Firearms and Ammunition Payment Processing: Legal to Sell, Hard to Bank

Firearms are the clearest example of a legal product that mainstream payments still treats as radioactive. An FFL dealer operates under federal license, runs NICS background checks, keeps bound-book records the ATF can inspect, and follows a stricter compliance regime than almost any other retailer. And yet PayPal, Square, Stripe, and most low-risk processors decline the category outright. Not because it is illegal, but because it is politically and operationally expensive to support. The dealer who did everything right gets a policy-violation email instead of a risk-review email, which is worse, because there is nothing to remediate. This is a guide to why firearms and ammunition are so hard to bank, what underwriters actually care about, and the account structure that keeps a compliant dealer processing.

Legal product, policy problem

Selling firearms and ammunition to eligible buyers through a licensed channel is lawful. The obstacle is policy, not law.

Large aggregators write firearm and ammunition sales out of their acceptable-use policies as a category decision, and once a processor's policy says no, the legality of your specific business does not reopen the conversation. A risk-based termination is a conversation you can sometimes have, because it turns on numbers you can improve, while a policy-based termination is not a conversation at all.

Discovery under the aggregator model is usually retroactive: you are boarded in minutes by an automated flow that never asked what you sell, you process for months, and the account is closed when a review, a keyword sweep, or a customer complaint surfaces the category. That is the same retroactive-discovery pattern that takes down restricted-category stores on aggregators, and in firearms it comes with the standard 90 to 180 day hold on the balance.

That leaves firearms in a specialist channel, reached through ISOs and acquiring banks that have built the compliance capability to support the vertical, which makes the processor evaluation criteria that predict staying approved matter more than the rate sheet. The good news is that a properly licensed dealer is genuinely underwritable, and the work is finding the banks that will board it and meeting their conditions.

The merchant-category question

A recurring flashpoint in this vertical is how firearm transactions are coded.

Historically, gun shops processed under general retail codes, most commonly the sporting-goods categories that also cover archery, ammunition, and outdoor gear. A dedicated firearms retailer code, MCC 5723, was subsequently approved at the standards level and adopted by the major networks, then paused amid a state-level fight over its use. Some states have passed laws requiring the code for firearms retailers, others prohibiting its use, and network implementation has moved with that patchwork rather than ahead of it. The details are genuinely unsettled, and this guide is not the place to predict where they land.

What matters operationally does not depend on the outcome. Your acquirer needs to code you for what you actually are, whether that is a specialty firearms dealer, a sporting-goods retailer, or a range and training business. Miscoding creates two problems: issuers may decline or flag transactions that do not match the expected pattern for the code, and a coding mismatch is exactly the kind of discrepancy that surfaces your account in a compliance review.

Get the MCC right at underwriting, keep it consistent with your descriptor and marketing, and ask your ISO in writing what code you are boarded under rather than inferring it from declines.

What gets a firearms account approved

Firearms underwriting rewards licensure and consistency above everything.

Your FFL is the foundation of the file. The acquirer will verify it, and your business name, descriptor, website, and shipping practices all need to line up with what the license says you are. Any gap between the licensed entity and the operating brand slows or kills the application, and the same gap after boarding reads as misrepresentation rather than sloppiness.

Age and eligibility verification is the next layer. That means shipping firearms only to another FFL for transfer, age gating that reflects the different federal thresholds for long guns and handguns, and jurisdiction controls that block sales you are not permitted to make. Ammunition needs its own controls, because several states restrict direct-to-consumer shipment or require their own background check, and a dealer who ships nationwide without state-level blocking is describing an unbounded liability to the bank. Carrier rules add a third layer, since handguns cannot move through the postal system in ordinary retail fashion and common carriers impose their own adult-signature and packaging rules.

What the underwriter clicks through

Approval is not decided by the application form alone. An underwriter in this vertical opens the storefront and tries to break it, because the site is the only evidence that the controls on the application are real. They add a restricted item to the cart from a state that does not allow it, to see whether the jurisdiction block fires before payment or not at all. They look for whether the FFL transfer step is a required field at checkout or a note in the fine print a buyer can skip. A storefront that enforces these rules inside the purchase flow, the way the checkout flow patterns and age gate implementation guides lay them out for a different restricted category, turns a claim on a form into something a bank can verify in two minutes. One that only asserts them in a policy page moves the file to the bottom of the queue.

The rest is ordinary high-risk hygiene: clean marketing without prohibited claims, honest descriptors, and a documented process for background checks and transfers. The document pack in the high-risk underwriting checklist applies here with the license and transfer procedures added on top, and that licensure-first discipline is what separates a durable account from a declined one.

The account structure

	Aggregator	Domestic dedicated MID	Offshore acquiring
Firearms appetite	Prohibited by policy	Available through specialist banks	Rarely the right tool
License verification	Not supported	Required at underwriting	Required
Onboarding	Instant	1 to 3 weeks, full underwriting	Slower, heavier docs
Reserve	None, then 100% on termination	Often modest for compliant FFLs	Higher
Failure mode	Category sweep, no appeal	Repricing or notice period	Relationship and FX friction
Fit	Not viable	The core of a firearms operation	Edge cases and geography

For most licensed dealers the answer is a domestic dedicated MID with a bank that supports the vertical, not offshore. The compliance regime works in your favor here, because a well-run FFL with clean disputes is a more predictable risk than many high-risk merchants, and the reserve and pricing can reflect that. The mechanics of arguing a holdback down, and of knowing when it releases, are in the rolling reserves explainer.

Category-level policy can shift for reasons unrelated to your account, and a bank that supports firearms today can narrow its appetite after a portfolio review or a change of sponsor. Running a second account and keeping the site able to swap between them, as in the backup processor strategy, keeps one acquirer's policy change from taking your storefront offline. Keeping stored credentials and routing in a neutral layer rather than inside one processor, as covered in payment orchestration, makes that second account usable on day one instead of after a card-on-file rebuild.

Declines, disputes, and daily operation

Firearms accounts run cleaner than most high-risk verticals, but they are not immune to category-level friction.

Some declines are issuer risk decisions on the category or the code, and some are ordinary retryable failures. Knowing which to retry, and which to stop retrying immediately, protects your authorization rate without tripping attempt-abuse monitoring.

The dispute mix here is narrow and mostly preventable. The largest cluster is item not received, which spikes during demand surges when backordered ammunition and popular models ship weeks after the card was charged. The second is recognition failure, where the statement shows an unfamiliar legal entity instead of the storefront the customer bought from, which is a descriptor problem rather than a fraud problem and is solved the way the descriptor optimization guide describes. The third is card-not-present fraud, concentrated in high-resale items such as optics and accessories rather than serialized firearms, because those ship to a licensed dealer and not a drop address.

Keep those low with the tools a compliant dealer already has: clear order and shipping communication, honest backorder dates, accurate descriptions, and a documented transfer process. Match representment evidence to the reason code rather than sending the same packet every time, and intercept what you can before it becomes a dispute using chargeback alerts. Staying well under the network monitoring thresholds is easier here than in most high-risk categories, and worth protecting, because a clean ratio is what keeps your favorable pricing.

Practical takeaway

Firearms are hard to bank not because the product is illegal but because mainstream processors decline the category by policy, leaving compliant dealers to a specialist channel with no appeal and no remediation path. The account that lasts is built on correct MCC coding, verified licensure, controls enforced in the checkout flow rather than asserted in a policy page, and a domestic MID with a bank that supports the vertical, backed by a second account so a policy change is an inconvenience rather than an outage. The account that fails runs an FFL's volume through an aggregator that never asked what it was boarding, and finds out during a demand surge that the balance is on a 120-day hold. If you are a licensed dealer stuck on a processor that keeps threatening to drop the category, apply for an architecture review and we will map the account structure to your license, your channels, and your volume.