Mastercard MCC 5968 Reclassification: What Subscription Merchants Need to Know in 2026

A merchant can process recurring payments successfully for years and still receive an unexpected notice that its merchant category code is changing.

For a supplement brand, membership business, coaching company, SaaS platform, telehealth provider, subscription box, or another continuity merchant, a reclassification to MCC 5968 can raise immediate questions:

  • Is the account being labeled high risk?

  • Will pricing or reserves change?

  • Does the merchant need a new processor?

  • Is termination coming next?

  • Was the account miscoded from the beginning?

The correct answer is not the same for every recurring business.

Mastercard defines MCC 5968 as Direct Marketing: Continuity/Subscription Merchants. Its current Quick Reference Booklet describes merchants in this category as selling subscription products or services through direct mail, phone, the Internet, or another direct-marketing method, with the cardholder billed on a continuing or periodic basis.

However, Mastercard also requires acquirers to assign the valid MCC that most reasonably and fairly describes the merchant's primary business. That means recurring billing by itself does not automatically make MCC 5968 correct for every SaaS company, medical practice, membership organization, coaching program, utility, insurer, or gym.

Quick answer: MCC 5968 is Mastercard's category for certain direct-marketed continuity and subscription merchants. It can apply when a business sells products or services remotely and bills the cardholder periodically until the subscription ends or is canceled. Mastercard's specific specialty-registration rule is narrower: it expressly identifies high-risk negative-option merchants selling physical products. Reclassification is not automatically a termination, penalty, or finding of misconduct, but it can lead to renewed underwriting, registration, pricing, reserve, and monitoring questions.

What Does MCC 5968 Mean?

A merchant category code, or MCC, is a four-digit code used to identify the type of business accepting a card payment.

The code is not merely a website label. It is transmitted through the payment system and can help issuers, card networks, processors, and acquirers interpret the nature of the transaction and manage risk.

Mastercard's June 2, 2026 Quick Reference Booklet describes MCC 5968 as applying to merchants that sell subscription products or services through direct-marketing methods and bill the cardholder on a continuing or periodic basis. The subscription continues until it expires or either party terminates the agreement.

Mastercard lists examples including:

  • Book, magazine, and newspaper subscriptions

  • Collectible subscription series

  • Health-care product subscriptions

  • Cosmetics subscriptions

  • Vitamin subscriptions

  • Credit-card registration service companies

The valid transaction category code, or TCC, for these non-face-to-face transactions is TCC T.

MCC and TCC are related, but they are not interchangeable.

  • MCC 5968 identifies the merchant's business category.

  • TCC T identifies the transaction as non-face-to-face.

  • Recurring-payment and stored-credential indicators identify how a particular payment was initiated.

Correct continuity merchant processing requires the complete transaction to be represented accurately—not merely the four-digit MCC.

Is MCC 5968 a New Mastercard Rule for 2026?

No. MCC 5968 and Mastercard's subscription requirements existed before 2026.

Mastercard's own subscription FAQ referenced MCC 5968 in 2022. The more accurate 2026 story is that Mastercard's current documents continue to require accurate MCC assignment while placing specialty merchants and their acquirers under a more structured registration and monitoring framework.

One change makes the subject especially timely.

Mastercard's August 4, 2026 Security Rules and Procedures—Merchant Edition states that, effective May 1, 2026, a Mastercard customer must not engage in specialty-merchant acquiring activity without Mastercard's express prior written consent. Customers already acquiring for registered specialty merchants before that date are deemed to have consent. A later October 1, 2026 effective date applies in most of the Europe Region.

That rule is directed at Mastercard customers—typically acquiring institutions—not directly at the merchant. Still, it gives acquirers another reason to review whether merchants in their portfolios are correctly coded, properly registered when required, and supported by the right acquiring program.

This is a reasonable explanation for why some established merchants may be receiving classification questions now. It should not be presented as proof that every 2026 MCC review was triggered by Mastercard or that every subscription merchant must be moved to 5968.

The Most Important Scope Distinction: Subscription Billing Is Not Automatically MCC 5968

This is where many summaries become too broad.

Mastercard's general MCC 5968 description includes subscription products or services sold through direct-marketing methods. At the same time, Mastercard requires the MCC to fairly describe the merchant's primary business and expressly excludes certain recurring transactions from MCC 5968.

For example, the Quick Reference Booklet directs:

  • Utility payments to MCC 4900

  • Private athletic-club monthly dues to MCC 7997

  • Insurance premiums to MCC 6300

Other industries may also have a more specific MCC that accurately describes what the business primarily sells.

Mastercard reinforces this distinction in its subscription and negative-option billing FAQ. The subscription and free-trial requirements can apply even when a merchant is not using MCC 5968.

The practical lesson is simple:

A recurring-payment model and an MCC classification are two different compliance questions.

A SaaS company may have subscription billing without MCC 5968 being the most accurate code. A medical business may charge a recurring membership while its primary business remains a medical service. A coaching company may collect monthly payments for a fixed-term program rather than operate an open-ended negative-option subscription.

The correct classification depends on the full business model, not the presence of the word “monthly” on a checkout page.

What Is Negative-Option Billing?

Negative-option billing generally means the customer agrees that charges or deliveries will continue unless the customer takes action to cancel, the merchant terminates the arrangement, or the subscription expires.

It can include a trial that converts into paid recurring shipments, but a trial is not required in every negative-option arrangement.

Mastercard's specialty-merchant section is titled Negative Option Billing Merchants Selling Physical Products. It describes remote subscription programs in which customers automatically receive physical products—such as cosmetics, health-care products, or vitamins—on a recurring basis.

For non-face-to-face high-risk negative-option billing involving physical products, Mastercard requires the merchant and certain service providers with access to account data to be registered through the acquirer. The transactions must be identified with MCC 5968 and TCC T.

This is the clearest mandatory use case in the current rules.

It is also why supplement continuity programs, vitamin auto-ship offers, cosmetics subscriptions, and some direct-response physical-product businesses deserve immediate attention. Align's guide to supplement and nutraceutical merchant accounts explains the additional underwriting pressure created by continuity offers, free trials, product claims, fulfillment, and recurring-charge disputes.

Which Recurring Businesses May Be Affected?

The strongest MCC 5968 candidates are businesses whose primary model closely matches Mastercard's published description:

  • Subscription products or services sold remotely through direct marketing

  • Continuity or auto-ship programs that continue until canceled

  • Trial-to-paid physical-product subscriptions

  • Vitamin, supplement, cosmetics, or health-care product subscriptions

  • Book, magazine, newspaper, collectible, or similar subscription series

  • Businesses already identified by an acquirer as high-risk negative-option physical-product merchants

Other recurring businesses may receive a review without necessarily belonging in MCC 5968:

  • SaaS and software platforms

  • Online memberships and communities

  • Coaching, consulting, and education programs

  • Telehealth and medical-membership businesses

  • Digital-content subscriptions

  • Associations, clubs, and nonprofit memberships

  • Installment plans for a defined product or service

For those businesses, the question is not simply whether payments recur. The review should determine:

  1. What the merchant primarily sells

  2. Whether the agreement is open-ended, fixed-term, or installment-based

  3. Whether the customer receives physical products, services, memberships, or digital goods

  4. How the offer is marketed and accepted

  5. Whether another Mastercard MCC more accurately describes the primary business

  6. Whether the transaction messages contain the correct recurring and stored-credential indicators

Why Can a Merchant Be Reclassified After Years of Processing?

Long processing history does not permanently lock an account into its original MCC.

Mastercard requires acquirers to provide a valid, accurate MCC that most reasonably and fairly describes the merchant's primary business. Its Security Rules also require acquirers to monitor merchants regularly and focus on changes in activity, activity that does not match the represented business, and exceptional transaction patterns.

A reclassification can occur because:

The original MCC was incomplete or inaccurate

The merchant may have been boarded under a broad ecommerce, professional-services, software, or retail category even though the actual operating model more closely matched continuity billing.

The business model changed

A company that began with one-time sales may have added auto-ship, a paid membership, a free trial, or a significant subscription component. If recurring revenue becomes the primary business, the original MCC may no longer be the best description.

The acquirer is reviewing its specialty-merchant portfolio

The 2026 prior-consent rule for specialty-merchant acquiring, current registration standards, or an internal compliance audit may prompt a processor or acquirer to validate merchant coding and registration.

The merchant changed processors, payment facilitators, or acquiring banks

A new institution is responsible for its own underwriting and coding decisions. It does not have to preserve the prior provider's classification if its review reaches a different conclusion.

The website or transaction activity no longer matches the application

New products, new URLs, trial offers, upsell funnels, affiliate traffic, altered cancellation practices, or changes in transaction behavior can cause the processor to revisit the account.

A card-network, issuer, monitoring, or dispute signal triggered a review

An MCC change may arise during a broader risk review. As explained in Align's article on the Mastercard Scam Merchant Monitoring Program, however, a monitoring signal should not automatically be treated as proof of wrongdoing.

The same principle applies here: an MCC review is a classification process, not a verdict on the legitimacy of the merchant.

Does Reclassification to MCC 5968 Mean the Account Is Being Terminated?

No—not by itself.

An MCC correction is not the same thing as a notice of termination, a Mastercard MATCH Pro listing, or a finding that the merchant violated the rules.

The outcome depends on the acquiring relationship.

The current provider may:

  • Update the MCC and continue processing

  • Request additional underwriting documents

  • Register the merchant if specialty registration is required

  • Move the account into a compatible program

  • Amend pricing, reserves, volume limits, or other risk terms

  • Require changes to the website, checkout, billing, fulfillment, or cancellation process

  • Decide that it does not support the category and ask the merchant to transition elsewhere

Merchants should not assume the best or worst outcome before receiving the actual decision in writing.

Ask whether the notice is:

  • A data correction only

  • A request for information

  • A conditional continuation of processing

  • A change in merchant-account terms

  • A migration to another acquiring program

  • A formal termination or non-renewal

Those are materially different events.

How MCC 5968 Can Affect Underwriting

MCC 5968 can cause an institution to examine the business through a continuity-risk lens.

For a physical-product negative-option merchant, the acquirer may need to complete Mastercard specialty registration and confirm that the business complies with applicable law and Mastercard standards. Mastercard's registration requirements call for detailed information about the business, owners, products or services, payment procedures, cardholder disclosures, return policies, data practices, prior business relationships, and website URLs.

Even when specialty registration is not required, an underwriter may review:

  • The complete customer journey from advertisement through cancellation

  • Trial, subscription, and rebill disclosures

  • Proof of affirmative customer consent

  • Billing cadence and amounts

  • Fulfillment and delivery timelines

  • Refund, return, and cancellation performance

  • Customer-service staffing and response times

  • Billing descriptors

  • Affiliate and advertising controls

  • Chargeback, fraud, and refund trends

  • Financial capacity to cover refunds, disputes, and future obligations

This is why being reclassified after years of low chargebacks can still feel disruptive. Chargebacks matter, but they are not the only part of underwriting.

Will MCC 5968 Automatically Increase Pricing or Create a Reserve?

No Mastercard source reviewed for this article establishes an automatic merchant price increase or mandatory reserve merely because MCC 5968 is assigned.

Pricing and reserves are generally set through the merchant's processor and acquiring relationship, subject to the merchant agreement, applicable program rules, and underwriting review.

The MCC change can still affect the economics indirectly.

An acquirer may decide that the corrected classification requires:

  • A different processing program

  • An annual registration or program cost passed through under the merchant agreement

  • Higher risk pricing

  • A rolling reserve or fixed reserve

  • Delayed funding

  • Lower monthly volume or ticket limits

  • Additional monitoring or compliance fees

None of those outcomes should be described as universal.

Merchants should request the complete effect in writing, including:

  • New processing rates and per-transaction fees

  • Monthly, annual, registration, and compliance fees

  • Reserve percentage, duration, and release mechanics

  • Funding schedule

  • Volume and average-ticket limits

  • Contract term and termination provisions

  • Effective date of each change

The correct response is not to argue that low chargebacks make classification irrelevant. It is to require a clear explanation of what is changing and why.

Will MCC 5968 Change Monitoring?

It can.

Mastercard requires ongoing monitoring across merchant portfolios. Its specialty-merchant rules add monitoring requirements for the covered categories, including negative-option billing transactions. For applicable merchants, the acquirer must ensure that the merchant has real-time and batch procedures designed to identify simultaneous, consecutive, or excessive transaction attempts using the same account number and complies with Mastercard fraud-control standards.

The practical monitoring picture may include:

  • Authorization attempts and retry behavior

  • Refund and chargeback trends

  • Duplicate or repeated account activity

  • Trial conversion complaints

  • Cancellation and refund responsiveness

  • Transaction laundering or undisclosed URLs

  • Marketing and product changes

  • Descriptor recognition

  • Fulfillment and delivery performance

MCC 5968 does not replace other Mastercard requirements. A merchant can also be reviewed under chargeback, fraud, scam-merchant, data-integrity, or other applicable programs based on the facts.

What Documentation Should a Merchant Prepare?

Do not wait for a two-day deadline from the processor. Build the file before a notice arrives.

Business and account records

  • Legal entity documents, DBA records, tax ID, ownership information, and business licenses

  • A list of every merchant ID, processor, acquirer, payment facilitator, gateway, CRM, and billing platform

  • The current MCC shown by each provider, if available

  • Twelve months of processing statements or all available history

  • Current monthly volume, average ticket, highest ticket, refunds, and chargebacks

Offer and customer-journey evidence

  • Screenshots of advertisements, landing pages, product pages, checkout, order confirmation, and account-management screens

  • A plain-language description of every one-time, installment, trial, subscription, and auto-ship offer

  • The price, billing frequency, trial length, renewal timing, minimum commitment, and cancellation terms for each offer

  • Records showing how customers affirmatively accept recurring billing

  • Confirmation emails, renewal reminders, receipts, and cancellation confirmations

Fulfillment and customer service

  • Supplier, inventory, and fulfillment agreements

  • Sample shipping and tracking records for physical products

  • Service-delivery records for coaching, software, memberships, telehealth, or other services

  • Refund and cancellation logs

  • Customer-service channels, hours, response expectations, and escalation process

  • Complaint themes and documented corrective actions

Risk and compliance controls

  • Current terms, privacy, refund, return, shipping, and cancellation policies

  • Affiliate agreements and marketing-approval procedures

  • Fraud-screening rules, 3-D Secure configuration, AVS controls, and retry logic

  • Chargeback-alert and representment workflows

  • PCI DSS documentation and a data-flow map showing which vendors can access account data

  • A list of every website and URL that can generate transactions

Not sure how an acquirer would view your current setup? Request an MCC and payment-risk review. Align Ecommerce can review the business model, payment structure, processing history, customer journey, and documentation readiness before a classification notice becomes an account emergency.

Never Try to Avoid MCC 5968 Through Miscoding

If MCC 5968 is accurate, asking a provider to hide the business under a different code is not a risk strategy.

Mastercard requires a valid and accurate MCC that fairly describes the merchant's primary business. Deliberately using a misleading code, processing through an unrelated entity, omitting subscription URLs, or presenting one-time sales while running undisclosed continuity billing can create a more serious problem than the original reclassification.

Potential consequences can include:

  • Transaction declines or account restrictions

  • Withheld funding or reserves under the merchant agreement

  • Processor or acquirer termination

  • Card-network compliance review

  • Questions about transaction laundering or misrepresentation

  • Greater difficulty obtaining another properly underwritten merchant account

Multiple merchant IDs are not inherently improper. Separate MIDs may be appropriate for genuinely distinct legal entities, sales channels, brands, products, or transaction types when they are fully disclosed and approved. They should never be used to disguise activity, split volume to avoid monitoring, or route transactions under an inaccurate category.

How to Request an MCC 5968 Review

The merchant normally cannot change the MCC directly inside a gateway dashboard. Mastercard places MCC-assignment responsibility on the acquirer.

Submit a written request through the merchant-services provider, payment facilitator, or acquiring relationship responsible for the merchant account.

The request should:

  1. Identify the legal entity, DBA, merchant ID, website, and current MCC.

  2. Ask for the proposed MCC, effective date, and reason for the change.

  3. Describe the primary product or service and how revenue is generated.

  4. Break down revenue between one-time sales, installments, subscriptions, and auto-ship.

  5. Explain whether the agreement is fixed-term or continues until canceled.

  6. Identify whether physical products, services, memberships, or digital goods are delivered.

  7. Provide screenshots of checkout disclosures and post-purchase communications.

  8. Cite the Mastercard MCC description you believe most accurately fits the primary business.

  9. Ask whether specialty registration is required and who is responsible for completing it.

  10. Request every pricing, reserve, funding, monitoring, and contract change in writing.

Use neutral language. The strongest position is not “we do not want MCC 5968.” It is:

“We want the merchant account and transaction data to be coded accurately. Based on the attached business-model and revenue documentation, please confirm which MCC most reasonably and fairly describes our primary business and identify any related registration or account changes.”

If the first response comes from frontline support without an explanation, ask for the issue to be reviewed by underwriting, risk, compliance, or the acquiring institution.

What Subscription Merchants Should Do Now

First, identify the MCC currently assigned to every merchant account. Do not assume that the code shown by a shopping cart, analytics tool, or cardholder statement is authoritative.

Second, map every recurring offer. Separate open-ended subscriptions, fixed-term installments, annual renewals, physical-product auto-ship, service memberships, and one-time purchases.

Third, compare the primary business against Mastercard's current MCC descriptions and exclusions.

Fourth, confirm that the gateway and processor are transmitting recurring, stored-credential, and merchant-initiated transactions correctly. A correct MCC does not repair incorrect transaction indicators.

Fifth, assemble the underwriting file before the processor requests it.

Finally, if the provider changes the MCC or terms, obtain the decision in writing and determine whether the account remains economically and operationally viable.

The Bottom Line on Mastercard MCC 5968

MCC 5968 is not a punishment code, and a reclassification is not automatically an account termination.

It is a business-category decision with real operational consequences.

For a high-risk negative-option physical-product merchant, Mastercard's current rules are explicit about MCC 5968, TCC T, and specialty registration. For SaaS, memberships, coaching, telehealth, and other recurring services, the answer can be more nuanced because the MCC must still fairly describe the merchant's primary business.

The worst response is to ignore the notice or search for a processor willing to miscode the account.

The better response is to document the business, confirm the correct classification, understand the underwriting consequences, and build a payment structure that accurately matches how customers are sold, billed, and served.

Request an MCC and payment-risk review from Align Ecommerce. We can help evaluate your current MCC, recurring-payment model, statements, website, checkout, documentation, and processor notice before you accept a change or move the account.

This article is educational and does not constitute legal advice or a guarantee of processor, acquirer, issuer, or card-network outcomes. Mastercard rules, regional requirements, and institutional policies can change. Confirm the current requirements with your acquiring institution and Mastercard's official rules and compliance page.

Joshua Cobian, President of Align E-Commerce

Joshua
Cobian

President of Align E-Commerce

Joshua Cobian is the President of Align Ecommerce, a Las Vegas-based payment processing firm specializing in ecommerce, high-risk merchant accounts, and emerging verticals. With over a decade of industry experience, he helps businesses secure reliable payment infrastructure, reduce risk, and scale with confidence.

Mastercard MCC 5968
2026 FAQ

MCC 5968 is Mastercard’s merchant category for Direct Marketing: Continuity/Subscription Merchants. It can apply to merchants selling subscription products or services remotely and billing cardholders on a continuing or periodic basis until the agreement ends or is canceled.

No. Mastercard requires the MCC that most reasonably and fairly describes the merchant’s primary business. Mastercard expressly assigns some recurring payments—such as utilities, insurance premiums, and private athletic-club dues—to other MCCs. Subscription requirements can also apply to merchants that do not use MCC 5968.

Mastercard’s general MCC description includes subscription products or services. However, its specific specialty-registration rule expressly covers high-risk non-face-to-face negative-option merchants selling physical products, including certain health-care products, vitamins, cosmetics, magazines, and newspapers.

No. A reclassification is not automatically a termination, penalty, or MATCH Pro listing. The processor or acquirer may update the code, request documents, register the merchant, change account terms, move the account to another program, or decide it cannot support the category.

No universal Mastercard price increase or mandatory reserve applies solely because MCC 5968 is assigned. The processor or acquirer may change pricing, reserves, funding, limits, or monitoring after underwriting review, subject to the merchant agreement and applicable program requirements.

The original MCC may have been inaccurate, the business model may have changed, a new processor may classify the business differently, or the acquirer may be conducting a portfolio or specialty-registration review. Long processing history does not permanently fix the MCC.

You can request a documented review and provide evidence showing which MCC best describes the primary business. You should not ask a provider to use an inaccurate code simply to avoid underwriting, registration, monitoring, or pricing consequences.

Provide the legal entity and MID, website URLs, current and proposed MCCs, revenue breakdown, offer structure, billing cadence, cancellation terms, checkout screenshots, processing history, refund and chargeback data, fulfillment evidence, and a clear description of the primary product or service.

Next
Next

Credit Repair Payment Processing in 2026: How to Get Approved for a Merchant Account