The MATCH List for Gambling Merchants: What the Rulebook Actually Says

Nobody tells a gambling merchant they have been put on MATCH. No letter or email goes out, and nothing appears in a dashboard. The listing happens inside the acquirer's risk system within 5 calendar days of the decision to terminate, and the merchant usually discovers it weeks later, when a replacement application that looked routine comes back declined and the new acquirer will not say much about why.

The system, now formally called MATCH Pro, is defined in Chapter 11 of Mastercard's Security Rules and Procedures, Merchant Edition, in its August 4, 2026 edition. Removal services sell an early exit, and outside code 12 and listings filed in error, those rules do not provide one. They do give the listed merchant a short list of rights that cost nothing to exercise.

How a merchant gets added to the MATCH list

MATCH stands for Mastercard Alert To Control High-risk Merchants. If either side moves to terminate the acquiring relationship and, at that moment, the acquirer has reason to believe one of the listing conditions exists, the acquirer must add the merchant to MATCH Pro within 5 calendar days. The clock starts at the acquirer's decision to terminate or at the merchant's notice, whichever comes first, whatever the effective date of the termination. Adding and inquiring are both mandatory, and Mastercard requires every acquirer with merchant activity to use the system. An acquirer that signs a merchant without inquiring first risks losing a compliance case filed by that merchant's next acquirer, and each failure to inquire can draw an assessment of up to USD 5,000.

MATCH Pro is open to more than acquirers. Third-party processors, payment facilitators and data storage entities that Mastercard approves and an acquirer registers can query it too, so the PSP considering your application can surface the listing even when it is not the acquiring bank. American Express acquirers report into the same database under their own thresholds, so a termination on the Amex side can seed the listing that later blocks a Mastercard application. Matching also runs backward. For 365 days after an inquiry, MATCH Pro alerts the acquirer that inquired when someone else lists the same merchant, so an acquirer that inquired in March gets an alert on a September listing.

The data in a listing is why the "fresh LLC" plan fails. A listing carries the merchant's legal name, DBA, addresses, phone numbers, URLs, tax IDs, and up to five principal owners with their names, dates of birth, addresses, driver's license numbers, email addresses and, in the US, Social Security numbers. Matching runs on exact and phonetic logic, so "Easy" matches "EZ" and "Lee" matches "Li" and "Leigh." A new entity with the same UBO surfaces as a possible match on the principal, which is what the system was built to do.

MATCH reason codes and thresholds

The rules list eleven codes an acquirer can use, down from fourteen in earlier editions. Common Point of Purchase is folded into Account Data Compromise (01), Fraud Conviction (07) and Merchant Collusion (11) are gone from the table, and Coercion (06) was added in 2025.

Three of these matter most in gambling: 04 for the chargeback book, 10 for the miscoded book and 13 for the unlicensed book. The difference shapes the next application, because a code 04 listing has a remediation story an underwriter can price (ratios improve, evidence exists), while 10 and 13 are findings about what the business is, and no processing statement talks an underwriter out of those.

Merchant rights on the MATCH list

Chapter 11 gives a terminated merchant five rights to learn and challenge what was filed.

First, the merchant is entitled to the identity of the lister and the code. Acquirer requirement 10 in Chapter 11 reads: "The Acquirer is required to supply to the MATCH Merchant or another Acquirer the ICA of who added the MATCH Merchant and the reason code." That one sentence hands the merchant the information removal services charge to dig up, so ask the terminating acquirer for it in writing.

Second, the deadlines fall on the acquirer. It must respond to a removal request within 30 calendar days and to questions about a listing within 7 calendar days, and Mastercard can demand copies of those responses. A merchant that gets no answer can say, accurately, that the acquirer is out of compliance with its own network's rules.

Third, the merchant can do this without a lawyer. Under Section 11.5.1, "there is no requirement for a MATCH Merchant to engage legal counsel regarding a request to be removed from MATCH Pro." A removal request needs four things: the current or previous merchant name, the address, the principal owner's first and last name, and the website URL if there is one. Lawyers add leverage in a real dispute, since forcing information out of Mastercard itself takes discovery or a subpoena, but the opening moves are written requests the merchant can send itself.

Fourth, the listing cannot be used as a debt-collection stick. Requirement 8 bars an acquirer from using or threatening MATCH over "minor MATCH Merchant discretionary activity," and one of the defined reason codes must exist or be suspected at the decision to terminate. An acquirer that says "settle your reserve dispute or we'll list you" is exposing itself to a noncompliance assessment.

Fifth, accuracy is the acquirer's problem. The data filed must match what the merchant provided at onboarding, and an acquirer that files erroneous data and fails to correct it within a reasonable time faces assessments. If the listing misstates the entity, the dates or the principals, the error-correction path below is open.

How to get removed from the MATCH list

Mastercard removes a listing in two situations. The listing acquirer reports that it added the merchant in error, or the listing is under reason code 12 and the merchant has since become PCI DSS compliant. For code 12 the request goes to Mastercard in writing with the acquirer's attestation and a letter or certificate of validation from a Mastercard certified forensic examiner. If the acquirer will not submit it, the merchant can send the same request to Mastercard itself, which makes code 12 the only listing a merchant can clear on its own initiative.

Every other listing runs the full 5 years with no early-removal process, so a service that guarantees removal of a correctly filed listing outside code 12 is selling something the rules do not provide.

Processing under a different name: the FTC Cliq case

Sooner or later a terminated operator hears the pitch: a processor who can board you "under a different name," or an aggregator who will run your volume through an account that already exists. Cliq, formerly CardFlex, shows where that road goes. The FTC charged CardFlex in 2014 over the I Works scheme for boarding merchants it knew were on industry high-risk lists, and the case ended in a 2015 order. In January 2026 the FTC asked the court to hold the processors in contempt of that order. On May 13, 2026, a federal court in Nevada held Cliq and two of its executives in civil contempt and imposed $6.5 million in sanctions. The court found that Cliq processed hundreds of millions of dollars for merchants on the MATCH list, helped merchants process under different names and shifted transactions from closed accounts to live ones.

The re-boarding pitch sells the conduct the court sanctioned, and on the network side that conduct is reason code 03 waiting to attach to every merchant involved. The merchants in the Cliq case were not gambling businesses. MATCH listings stay between acquirers and the service providers Mastercard approves, so a gambling operator's listing becomes public only when litigation drags it into the open.

Can a MATCH-listed merchant get a merchant account?

One line in the rules changes the question, and Chapter 11 makes the point twice, in the system-features section and again in the inquiry rules: "For the avoidance of doubt, an Acquirer may onboard a MATCH Merchant listed in MATCH Pro." MATCH works as an alert, and the system exists so that an acquirer prices the risk knowingly. The practical question is who chooses to.

Stripe cannot process for MATCH-listed businesses outside extenuating circumstances such as identity theft. US high-risk specialists do board MATCH-listed merchants and price the listing into the rate and the reserve. The one MATCH clause a merchant signs, its consent to being listed on termination, sits in the standard agreements of major PSPs. Beyond that clause, the iGaming PSPs decide on MATCH-listed applicants case by case at underwriting, which is why the acquirer underwriting file matters more after a listing than before it, and why "who takes post-MATCH merchants" has one accurate answer: the ones your documentation convinces.

Crypto rails sit outside this system. MATCH Pro access belongs to Mastercard acquirers and the service providers they register, and an on-chain deposit touches neither, so a listing does not block that lane the way it burdens a card application. The licensed gateways still run their own KYB and AML, so a business that lost its card acquiring under code 13 will face the same questions in different words.

What a MATCH listing costs a gambling operator

The 5-year term sets the cost. An operator listed under code 04 in 2026 gets back to normal card acquiring in 2031 at the earliest and spends the years between on specialist pricing at multiples of tier-one rates. Keeping a book clear of code 04 and of the Visa VAMP and Mastercard ECP and EFM programs costs far less than that. By the time the termination letter arrives, the listing decision has already been made in a risk meeting the merchant never attended. From then on the rules give the merchant its reason code and two deadlines to hold the acquirer to, and the 5-year clock sets the rest of the plan.

FAQ

Can I check whether I am on MATCH before applying anywhere?

Not directly. MATCH Pro has no merchant-facing query, and inquiry access belongs to acquirers and the service providers they register. The route the rules back is the terminating acquirer, which must supply the reason code and the lister's ICA on request. A written request to the former acquirer is faster and cleaner than burning applications to test for a listing.

Who can remove a MATCH listing?

Mastercard, in two cases. The acquirer that filed the listing can report it as an error, or, for a code 12 listing, the acquirer or the merchant itself can submit a validated PCI DSS compliance package. Mastercard does not arbitrate whether a correctly filed listing was deserved, so every other listing stays the full 5 years.

Does MATCH exist outside the United States?

Yes. MATCH Pro is a global Mastercard system, and participation is mandatory for Mastercard acquirers "unless excused by Mastercard or prohibited by law." Visa runs its own mandatory equivalent, the Visa Merchant Screening Service, where acquirers add terminated merchants within 1 business day and screening looks back 5 years. Clearing one network's file does not clear the other's.

Will forming a new company get around a listing?

No. MATCH Pro stores up to five principal owners per listing with their personal identifiers, runs exact and phonetic matching, and alerts retroactively for 365 days after an inquiry, so a new entity with the same principals surfaces as a possible match on the people. The versions of this plan that use a cooperative processor and someone else's merchant account are the conduct a federal court sanctioned at $6.5 million on May 13, 2026.