility sits in each model, and [acquiring bank vs issuing bank](https://dodopayments.com/blogs/acquiring-bank-vs-issuing-bank) explains who does what on each side of a card payment.

[Dodo Payments](https://dodopayments.com) acts as the merchant of record for SaaS, AI, and digital product businesses, with 40+ payment methods, 80+ currencies at checkout, and coverage across 220+ countries and territories. The [MoR introduction in the docs](https://docs.dodopayments.com/features/mor-introduction) explains exactly which responsibilities move to Dodo.

## How to Find Your Current MCC

If you run your own merchant account and want to check your code, there are a few places to look:

- **Your processor dashboard or merchant agreement.** Most processors list the MCC in account settings or in the boarding documents.
- **Your monthly merchant statement.** Many acquirer statements print the MCC alongside your merchant ID.
- **Ask support directly.** Processors can confirm the code and explain why it was chosen.
- **Make a test purchase.** Some bank and card apps show the category of a purchase, which hints at the MCC, although the display label is not always the exact code.

If the code does not describe what you sell, raise it before your next underwriting review rather than after a spike in declines.

## FAQ

### What MCC should a SaaS company use?

Many SaaS companies are coded as 5817 (Digital Goods - Applications) or 7372 (Computer Programming, Data Processing, and Integrated Systems Design Services), and some use 5734 or 4816 depending on what they sell. The acquirer makes the final call based on the product, the pricing model, and its own risk policy.

### Can I change my merchant category code?

Yes, but you cannot change it yourself. You ask your acquirer or payment provider to review it, usually with an updated business description, and they decide whether a different code is more accurate. If you sell through a merchant of record, the MCC belongs to the merchant of record and you do not need to manage it.

### Does the MCC affect processing fees?

It can. Card networks use merchant category as one of the inputs to some interchange programs, so two merchants with similar card volume can pay different interchange depending on their code. Flat-rate providers usually absorb this difference, while interchange-plus pricing passes it through.

### What are high-risk MCCs?

High-risk MCCs are categories that card networks associate with elevated fraud, disputes, or legal risk, such as 5967 (direct marketing inbound teleservices) and 7995 (betting and gambling). Merchants in these categories often need network registration, face higher rates and rolling reserves, and are monitored more closely for dispute ratios.

### Is the MCC the same as an NAICS or SIC code?

No. NAICS and SIC codes are government industry classifications used for statistics, tax, and regulation. MCCs come from ISO 18245 and are used by the card payment system, so the same business can have an NAICS code for its tax filings and a different MCC on its merchant account.

## Conclusion

The merchant category code is a four-digit label with real consequences: it affects approval rates, interchange, corporate card acceptance, and how closely the networks watch your account. For founders running their own merchant accounts, it is worth knowing your code and making sure it matches what you sell, especially after a pivot.

For founders who would rather not manage MCCs, network registrations, and dispute monitoring at all, a merchant of record takes that layer on as the legal seller. See how [Dodo Payments](https://dodopayments.com) handles it, compare costs on the [pricing page](https://dodopayments.com/pricing), or start from the [integration guide](https://docs.dodopayments.com/developer-resources/integration-guide).
---
- [More Payments articles](https://dodopayments.com/blogs/category/payments)
- [All articles](https://dodopayments.com/blogs)