July 22, 2026 · 7 min read
Firearms and Ammunition Payment Processing: Legal to Sell, Hard to Bank
Why FFL dealers get dropped by mainstream processors despite selling a legal product: MCC coding, licensure at underwriting, shipping controls, and the account structure that lasts.
Firearms are the clearest example of a legal product that mainstream payments still treats as radioactive. An FFL dealer operates under federal license, runs background checks through NICS, keeps bound-book records the ATF can inspect, and follows a stricter compliance regime than almost any other retailer. And yet PayPal, Square, Stripe, and most low-risk processors decline the category outright. Not because it is illegal, but because it is politically and operationally expensive to support. The dealer who did everything right gets a policy-violation email instead of a risk-review email, which is worse, because there is nothing to remediate. This is a guide to why firearms and ammunition are so hard to bank, what underwriters and card networks actually care about, and the account structure that keeps a compliant dealer processing.
Legal product, policy problem
There is nothing unlawful about selling firearms and ammunition to eligible buyers through a licensed channel. The obstacle is policy, not law.
Large aggregators write firearm and ammunition sales out of their acceptable-use policies as a category decision, and once a processor's policy says no, the legality of your specific business does not reopen the conversation. A risk-based termination is a conversation you can sometimes have, because it turns on numbers you can improve. A policy-based termination is not a conversation at all, and no volume of clean disputes changes it.
The aggregator model also means the discovery is usually retroactive. You are boarded in minutes by an automated flow that never asked what you sell, you process for months, and the account is closed when a review, a keyword sweep, or a customer complaint surfaces the category. That is the pattern described in why processors shut down high-risk accounts, and in firearms it comes with the standard 90 to 180 day hold on the balance.
That leaves firearms in the same specialist channel as the rest of the high-risk landscape, reached through ISOs and acquiring banks that have chosen to support the vertical and built the compliance capability to do it. The good news is that a properly licensed, compliant dealer is a genuinely underwritable business, often with lower fraud and chargeback rates than the nutra and continuity verticals. The work is finding the banks that will board it and meeting their conditions.
The merchant-category question
A recurring flashpoint in this vertical is how firearm transactions are coded.
Historically, gun shops processed under general retail codes, most commonly the sporting-goods and related merchandise categories that also cover archery, ammunition, and outdoor gear. A dedicated firearms retailer code, MCC 5723, was subsequently approved at the standards level and adopted by the major networks, then paused amid a state-level fight over its use. Some states have passed laws requiring the specific code for firearms retailers, others have passed laws prohibiting its use, and network implementation has moved with that patchwork rather than ahead of it. The details are genuinely unsettled, and this guide is not the place to predict where they land.
What matters operationally is narrower and does not depend on the outcome. Your acquirer needs to code you for what you actually are, whether that is a specialty firearms dealer, a sporting-goods retailer, or a range and training business. Miscoding creates two problems. Issuers may decline or flag transactions that do not match the expected pattern for the code, and a coding mismatch is exactly the kind of discrepancy that surfaces your account in a compliance review.
Get the MCC right at underwriting, keep it consistent with your descriptor and your marketing, and ask your ISO in writing what code you are boarded under so you find out from them rather than from a decline pattern.
What gets a firearms account approved
Firearms underwriting rewards licensure and consistency above everything.
Your FFL is the foundation of the file. The acquirer will verify the license, and your business name, descriptor, website, and shipping practices all need to line up with what the license says you are. Any gap between the licensed entity and the operating brand slows or kills the application, and the same gap after boarding reads as misrepresentation rather than sloppiness.
Age and eligibility verification is the next layer. For online sales especially, the underwriter wants to see that you enforce the rules rather than assert them. That means shipping firearms only to another FFL for transfer, age gating that reflects the different federal thresholds for long guns and handguns, and jurisdiction controls that block sales you are not permitted to make. Ammunition needs its own controls, because several states restrict direct-to-consumer ammunition shipment or require their own background check, and a dealer who ships ammunition nationwide without state-level blocking is describing an unbounded liability to the bank. Carrier rules add a third layer, since handguns cannot move through the postal system in ordinary retail fashion and common carriers impose their own adult-signature and packaging requirements.
A dealer who can demonstrate these controls is boardable. One who cannot is an instant decline, because the bank cannot bound its own exposure.
The rest is ordinary high-risk hygiene applied to a compliance-heavy category. Clean marketing without prohibited claims, honest descriptors, and a documented process for background checks and transfers. The document pack in the high-risk underwriting checklist applies here with the license and transfer procedures added on top, and because firearms sit inside the broader firearms and ammunition underwriting profile, that licensure-first discipline is what separates a durable account from a declined one.
The account structure
| Aggregator | Domestic dedicated MID | Offshore acquiring | |
|---|---|---|---|
| Firearms appetite | Prohibited by policy | Available through specialist banks | Rarely the right tool |
| License verification | Not supported | Required at underwriting | Required |
| Onboarding | Instant | 1 to 3 weeks, full underwriting | Slower, heavier docs |
| Reserve | None, then 100% on termination | Often modest for compliant FFLs | Higher |
| Failure mode | Category sweep, no appeal | Repricing or notice period | Relationship and FX friction |
| Fit | Not viable | The core of a firearms operation | Edge cases and geography |
For most licensed dealers the answer is a domestic dedicated MID with a bank that supports the vertical, not offshore. Firearms are a case where the compliance regime works in your favor at underwriting. A well-run FFL with clean disputes is a more predictable risk than many high-risk merchants, and the reserve and pricing can reflect that. The mechanics of arguing a holdback down, and of knowing when it releases, are in the rolling reserves explainer.
Redundancy still matters, and in this vertical it matters for a specific reason. Category-level policy can shift for reasons that have nothing to do with your account, and a bank that supports firearms today can narrow its appetite tomorrow after a portfolio review or a change of sponsor. Running more than one MID and balancing across them, as in the MID load balancing guide, keeps a policy change on one acquirer from taking your storefront offline. Keeping stored credentials in a neutral vault rather than inside a processor, as covered in the token vault explainer, is what makes that second MID usable on day one instead of after a card-on-file rebuild.
Declines, disputes, and daily operation
Firearms accounts tend to be cleaner than most high-risk verticals, but they are not immune to the category-level friction that gets accounts flagged.
Some declines are issuer risk decisions on the category or the code, and some are ordinary retryable failures. Knowing which decline codes to retry, and which to stop retrying immediately, protects your authorization rate without tripping attempt-abuse monitoring.
The dispute mix here is narrow and mostly preventable. The largest cluster is item not received, which spikes during demand surges when backordered ammunition and popular models ship weeks after the card was charged. The second is recognition failure, where a customer sees an unfamiliar legal entity on the statement instead of the storefront they bought from, which is a descriptor problem rather than a fraud problem and is solved the way the descriptor optimization guide describes. The third is genuine card-not-present fraud, concentrated in high-resale-value items such as optics and accessories rather than in serialized firearms, because those ship to a licensed dealer and not to a drop address.
Keep those low with the tools a compliant dealer already has. Clear order and shipping communication, honest backorder dates rather than optimistic ones, accurate descriptions, and a documented transfer process cut most of it before it reaches an issuer. Match your representment evidence to the reason code rather than sending the same packet every time, using the chargeback reason code reference. Staying well under the chargeback ratio thresholds is easier here than in most high-risk categories, and it is worth protecting, because a clean ratio is the main thing keeping your favorable pricing.
Practical takeaway
Firearms and ammunition are hard to bank not because the product is illegal but because mainstream processors decline the category by policy, leaving compliant dealers to a specialist channel where there is no appeal and no remediation path. The account that lasts is built on correct MCC coding, verified licensure, enforced age, jurisdiction, and transfer controls, and a domestic MID with a bank that actually supports the vertical, backed by a second MID and a neutral token vault so a policy change is an inconvenience rather than an outage. The account that fails runs an FFL's volume through an aggregator that never asked what it was boarding, and finds out during a demand surge that the balance is on a 120-day hold. If you are a licensed dealer stuck on a processor that keeps threatening to drop the category, apply for an architecture review and we will map the account structure to your license, your channels, and your volume.