Processors Under Fire: The FTC’s Warning on Merchant Debanking

For years, the payment industry operated on a simple premise: if a processor decided to terminate a merchant account, it was a private risk decision. That premise changed on March 26, 2026, when the Federal Trade Commission issued warning letters to the CEOs of Stripe, PayPal, Visa, and Mastercard regarding merchant "debanking" practices.

FTC Chairman Andrew N. Ferguson explicitly notified these companies that terminating financial services without clear, fair guidelines could violate Section 5 of the FTC Act. As Chairman Ferguson noted in the warning:

"Full participation in commerce and public life necessarily requires that law-abiding individuals can access, and freely participate in, our financial system."

While the letters focus on political and religious bias, this enforcement action represents a significant change in how the federal government evaluates the arbitrary power of payment processors to suspend accounts. For scaling brands, this regulatory pressure is a welcome development, as it represents the first major check on the absolute power that payment processors hold over merchant cash flow.

The FTC's Real Powers Over Payment Providers

The FTC's warning letters carry real regulatory weight. Under Section 5 of the FTC Act, the Commission has the authority to investigate and prosecute "unfair or deceptive acts or practices." If a payment provider or card network is found to have terminated merchant accounts arbitrarily, the FTC can issue Civil Investigative Demands (CIDs) to force the disclosure of internal risk-scoring algorithms.

The consequences are severe. The FTC has the power to file federal lawsuits seeking civil penalties, demand consumer restitution, and impose restrictive consent decrees that bind a payment provider to 20 years of continuous regulatory monitoring. By targeting the top executives of Visa, Mastercard, Stripe, and PayPal, the FTC is warning the payment industry that arbitrary shutdowns and opaque risk decisions are now serious compliance liabilities.

As Chairman Ferguson cautioned the payment gatekeepers:

"Any act or practice by [the company] to refuse, suspend, or withdraw any service to prospective or existing clients and consumers, or to facilitate such conduct by other financial institutions, that is inconsistent with your terms of service or otherwise unfair may violate the FTC Act and could lead to an FTC investigation and potential enforcement action."

Aggregators vs. Direct Processors: The Onboarding Trap

To understand how this regulatory pressure affects eCommerce merchants, it is necessary to look at the different risk scoring strategies used by payment providers. Payment aggregators, such as Stripe or PayPal, utilize a payment facilitator (PayFac) model. They onboard almost any merchant instantly with minimal upfront verification. Because underwriting occurs retrospectively, their automated risk engines continuously scan active accounts. A sudden volume spike, a moderate rise in chargebacks, or a minor policy mismatch can trigger automated systems to execute immediate, unannounced account freezes or rolling reserves.

In contrast, direct merchant accounts (established directly with acquiring banks) perform extensive upfront underwriting. Before you can process a single transaction, the underwriters verify your business entity, credit history, supply chain, and compliance policies. While this onboarding process takes weeks and requires passing strict guidelines, the resulting account is far more stable. Because the bank has already approved your risk profile, sudden, unannounced account freezes are rare.

While changing their core onboarding model would represent a significant change to their business model, there is a distinct possibility that aggregators will begin tightening their initial compliance filters. To preempt regulatory scrutiny, these providers may choose to weed out borderline merchant accounts before they ever start processing.

The Danger of Relying on a Single Processor

If you are routing 100% of your sales through one processor, you are taking a substantial risk.

When a processor freezes your funds, the damage cascades. You cannot purchase inventory, you cannot pay your team, and your ad accounts keep spending even though your checkout is dark. Having a single point of failure in your payments stack leaves your cash flow vulnerable to automated algorithm updates.

To survive, you need redundancy. That means setting up backup merchant accounts with different acquiring banks and routing transactions dynamically through an independent, processor-agnostic vault.

Practical Takeaways

• Establish redundant merchant accounts: Set up backup accounts with different acquiring banks to ensure processing continuity.

• Keep customer card tokens independent: Utilize an independent, processor-agnostic vault so that your customer data is not locked into a single processor.

• Review checkout compliance regularly: Align your checkout disclosures, refund policies, and product claims with card network guidelines to present a low-risk profile to underwriters.

• Maintain ready underwriting documentation: Keep active inventory agreements, bank statements, and shipping tracking records organized to resolve processor reviews quickly.

Securing Your Payments Foundation

Compaytence helps eCommerce brands review payment risk, establish redundant merchant accounts, and get their business compliant before payment issues halt their growth.