Restricted-business risk appears when Stripe believes the merchant's actual business model falls into a category with higher regulatory, dispute, fraud, or reputational exposure than the account was underwritten for.
What this hub covers
- how category and product-policy reviews usually work
- what Stripe compares when it decides a business is restricted or misclassified
- which product and disclosure patterns raise category risk
- how to document a cleaner business-model narrative
What this cluster usually means
In this cluster, Stripe is often evaluating one of three things:
- the business is prohibited or restricted under platform rules
- the business is allowed, but the account is classified under the wrong MCC or risk profile
- the business may be allowed in part, but the website and transaction behavior make it look broader or riskier than it is
That distinction matters because the right response depends on whether the problem is policy conflict, model ambiguity, or classification drift.
What Stripe is likely correlating
- website claims vs restricted-products policy boundaries
- MCC and onboarding statements vs actual inventory or services
- marketing language vs legal and compliance disclosures
- fulfillment model vs expected reversal exposure
- geography and entity type vs allowed activity
Main risk groups
Explicitly prohibited or restricted activity
Review Prohibited Business, Restricted Products Stripe, Adult Content Policy Risk, and Supplements Policy Risk.
Category classification drift
Review High Risk MCC, MCC Mismatch, Professional Services Risk, and Travel Prepaid Risk.
Unsupported entity or geography
Review Unsupported Country Or Entity Type and Cross Border Selling Risk.
Why this cluster often overlaps with others
Restricted-business risk rarely stays isolated. It often overlaps with:
- KYC and ownership questions if the model is hard to verify
- payout and reserve pressure if future liability looks higher
- trust and policy issues if the site describes products ambiguously
That is why a category problem is often also a narrative problem. Stripe is judging both what you sell and how clearly you describe it.
Metrics and checkpoints to watch
- proportion of catalog or offers near restricted-policy boundaries
- mismatch between stated category and top-selling offers
- share of cross-border volume in sensitive categories
- support complaints tied to misunderstood product scope
- refunds and disputes by product family
Investigation workflow
1. Define the narrowest accurate business model
Describe what the business actually sells, how it fulfills, which customer it serves, and where policy boundaries sit. If that summary is vague, the platform will assume a broader risk surface.
2. Compare the site to the summary
Product pages, FAQs, terms, and checkout text should all describe the same model. If one page suggests supplements, another suggests coaching, and another suggests subscription access, the account becomes hard to classify.
3. Separate core revenue from edge revenue
One small restricted segment can contaminate the narrative for the whole account. Segment it explicitly.
4. Document control measures
If the category is permitted with conditions, show how the business controls fulfillment, refunds, compliance, and customer disclosures.
Evidence Stripe usually weights most
- live product pages
- checkout flow and policy text
- business-model explanation tied to real SKUs or services
- licensing or compliance evidence when relevant
- product segmentation showing which offers drive risk
Core problem pages in this cluster
- Prohibited Business
- Restricted Products Stripe
- High Risk MCC
- MCC Mismatch
- Adult Content Policy Risk
- Supplements Policy Risk
- Unsupported Country Or Entity Type
Core guides in this cluster
Adjacent hubs
FAQ
What is the biggest mistake in restricted-business reviews?
The biggest mistake is describing the business too broadly or inconsistently. Stripe will classify based on the widest plausible interpretation of the public site if the merchant narrative is unclear.
Can a merchant be allowed but still treated as higher risk?
Yes. A business can be permitted but still receive stronger monitoring, reserves, or underwriting friction if the category has higher expected dispute or compliance exposure.
What should be rewritten first on the website?
Rewrite product descriptions, FAQs, and policy pages so they describe one precise business model instead of several overlapping ones.