If PayPal or Stripe has just closed your peptide store, your first job is the money already in the account, not finding the next processor. Most founders do it the other way round: they open a new account somewhere else within the hour and turn one closure into a pattern that follows them into every future application.
Here’s the week we’d run instead. It’s the order of operations we use when a research peptide store loses its payment provider: secure what you’re owed, tell customers something true, take orders in a way that won’t get you closed again, fix the site, then apply for a high-risk merchant account with a file that can survive underwriting.
One thing to accept early. Neither PayPal’s nor Stripe’s policy uses the word “peptides”, and that doesn’t mean you were closed by mistake.
What PayPal and Stripe actually say about peptides
Stripe’s restricted businesses list (updated 22 September 2026) doesn’t name peptides or “research use only”. It does prohibit “Incorrectly labeled research chemicals” and “Pseudo-pharmaceuticals or nutraceuticals that are not safe or make harmful claims”. It also puts “Card-not-present prescription-only products and pharmaceuticals” and “Online pharmacies” on its restricted list, which means extra due diligence at best.
PayPal’s acceptable use policy (last updated 29 October 2022) prohibits “narcotics, steroids, certain controlled substances or other products that present a risk to consumer safety” and requires approval for “The sale of any product(s) requiring a prescription.”
Now picture a risk analyst opening your store. They see vials, a “research use only” line in the footer, and maybe a dosing chart, a reconstitution calculator or a few glowing reviews about how someone felt. That combination is close to the literal definition of “incorrectly labeled research chemicals”. The FDA reads it the same way: it has rejected RUO disclaimers in warning letters in February 2025, December 2025, March 2026 and again on 24 August 2026, when the letters cited dosing guidance, reconstitution calculators, “peptide guides” and bacteriostatic water sold alongside.
Even a store that runs a clean RUO operation can be closed simply because the category sits outside the provider’s appetite. Shopify Payments works the same way: its US terms incorporate Stripe’s restricted list, and its eligibility page rules out pharmaceuticals and products making unverified health claims.
Should you appeal? Send one short, factual message if you genuinely think you were misclassified. Then stop. We wouldn’t spend the week on it.
Day 1: read the notice and secure the money
Read the closure email twice and write down the answers to four questions: is the account closed or just restricted, are funds being held, for how long, and can you still issue refunds?
Then, before access changes:
- Screenshot the balance, pending payouts and any open disputes.
- Export everything you can: transactions, orders, customer list, dispute history, payout reports.
- Download any invoices or statements you’ll need for bookkeeping. Future underwriters will ask for processing statements too.
Next, ask the provider in writing for the held amount, the expected release date, the policy they’re relying on, and whether your business has been reported to MATCH. That last question matters more than the others. MATCH is Mastercard’s list of terminated merchants. Acquirers must add a qualifying merchant within one business day and listings “remain active for 5 years”, according to Stripe’s own MATCH documentation. A closure for business type isn’t automatically a listing. Listings are tied to reason codes such as excessive chargebacks, fraud, laundering, violation of standards and illegal transactions. But you need to know which situation you’re in before you apply anywhere.
About the held funds: a provider holds money after closure to cover refunds and chargebacks that land later. The release date is set by them, not you, and the period should be in the notice or your agreement. In our experience, the most reliable way to get the full balance back is to give them no new disputes to pay out of it.
Day 1 to 2: tell customers something true
Every paid order that doesn’t ship becomes a likely chargeback, and every chargeback comes out of the balance you’re waiting for. So:
- Ship every paid order on schedule.
- If you can’t ship something, refund it through the original provider while refunds still work.
- Replace the broken checkout with a plain notice, something like: “Card payments are temporarily unavailable. Orders already placed are shipping as normal.” A checkout that silently errors costs you trust and generates support tickets.
- Email recent customers with the same message. Keep it short and calm. No speculation about why, and nothing about regulators.
If you billed anyone on a recurring basis, those payments have stopped. Don’t try to charge saved cards through anything else. Ask customers to reorder once you have a new way to take payment.
Day 2 to 4: take payments without getting closed again
This is where most of the damage happens. The tempting moves all look like quick fixes and all of them make the next application harder.
| Tempting move | Why it backfires |
|---|---|
| New PayPal or Stripe account under a partner’s or relative’s name | Your store processing through someone else’s credentials is transaction laundering. That’s MATCH reason code 03 or Visa VMSS code 23, each listed for 5 years. |
| Renaming products or calling them “supplements” or “lab reagents” | “Incorrectly labeled research chemicals” is the exact thing Stripe prohibits, and the FDA judges intended use from everything you say and do, not the label alone. |
| Asking a new processor to code you under an unrelated category | Misrepresenting your business to an acquirer gets accounts terminated and merchants listed. |
| Running sales through a friend’s store | Same as the first row, with your friend’s business added to the blast radius. |
| Opening Square or another mainstream account | Square’s terms list “internet/mail order/telephone order pharmacies” and “high-risk products and services” as unsupported. You’d be closed again, and now you have two closures to explain. |
What’s realistic for a week or two is less exciting. Bank transfer or ACH with manual invoices keeps loyal customers buying, though conversion will drop. In some markets pay-by-bank (open banking) is available: one UK provider, Fena, says its payments “do not pass through Visa or Mastercard networks” and are “non-reversible”. Crypto works for customers who already use it, with bookkeeping and tax work attached. None of these replace card processing. They buy you time while you do the next two steps properly.
If you’re on Shopify, you can add a third-party payment provider once Shopify Payments is off the table, but Shopify charges an extra fee on those transactions. At the time of writing (late 2026) the US pricing page lists 2% on Basic, 1% on Grow, 0.6% on Advanced and 0.2% on Plus. Factor that into any quote you compare.
Day 3 to 5: fix the site before anyone else reviews it
The next underwriter will read your site more carefully than PayPal ever did. The FDA’s August 2026 letters were based on website review alone, so assume a reviewer will see every page. This is the list we work through:
- Remove dosing tables, protocols, “how to use” sections and anything that reads like instructions for a person.
- Remove reconstitution calculators and “peptide guides” written for end users.
- Stop selling bacteriostatic water alongside your catalog. We’d take it off the store entirely.
- Delete before-and-after images and any review or testimonial that describes personal effects.
- Check the blog, FAQ, image alt text, meta descriptions, email archive and social bios. Old content counts.
- Make sure every product has a certificate of analysis that matches the batch you’re shipping.
- Publish clear refund, shipping, privacy and terms pages, plus a contact page with a real address and phone number.
- Confirm the business name on the site matches your legal entity, your bank account and the name you’ll put on the application.
This isn’t about tidying up for the review and restoring things later. Acquirers keep monitoring after approval, and a site that changes back is a fast route to termination. The business has to actually operate as research-use-only across every page and channel. We work with research suppliers who want to run a clean, defensible business, and with clinics and telehealth brands that can qualify for certification. We don’t help anyone dress up human-use sales as research.
Regulation here moves quickly, so have a lawyer familiar with FDA and FTC rules look at your positioning before you relaunch.
Day 5 to 7: apply for a high-risk merchant account properly
A high-risk acquirer expects peptide merchants and underwrites them up front, which is exactly why the account lasts longer when it’s approved. Go in with a complete file: formation documents, owner ID, bank letter, the processing statements you exported on day one, the closure notice, your product list with COAs, and a short description of how you sell.
Disclose the PayPal or Stripe closure. Underwriters ask about prior processing, and a closure you hid is far worse than a closure you explained.
Be realistic about who will take you. Some processors that publicly advertise peptide accounts require LegitScript certification: Corepay has said so since 1 April 2024 and also says it does not support research-use-only sellers, and Easy Pay Direct says you “MUST be Legit Script certified”. LegitScript’s certification programs are built for healthcare merchants such as pharmacies and telehealth, and no source we’ve found says RUO sellers are eligible. Our explainer on what LegitScript is and who it certifies covers this in more detail. The short version: clinics and telehealth brands have a clearer route, and RUO stores have fewer options and should expect tighter terms.
Tighter terms usually means a reserve. Published figures put rolling reserves at typically 5 to 10% of settlement held for 90 to 180 days, and one peptide-focused marketplace quotes 5 to 10% held for 120 to 180 days, with card rates around 3.5 to 5%. Treat those as typical, not promises.
Walk away from anyone who guarantees approval or offers to “code you as supplements”. That’s the same miscoding problem from the table above, just with a salesperson attached.
If you’re reading this on day one
Don’t open anything new today. Export your data, ask the four questions in writing, ship your paid orders and put an honest notice on checkout. Tomorrow, set up a temporary way to take payment from repeat customers. Spend midweek on the site. Apply at the end of the week with a file you’d be comfortable having a bank read line by line.
If you’d like a second pair of eyes on the site and the application before it goes to an underwriter, that’s what our peptide payment processing setup work covers.
Frequently asked questions
Can I get my PayPal or Stripe account reinstated for a peptide store?
It’s unlikely. Both providers’ policies cover the risks they associate with research chemicals and prescription-type products, and a closure for business type is rarely reversed. Send one factual appeal if you believe you were misclassified, then put your energy into a high-risk application.
How long will PayPal or Stripe hold my funds after closing my account?
The provider sets the hold period, and it should be stated in the closure notice or your account agreement. The hold exists to cover refunds and chargebacks that arrive after closure. Ask for the amount and release date in writing, and keep shipping paid orders so there are fewer disputes to pay out of it.
Can I keep selling peptides on Shopify after Shopify Payments is turned off?
Shopify lets ineligible merchants add a third-party payment provider, though it charges an extra transaction fee that depends on your plan. The harder part is getting a processor that accepts your business, which is what a high-risk merchant account is for.
Will a PayPal or Stripe closure put me on the MATCH list?
Not automatically. MATCH listings are tied to specific reason codes, such as excessive chargebacks, fraud, laundering or violation of standards. Ask the provider directly, in writing, whether you were reported, because a listing stays active for five years and changes where you can apply.
