How to Conduct Merchant Onboarding & KYB for Payment Acquirers

Merchant onboarding goes beyond approving an application. Payment acquirers must verify the business, identify its owners, understand its activity, and assess risk. A strong merchant onboarding KYB process makes these checks faster and more consistent.

Mastercard notes that leading PayFacs can onboard merchants in 5 to 15 minutes, showing how automation can speed up merchant KYB without removing essential controls.

Automated merchant verification can combine business checks, UBO verification, AML screening, risk scoring, and ongoing monitoring in one workflow.

In this guide: Learn how payment acquirers can complete KYB, verify merchants, assess risk, and monitor them after approval.

What Is Merchant Onboarding for Payment Acquirers?

Merchant onboarding is how payment acquirers verify, assess, approve, and activate businesses that want to accept payments. A strong merchant onboarding KYB process combines company checks, UBO identification, AML screening, website review, underwriting, and risk assessment. Effective merchant KYB and merchant verification help acquirers confirm legitimacy and decide whether the business fits their risk appetite.

Why Is KYB Important in Merchant Onboarding?

Merchant KYB helps payment acquirers verify that a business is legitimate, properly owned, and suitable for payment processing. A strong merchant onboarding KYB process also improves merchant verification, risk assessment, and ongoing compliance.

Here’s why KYB matters during merchant onboarding:

• Confirms the business is legitimate: Merchant onboarding KYB verifies the legal entity, registration details, business status, and key company information before approval.
• Identifies who is behind the merchant: Merchant KYB helps uncover directors, shareholders, authorised representatives, and beneficial owners who ultimately control the business.
• Detects hidden risk early: Merchant verification can flag shell companies, complex ownership structures, inconsistent records, sanctions exposure, and other financial-crime risks.
• Builds a clearer risk profile: KYB helps acquirers understand the merchant’s business model, expected activity, ownership, geography, and purpose of the relationship.
• Supports ongoing monitoring: Verified onboarding data creates a baseline for spotting later changes in ownership, company status, business activity, or risk exposure.

How to Conduct Merchant Onboarding and KYB in 8 Steps

A strong merchant onboarding KYB process helps payment acquirers verify businesses, understand ownership, assess risk, and activate merchants with greater confidence. 

Combining merchant KYB with automated merchant verification can also reduce manual checks and speed up onboarding.

Here are the 8 key steps to follow:

Step 1: Collect Merchant Information

Start by collecting the merchant’s legal name, registration number, address, jurisdiction, business activity, website, ownership details, and expected transaction volumes. A structured merchant onboarding KYB form helps capture the right information from the start. It also reduces delays caused by missing or inconsistent application data.

Use dynamic fields based on business type, industry, geography, and risk level. This reduces unnecessary document requests and creates a cleaner foundation for merchant verification. Higher-risk merchants can be asked for additional information without slowing down lower-risk applicants.

Step 2: Verify the Business Entity

Confirm that the merchant legally exists by checking its registration details against reliable company registries or trusted data sources. Verify the legal name, registration number, company status, incorporation date, and registered address. This ensures the application is tied to a genuine and active business.

Strong merchant KYB should also flag mismatches between merchant-provided data and official records. Inconsistencies can indicate outdated information, misrepresentation, or higher onboarding risk. These discrepancies should be reviewed before the merchant moves to the next stage.

Step 3: Identify Directors, Shareholders, and UBOs

Identify the people and entities that manage, own, or control the merchant. Review directors, shareholders, beneficial owners, and authorised representatives as part of the merchant onboarding KYB process. This gives acquirers a clearer picture of who is behind the business.

For layered corporate structures, trace ownership through intermediary companies until the relevant natural persons or controlling parties are identified. Clear ownership mapping strengthens merchant verification and risk assessment. It also helps reveal hidden control or unusually complex ownership structures.

Step 4: Verify Relevant Individuals

Verify the identity of relevant directors, UBOs, and authorised representatives where required. Checks can include government-issued ID verification, facial matching, liveness detection, address checks, and confirmation of representative authority. The scope of checks should match the merchant’s risk level and applicable requirements.

This step connects the business to real individuals and reduces impersonation or identity fraud risk. Effective merchant KYB should verify both who owns the company and who is authorised to act for it. Any identity or authority mismatch should trigger further review.

Step 5: Run AML and Sanctions Screening

Screen the merchant and relevant individuals against sanctions lists, PEP databases, watchlists, and adverse media sources. This helps identify financial-crime exposure before the merchant is approved. Screening should use sufficient identifiers to improve match accuracy.

Any alerts should be reviewed rather than treated as automatic matches. Accurate merchant verification combines identity data with screening results to reduce false positives and support risk-based decisions. Confirmed or unresolved high-risk alerts may require enhanced due diligence.

Step 6: Assess the Merchant Business Model

Understand what the merchant sells, where it operates, how customers pay, and what transaction activity is expected. Review products, services, website content, sales channels, customer locations, refund policies, and average transaction values. This helps establish whether the merchant’s commercial activity makes sense.

Compare this information with the merchant’s stated profile. A strong merchant onboarding KYB process should identify inconsistencies between the declared business model and what is visible online or expected through payment activity. Large gaps can signal fraud, transaction laundering, or undisclosed business activity.

Step 7: Conduct Risk Assessment and Underwriting

Combine KYB, AML, ownership, business-model, geographic, fraud, chargeback, and financial data into an overall merchant risk assessment. Higher-risk merchants may require additional checks or enhanced due diligence. The resulting risk rating should determine the level of review and controls applied.

Underwriting should also assess whether the merchant can meet obligations such as refunds, chargebacks, and settlement exposure. Good merchant KYB therefore supports both compliance risk and commercial risk decisions. Acquirers can also apply reserves, limits, or enhanced monitoring where appropriate.

Step 8: Approve and Monitor the Merchant

Once checks are complete, approve, escalate, or reject the application based on the merchant’s risk profile and the acquirer’s policies. Approved merchants can then be configured for processing, settlement, limits, reserves, and monitoring. The decision and supporting evidence should be recorded for audit purposes.

The process should continue after activation. Ongoing merchant verification can detect ownership changes, company-status updates, new sanctions exposure, unusual transaction activity, website changes, and rising chargeback risk. Event-driven monitoring helps acquirers respond quickly when a merchant’s risk profile changes.

How Automation Improves Merchant Onboarding

Automation helps payment acquirers make merchant onboarding KYB faster, more consistent, and easier to scale. By combining merchant KYB and merchant verification in connected workflows, teams can reduce manual work while improving risk visibility.

Here are the key areas where automation adds value:

Automated Business Verification

Automation can check company names, registration numbers, status, addresses, and filing data against trusted registries in seconds. This makes merchant verification faster, reduces manual searches, and helps keep merchant onboarding KYB consistent across applications. It also helps flag mismatched or outdated business information earlier in the process.

Automated Ownership Mapping

Ownership tools can trace shareholders, parent companies, and beneficial owners across complex corporate structures. This strengthens merchant KYB by giving acquirers a clearer view of who ultimately owns or controls the business. Automated mapping can also reveal hidden ownership links that may require further review.

Automated Identity Verification

Digital identity checks can verify relevant directors, UBOs, and authorised representatives using ID documents, facial matching, and liveness checks. This adds a faster identity layer to merchant verification while reducing manual document review. It also helps confirm that the individuals connected to the merchant are genuine and authorised.

Integrated AML Screening

Automation can screen merchants, directors, and UBOs against sanctions, PEP, watchlist, and adverse media sources within the same workflow. Integrated screening helps merchant onboarding KYB teams spot financial-crime risks earlier without switching between multiple systems. It also creates a more complete view of risk across the merchant and its related parties.

Dynamic Risk Scoring

Risk engines can combine ownership, geography, industry, AML results, transaction expectations, and other onboarding data into a merchant risk score. This helps merchant KYB teams apply deeper checks where risk is higher and streamline lower-risk cases. The score can also be updated when new risk information appears.

Rules-Based Workflows

Rules-based workflows can automatically approve straightforward cases, request more information, or send higher-risk merchants for manual review. This makes merchant verification more efficient while keeping exceptions and risk decisions under tighter control. It also helps acquirers apply the same onboarding logic consistently across large merchant volumes.

Best Practices for Merchant KYB and Onboarding

Strong merchant KYB helps payment acquirers verify businesses accurately while keeping onboarding efficient and risk-focused. A consistent merchant onboarding KYB process also improves merchant verification, ownership checks, and ongoing monitoring.

Here are six practical best practices to follow:

Verify against independent sources - Cross-check merchant-provided information against company registries, trusted databases, and other reliable sources. This makes merchant verification more accurate and helps catch outdated, incomplete, or misleading details.

Verify the entire ownership structure - Trace ownership through corporate shareholders until the relevant beneficial owners or controlling persons are identified. Strong merchant KYB should show who ultimately owns or controls the business, not just the first entity in the chain.

Combine KYB with payment-risk analysis - Confirming that a company legally exists is only one part of the process. A strong merchant onboarding KYB framework should also assess fraud exposure, chargeback risk, financial stability, transaction patterns, and industry risk.

Review the merchant's actual online activity - Compare the merchant's website, products, pricing, policies, and customer journey with the information provided during onboarding. Differences can reveal undisclosed activities or a business model that does not match the application.

Create an expected transaction profile - Record expected transaction volumes, average ticket size, customer locations, sales channels, and payment patterns during onboarding. This baseline makes it easier to identify unusual activity once the merchant starts processing payments.

Use event-driven monitoring - Monitor merchants when meaningful changes occur, such as new owners, directors, products, jurisdictions, sanctions exposure, or unusual transaction activity. Event-driven monitoring keeps merchant verification current instead of relying only on scheduled reviews.

Merchant Onboarding Regulations and Card-Network Requirements

Payment acquirers must align merchant onboarding KYB with applicable AML/CFT rules, payment regulations, card-network standards, and data-security requirements. 

A structured merchant KYB process also helps keep merchant verification consistent across different risk and compliance obligations.

Here are the main regulatory and card-network areas to consider:

AML/CFT Requirements

Depending on the jurisdiction and acquiring model, payment acquirers may need to perform customer due diligence, beneficial ownership verification, sanctions screening, risk assessment, enhanced due diligence, ongoing monitoring, and record keeping. A strong merchant onboarding KYB process helps bring these checks together so higher-risk merchants can receive deeper review where required.

Payment Services Regulation

Acquirers may also have obligations as regulated payment service providers, including requirements around governance, safeguarding, risk management, and customer due diligence. Effective merchant KYB helps ensure that onboarding decisions reflect both the merchant’s identity and the regulatory risks linked to providing payment services.

Card Network Rules

Visa, Mastercard, and other card networks impose additional standards for merchant screening, risk management, fraud controls, and ongoing monitoring. Mastercard, for example, requires acquirers to monitor merchant transaction activity and review e-commerce merchant websites for activity that may conflict with the merchant’s stated business.

Data Security

Merchants that handle cardholder data may also need to meet PCI DSS and related card-network security requirements. Visa states that acquirers are responsible for ensuring applicable PCI DSS compliance among their merchants and service providers, making data-security checks an important part of merchant verification and ongoing oversight.

Note: Exact onboarding, merchant KYB, monitoring, and security requirements depend on the jurisdiction, licence type, acquiring model, merchant category, and applicable card-network rules.

Merchant Onboarding Metrics Payment Acquirers Should Track

Tracking the right metrics helps payment acquirers measure whether merchant onboarding KYB is fast, accurate, and risk-focused. Strong merchant KYB and merchant verification metrics also show where friction, manual work, or downstream risk is increasing.

Here are eight key metrics payment acquirers should monitor:

Application Completion Rate - Track the percentage of merchants that successfully finish the onboarding application. A low completion rate can reveal friction in data collection, document requests, or the merchant onboarding KYB journey.

Merchant Abandonment Rate - Measure how many merchants leave before onboarding is complete. High abandonment may point to lengthy forms, repeated verification requests, or slow merchant verification processes.

Average Onboarding Time - Monitor the time from application submission to merchant approval and activation. Faster processing is valuable, but speed should not weaken merchant KYB, underwriting, or risk controls.

Straight-Through Processing Rate - Track how many applications move from submission to approval without manual intervention. A higher rate can show that automated merchant verification and risk rules are working effectively for straightforward cases.

Manual Review and False-Positive Rate - Measure how many merchants require analyst review and how many screening alerts turn out to be false matches. Reducing unnecessary reviews can improve efficiency without reducing the quality of merchant KYB checks.

KYB Match and Approval Rate - Track how often merchant information matches trusted registry and verification sources, along with the percentage of applications ultimately approved. These metrics help identify data-quality issues and understand how merchant onboarding KYB rules affect conversion.

Post-Onboarding Fraud and Chargeback Rate - Measure fraud, disputes, and chargebacks after merchants begin processing. Rising downstream losses can indicate that onboarding risk assessment or merchant verification controls need adjustment.

Ongoing Monitoring Alert Rate - Track alerts triggered by ownership changes, sanctions exposure, unusual transactions, business-status updates, or other risk events. Comparing alert volume with confirmed issues helps payment acquirers refine monitoring rules and focus reviews on meaningful risk.

Common Merchant Onboarding Challenges for Payment Acquirers

Payment acquirers often face operational friction when merchant onboarding KYB depends on scattered data, manual reviews, and complex ownership checks. These issues can slow merchant verification, increase costs, and make merchant KYB harder to scale.

Here are the most common challenges to address:

Fragmented Data Sources - Business records, ownership data, sanctions results, website information, and credit data often sit across separate providers. This fragmentation slows merchant onboarding KYB, creates duplicate work, and makes it harder to build a complete risk view.

Manual Document Reviews - Compliance teams often spend valuable time checking incorporation documents, ownership records, and merchant applications by hand. Automating parts of merchant verification can reduce repetitive reviews and let analysts focus on higher-risk cases.

Complex Ownership Structures - Multi-layer companies, corporate shareholders, and cross-border entities can make beneficial ownership difficult to trace. Strong merchant KYB needs clear ownership mapping so acquirers can identify the people who ultimately own or control the merchant.

False Positive AML Alerts - Common names, limited identifiers, and inconsistent data can generate unnecessary sanctions or PEP alerts. Better matching logic and richer merchant verification data help reduce false positives while keeping genuine risk signals visible.

Merchant Drop-Off - Long forms, repeated document requests, and slow review cycles can cause merchants to abandon onboarding. A streamlined merchant onboarding KYB process can reduce friction by requesting only the information needed for the merchant’s risk profile.

Keeping Merchant Data Current - Merchant ownership, directors, products, locations, websites, and payment behaviour can change after approval. Ongoing merchant KYB and monitoring help acquirers detect material changes before they create larger compliance or payment risks.

Bottom Line

Effective merchant onboarding KYB helps payment acquirers move beyond basic business checks and build a complete view of each merchant’s ownership, activity, financial exposure, and compliance risk. Strong merchant KYB combines business verification, UBO checks, AML screening, underwriting, and risk assessment before activation.

The process should continue after approval. Ongoing merchant verification helps acquirers detect ownership changes, unusual payment behaviour, sanctions exposure, and other risk signals early, making merchant onboarding faster, safer, and easier to scale.

Binderr Services helps payment acquirers streamline KYB, ownership checks, AML screening, risk assessment, and ongoing monitoring in one compliance platform.

FAQs - Merchant Onboarding & KYB for Payment Acquirers