MCC 6211 and VIRP: What “High Integrity Risk” Actually Means for Your Prop Firm

If you’ve gotten far enough into a merchant account application to see the letters “MCC,” you’ve probably also hit a wall of vague language about “high risk” with no real explanation attached. Here’s the plain-English version, sourced from Visa’s own program guide, because the classification your firm gets assigned determines almost everything else about how, and whether, you get approved for a prop firm merchant account.

What MCC 6211 Actually Covers

Merchant Category Codes are four-digit labels the card networks use to describe what a business sells. MCC 6211 is the code for securities brokers, dealers, and financial trading platforms operating in a card-not-present environment, the category most prop trading firms fall into, since you’re not swiping a card in person, you’re collecting an evaluation or challenge fee online.

That alone doesn’t make MCC 6211 unusual. What makes it worth understanding is what Visa does with it next.

Visa’s Integrity Risk Program (VIRP)

In May 2023, Visa replaced its older Global Brand Protection Program with a broader framework called the Visa Integrity Risk Program, or VIRP. Per Visa’s own Integrity Risk Program guide for acquirers, VIRP sorts certain business categories into three risk tiers, and financial trading platforms operating card-absent under MCC 6211 are explicitly named as a Tier 3 High Integrity Risk category, grouped alongside a short list of other card-absent categories Visa has flagged for the same reason, including outbound telemarketing and certain subscription and tobacco-sales models.

Tier 3 isn’t a penalty box, and it’s worth knowing it’s the lightest of the three tiers, Visa’s guide reserves mandatory, recurring control assessments for Tier 1 and Tier 2, while Tier 3 merchants are expected to comply fully with VIRP but aren’t automatically subject to the same standing review schedule. Still, the underlying reason for the classification stands: this category of business has a track record, across the payments industry broadly, of fraud, deceptive marketing, and misrepresented products, and it warrants closer oversight than a typical retail merchant. Prop trading firms didn’t invent this scrutiny. They inherited it from the same MCC that covers other card-not-present financial trading activity, and the honest ones pay the administrative cost of the bad actors who came before them.

Registration: Not All-or-Nothing

Here’s the detail that actually changes how you should shop for a merchant account, and it has nothing to do with your firm’s paperwork.

Under VIRP, an acquiring bank must apply for and be granted High Integrity Risk Acquirer Registration before it’s permitted to solicit, contract with, or process transactions for any merchant in a Tier 3 category, including MCC 6211. That’s a direct requirement from Visa’s own guide, not an industry rule of thumb.

But registration isn’t a flat yes-or-no per acquirer, and it’s worth understanding the two wrinkles that actually determine whether a given processor is covered.

Tiers stack upward. An acquirer approved for Tier 1 automatically holds approval for Tier 2 and Tier 3 as well. An acquirer approved for Tier 2 automatically holds Tier 2 and Tier 3. An acquirer approved only for Tier 3 holds Tier 3 alone. In practice, this means an acquiring bank that already handles a Tier 1 or Tier 2 category may already have Tier 3 covered without filing anything new specifically for financial trading platforms.

Registration attaches to the acquirer, not automatically to everyone in the chain. Visa’s guide is addressed to acquiring members and their registered Third-Party Agents specifically. The formal registration obligation sits with the actual acquiring bank. A payment facilitator, ISO, or referral-based processor working under that acquiring bank may or may not need its own separate agent-level registration, depending on its specific role. So when a processor tells you they “don’t need to register” for your business, that sentence means two very different things depending on which case it is: either they’re operating under an acquirer whose existing registration already covers Tier 3, which is fine, or nobody in the chain has actually registered anything, and you won’t find out until an underwriting review catches the gap.

Why This Trips Up Aggregator Platforms Specifically

Instant-onboarding platforms, the big shared-merchant-ID names built for low-risk retail, approve your application against a general risk model, not against a category-specific registration check. That’s exactly why prop firms on these platforms so often get approved in minutes and terminated months later: the automated approval never verified whether MCC 6211 processing was actually permitted on that platform to begin with. The freeze isn’t random. It’s the registration gap finally catching up.

Why So Many Prop Firms Show Up as “Computer Software” on Their Statement

Here’s something worth knowing if you’ve noticed your own account is coded as something other than financial trading: it’s extremely common, and it’s usually not intentional on anyone’s part. Stripe’s own developer documentation states plainly that when its system can’t determine a connected account’s MCC from the stated industry or the business’s website, it falls back to a platform default, Computer Software Stores, MCC 5734. A prop firm’s marketing rarely uses language an automated classifier associates with financial trading; it talks about challenges, evaluations, and funded accounts instead, and the account falls through to the default bucket. MCC 8299 (Schools and Educational Services) shows up for similar reasons when a firm’s public-facing language leans toward “training” or “education.”

It’s tempting to read that as a workaround, a way to sidestep Tier 3 entirely. It isn’t one. Being coded as software doesn’t change what the business actually does, and Visa’s rules require merchants to be classified according to their real activity, not their marketing copy. A generic code just delays the moment a proper risk review catches the mismatch, and when it does, the account tends to get terminated for cause rather than migrated to the correct classification.

There’s one genuine exception worth naming: a business that isn’t actually running an evaluation-to-funded-account model at all, one that sells trading education or software with no performance-based payout attached, may accurately belong under an education or software code, because it’s a different business, not a mislabeled version of the same one.

What This Means for Your Application

A few things worth taking away from all of this. Ask any processor directly whether they hold High Integrity Risk Acquirer Registration for MCC 6211, and if they say they don’t need it, ask why, since there’s a real difference between “our acquirer’s existing registration already covers it” and “nobody’s registered anything.” And make sure your own materials, your terms of service, your marketing, your checkout language, describe your evaluation and funded-account model accurately and consistently, since that documentation is exactly what a registered acquirer leans on to keep your file compliant over time.

Getting this right at the start is a lot less expensive than rebuilding a merchant account after a termination.

Talk to Someone Who Actually Checks This

We ask every acquiring bank we work with about their VIRP registration status before we ever place a prop firm, because “we’ll figure it out later” isn’t a strategy, it’s a countdown. If you want a straight answer about where your firm actually stands, that’s a free conversation.