High-risk acceptance turns on a structural choice about who runs your gateway and who underwrites you, not just on rate.
Get it wrong and you either overpay for capability you don’t need, or build an integration that can’t take a payment because the underwriting falls through. Everything in this guide works backwards from that trade-off.
The best payment gateways for UK high-risk businesses
These picks are organised by the decision most likely to matter: relationship model, vertical specialism, and whether you already have a high-risk merchant account. Each comes with an explicit condition for when it is the wrong choice.
Best overall payment gateway for high-risk businesses
Nomupay. All-in-one payment platform that bundles the gateway and acquiring into a single relationship, removing the usual two-step negotiation you face as a high-risk merchant.
Acquired Total Processing in 2023 to absorb the UK high-risk underwriting team, and runs the platform on a Bank of Lithuania payment institution licence (UAB NomuPay Europe).
One thing to check first: that Lithuanian licence does not passport into the UK. Post-Brexit, EEA firms lost UK passporting, and the run-off arrangements that followed ended on 31 December 2025.
Nomupay has no UK authorisation of its own, so you contract an overseas Nomupay entity rather than a UK-regulated firm. That is lawful and common, but ask which legal entity contracts and acquires you, and where a dispute would be escalated, before you sign.
Strongest fit for cross-border merchants in gaming, recurring billing, and e-commerce models that need 200+ alternative payment methods alongside card schemes.
Not right if: you already have a high-risk merchant account in place and want to keep acquirer flexibility. NMI’s gateway-only model gives you that, Nomupay’s all-in-one structure is the wrong shape for that use case.
Get a Nomupay quoteBest FCA-regulated all-in-one for European merchants
ECOMMPAY. The entity you contract, Ecommpay Limited, is a directly FCA-authorised Payment Institution (FRN 607597) under the Payment Services Regulations 2017, and a Visa and Mastercard Principal Member, so UK card volume settles through a UK-regulated counterparty rather than routing offshore.
Built specifically for high-risk verticals including gaming, forex, adult, and subscriptions. Built-in chargeback management matters in categories where chargeback ratios are policed by the card schemes.
Not right if: your priority is cross-border alternative payment methods rather than UK-regulated acquiring. Nomupay’s 200+ APM coverage is broader; Nuvei’s gaming-specific coverage is deeper.
Visit ECOMMPAYBest gateway-only option for custom integration
NMI (Network Merchants Inc). A pure gateway: it doesn’t hold funds, doesn’t issue a merchant account, and doesn’t make underwriting decisions.
What it does is sit between your checkout and whichever acquiring bank you’ve arranged, so you can switch acquirers without rebuilding the frontend. Used widely across adult, gaming, supplements, CBD, and regulated firearms accessories.
Pricing goes through ISO and reseller partners rather than direct, so the same NMI integration can land at very different monthly costs depending on who you sign with.
Not right if: you don’t already have a high-risk merchant account and don’t want to negotiate one separately. Without an acquirer the NMI integration cannot take a payment.
Visit NMIBest for regulated gaming, crypto, and forex with multi-currency
Nuvei. Explicit specialism in regulated gaming, crypto, and forex, with deep coverage of alternative and local payment methods beyond the card schemes.
UK-regulated in its own right: Nuvei Financial Services Ltd holds an FCA e-money licence (FRN 994233). The platform is built for cross-border volume and complex multi-currency settlement, and pricing is quoted only after underwriting.
Not right if: your sector sits outside regulated gaming, crypto, or forex. Nuvei is priced and engineered for cross-border scale, so a sector-matched all-in-one like Nomupay or ECOMMPAY is usually the closer fit for a straightforward UK e-commerce merchant.
Visit NuveiBest for online gaming and digital goods
Paysafe. Strongest fit for online gaming, sports betting, and digital-goods merchants where customers expect Skrill, Neteller, or paysafecard alongside cards. Listed parent group with audited financials and multi-currency acquiring.
Less compelling outside that vertical specialism. If you’re selling supplements or CBD, Nomupay or ECOMMPAY will be better matched for you.
Not right if: your sector is adult, CBD, supplements, or nutraceuticals. These aren’t Paysafe’s specialism.
Visit PaysafeHigh-risk gateway providers reviewed
NomuPayTop PickModelAll-in-oneMerchant accountIncluded
ECOMMPAYBest for regulated operatorsModelAll-in-oneMerchant accountIncluded
NMI (Network Merchants Inc)Best Gateway-OnlyModelGateway onlyMerchant accountSeparate acquirer required
NuveiBest for Gaming & CryptoModelAll-in-oneMerchant accountIncluded
PaysafeBest for Online GamingModelAll-in-one platformMerchant accountIncluded
What counts as a high-risk business?
“High-risk” is an industry and acquiring-risk label, informed by card-scheme rules, MCCs, fraud and dispute performance, regulatory exposure and each acquirer’s own underwriting appetite. It is not a moral judgement.
Visa and Mastercard publish category rules, and the acquirers that actually settle your transactions interpret those rules through their own policies.
A merchant ends up classified high-risk for one of three reasons. The first is fraud or dispute performance that breaches the schemes’ monitoring thresholds.
The second is reputational or regulatory exposure the acquirer doesn’t want; the third is a business model that itself carries elevated dispute risk, such as long delivery times, recurring billing, or cross-border sales.
The categories that mainstream UK PSPs reliably decline include online gaming and gambling, adult content, CBD and cannabis-adjacent, firearms and firearms accessories, nutraceuticals and supplements, forex and binary options, crypto services, debt collection, and high-ticket subscription models.
The full list is longer and varies by acquirer. Sector acceptance is also dynamic: a category that was accepted six months ago can become declined after a chargeback spike or a regulatory change.
The practical implication is that “will this PSP take my business” is not a question you can answer by reading the website. You have to apply, declare your full MCC and product mix, and get an underwriting decision.
Mainstream PSPs (Stripe, Square, SumUp) decline the categories on their prohibited lists quickly, usually at signup rather than after any underwriting conversation.
Specialist providers in this guide take these applications on, but the trade-off is time: their underwriting runs to weeks, not the minutes a mainstream signup takes.
Do you need a merchant account, or just a gateway?
This is the structural decision that determines which provider model fits your business. A payment gateway is the technical layer that takes the customer’s card details, encrypts them, and sends them to be authorised.
A merchant account is the financial relationship with an acquiring bank that actually settles the funds into your business bank account.
An all-in-one PSP (Nomupay, ECOMMPAY, Nuvei, Paysafe) bundles both. You sign one contract; the provider underwrites you, runs the gateway, and settles funds.
A gateway-only provider (NMI) does the technical layer alone. You arrange the merchant account separately with a high-risk acquirer, typically through a UK-based ISO who specialises in your sector.
The advantage is acquirer flexibility: if your acquirer terminates the account or repricing turns ugly, you can move to a new acquirer without rebuilding the integration.
The disadvantage is that you’re managing two relationships and two underwriting processes, and the gateway is useless if the acquirer falls through.
For most UK high-risk merchants starting out, all-in-one is the lower-risk path. Gateway-only becomes the right choice once volume and sophistication justify the extra control.
If your real bottleneck is approval rather than checkout technology, start with the underwriters: our guide to the best high-risk merchant accounts compares the firms that will actually underwrite and settle your payments, which is the decision that gateway-only leaves you to make separately.
What payment methods do high-risk gateways support?
Card schemes
All five providers in this guide accept Visa and Mastercard. Amex acceptance is offered subject to underwriting: high-risk merchants don’t always get the same Amex terms as low-risk merchants, and some sectors (regulated gaming) have specific Amex restrictions.
Confirm Amex eligibility for your MCC during the underwriting conversation.
Alternative payment methods
This is where Nomupay leads on breadth (200+ alternative payment methods) and Paysafe leads on gaming-specific coverage (Skrill, Neteller, paysafecard).
For cross-border merchants, alternative payment methods often outperform cards in markets where local payment habits differ from the UK norm: Klarna in DACH countries, iDEAL in the Netherlands, BLIK in Poland, Sofort across Europe.
Recurring and subscription billing
All five providers support tokenisation and recurring billing. Where they differ is in how they handle SCA exemptions on recurring transactions and how they manage card-update services when a customer’s card expires or is replaced.
Subscription merchants should ask about MIT (merchant-initiated transaction) flows specifically.
3DS2 and Strong Customer Authentication
All five providers support 3DS2 and SCA. The difference is in how exemption flows are configured: the right exemption (low-value, trusted beneficiary, transaction risk analysis) materially reduces friction at checkout, and the gateway’s default configuration shapes that.
Ask for the full exemption logic before you integrate.
How to choose a high-risk payment gateway
Sector acceptance
This is the qualifying question. If a provider doesn’t accept your MCC, nothing else matters. Confirm acceptance for your specific category before evaluating any other dimension. Don’t rely on roundup lists, including this one, without verifying directly with the provider for your MCC.
Regulatory status
A directly FCA-authorised counterparty (ECOMMPAY, via Ecommpay Limited, and Nuvei, via Nuvei Financial Services Ltd) is simpler to deal with where the practical difference bites: dispute handling and how relevant funds are safeguarded.
It also gives access to the UK complaints framework, including the Financial Ombudsman Service where you are eligible. The FCA regulates these firms but does not resolve individual merchant disputes itself.
Nomupay does not passport into the UK, because post-Brexit EEA firms cannot, so you contract an overseas entity on its Lithuanian licence. Paysafe’s merchant acquiring runs through an Irish entity regulated by the Central Bank of Ireland, not the FCA.
Neither route is inherently unsafe, but they are not the same as a UK-authorised firm: confirm which legal entity contracts, acquires and settles you, and get the fund-protection terms in writing before you integrate.
Pricing structure
Published pricing does not exist for high-risk gateways. All five providers in this guide quote you bespoke rates after underwriting.
The dimensions that matter are the headline rate per transaction, monthly platform fees, chargeback fees, refund fees, settlement fees, FX margins on multi-currency, and exit costs for early termination. Get all of these in writing before you sign.
Chargeback management
High-risk merchants should expect higher chargeback ratios than low-risk merchants and should treat chargeback tooling as a primary purchasing criterion.
ECOMMPAY and Nomupay both include chargeback management in the platform; NMI requires you to bolt on a separate fraud and chargeback layer (Kount, Signifyd) at additional cost.
Settlement timing
Settlement timing is set by your acquirer and your settlement agreement, not by the gateway. It is often within a few working days, but treat that as something to confirm in writing rather than a guaranteed schedule.
New merchants in higher-risk categories often face an initial holding period before settlement starts. This is normal and is part of how acquirers manage chargeback exposure; confirm the length in your contract rather than assuming it.
Onboarding speed
Plan for weeks, not minutes: high-risk underwriting is a manual review, not an automated signup. Mainstream PSPs approve in minutes precisely because they decline high-risk merchants by policy instead of underwriting them.
Specialist providers spend the time to underwrite properly. The result is fewer mid-trade terminations later. Plan your integration timelines around the underwriting clock, not the technical build.
Verify the provider before you integrate
Regulatory complexity comes down to a short pre-flight check. Because who contracts and who acquires you can be two different entities, in two different countries, get the following in writing before you build anything:
- The exact legal entity you are contracting with, and where it is registered.
- Who acquires and settles your transactions, if that is a different entity.
- Its authorisation: check the FCA register where UK authorisation is claimed, and don’t assume an overseas licence covers UK trade.
- Written confirmation that your specific sector and MCC are accepted.
- The reserve percentage, its release period, and the settlement terms.
- Who carries PCI DSS scope, and how the 3DS2 exemptions are configured.
- What happens on migration or termination, so a single acquirer cannot strand you.
Providers that do not accept high-risk businesses
Stripe
Stripe’s restricted-businesses list is public, and it splits into two tiers that matter here. Outright prohibited: gambling and prize gaming, adult content, cannabis products above the local THC limit, and commission- or recruitment-driven multi-level marketing.
But several categories people assume are banned are only restricted, meaning allowed after extra due diligence or sales sign-off: legal firearms, low-THC CBD, crypto exchanges, tobacco and vaping, and regulated pharmacy.
In practice, then, Stripe declines its prohibited categories at signup and gates the restricted ones behind approval, rather than rejecting everything labelled high-risk.
Merchants who assume acceptance are still caught out by termination after a chargeback-ratio breach. Check your exact activity against Stripe’s current list before you build on it.
Square and SumUp
Square publishes a flat prohibited-industries list, betting and gaming, adult services, firearms and weapons, remote sales of age-restricted goods, and unauthorised multi-level marketing among them.
SumUp frames its list as “incompatible business types”, and bans more outright: gambling, adult, firearms, investments and cryptocurrency, and CBD, while restricting tobacco and pharmacy to in-person sales only.
Both are built and priced for low-risk acceptance rather than specialist underwriting. Useful for low-risk in-person retail; not a route for high-risk e-commerce.
Authorize.net
Authorize.net is a North American product. Its UK page (authorize.net/en-gb) directs UK merchants to contact Cybersource instead.
UK developers sometimes attempt to integrate Authorize.net because it appears in generic gateway lists; it is not an option for UK-based merchants. The closest UK-available equivalent in the gateway-only category is NMI.
Frequently asked questions
Why was my application declined by a mainstream PSP?
The most common reasons your application gets declined are MCC code mismatch, prohibited product or service category, projected chargeback ratio, regulatory exposure (gaming licensing, FCA registration for crypto), or company structure (offshore parent, beneficial ownership unclear). Mainstream PSPs decline by policy rather than after an underwriting conversation, so the rejection email rarely names the actual trigger for you.
Can I use a low-risk gateway for a high-risk business if my chargebacks are low?
Usually not. Acceptance is driven mainly by your category (MCC), business model and product, not by your individual chargeback ratio, and the underwriting filters on those before your transaction history matters. Low chargebacks help you keep an account once you are underwritten; they rarely change the qualifying step at the door.
How much do high-risk payment gateways cost?
There is no published rate card, so treat the cost as a stack of components rather than a single headline number: a percentage rate per transaction, a fixed fee per transaction, monthly platform and gateway fees, a chargeback fee, and often a rolling reserve held back from settlement. Each is sector-driven, regulated gaming, adult, and CBD price higher than supplements or subscriptions, and all five providers quote bespoke rates after underwriting. Get every component in writing before you compare offers, because a low headline rate can hide an expensive reserve or chargeback fee.
How long does high-risk underwriting take?
Plan for several weeks rather than the minutes a mainstream signup takes. Much faster than that usually means the provider is declining at the desk-review stage rather than underwriting properly; much slower usually means your application is missing documentation. Provide full company structure, projected volume, sample transactions, and any past processing history upfront to keep the clock moving.
What happens if my account is terminated mid-trade?
The acquirer may continue holding funds under any rolling-reserve or withholding provisions in your contract, releasing them only after the period it specifies, and if you have an active chargeback case the money is held until it resolves. The practical implication is that merchants in high-risk categories should never carry single-acquirer concentration risk: mid-trade termination is rare but recoverable, whereas mid-trade termination with no backup is existential. Many established high-risk merchants run a backup acquirer relationship as a matter of policy.
Is Nomupay the same company as Total Processing?
Yes, Nomupay acquired Total Processing in 2023 and rebranded the UK operation onto the Nomupay platform. The totalprocessing.com domain now redirects to nomupay.com. The UK underwriting team and most of the operational expertise carried across, which is the editorially relevant point: the high-risk experience that earned Total Processing its reputation now sits inside Nomupay. One caveat worth carrying forward, though, is that the platform now runs on Nomupay’s overseas licensing rather than a UK authorisation of its own.
How we reviewed Payment Gateways for High-Risk Businesses (UK, 2026)
Ranking criteria. We rank on what actually decides your application and what we can verify: the processing model (gateway-only versus bundled), sector fit, the regulatory and contracting route, and each provider’s limits. Cost, reserves and settlement are quote-specific, so we tell you which components to compare rather than invent figures.
Data sources. We read each provider’s accepted-industry lists and published terms directly, and in August 2026 re-checked regulatory status and contracting entities against the FCA register and the Bank of Lithuania register. Where pricing is quoted only after underwriting, we say so rather than invent a rate.
Update cadence. We re-verify every provider on this page at least monthly, and whenever a provider changes pricing, eligibility, or terms. The verification date on the page reflects the most recent full review.
Affiliate disclosure. Nomupay is our featured affiliate partner, and some links on this page are affiliate links. Our recommendations are based on verified sector acceptance, regulatory status, and product fit, not commission. See our editorial policy.