Introduction
- What it is: This MCC encompasses establishments providing stay and recreation services at resort facilities.
- Risk level: Medium — Activities often include gambling and entertainment, which can elevate risk profiles.
- Acceptance difficulty: Medium — Some payment processors may have specific criteria due to the nature of the services provided.
- Typical business models: luxury resorts; destination spas; golf resorts; conference centers; entertainment facilities.
- For merchants: Expect moderate MDR; potential for higher reserves; thorough approval processes due to risk assessment.
- What PSPs expect: Clear documentation of business operations; compliance with local gaming regulations; profitable business history.
Payment Insights & Benchmarks
Merchants in this MCC should plan for increased payment complexities due to the leisure and hospitality nature of the business. Acceptance often hinges on peak seasons, customer preferences, and specific service offerings.
Payment methods
Cards: widely accepted but may face geographic restrictions and higher incidences of fraud.
- E-wallets: gaining popularity for their convenience, especially among younger customers.
- Payment plans: often utilized for high-ticket items, leading to more intricate approval processes.
- Gift cards: frequently used for in-house transactions, reducing chargeback exposure.
Authentication & security
Strong customer authentication (3DS, SCA) is often required, especially for online bookings.
- These measures can decrease fraud rates, though they may also lead to higher cart abandonment.
- Regular monitoring for unusual activity is essential to reduce risk associated with larger transactions.
Benchmarks (indicative, not guaranteed)
MDR: generally higher than standard e-commerce due to service-related risks.
- Rolling reserves: may be established based on the nature of bookings and cancellations.
- Settlement cycles: typically longer (5-10 days) due to processing of post-service transactions.
- Chargeback ratios: may be elevated during peak seasons when transaction volumes spike.
- Card approval rates: tend to be moderately lower; however, e-wallet acceptance could be higher.
Key metrics to monitor
Transaction success rates segmented by payment method and seasonality.
- Chargeback rates broken down by service type and customer demographics.
- Average booking value and associated payment patterns.
- Customer profile insights to better tailor payment options and reduce friction.
Risk & Compliance
Merchants operating under the MCC 3772, which typically encompasses leisure and travel services, face significant scrutiny due to various financial and reputational risks. Payment service providers (PSPs) and acquirers enforce strict compliance measures focused on mitigating fraud, chargebacks, and fulfilling AML/KYC obligations.
Chargebacks & fraud
Frequent occurrences of friendly fraud where customers dispute legitimate transactions, claiming they did not authorize their purchases.
- Bonus abuse, where customers exploit promotional offers for gaming or hospitality services for personal gain.
- Use of stolen credit card information is prevalent, leading to increased chargebacks.
- Common mitigation tools include velocity checks to monitor rapid transactions, behavioral analytics to detect suspicious patterns, and device fingerprinting to confirm user identities.
AML/KYC expectations
Strong customer identity verification (IDV) is necessary, including thorough sanctions and politically exposed person (PEP) checks.
- Monitoring of source-of-funds for any unusual patterns or transactions that may raise red flags.
- Triggers for manual reviews include frequent or large deposits, deviations from typical spending behavior, and the use of VPNs or proxy services for transactions.
Operational red flags
Lack of transparency regarding operator ownership, especially in white-label setups, can alarm PSPs and acquirers.
- Traffic sources from high-risk regions or unverified affiliates that fail to provide legitimate customer bases.
- Absence of transparent responsible gaming policies such as self-exclusion options, betting limits, or designated cooling-off periods.
- Unclear or nonexistent refund and return policies communicated to customers, creating potential disputes and chargeback risks.
Onboarding Checklist
Merchants under this MCC should prepare a complete onboarding package before approaching PSPs or acquirers. A well-structured submission improves approval chances and shortens review times.
Legal & corporate documents
company registration and incorporation documents
- disclosure of beneficial owners (UBO) and corporate structure
- valid licenses for the relevant business activities
- policies: Terms of Service, Privacy, AML/KYC, Refund Policy, Responsible Gaming (if applicable)
Financials & risk management
recent financial statements and cashflow forecasts
- liquidity or reserve model for payouts
- description of antifraud setup and monitoring tools
Product & marketing
demo access or screenshots of the live platform
- marketing plan and traffic source overview (affiliates, SEO, PPC)
- geographic targeting information
- KYC flow details, including IDV providers and thresholds
Technical integration & security
payment architecture overview with supported methods/providers
- description of SCA/3DS flows, retry logic, and tokenization
- PCI DSS compliance status and data storage policy
Operations
customer support coverage (languages, 24/7 if available)
- SLA for dispute handling and chargeback response
- deposit, bet, and payout limits; self-exclusion mechanisms
- internal process for chargeback investigation and documentation
Regulation & Licensing
Licensing and certification are critical for merchants in this MCC, as PSPs and acquirers will require proof of compliance before onboarding. Recognition of licenses depends heavily on the merchant’s jurisdiction and the markets they target.
Operator licenses
Gaming Control Board licenses (varies by state) — necessary for legal operation of casino and gaming establishments in the U.S. Each state has different criteria for recognition.
- UK Gambling Commission (UKGC) — recognized in the UK and often required if targeting UK customers, known for its robust regulatory framework.
- Malta Gaming Authority (MGA) — acknowledges licenses for operators in EU jurisdictions, widely accepted for online gaming companies.
- Local municipality licenses — required for specific local gaming operations, may vary significantly depending on jurisdiction.
- Some markets mandate separate applications for different types of gaming activities, such as table games, slots, and sports betting.
Geo-restrictions
Many jurisdictions impose strict regulations on gambling, leading to potential refusals of service based on local laws.
- In the U.S., state-level regulations mean that gaming licenses granted in one state may not be valid in another, constraining market reach.
- International operations often require compliance with both home jurisdiction and target market laws, leading to complex licensing requirements.
Certifications & audits
PCI DSS compliance is essential for handling payment card information securely.
- Annual AML (Anti-Money Laundering) audits to prevent illicit activities must be conducted regularly.
- Responsible Gaming audits to ensure compliance with regulations promoting safe gambling practices.
- RNG (Random Number Generator) testing reports that validate fair outcomes in gaming systems.
Official Definitions & Network Comparisons
This section shows how major card networks define this MCC and highlights practical differences that affect merchant onboarding.
| Network | Definition | Key notes |
|---|---|---|
| Visa | Resort and casino activities | May require specific licensing; geographical limits apply |
| Mastercard | Gaming activities at resorts and casinos | Compliance with state regulations is necessary; risk assessments are common |
| American Exp. | Resort facilities offering gaming options | Additional scrutiny for operational compliance; higher risk categories |
| Discover | Gaming and leisure services at resorts | Regional restrictions; operator must have valid licenses |
Explanation:
Although similar terms like "gaming" and "resort activities" are used, the emphasis on regulatory compliance and geographical limitations can vary markedly between networks. Some may mandate separate merchant IDs for distinct types of gaming services. Frequent denial reasons include inadequate licensing, operating in high-risk areas, or having unclear customer transaction profiles.
Alternative MCC Codes
Merchants often confuse this MCC with other categories. The table below shows which codes are related, why they are confused, and what risks misclassification brings.
| MCC | How it is used | Why confused | When acceptable | What is risky |
|---|---|---|---|---|
| 7011 | Hotels, motels, and inns | "We provide lodging services" | Established hotels and motels | Short-term rentals misclassified as hotels |
| 7999 | Miscellaneous recreation | "We offer various recreational activities" | Non-specific recreational businesses | Misclassifying hospitality-related services |
| 7012 | Timeshares and resorts | "We operate a vacation ownership program" | Legitimate timeshare or resort operations | Misrepresenting non-timeshare accommodations |
| 7997 | Membership clubs | “We operate a social club” | Genuine member-based organizations | Misclassifying as a club when primarily lodging |
Rule of thumb for merchants:
Ensure accurate classification based on the primary services offered. Hospitality and lodging should be clearly distinguished from recreational and membership activities. Misclassification can lead to compliance issues and potential account closures.
Best Practices for Merchants
Merchants under the MCC 3772 face unique challenges linked to transactions in the gaming and entertainment sector. By following best practices, you can enhance your operational resilience, build customer trust, and ensure sustainable payment acceptance.
Classification & transparency
always use the correct MCC; misclassification can lead to payment processing issues or account termination
- clearly outline your services, gaming policies, and any restrictions on your website
- ensure transparent business practices and billing descriptors to avoid customer confusion
Fraud & chargeback reduction
implement 3DS or step-up authentication for transactions that exhibit high-risk characteristics (such as unusual locations or transaction sizes)
- use clear billing descriptors and provide immediate confirmations via SMS or email to enhance customer communication
- log all transaction activities and gaming events to create a strong defense during disputes
Payment acceptance optimization
support various payment methods like cards, e-wallets, and local payment solutions to diversify risk
- optimize transaction routing based on geography and payment provider performance, routinely testing alternate providers
- establish separate merchant IDs (MIDs) for different services or regions for tailored management and compliance
Operational discipline
monitor key performance indicators (KPIs) such as authorization rates, chargeback ratios, and average revenue per user (ARPU)
- conduct regular compliance audits and refresh internal policies to ensure alignment with industry standards
- designate a specific team or individual for handling disputes promptly, adhering to service-level agreements (SLAs)
Payouts & liquidity
maintain liquidity buffers to address potential rolling reserves and extend settlement periods without operational strain
- implement automated anti-money laundering (AML) checks for withdrawals, particularly for transactions that exceed certain thresholds
- continuously track payout processing times and monitor for any suspicious withdrawal patterns to mitigate risk
Business Scope & Examples
This MCC encompasses businesses providing a range of recreational and leisure services, typically in resort or destination settings. Merchants classified under this category often offer entertainment, accommodation, and activities related to recreation, tourism, and social gatherings, facilitating customer transactions tied to these experiences.
Models
luxury resort and hotel operations
- golf course establishments and pro shops
- conference and meeting facility services
- spa and wellness center services
- adventure and outdoor activity providers (e.g., zip-lining, hiking tours)
Borderline cases
Private membership clubs — venues that may provide similar amenities but operate on a membership basis; classification may depend on service offerings.
- Temporary event planners — businesses organizing specific one-time events (e.g., festivals, weddings); if primarily focused on event logistics without ongoing service, they may not fit this MCC.
Signals for correct classification
business operations include ongoing accommodations and recreational services
- facility promotes multiple leisure activities on-site
- transactions commonly involve package deals for stays, activities, and dining
Comments