Can You Use Stripe, Square, or PayPal for a Free Trial That Automatically Converts to Paid?
A free-trial button is not proof that a free-trial business model has been approved.
Stripe, Square, PayPal, and other payment platforms provide tools that can collect a payment method, delay the first charge, and begin recurring billing later. A checkout may even give the customer several ways to pay—such as a card, PayPal, or an accelerated wallet—without revealing which acquiring relationship, merchant category code, or card-brand registration sits behind the transaction.
That distinction matters for merchants offering physical products through a negative-option trial: a customer accepts a free or nominal-price product, provides a payment method, and is charged later unless the customer cancels.
Mastercard's current rules expressly address certain non-face-to-face negative-option merchants selling physical products. For covered activity, the acquiring side must do more than enable recurring billing. It must register the merchant before processing and identify the transactions using MCC 5968 and TCC T.
This article does not allege that Stripe, Square, PayPal, or any other provider has failed to register a particular merchant. Public documentation cannot establish that. Registration is handled through the acquiring side and may occur through internal processes that are not visible to merchants or the public.
The documentable issue is narrower, and important:
Does your provider's approval cover your actual negative-option offer, and can the provider confirm how the merchant was classified and registered?
The Short Answer
If you sell physical products through a card-not-present free or nominal-price trial that converts into continuing shipments or recurring charges, ask your payment provider these questions in writing:
What merchant category code is assigned to this account?
Do you classify this offer as negative-option billing under Mastercard's current rules?
If Mastercard specialty registration applies, has the acquiring side registered the correct legal entity and every applicable website URL before processing?
Will covered transactions be identified using MCC 5968 and TCC T?
Is the acquiring program authorized to support this specialty-merchant activity?
Does the approval cover every payment path used at checkout, including direct card processing and any separate wallet or gateway product?
“Our platform supports subscriptions” is not a complete answer. It describes software capability, not necessarily underwriting, classification, or card-brand registration.
What Is a Negative-Option Free Trial?
Negative-option billing means the customer's silence or failure to cancel is treated as permission for a later charge or continued service.
Common examples include:
A free sample that becomes a monthly shipment unless canceled
A product offered for shipping and handling that converts into recurring deliveries
A discounted introductory box followed by full-price shipments
A continuity program that automatically sends and bills for the next product
A subscription that begins after a no-cost or nominal-price trial
The label on the checkout page does not control the analysis. Calling an offer a “sample,” “starter kit,” “membership,” or “introductory shipment” does not change what happens after enrollment.
The operational questions are more useful:
Does the merchant collect a payment method during enrollment?
Will the customer be charged later without taking another affirmative step?
Are physical products shipped during or after the trial?
Does the arrangement continue until the customer cancels?
If the answer is yes, the offer may be negative-option billing even when the first product costs nothing.
What Mastercard Currently Requires
Mastercard's Security Rules and Procedures—Merchant Edition, dated August 4, 2026, places “negative option billing merchants selling physical products” within its Specialty Merchant Registration Program under MCC 5968.
Section 9.4.10 states that before an acquirer processes covered non-face-to-face negative-option transactions involving physical products, the acquirer must register the merchant—and certain service providers with access to account data—with Mastercard. The acquirer must use:
MCC 5968: Direct Marketing—Continuity/Subscription Merchants
TCC T: the transaction category code Mastercard specifies for the covered transactions
The rules also require the acquiring side to provide applicable website URLs during specialty registration. At registration, the acquirer must have verified compliance with applicable law.
The same manual states that, effective May 1, 2026 in most regions, a Mastercard customer must not engage in specialty-merchant acquiring activity without Mastercard's express prior written consent. A later effective date applies to much of the Europe Region.
That requirement is directed at Mastercard's acquiring-side customer, not at a merchant attempting to self-register. Most merchants do not have access to Mastercard's registration system and cannot complete this process independently.
This is why the correct question is not simply, “Did I turn on the subscription feature?” It is, “Did the acquiring side approve and register this exact business model before processing?”
MCC 5968 Does Not Apply to Every Subscription
Mastercard's current specialty-registration section expressly addresses non-face-to-face negative-option billing merchants selling physical products. A normal recurring service, software subscription, membership, or digital-content trial is not automatically a physical-product MCC 5968 merchant merely because it bills monthly.
Classification depends on the merchant's primary business activity, the products being sold, how the customer enrolls, fulfillment, and the billing sequence. A merchant should not assign itself MCC 5968 simply to appear cautious, and it should not use a different MCC merely to avoid the obligations associated with the actual model.
The acquiring side is responsible for assigning and transmitting the appropriate classification. Merchants are responsible for describing their business truthfully and completely.
For a deeper explanation, read Align's guide to Mastercard MCC 5968 subscription-merchant reclassification.
Software Capability and Processing Approval Are Different
Modern platforms make recurring billing accessible. That is valuable. It also creates a predictable misunderstanding.
A merchant sees an option labeled “trial period,” configures the price and duration, and assumes the provider has approved the resulting offer. In practice, four separate layers may exist:
Software configuration: Can the platform create the billing schedule?
Consumer-facing compliance: Are material terms, reminders, receipts, descriptors, and cancellation methods handled correctly?
Underwriting and policy: Does the provider permit this specific product, marketing method, fulfillment model, and risk profile?
Acquiring and network compliance: Has the merchant been classified, coded, and registered where required?
A feature can solve the first layer and help with the second without answering the third or fourth.
That gap is not unique to one company. It is a structural issue whenever a self-service payment product makes a complex business model look like a settings choice.
What Stripe Publishes About Free Trials
Stripe publicly documents how to create free and discounted trial subscriptions. Its trial-compliance guide tells merchants that they must comply with card-network requirements and explains features for:
Trial-ending reminders
Cancellation links
Receipts and trial information
Statement descriptors
Customer-portal management
Stripe states that when its email feature is enabled, it sends a reminder seven days before the trial ends, or when a shorter trial begins. It also states that merchants remain responsible for compliance if they do not use Stripe's settings.
Stripe separately explains that each Stripe account has one MCC. For connected accounts, Stripe says it automatically sets MCCs, may review them, and may update an inaccurate classification.
Those are meaningful disclosures. The public materials reviewed for this article do not, however, provide a merchant-facing process for confirming whether an applicable physical-product negative-option merchant has been registered through Mastercard's Specialty Merchant Registration Program, whether each URL was included, or whether MCC 5968 and TCC T will be transmitted for the covered activity.
That absence is not proof that Stripe failed to perform an internal obligation. It means a merchant should not treat trial functionality alone as evidence that specialty registration has been completed.
What a Stripe merchant should ask
“Please confirm in writing whether our physical-product trial-to-continuity model is approved, the MCC assigned to our account, whether Mastercard Section 9.4.10 applies, and whether the acquiring side has completed any required specialty registration for every applicable URL.”
What Square Publishes About Subscriptions
Square's developer documentation supports subscriptions and describes an initial free phase in which the customer is billed only after that phase ends. Its examples also include a “Coffee of the Month Club,” demonstrating that the software can model recurring physical-product orders.
Square's current U.S. Payment Terms create an important question for merchants. The “Unsupported Industries” section lists “direct marketing or subscription offers or services” among activities that may not use the Payment Services.
The presence of a technical feature does not override the provider's contractual terms. Nor does that language, by itself, tell us how Square interprets every ordinary subscription, every product, every region, or every separately approved account.
The responsible conclusion is not that Square is violating Mastercard's rules. It is that a merchant should reconcile the software documentation with the terms and obtain a written answer about the exact business model before launch.
What a Square merchant should ask
“Do your current terms permit our specific trial, continuity, and physical-product fulfillment model? If so, please confirm the approval, account classification, and any card-brand registration that applies.”
If the response only explains how to configure a free phase, the merchant still does not have an answer about policy or acquiring approval.
What PayPal Merchants Need to Distinguish
PayPal's subscription documentation shows merchants how to offer free or discounted trial periods before regular billing begins. That establishes technical support for a trial schedule.
“PayPal,” however, can refer to different payment arrangements. A merchant may be using the PayPal-branded wallet, PayPal Complete Payments, Braintree, Payflow, or another product. The checkout button alone does not establish which entity is acquiring a card transaction, which MCC applies, or which party would handle a required Mastercard registration.
For that reason, a PayPal merchant should identify the specific product and payment path before asking for a compliance answer.
What a PayPal merchant should ask
“For each payment method in our checkout, which PayPal product and acquiring relationship processes the transaction? For direct card activity involving our physical-product negative-option offer, please confirm the assigned MCC, approval status, and any required Mastercard specialty registration.”
This distinction also matters when a checkout displays PayPal beside other payment options. Approval for a wallet transaction should not be assumed to answer the classification of a separately acquired card transaction, or vice versa.
Are Stripe, Square, or PayPal Violating Mastercard's Rules?
Public documentation does not provide enough evidence to make that claim.
To determine whether a violation occurred, one would need account-specific facts, including the merchant's products, disclosures, billing flow, MCC, acquiring entity, registered URLs, transaction coding, approval records, and Mastercard registration status. Those records are not ordinarily public.
What can be stated from the public record is:
Mastercard publishes a registration and coding requirement for covered non-face-to-face negative-option merchants selling physical products.
Stripe, Square, and PayPal publish tools or documentation that support trial or subscription functionality.
Their merchant-facing trial pages do not, by themselves, prove that an applicable merchant has completed Mastercard specialty registration.
Square's current U.S. Payment Terms contain separate language about unsupported direct-marketing or subscription offers that merchants should reconcile with any technical implementation.
The fair merchant takeaway is verification—not accusation.
What Can Happen When the Business Model Is Not Properly Disclosed or Structured?
No single consequence is automatic. An incorrect MCC or missing registration does not automatically create a Mastercard MATCH Pro listing, and a public checkout does not reveal whether a merchant is compliant.
Still, a later underwriting or compliance review can expose a mismatch between the activity that was approved and the activity actually processed. Depending on the facts and the provider's agreement, possible outcomes may include:
Requests for additional documents or legal review
Reclassification or new registration requirements
Processing restrictions or a pause in payments
Reserves or delayed access to funds
Required changes to websites, disclosures, or fulfillment practices
Termination of an unsupported payment relationship
A rushed migration to a new provider
Greater scrutiny from future underwriters
Higher dispute volume if customers did not understand the offer
Mastercard's current manual states that it may assess the acquiring-side customer up to $10,000 for acquiring an applicable specialty merchant without first registering it. If the acquirer does not correct the failure within ten days after notice, the manual describes additional assessments of $5,000 per month for up to three months and $25,000 per month thereafter until the requirement is satisfied.
Those are Mastercard assessments against the acquiring side; they should not be described as automatic fines imposed directly on every merchant. A provider's contract may allocate costs or take other action, but the result depends on the agreement and facts.
For dispute-monitoring context, see Align's Visa VAMP 2026 survival guide.
How a High-Caliber Merchant Should Launch a Trial Offer
1. Document the complete customer journey
Record the advertisement, landing page, checkout, consent language, confirmation, reminder, first paid charge, recurring shipment, cancellation process, refund policy, and statement descriptor.
2. Disclose the real offer during underwriting
State whether the first shipment is free, discounted, or offered for shipping and handling; when the first paid charge occurs; what is shipped; and how customers cancel. Do not wait for a compliance review to reveal the continuity element.
3. Obtain written commercial approval
Ask the provider to approve the actual products, marketing sources, trial terms, billing schedule, fulfillment timeline, expected volume, average ticket, refund policy, and every domain used to acquire customers.
An automated account activation email is not necessarily approval of every business practice.
4. Confirm classification and registration
Ask for the assigned MCC and whether Mastercard's negative-option physical-product rules apply. If they do, ask the provider to confirm that the acquiring side completed the required specialty registration before processing and included each applicable URL.
5. Treat each payment path separately
Card entry, PayPal, Shop Pay, and other wallet buttons may not all use the same processing relationship. Map each payment method to the provider that acquires or facilitates it, then verify the applicable approval for that path.
6. Build consumer compliance into operations
Maintain affirmative consent records, send required confirmations and reminders, use recognizable statement descriptors, provide a simple cancellation method, and honor cancellations and refunds promptly.
Card-network registration does not cure misleading marketing or a broken cancellation process.
7. Revisit approval when the model changes
New products, domains, traffic sources, upsells, trial prices, fulfillment locations, or billing intervals can change the risk profile. Notify the provider before making a material change.
The Email Every Trial Merchant Should Send
Subject: Written confirmation of negative-option trial approval and Mastercard registration
We sell [physical product] through a [free/nominal-price/discounted] introductory offer. The customer provides a payment method at enrollment and, unless canceled, is charged [amount] on [timing] for [recurring shipment or continuity plan].
Please confirm in writing:
This complete business model is permitted and approved on our account.
The merchant category code assigned to the account.
Whether you classify the offer as negative-option billing involving physical products under Mastercard Section 9.4.10.
If applicable, whether the acquiring side completed Mastercard Specialty Merchant registration before processing.
Whether each of our transaction-generating URLs is included in the applicable registration.
Whether covered Mastercard transactions will be identified with MCC 5968 and TCC T.
Whether this approval applies to every payment method and product used in our checkout.
Our current domains are: [list]. Our expected monthly volume is: [amount]. Our average ticket is: [amount]. Attached are our checkout disclosures, confirmation message, reminder, cancellation flow, refund policy, and fulfillment details.
The Bottom Line
Stripe, Square, and PayPal make subscriptions and trial periods easier to build. Ease of implementation is not the same as proof of underwriting approval or card-brand registration.
For covered non-face-to-face negative-option merchants selling physical products, Mastercard's current rules place registration and coding duties on the acquiring side. Because merchants generally cannot see or complete that registration themselves, the practical safeguard is full disclosure followed by written, account-specific confirmation.
The merchant question should be direct:
“Has our actual negative-option offer been approved, classified, and registered correctly for every way we accept payment?”
If a provider cannot give a clear answer, do not assume that the existence of a free-trial feature resolves the issue.
Align Ecommerce helps merchants evaluate trial, continuity, and subscription payment structures before they create a preventable processing problem. Request a free payment-risk review or call 702-900-1030.
Sources
Mastercard Security Rules and Procedures—Merchant Edition, Sections 9.1, 9.2, and 9.4.10
Stripe: Manage compliance requirements for trials and promotions
This article is for general educational purposes and is based on publicly available materials reviewed on September 2, 2026. It is not legal advice, does not determine any merchant's classification, and does not allege noncompliance by any payment provider. Network rules, provider terms, products, and regional requirements can change. Merchants should obtain account-specific written confirmation from their provider and consult qualified legal counsel where appropriate.
Frequently Asked Questions
Negative-Option Free Trials and MCC 5968
These answers explain the difference between enabling a trial and confirming that a physical-product negative-option offer has been approved, classified, and registered correctly.
What is a negative-option free trial?
A negative-option free trial is an offer in which the customer provides a payment method and is charged later, or continues receiving paid products or services, unless the customer cancels. The first shipment or period may be free, discounted, or offered for a nominal charge.
Does every free-trial merchant need MCC 5968?
No. Mastercard's current specialty-registration rule expressly addresses covered non-face-to-face negative-option merchants selling physical products. A standard software, service, membership, or digital-content subscription is not automatically an MCC 5968 merchant merely because it includes a trial or recurring charge.
Does a trial feature mean the payment provider approved the business model?
Not necessarily. A feature can create a billing schedule without confirming that the merchant's products, marketing, fulfillment, underwriting, MCC, and any required card-brand registration have been approved. Merchants should obtain an account-specific answer in writing.
When does Mastercard require specialty registration for negative-option billing?
Mastercard's current rules require the acquirer to register covered non-face-to-face negative-option merchants selling physical products before processing. The rules direct the acquirer to identify the covered activity using MCC 5968 and TCC T and to include applicable transaction-generating website URLs in the registration.
Who completes Mastercard Specialty Merchant registration?
The acquiring side completes the registration with Mastercard. A merchant generally cannot self-register through Mastercard's internal system. The merchant must fully disclose the offer and ask its payment provider or acquirer to confirm whether registration applies and has been completed.
Are Stripe, Square, or PayPal violating Mastercard's rules?
Public documentation alone does not establish a violation. An account-specific conclusion would require the merchant's business model, MCC, acquiring entity, registered URLs, transaction coding, approval records, and registration status. The public materials show why merchants should verify those facts, not that a particular provider failed to comply.
What should a Square merchant verify before launching a subscription offer?
A Square merchant should reconcile the subscription features in Square's developer documentation with the current terms governing its account. Square's U.S. Payment Terms list direct marketing or subscription offers or services among unsupported activities, so the merchant should obtain written confirmation that its specific model and Square product are permitted.
What should I ask Stripe, Square, PayPal, or another provider in writing?
Ask whether the complete trial and continuity model is permitted, which MCC is assigned, whether Mastercard Section 9.4.10 applies, whether the acquiring side completed any required registration before processing, whether every applicable URL was included, and whether the approval covers each payment method in the checkout.