If you sell research peptides, accepting credit cards means a high-risk merchant account with an acquirer that knows exactly what you sell and has chosen to underwrite it. There’s no mainstream shortcut that lasts. And the pool of willing processors is smaller than the ads suggest, because some of the processors advertising peptide accounts publicly require LegitScript certification and say they won’t take research-use-only sellers at all.
That’s the honest starting point for anyone working out how to sell peptides online in late 2026. It isn’t hopeless. Stores that genuinely operate as research-use-only (RUO), document their products properly and apply with a clean site do get approved, on terms that cost more than a mainstream account.
Below: why the mainstream options fail, how the high-risk route works, what makes approval possible, the alternatives people use and what they cost you in conversion, the tactics that end in a five-year blacklist, and the stack we’d set up.
Why Stripe, PayPal, Shopify Payments and Square don’t work
None of the big processors names peptides in its policy. They don’t need to.
- Stripe prohibits “Incorrectly labeled research chemicals” and “Pseudo-pharmaceuticals or nutraceuticals that are not safe or make harmful claims” on its restricted businesses list (updated Sep 22, 2026).
- PayPal prohibits “narcotics, steroids, certain controlled substances or other products that present a risk to consumer safety,” and requires approval for anything requiring a prescription.
- Shopify Payments prohibits “Pharmaceuticals and other products that make health claims that are not verified by a local or national regulatory body,” and its US terms pull in Stripe’s list.
- Square doesn’t support “high-risk products and services.”
A peptide store can sometimes get through signup on one of these. It rarely survives the first review, and when it doesn’t, funds get held. If you’re already in that position, our post on what to do when PayPal or Stripe drops your peptide store covers the first seven days.
The main route: a high-risk merchant account for peptides
A high-risk merchant account works the same way as any card account: an acquiring bank sponsors you into Visa and Mastercard, usually through an ISO or payment provider that handles sales, underwriting and support, with a gateway connecting your checkout. The difference is that the acquirer has decided to accept a category most banks avoid, and it prices and monitors accordingly. Our guide to high-risk merchant accounts for peptides covers documents and red flags in detail.
One piece worth understanding is the merchant category code (MCC). Visa’s Integrity Risk Program puts drug sellers and pharmacies coded 5122 and 5912 in its highest tier, with registration and extra due diligence. None of the program material we’ve read names peptides specifically. The point isn’t to find a code that avoids scrutiny. The acquirer assigns the code that reflects what you actually sell, and processor sources report that Visa assesses acquirers $25,000 per merchant when they alter merchant details to avoid registration. If a provider’s pitch involves a creative MCC, that’s your sign to leave.
The LegitScript question, answered honestly
You’ll hear two contradictory things, and both are partly true.
Some processors that advertise peptide accounts require LegitScript certification. Corepay says: “As of April 1, 2024, we are unable to assist peptide platforms that are not LegitScript certified,” and “We do not support research-use-only (RUO) peptide sellers.” Easy Pay Direct says “you MUST be Legit Script certified to get a merchant account for Peptides.”
On the other side, one peptide-focused marketplace says “LegitScript certification is not required by the card networks.” That matches what we’ve found: certification is a requirement set by particular processors and their banks, not a published Visa or Mastercard rule for peptides.
Here’s the part that matters for an RUO store. LegitScript’s Healthcare Certification is aimed at pharmacies, telemedicine, med spas, digital health platforms and manufacturers, and no source we’ve found says research-use-only sellers are eligible. LegitScript’s own guidance for processors treats “Not for Human Consumption” disclaimers as a red flag. So if you’re a clinic or telehealth brand, certification may open the larger pool of processors. If you’re a research supplier, you’re looking for an acquirer that underwrites RUO businesses on its own assessment, and you should be wary of anyone who says they can get your RUO store certified.
What makes credit card processing for peptides possible
Underwriters approve stores they can understand and defend to their bank. In practice that means:
- The site behaves like an RUO business. No dosing content, reconstitution calculators, personal-use guides, bacteriostatic water bundles, before/after images or effect reviews. Underwriters read the whole site, including the blog. Our breakdown of what underwriters check before approving a peptide store walks through the review page by page.
- A COA for every product. Third-party, batch-matched, linked from the product page. The marketplace quoted above says it expects a certificate of analysis for every product and no dosing or health claims.
- A buyer qualification step. LegitScript’s processor guide notes that “Legitimate sellers will often require a buyer to first contact them.”
- Consistent identity. Legal name, DBA, address, phone and support email match across the application, the site and the descriptor. A descriptor should reflect your DBA; Stripe’s 5 to 22 character rule is a sensible baseline even with another processor.
- Honest numbers. Realistic monthly volume, average order value and refund rates. Underpromising and then tripling volume in month two triggers reviews.
- Processing history, if you have it. Recent statements with low dispute ratios carry weight. A prior termination doesn’t kill an application, but hiding one will.
Typical terms for a peptide merchant account
These are typical figures from processor and marketplace sources, not rules, and yours will depend on your file.
| Term | What sources describe |
|---|---|
| Rolling reserve | Typically 5% to 10% of sales, held 90 to 180 days; some describe 5% to 15% |
| Peptide-specific reserve | “5% to 10% of sales, held 120 to 180 days” per one peptide-focused marketplace |
| Card rates | Around 3.5% to 5% per the same source |
| Visa dispute monitoring | Excessive threshold lowered to 1.5% on Apr 1, 2026 (US, Canada, EU, AP), at 1,500+ fraud and disputes a month |
| Mastercard chargeback monitoring | Excessive at 100 to 299 chargebacks and 1.5% to 2.99% in a month |
The network thresholds are for large merchants. Your acquirer will be watching your ratio long before you reach them. That’s why we’d set up dispute tools from day one: disputes resolved through Visa’s Rapid Dispute Resolution are excluded from the Visa monitoring ratio, and Ethoca alerts give you a chance to refund before a Mastercard chargeback lands.
The alternatives: ACH, bank transfer, crypto and pay-by-bank
Every store asks about these. They have a place, but none of them replaces a card account for a consumer-facing checkout.
| Method | Upside | Downside | Conversion impact |
|---|---|---|---|
| ACH / eCheck | Lower cost than cards in many setups | Still underwritten, with its own prohibited lists; returns can arrive days later | Moderate: buyers must enter bank details |
| Bank transfer or wire | No processor in the middle | Your bank can still close the account; manual reconciliation | High for small orders, fine for invoiced institutional orders |
| Crypto | No card chargebacks | Most buyers won’t use it; off-ramp providers have their own policies | High |
| Pay-by-bank (open banking, UK and EU) | One UK provider says these payments “do not pass through Visa or Mastercard networks” and are “non-reversible” | Country-limited; the provider still underwrites you | Moderate, depends on the buyer’s bank |
Our view: ACH is a solid secondary option once cards are live, bank transfer suits invoiced orders from institutions, and crypto is worth offering only if your buyers actually ask for it. A crypto-only or transfer-only checkout also tends to look to underwriters like a business that couldn’t get approved, which makes the eventual card application harder.
What doesn’t work long term
We get asked about all of these, and we don’t do any of them:
- Mainstream processors with vague product names. It works until the first review, then funds are held.
- Miscoding as supplements or another category. The acquirer is required to monitor for mismatches in merchant names and MCC.
- Running sales through someone else’s account. Visa defines transaction laundering as when “an unknown business uses an approved Merchant’s payment credentials.”
- Splitting volume across accounts to stay under monitoring thresholds. The FTC has pursued exactly this; one foreign processor settled for a $3.5M judgment after allegedly using shell companies and load balancing to evade chargeback monitoring.
- Gift-card payment schemes and fake descriptors. Both disguise the true nature of the transaction.
The cost is out of all proportion to the gain. A terminated merchant can be added to Mastercard’s MATCH list within one business day, and listings “remain active for 5 years.” Code 03 is laundering; code 04 is excessive chargebacks. Visa’s equivalent also runs five years. Five years of being unable to get a card account is the end of most stores. Because these questions overlap with regulation, confirm your setup with a lawyer who knows FDA and FTC rules.
The payment stack we’d set up to sell peptides online
For a research supplier operating properly, this is where we’d aim:
- One properly underwritten high-risk card account as the primary, with the processor fully aware of your catalog and model.
- Dispute tools from the first day: Rapid Dispute Resolution and Order Insight for Visa, Ethoca alerts for Mastercard, plus Compelling Evidence 3.0 data captured at checkout (device ID, IP, shipping address, user ID).
- A clear descriptor and a support phone number that a confused cardholder can find before calling their bank.
- ACH as a second option at checkout once cards are stable.
- Bank transfer for invoiced institutional orders.
- A disclosed backup card account once you have a few months of clean history, with each acquirer aware of the other and the same products and descriptor logic on both.
We work with research suppliers who want to run a clean, defensible business, and we don’t help anyone dress up human-use sales as research. If you’d like your site checked against an underwriter’s list before you apply, or want the whole stack set up properly, that’s our peptide payment processing service.
FAQ
Can a research peptide store use Stripe or PayPal?
Not for long. Stripe prohibits “Incorrectly labeled research chemicals,” and PayPal prohibits products that “present a risk to consumer safety.” Stores that slip through signup usually lose the account at the first review, often with funds held.
Do I need LegitScript certification to accept cards for peptides?
It isn’t a published card-network rule, but some processors and their banks require it, including Corepay and Easy Pay Direct. LegitScript’s Healthcare Certification is aimed at healthcare merchants, and no source says RUO sellers are eligible. Research suppliers usually need an acquirer that underwrites them without certification.
How much does a peptide merchant account cost?
Expect higher rates and a reserve. One peptide-focused marketplace describes card rates around 3.5% to 5% and reserves of 5% to 10% held 120 to 180 days. Treat those as typical ranges, not quotes.
Is crypto a good alternative for peptide payments?
As an extra option, maybe, if your buyers ask for it. As your only payment method, no: most buyers won’t use it, off-ramp providers have their own policies, and a crypto-only checkout can make a later card application harder.
