3609 Gaylord palms

Introduction

• What it is: This MCC encompasses services offered by large resort hotels and conference centers.
• Risk level: Medium — The combination of hospitality and entertainment can lead to varied risk factors.
• Acceptance difficulty: Medium — Payments may be more challenging to process due to the diverse range of services.
• Typical business models: resort hotels; convention centers; hotels with extensive recreational facilities; large event spaces.
• For merchants: Expect moderate MDR rates; may require higher reserves; comprehensive service descriptions can enhance approval chances.
• What PSPs expect: Documentation of business operations; compliance with hospitality regulations; clear booking and cancellation policies.

Payment Insights & Benchmarks

Merchants in this MCC should plan for a robust payment strategy that balances acceptance rates and fraud prevention. Given the nature of the offerings, payment environments can vary significantly, impacting transaction success.

Payment methods

Cards: widely accepted but may face scrutiny from banks based on the transaction type and customer profile.

• E-wallets: becoming popular for convenience, but businesses may need to address specific limits or fees.
• Mobile payments: increasing in usage, especially for on-site transactions, though may have fluctuating approval rates.
• Gift cards and loyalty programs: effective for encouraging repeat business, but can incur additional handling overhead.

Authentication & security

Strong Customer Authentication (SCA) regulations may apply, especially for online transactions.

• 3D Secure is commonly used, providing an extra layer but can lead to cart abandonment if not optimized.
• Merchants must balance security and user experience to minimize fraud while maintaining sales.

Benchmarks (indicative, not guaranteed)

MDR: generally higher than average due to increased fraud risk.

• Rolling reserves: may range between 5-10% to mitigate chargebacks.
• Settlement periods: often extended to 5-10 days, impacting cash flow.
• Chargeback ratios: potentially elevated compared to standard retail margins.
• Approval rates: lower for credit cards, with higher success seen in e-wallets and localized payment methods.

Key metrics to monitor

Transaction decline rates segmented by payment method.

• Chargeback ratios, especially tied to customer disputes.
• Customer payment preferences and shifting trends over time.
• Average transaction value and how it correlates with accepted payment methods.

Risk & Compliance

Merchants under this MCC are closely scrutinized due to elevated financial and reputational risks. PSPs and acquirers typically apply stricter controls, expecting merchants to proactively address fraud, chargebacks, and AML/KYC compliance.

Chargebacks & fraud

High incidence of friendly fraud (“I didn’t authorize this transaction”), as customers might dispute legitimate charges for services such as hotel stays or events.

• Fraudulent booking activities, including the use of stolen credit cards or attempting to take advantage of cancellation policies.
• Mitigation tools include transaction monitoring, device fingerprinting, and comprehensive booking verification processes.

AML/KYC expectations

Strong customer identity verification (IDV) procedures should involve thorough checks against sanctions lists and politically exposed persons (PEP) databases.

• Source-of-funds verification may be required for high-value transactions or multiple bookings, especially in cash-heavy settings.
• Manual review triggers include bookings made in bulk, unusual payment methods (such as virtual cards), or multiple reservations from a single IP address in a short time frame.

Operational red flags

Lack of transparency about ownership structures or operators, especially in white-label agreements.

• Heavy reliance on unverified external booking channels or affiliate traffic with unclear provenance.
• Insufficient customer support processes for addressing disputes or refund requests effectively.
• The absence of clear and accessible policies regarding cancellations and returns.

Onboarding Checklist

Merchants under this MCC should prepare a complete onboarding package before approaching PSPs or acquirers. A well-structured submission improves approval chances and shortens review times.

Legal & corporate documents

company registration and incorporation documents

• disclosure of beneficial owners (UBO) and corporate structure
• valid licenses for the relevant business activities
• policies: Terms of Service, Privacy, AML/KYC, Refund Policy

Financials & risk management

recent financial statements and cashflow forecasts

• liquidity or reserve model for payouts
• description of antifraud setup and monitoring tools

Product & marketing

demo access or screenshots of the live platform

• marketing plan and traffic source overview (affiliates, SEO, PPC)
• geographic targeting information
• KYC flow details, including IDV providers and thresholds

Technical integration & security

payment architecture overview with supported methods/providers

• description of SCA/3DS flows, retry logic, and tokenization
• PCI DSS compliance status and data storage policy

Operations

customer support coverage (languages, 24/7 if available)

• SLA for dispute handling and chargeback response
• deposit, bet, and payout limits; self-exclusion mechanisms
• internal process for chargeback investigation and documentation

Regulation & Licensing

Licensing and certification are critical for merchants in this MCC, as PSPs and acquirers will require proof of compliance before onboarding. Recognition of licenses depends heavily on the merchant’s jurisdiction and the markets they target.

Operator licenses

State gaming commissions (e.g., New Jersey Division of Gaming Enforcement) — required for operators in states where gaming is legalized and highly recognized by PSPs.

• Local business licenses — necessary for operating in specific municipalities, with varying recognition based on local regulations.
• Hotel gaming licenses — required in many jurisdictions for hotels offering gaming services within their premises.
• Mobile gaming licenses — may be necessary for operators providing gaming services through mobile platforms, depending on the market.
• Recognition of these licenses can differ significantly across different jurisdictions.

Geo-restrictions

Certain countries or states might impose gaming bans, leading to restricted transactions or onboarding challenges.

• The United States has state-specific regulations, requiring individual licenses for each operated state.
• International markets may have strict regulations that limit cross-border gaming operations.

Certifications & audits

PCI DSS compliance for safe handling of payment card data.

• Regular audits for compliance with local gaming regulations.
• Responsible Gaming certifications ensuring proper gambling practices.
• AML/KYC compliance auditing to prevent fraudulent activities and ensure customer verification.

Official Definitions & Network Comparisons

This section shows how major card networks define this MCC and highlights practical differences that affect merchant onboarding.

Explanation:

The terminology used by networks for this MCC reflects a broad category, leading to variances in approval processes. Some networks focus more on specific facility types and may impose stricter licensing requirements. Rejections can arise due to insufficient documentation of services, non-compliance with local regulations, or ambiguous descriptions of activities.

Alternative MCC Codes

Merchants often confuse this MCC with other categories. The table below shows which codes are related, why they are confused, and what risks misclassification brings.

Rule of thumb for merchants:

Ensure that your classification aligns with your actual business functions. If your services primarily involve accommodation and hospitality, use MCC 3609. Misclassifications can lead to compliance issues, including account closures.

Best Practices for Merchants

Merchants operating under the MCC 3609 must prioritize effective management of payments and risk to ensure smooth operations. Implementing the following best practices will help reduce exposure to disputes, enhance payment acceptance, and contribute to sustainable relationships with payment service providers (PSPs).

Classification & transparency

always use the correct MCC; attempts to bypass classification often lead to account closure

• clearly display event licenses, geographic restrictions, and responsible gaming policies on your website
• maintain transparent business practices and accurate billing descriptors for your services

Fraud & chargeback reduction

implement 3DS or step-up authentication for high-risk transactions, especially those involving larger amounts or unusual locations

• use clear billing descriptors and provide instant transaction confirmations via SMS or email to minimize confusion and chargebacks
• log transaction and event data systematically to create a robust record for dispute representments

Payment acceptance optimization

support multiple payment methods (e.g., cards, e-wallets, and local payment options) to diversify options and reduce reliance on a single provider

• optimize transaction routing based on geography, banking relationships, or specific payment methods, and regularly test performance across different PSPs
• consider establishing separate merchant accounts (MIDs) for different event types or service categories to enhance compliance and adaptability

Operational discipline

monitor key performance indicators (KPIs) like authorization rates, chargeback ratios, and average revenue per user (ARPU) to identify issues quickly

• conduct regular compliance audits, update best practices, and perform test transactions to ensure system integrity
• designate a specific team or individual to manage disputes, ensuring timely follow-ups and resolution responses

Payouts & liquidity

create liquidity buffers to handle rolling reserves and supports for delayed payouts

• implement automated AML (Anti-Money Laundering) checks for withdrawal requests, particularly those above predetermined thresholds
• continuously monitor payout processing speeds and investigate any unusual withdrawal patterns to mitigate risk

Business Scope & Examples

This MCC covers businesses engaged in providing lodging accommodations and related services, typically involving short-term stays. Merchants classified under this category usually offer rooms, amenities, and various hospitality services to guests visiting for leisure or business purposes. The focus is specifically on entities that operate as hotels, motels, or similar establishments.

Models

full-service hotels (offering dining, conferencing, and recreational facilities)

• budget motels (low-cost lodging with basic services)
• extended-stay hotels (accommodations with kitchen facilities for longer stays)
• resorts (properties with leisure activities and amenities such as pools and spas)
• bed and breakfast establishments (lodging with breakfast included)

Borderline cases

Vacation rentals — properties rented out for short stays (e.g., Airbnb); may vary depending on service level and management.

• Hostels — budget accommodations appealing to travelers; similar in service but typically categorized differently.
• Time-share properties — ownership models where multiple parties share the use of a property; may not fit standard lodging definitions.

Signals for correct classification

primary business activity involves the provision of paid lodging or accommodation

• guests receive access to additional services such as meals, housekeeping, and recreational options
• operation follows a business model that facilitates short-term stays rather than long-term rentals