Mastercard MCC 5968 Reclassification: What Subscription Merchants Need to Know in 2026
A merchant can process recurring payments successfully for years and still receive an unexpected notice that its merchant category code is changing.
For a supplement brand, membership business, coaching company, SaaS platform, telehealth provider, subscription box, or another continuity merchant, a reclassification to MCC 5968 can raise immediate questions:
Is the account being labeled high risk?
Will pricing or reserves change?
Does the merchant need a new processor?
Is termination coming next?
Was the account miscoded from the beginning?
The correct answer is not the same for every recurring business.
Mastercard defines MCC 5968 as Direct Marketing: Continuity/Subscription Merchants. Its current Quick Reference Booklet describes merchants in this category as selling subscription products or services through direct mail, phone, the Internet, or another direct-marketing method, with the cardholder billed on a continuing or periodic basis.
However, Mastercard also requires acquirers to assign the valid MCC that most reasonably and fairly describes the merchant's primary business. That means recurring billing by itself does not automatically make MCC 5968 correct for every SaaS company, medical practice, membership organization, coaching program, utility, insurer, or gym.
Quick answer: MCC 5968 is Mastercard's category for certain direct-marketed continuity and subscription merchants. It can apply when a business sells products or services remotely and bills the cardholder periodically until the subscription ends or is canceled. Mastercard's specific specialty-registration rule is narrower: it expressly identifies high-risk negative-option merchants selling physical products. Reclassification is not automatically a termination, penalty, or finding of misconduct, but it can lead to renewed underwriting, registration, pricing, reserve, and monitoring questions.
What Does MCC 5968 Mean?
A merchant category code, or MCC, is a four-digit code used to identify the type of business accepting a card payment.
The code is not merely a website label. It is transmitted through the payment system and can help issuers, card networks, processors, and acquirers interpret the nature of the transaction and manage risk.
Mastercard's June 2, 2026 Quick Reference Booklet describes MCC 5968 as applying to merchants that sell subscription products or services through direct-marketing methods and bill the cardholder on a continuing or periodic basis. The subscription continues until it expires or either party terminates the agreement.
Mastercard lists examples including:
Book, magazine, and newspaper subscriptions
Collectible subscription series
Health-care product subscriptions
Cosmetics subscriptions
Vitamin subscriptions
Credit-card registration service companies
The valid transaction category code, or TCC, for these non-face-to-face transactions is TCC T.
MCC and TCC are related, but they are not interchangeable.
MCC 5968 identifies the merchant's business category.
TCC T identifies the transaction as non-face-to-face.
Recurring-payment and stored-credential indicators identify how a particular payment was initiated.
Correct continuity merchant processing requires the complete transaction to be represented accurately—not merely the four-digit MCC.
Is MCC 5968 a New Mastercard Rule for 2026?
No. MCC 5968 and Mastercard's subscription requirements existed before 2026.
Mastercard's own subscription FAQ referenced MCC 5968 in 2022. The more accurate 2026 story is that Mastercard's current documents continue to require accurate MCC assignment while placing specialty merchants and their acquirers under a more structured registration and monitoring framework.
One change makes the subject especially timely.
Mastercard's August 4, 2026 Security Rules and Procedures—Merchant Edition states that, effective May 1, 2026, a Mastercard customer must not engage in specialty-merchant acquiring activity without Mastercard's express prior written consent. Customers already acquiring for registered specialty merchants before that date are deemed to have consent. A later October 1, 2026 effective date applies in most of the Europe Region.
That rule is directed at Mastercard customers—typically acquiring institutions—not directly at the merchant. Still, it gives acquirers another reason to review whether merchants in their portfolios are correctly coded, properly registered when required, and supported by the right acquiring program.
This is a reasonable explanation for why some established merchants may be receiving classification questions now. It should not be presented as proof that every 2026 MCC review was triggered by Mastercard or that every subscription merchant must be moved to 5968.
The Most Important Scope Distinction: Subscription Billing Is Not Automatically MCC 5968
This is where many summaries become too broad.
Mastercard's general MCC 5968 description includes subscription products or services sold through direct-marketing methods. At the same time, Mastercard requires the MCC to fairly describe the merchant's primary business and expressly excludes certain recurring transactions from MCC 5968.
For example, the Quick Reference Booklet directs:
Utility payments to MCC 4900
Private athletic-club monthly dues to MCC 7997
Insurance premiums to MCC 6300
Other industries may also have a more specific MCC that accurately describes what the business primarily sells.
Mastercard reinforces this distinction in its subscription and negative-option billing FAQ. The subscription and free-trial requirements can apply even when a merchant is not using MCC 5968.
The practical lesson is simple:
A recurring-payment model and an MCC classification are two different compliance questions.
A SaaS company may have subscription billing without MCC 5968 being the most accurate code. A medical business may charge a recurring membership while its primary business remains a medical service. A coaching company may collect monthly payments for a fixed-term program rather than operate an open-ended negative-option subscription.
The correct classification depends on the full business model, not the presence of the word “monthly” on a checkout page.
What Is Negative-Option Billing?
Negative-option billing generally means the customer agrees that charges or deliveries will continue unless the customer takes action to cancel, the merchant terminates the arrangement, or the subscription expires.
It can include a trial that converts into paid recurring shipments, but a trial is not required in every negative-option arrangement.
Mastercard's specialty-merchant section is titled Negative Option Billing Merchants Selling Physical Products. It describes remote subscription programs in which customers automatically receive physical products—such as cosmetics, health-care products, or vitamins—on a recurring basis.
For non-face-to-face high-risk negative-option billing involving physical products, Mastercard requires the merchant and certain service providers with access to account data to be registered through the acquirer. The transactions must be identified with MCC 5968 and TCC T.
This is the clearest mandatory use case in the current rules.
It is also why supplement continuity programs, vitamin auto-ship offers, cosmetics subscriptions, and some direct-response physical-product businesses deserve immediate attention. Align's guide to supplement and nutraceutical merchant accounts explains the additional underwriting pressure created by continuity offers, free trials, product claims, fulfillment, and recurring-charge disputes.
Which Recurring Businesses May Be Affected?
The strongest MCC 5968 candidates are businesses whose primary model closely matches Mastercard's published description:
Subscription products or services sold remotely through direct marketing
Continuity or auto-ship programs that continue until canceled
Trial-to-paid physical-product subscriptions
Vitamin, supplement, cosmetics, or health-care product subscriptions
Book, magazine, newspaper, collectible, or similar subscription series
Businesses already identified by an acquirer as high-risk negative-option physical-product merchants
Other recurring businesses may receive a review without necessarily belonging in MCC 5968:
SaaS and software platforms
Online memberships and communities
Coaching, consulting, and education programs
Telehealth and medical-membership businesses
Digital-content subscriptions
Associations, clubs, and nonprofit memberships
Installment plans for a defined product or service
For those businesses, the question is not simply whether payments recur. The review should determine:
What the merchant primarily sells
Whether the agreement is open-ended, fixed-term, or installment-based
Whether the customer receives physical products, services, memberships, or digital goods
How the offer is marketed and accepted
Whether another Mastercard MCC more accurately describes the primary business
Whether the transaction messages contain the correct recurring and stored-credential indicators
Why Can a Merchant Be Reclassified After Years of Processing?
Long processing history does not permanently lock an account into its original MCC.
Mastercard requires acquirers to provide a valid, accurate MCC that most reasonably and fairly describes the merchant's primary business. Its Security Rules also require acquirers to monitor merchants regularly and focus on changes in activity, activity that does not match the represented business, and exceptional transaction patterns.
A reclassification can occur because:
The original MCC was incomplete or inaccurate
The merchant may have been boarded under a broad ecommerce, professional-services, software, or retail category even though the actual operating model more closely matched continuity billing.
The business model changed
A company that began with one-time sales may have added auto-ship, a paid membership, a free trial, or a significant subscription component. If recurring revenue becomes the primary business, the original MCC may no longer be the best description.
The acquirer is reviewing its specialty-merchant portfolio
The 2026 prior-consent rule for specialty-merchant acquiring, current registration standards, or an internal compliance audit may prompt a processor or acquirer to validate merchant coding and registration.
The merchant changed processors, payment facilitators, or acquiring banks
A new institution is responsible for its own underwriting and coding decisions. It does not have to preserve the prior provider's classification if its review reaches a different conclusion.
The website or transaction activity no longer matches the application
New products, new URLs, trial offers, upsell funnels, affiliate traffic, altered cancellation practices, or changes in transaction behavior can cause the processor to revisit the account.
A card-network, issuer, monitoring, or dispute signal triggered a review
An MCC change may arise during a broader risk review. As explained in Align's article on the Mastercard Scam Merchant Monitoring Program, however, a monitoring signal should not automatically be treated as proof of wrongdoing.
The same principle applies here: an MCC review is a classification process, not a verdict on the legitimacy of the merchant.
Does Reclassification to MCC 5968 Mean the Account Is Being Terminated?
No—not by itself.
An MCC correction is not the same thing as a notice of termination, a Mastercard MATCH Pro listing, or a finding that the merchant violated the rules.
The outcome depends on the acquiring relationship.
The current provider may:
Update the MCC and continue processing
Request additional underwriting documents
Register the merchant if specialty registration is required
Move the account into a compatible program
Amend pricing, reserves, volume limits, or other risk terms
Require changes to the website, checkout, billing, fulfillment, or cancellation process
Decide that it does not support the category and ask the merchant to transition elsewhere
Merchants should not assume the best or worst outcome before receiving the actual decision in writing.
Ask whether the notice is:
A data correction only
A request for information
A conditional continuation of processing
A change in merchant-account terms
A migration to another acquiring program
A formal termination or non-renewal
Those are materially different events.
How MCC 5968 Can Affect Underwriting
MCC 5968 can cause an institution to examine the business through a continuity-risk lens.
For a physical-product negative-option merchant, the acquirer may need to complete Mastercard specialty registration and confirm that the business complies with applicable law and Mastercard standards. Mastercard's registration requirements call for detailed information about the business, owners, products or services, payment procedures, cardholder disclosures, return policies, data practices, prior business relationships, and website URLs.
Even when specialty registration is not required, an underwriter may review:
The complete customer journey from advertisement through cancellation
Trial, subscription, and rebill disclosures
Proof of affirmative customer consent
Billing cadence and amounts
Fulfillment and delivery timelines
Refund, return, and cancellation performance
Customer-service staffing and response times
Billing descriptors
Affiliate and advertising controls
Chargeback, fraud, and refund trends
Financial capacity to cover refunds, disputes, and future obligations
This is why being reclassified after years of low chargebacks can still feel disruptive. Chargebacks matter, but they are not the only part of underwriting.
Will MCC 5968 Automatically Increase Pricing or Create a Reserve?
No Mastercard source reviewed for this article establishes an automatic merchant price increase or mandatory reserve merely because MCC 5968 is assigned.
Pricing and reserves are generally set through the merchant's processor and acquiring relationship, subject to the merchant agreement, applicable program rules, and underwriting review.
The MCC change can still affect the economics indirectly.
An acquirer may decide that the corrected classification requires:
A different processing program
An annual registration or program cost passed through under the merchant agreement
Higher risk pricing
A rolling reserve or fixed reserve
Delayed funding
Lower monthly volume or ticket limits
Additional monitoring or compliance fees
None of those outcomes should be described as universal.
Merchants should request the complete effect in writing, including:
New processing rates and per-transaction fees
Monthly, annual, registration, and compliance fees
Reserve percentage, duration, and release mechanics
Funding schedule
Volume and average-ticket limits
Contract term and termination provisions
Effective date of each change
The correct response is not to argue that low chargebacks make classification irrelevant. It is to require a clear explanation of what is changing and why.
Will MCC 5968 Change Monitoring?
It can.
Mastercard requires ongoing monitoring across merchant portfolios. Its specialty-merchant rules add monitoring requirements for the covered categories, including negative-option billing transactions. For applicable merchants, the acquirer must ensure that the merchant has real-time and batch procedures designed to identify simultaneous, consecutive, or excessive transaction attempts using the same account number and complies with Mastercard fraud-control standards.
The practical monitoring picture may include:
Authorization attempts and retry behavior
Refund and chargeback trends
Duplicate or repeated account activity
Trial conversion complaints
Cancellation and refund responsiveness
Transaction laundering or undisclosed URLs
Marketing and product changes
Descriptor recognition
Fulfillment and delivery performance
MCC 5968 does not replace other Mastercard requirements. A merchant can also be reviewed under chargeback, fraud, scam-merchant, data-integrity, or other applicable programs based on the facts.
What Documentation Should a Merchant Prepare?
Do not wait for a two-day deadline from the processor. Build the file before a notice arrives.
Business and account records
Legal entity documents, DBA records, tax ID, ownership information, and business licenses
A list of every merchant ID, processor, acquirer, payment facilitator, gateway, CRM, and billing platform
The current MCC shown by each provider, if available
Twelve months of processing statements or all available history
Current monthly volume, average ticket, highest ticket, refunds, and chargebacks
Offer and customer-journey evidence
Screenshots of advertisements, landing pages, product pages, checkout, order confirmation, and account-management screens
A plain-language description of every one-time, installment, trial, subscription, and auto-ship offer
The price, billing frequency, trial length, renewal timing, minimum commitment, and cancellation terms for each offer
Records showing how customers affirmatively accept recurring billing
Confirmation emails, renewal reminders, receipts, and cancellation confirmations
Fulfillment and customer service
Supplier, inventory, and fulfillment agreements
Sample shipping and tracking records for physical products
Service-delivery records for coaching, software, memberships, telehealth, or other services
Refund and cancellation logs
Customer-service channels, hours, response expectations, and escalation process
Complaint themes and documented corrective actions
Risk and compliance controls
Current terms, privacy, refund, return, shipping, and cancellation policies
Affiliate agreements and marketing-approval procedures
Fraud-screening rules, 3-D Secure configuration, AVS controls, and retry logic
Chargeback-alert and representment workflows
PCI DSS documentation and a data-flow map showing which vendors can access account data
A list of every website and URL that can generate transactions
Not sure how an acquirer would view your current setup? Request an MCC and payment-risk review. Align Ecommerce can review the business model, payment structure, processing history, customer journey, and documentation readiness before a classification notice becomes an account emergency.
Never Try to Avoid MCC 5968 Through Miscoding
If MCC 5968 is accurate, asking a provider to hide the business under a different code is not a risk strategy.
Mastercard requires a valid and accurate MCC that fairly describes the merchant's primary business. Deliberately using a misleading code, processing through an unrelated entity, omitting subscription URLs, or presenting one-time sales while running undisclosed continuity billing can create a more serious problem than the original reclassification.
Potential consequences can include:
Transaction declines or account restrictions
Withheld funding or reserves under the merchant agreement
Processor or acquirer termination
Card-network compliance review
Questions about transaction laundering or misrepresentation
Greater difficulty obtaining another properly underwritten merchant account
Multiple merchant IDs are not inherently improper. Separate MIDs may be appropriate for genuinely distinct legal entities, sales channels, brands, products, or transaction types when they are fully disclosed and approved. They should never be used to disguise activity, split volume to avoid monitoring, or route transactions under an inaccurate category.
How to Request an MCC 5968 Review
The merchant normally cannot change the MCC directly inside a gateway dashboard. Mastercard places MCC-assignment responsibility on the acquirer.
Submit a written request through the merchant-services provider, payment facilitator, or acquiring relationship responsible for the merchant account.
The request should:
Identify the legal entity, DBA, merchant ID, website, and current MCC.
Ask for the proposed MCC, effective date, and reason for the change.
Describe the primary product or service and how revenue is generated.
Break down revenue between one-time sales, installments, subscriptions, and auto-ship.
Explain whether the agreement is fixed-term or continues until canceled.
Identify whether physical products, services, memberships, or digital goods are delivered.
Provide screenshots of checkout disclosures and post-purchase communications.
Cite the Mastercard MCC description you believe most accurately fits the primary business.
Ask whether specialty registration is required and who is responsible for completing it.
Request every pricing, reserve, funding, monitoring, and contract change in writing.
Use neutral language. The strongest position is not “we do not want MCC 5968.” It is:
“We want the merchant account and transaction data to be coded accurately. Based on the attached business-model and revenue documentation, please confirm which MCC most reasonably and fairly describes our primary business and identify any related registration or account changes.”
If the first response comes from frontline support without an explanation, ask for the issue to be reviewed by underwriting, risk, compliance, or the acquiring institution.
What Subscription Merchants Should Do Now
First, identify the MCC currently assigned to every merchant account. Do not assume that the code shown by a shopping cart, analytics tool, or cardholder statement is authoritative.
Second, map every recurring offer. Separate open-ended subscriptions, fixed-term installments, annual renewals, physical-product auto-ship, service memberships, and one-time purchases.
Third, compare the primary business against Mastercard's current MCC descriptions and exclusions.
Fourth, confirm that the gateway and processor are transmitting recurring, stored-credential, and merchant-initiated transactions correctly. A correct MCC does not repair incorrect transaction indicators.
Fifth, assemble the underwriting file before the processor requests it.
Finally, if the provider changes the MCC or terms, obtain the decision in writing and determine whether the account remains economically and operationally viable.
The Bottom Line on Mastercard MCC 5968
MCC 5968 is not a punishment code, and a reclassification is not automatically an account termination.
It is a business-category decision with real operational consequences.
For a high-risk negative-option physical-product merchant, Mastercard's current rules are explicit about MCC 5968, TCC T, and specialty registration. For SaaS, memberships, coaching, telehealth, and other recurring services, the answer can be more nuanced because the MCC must still fairly describe the merchant's primary business.
The worst response is to ignore the notice or search for a processor willing to miscode the account.
The better response is to document the business, confirm the correct classification, understand the underwriting consequences, and build a payment structure that accurately matches how customers are sold, billed, and served.
Request an MCC and payment-risk review from Align Ecommerce. We can help evaluate your current MCC, recurring-payment model, statements, website, checkout, documentation, and processor notice before you accept a change or move the account.
This article is educational and does not constitute legal advice or a guarantee of processor, acquirer, issuer, or card-network outcomes. Mastercard rules, regional requirements, and institutional policies can change. Confirm the current requirements with your acquiring institution and Mastercard's official rules and compliance page.