Merchants sometimes experience onboarding as friction: why the registration documents, the director IDs, the questions about products and markets? The short answer is that every payment platform operates inside three rulebooks — card network rules, sanctions law, and acquiring partners’ risk policies — and onboarding is where compliance with all three is established.
What gets screened
- The business: registration documents prove the legal entity exists and matches who we contract with.
- The people: directors and beneficial owners (typically 10%+ holders) are identified and screened against sanctions lists — OFAC, United Nations and other applicable regimes. This is law, not preference.
- The activity: the website and product catalogue are reviewed against prohibited and restricted category lists defined by card networks and acquirers.
- The geography: services cannot be provided in sanctioned jurisdictions, and some markets require specific acquiring arrangements.
Prohibited vs restricted
Prohibited categories — illegal goods, deceptive schemes — are never supported. Restricted categories are lawful but higher-risk (certain supplements, travel with long delivery windows, some financial services) and may be supportable with enhanced due diligence, reserves or specific acquirer approval. If your business is restricted, the honest answer at application saves weeks: platforms can often structure a workable setup when they know upfront, but discovering an undisclosed category after go-live usually ends the relationship.
It doesn’t stop at onboarding
Screening is ongoing: transaction monitoring watches for activity inconsistent with the approved profile, and periodic reviews re-verify the business. A merchant that pivots products should tell their platform before the monitoring system notices.
What this buys you
Diligent onboarding is why acquirers, banks and card networks extend processing capacity to the platform’s merchants at all. It is the trust infrastructure your payments run on.
Payixay verifies every merchant (KYC/KYB) and screens against applicable sanctions lists before activation — typically within two business days for complete applications. Details on the compliance page.