Visa's AFT Rules for Forex and CFD Brokers: What Changes on 18 October 2026

From 18 October 2026, Visa requires card deposits to CFD, rolling spot forex, spread betting, binary options, crypto options and ICO platforms to be processed as account funding transactions instead of purchases. The merchant must be registered in Visa's Integrity Risk Program first, and deposits must carry the sender, recipient and, where required, purpose data your acquirer specifies for each region. Brokers whose deposits still go through as ordinary purchases risk more declines and fines passed on by their acquirer. Mastercard has its own deadlines, with Europe following on 31 March 2027.

Who is affected

The rule covers Visa's new category of high integrity risk financial trading: contracts for difference, binary options, rolling spot forex, financial spread betting, crypto options trading and initial coin offerings. These merchants are processed under merchant category code 6211, security brokers and dealers. Acquirers describe it as a global mandate covering every Visa region.

Some acquirers report limited transition arrangements for certain cross-border flows. Confirm with your acquirer before relying on any exception, because the rule itself applies from 18 October 2026.

Try it with your own numbers

MCC lookup

Look up the code that matches what you actually sell.

What an account funding transaction is

An account funding transaction, or AFT, pulls money from a card to fund an account the cardholder owns, such as a trading account or a wallet, instead of paying for goods or services. It is sent with its own processing code and a business application identifier that tells the card's issuer what kind of funding it is.

Because the money is moving into an account rather than buying something, AFTs carry extra data. Depending on the region and whether the deposit is cross-border, that includes the sender's name and address, sometimes their date of birth, the recipient's name and account identifier, and the purpose of the transfer. Most of this you already hold from onboarding; it now has to travel with each deposit.

Registration in Visa's Integrity Risk Program

Before deposits can be switched to AFTs, the merchant must be registered in the Visa Integrity Risk Program, where trading platforms under MCC 6211 sit in Tier 3. Your acquirer does the registration, after its own checks on your licence, controls and website, and keeps it up to date. The registration fee is USD 950 to apply and USD 950 a year, which acquirers usually pass on.

What it means for your approval rate and costs

  • Approval rates: issuers look at funding transactions more closely, and AFT decline rates tend to be higher than for purchases. Some flows are blocked outright, for example AFTs from India-issued cards to merchants outside India, and from non-US cards to US merchants.
  • Costs: AFTs carry different interchange and scheme fees from purchases. For domestic and intra-EEA consumer funding transactions, and domestic ones in the UK, Visa introduced a small consumer funding fee from 1 October 2026 and a capped-interchange program from 24 October 2026. Ask your acquirer whether either applies to your deposits and how your pricing changes.
  • Authentication: strong customer authentication still applies to most card deposits from customers in the EEA and the UK, so keep 3-D Secure in the flow.
  • Withdrawals: refunds should be used for genuine refunds only. Paying out client balances normally runs through push-to-card payouts or bank transfers, not refunds.

Try it with your own numbers

Payment processing cost calculator

Put your own volume, transaction count and fees in to see the effective rate.

What to do before 18 October

  • Confirm with each acquirer that your Visa Integrity Risk Program registration is done or in progress.
  • Ask which business application identifier your acquirer requires for your deposits. Sources disagree, so take it from your acquirer, not from a blog.
  • Switch your deposit flow to AFTs and send the sender, recipient and purpose data your acquirer specifies.
  • Test approval rates by issuer country after the switch, and have bank transfer or open banking ready for cards where AFTs are declined.
  • Plan withdrawals through payouts rather than refunds.
  • Track Mastercard separately: its AFT requirement for these merchants applies in the US and Canada already and in the UK, Europe and the Middle East and North Africa from 31 March 2027.

If your provider cannot support AFTs

Not every payment provider supports account funding transactions for trading platforms, and not every acquirer will register MCC 6211 merchants in Visa's program. If yours cannot, you need one that can before your deposits start failing.

How Ecompayer helps

Ecompayer is not a payment provider. You add your licence, client markets, volumes and payment methods once, and your profile is matched with a payment provider that boards brokers and supports account funding transactions for your markets. Your account is then prepared with that provider. Final approval and terms are always the provider's decision.

Sources

  • Checkout.com, What changes is Visa making to its rules for high-risk investment products, and compliance dates for account funding transactions.
  • Visa Acceptance developer documentation, business application identifiers for payouts and account funding.
  • Visa Integrity Risk Program documentation; CCBill on Visa Integrity Risk Program fees.
  • Adyen and Stripe documentation on account funding transactions.
  • Braintree network updates, fall 2026; Checkout.com on the Visa Consumer Funding Acceleration Program.

Check your own situation

Whether a provider can board you and run your deposits as account funding transactions depends on your licence, client markets and volume. Answer four questions to see which routes may fit.

Four questions about your business

Industry, company country, customer markets and estimated monthly volume, that is all we need to begin.

High-risk payment processing

High-risk payment processing is card acceptance for businesses that acquirers and card schemes consider more likely to cause chargebacks, fraud, legal or reputational problems. It is a classification, not a verdict on your business: it means fewer providers will take you on, underwriting asks for more, and terms include safeguards such as reserves. With the right provider, high-risk businesses process cards every day.

MCC codes

A merchant category code (MCC) is a four-digit code that tells the card schemes and card issuers what kind of business you are. Your acquirer assigns it when you are onboarded. It affects what interchange you pay, whether issuers approve your payments, whether you need scheme registration and which rules apply to you.

Chargeback ratio

Your chargeback ratio is the number of disputes in a month divided by a month of transactions, shown as a percentage. Mastercard flags merchants from 1.5% of chargebacks and Visa from 1.5% of fraud plus disputes in most regions, both with minimum counts, and most acquirers act before that. It is the number that decides whether you keep your account, so know exactly how your provider calculates it.

High-risk payment processing fees

There is no single price for high-risk payment processing. What you pay is made up of processing fees, chargeback and scheme fees, currency and payout costs, and the cash held back in a reserve. High-risk businesses pay more than ordinary online shops because the acquirer carries more risk, but two offers for the same business can still differ a lot. The way to compare them is the effective rate on your own volume, plus the cash a reserve ties up.

All payment guides

Find a payment provider that fits your business

Add your business essentials once and see which PSPs and acquirers match your profile before applying.

Check my payment options

Nothing is shared with a provider until you submit your onboarding pack. Approval is always the provider's decision.