High-Risk Card Processing: ISO & Processor Options¶
Research Relay LLC -- RUO Peptides & Research Chemicals E-Commerce
Last updated: 2026-02-26
Executive Summary¶
Card processing for RUO (Research Use Only) peptide and research chemical merchants is expensive, heavily scrutinized, and operationally complex. This document evaluates ten high-risk ISOs and payment processors, recommends a primary and backup provider, and outlines MedusaJS integration strategies.
The honest bottom line: Expect to pay 4-6%+ per transaction with a rolling reserve of 5-10% held for 180 days. This is the cost of doing business in a category that Mastercard's BRAM program and Visa's VAMP program actively monitor. There is no way to get "normal" card processing rates for this product category.
Provider Comparison Table¶
| Provider | Peptide Experience | Pricing Model | Gateway | Contract | Multi-MID | MedusaJS Path |
|---|---|---|---|---|---|---|
| Easy Pay Direct | Explicit (requires LegitScript) | Interchange+ custom | EPD Gateway, Authorize.net, NMI | No ETF (domestic) | Yes -- core feature | Authorize.net plugin or custom NMI |
| Durango Merchant Services | Explicit high-risk specialist | Interchange+ custom | Proprietary + 150 cart integrations | Case-by-case | Unclear | Custom integration likely needed |
| PayDiverse | Explicit peptide page | Custom quote | Proprietary w/ iSpy fraud | Case-by-case | Yes -- 4+ banks minimum | Custom integration |
| AllayPay | Explicit peptide page | Interchange+ transparent | API + cart integrations | Month-to-month reported | Unclear | API integration possible |
| Instabill | Explicit peptide page | Custom quote | Bank-provided gateway | No fixed contract | Via offshore banks | Custom integration |
| Paycron | Explicit peptide content | Custom quote | Various | Case-by-case | Unclear | Depends on assigned gateway |
| Soar Payments | Nutraceutical focus (adjacent) | Custom quote | Authorize.net, NMI, USAePay | Case-by-case | Not advertised | Authorize.net plugin |
| National Processing (now pmtbox) | General high-risk program | Custom quote | Various | Case-by-case | Not advertised | Depends on assigned gateway |
| eMerchantView | Could not verify existence | N/A | N/A | N/A | N/A | N/A |
| PayKickstart | Shopping cart platform, not a processor | N/A | N/A | N/A | N/A | N/A |
Notes on Missing Providers¶
- eMerchantView: This company could not be found under this exact name. The closest matches are eMerchantBroker (EMB) and eMerchant -- both are high-risk processors but neither explicitly serves peptide merchants on their websites.
- PayKickstart: This is a shopping cart and affiliate management platform, not a payment processor. It does not provide merchant accounts or high-risk processing.
Detailed Provider Analysis¶
Tier 1: Recommended¶
Easy Pay Direct (PRIMARY RECOMMENDATION)¶
Why: Best combination of peptide experience, multi-MID load balancing, and gateway flexibility. Their proprietary load balancing technology is the standout feature for risk mitigation -- if one bank freezes an account, transactions automatically route to remaining banks.
- Peptide experience: Explicit. Requires LegitScript certification.
- Pricing: $99 setup fee. No early termination fee (domestic). Interchange-plus available for some clients. Expect 4-6%+ effective rate for RUO category.
- Rolling reserve: Expected 5-10% for 180 days (standard high-risk).
- Gateway: Choice of proprietary EPD Gateway, Authorize.net, or NMI.
- Multi-MID: Core differentiator. Merchants can specify percentage allocation across multiple accounts. Automatic failover if one account is frozen.
- 30+ banking partners for underwriting flexibility.
- MATCH-listed merchants: Handled case-by-case (not relevant for new merchant, but shows willingness to work with difficult placements).
- MedusaJS integration: Authorize.net has an existing community plugin. NMI would require a custom payment provider module but is well-documented. EPD Gateway would require full custom integration.
Risk factors: LegitScript certification required. This is a significant upfront cost and compliance burden (see underwriting-packet.md). Without it, Easy Pay Direct will not onboard a peptide merchant.
Durango Merchant Services (BACKUP)¶
Why: Longest track record in high-risk (since 2004), reportedly high approval rate, strong multi-currency support for potential international expansion.
- Peptide experience: Implicit. Serves "any industry" with deep high-risk specialization. Has worked with MATCH-listed merchants.
- Pricing: Reported range 1.95-4.95% + $0.15-$0.25 per transaction. Monthly fees $15-$60. For RUO specifically, expect the high end: 4-5%+ effective rate.
- Rolling reserve: Standard high-risk terms expected.
- Gateway: Proprietary Durango Gateway integrates with 150+ shopping carts. Supports 26 currencies, 200+ countries.
- Contract: Custom terms based on risk assessment.
- MedusaJS integration: Would require custom payment provider module using their gateway API.
Risk factors: No explicit peptide page means the sales process may take longer as they evaluate the business. Gateway may not have pre-built MedusaJS support.
Tier 2: Strong Alternatives¶
PayDiverse¶
- Strengths: 40+ banking partners, minimum 4 banks per merchant, automatic payment routing, iSpy fraud prevention software, explicit peptide merchant page.
- Weaknesses: Very few online reviews (4 on Trustpilot, 7 on BBB). Custom pricing only -- no transparency on rates. Offshore accounts have weekly payouts and higher fees.
- Expected pricing: Industry standard 4-6%+ for peptides. Offshore setup fees could reach $1,500.
- MedusaJS: Custom integration required for proprietary gateway.
AllayPay¶
- Strengths: Transparent interchange-plus pricing, explicit peptide merchant services page, clean reputation (zero complaints found online), API integration capabilities, listed as VERIFIED Credit Card Processing partner.
- Weaknesses: Limited public information on pricing specifics. Relatively newer company with less public track record than Durango or Easy Pay Direct.
- Expected pricing: Interchange-plus with high-risk markup. Likely 4-5%+ effective.
- MedusaJS: API-based integration would need custom payment provider module.
Soar Payments¶
- Strengths: Deep nutraceutical industry focus (adjacent to peptides), works with Authorize.net, NMI, and USAePay gateways, strong chargeback mitigation tools, dedicated account managers.
- Weaknesses: Nutraceutical focus, not explicit peptide/research chemical support. Does not work with MATCH-listed merchants. Has restrictions on subscription models (12-month max) and prohibits "free plus shipping" offers.
- Expected pricing: Custom quote. Nutraceutical rates typically 3.5-5%.
- MedusaJS: Authorize.net plugin available. NMI and USAePay would need custom modules.
Instabill¶
- Strengths: Explicit peptide merchant account page, offshore options for higher volume caps and relaxed underwriting, gift card payment solution for peptides, free application with 1-2 day approval, no fixed contract.
- Weaknesses: Offshore focus means longer payout cycles. Rates for comparable pharmacy merchants reported at 4-7% depending on volume (sub-$50K/month at 6-7%).
- Expected pricing: 4-7% depending on volume and domestic vs. offshore placement.
- MedusaJS: Custom integration via bank-provided gateway.
Tier 3: Viable but Less Ideal¶
Paycron¶
- Strengths: Extensive peptide industry content and guides, positions itself as industry bridge between merchants and processors.
- Weaknesses: Acts more as a broker/connector than a direct processor. No public pricing. Limited reviews verifying actual peptide merchant placements.
- MedusaJS: Depends entirely on which gateway the assigned processor uses.
National Processing (now pmtbox)¶
- Strengths: 17 years in business, rebranded November 2025 to pmtbox, fraud and chargeback management tools, same team under new name.
- Weaknesses: Rebranding creates uncertainty. No explicit peptide or research chemical merchant page. NerdWallet notes the old website redirects to pmtbox. General high-risk program rather than peptide-specialized.
- MedusaJS: Depends on assigned gateway.
Pricing Breakdown: What to Actually Expect¶
Based on industry research for RUO peptide/research chemical merchants in 2025-2026:
| Fee Type | Low Estimate | Typical | High Estimate |
|---|---|---|---|
| Discount rate | 3.5% | 4.5-5.5% | 7%+ |
| Per-transaction fee | $0.10 | $0.25-$0.35 | $0.50 |
| Monthly account fee | $15 | $25-$50 | $100 |
| Gateway fee (monthly) | $0 | $10-$25 | $50 |
| Setup fee | $0 | $99-$199 | $500-$1,500 (offshore) |
| Annual fee | $0 | $100-$200 | $500 |
| Chargeback fee | $15 | $25-$35 | $50 |
| Rolling reserve | 5% / 180 days | 10% / 180 days | 15% / 180 days |
| PCI compliance fee | $0 | $79-$120/year | $200/year |
Cost Example: $20,000/month in Card Sales¶
Assuming typical rates (5% discount + $0.30/txn, $50/month fees, 200 transactions):
| Item | Monthly Cost |
|---|---|
| Discount rate (5% of $20,000) | $1,000 |
| Transaction fees (200 x $0.30) | $60 |
| Monthly account + gateway fees | $50 |
| Rolling reserve withheld (10% of $20K) | $2,000 (returned after 180 days) |
| Total monthly cost (excluding reserve) | $1,110 (5.55% effective rate) |
| Cash flow impact (including reserve) | $3,110 unavailable per month |
After 6 months of reserve accumulation, you will have approximately $12,000 held by the processor at any given time (rolling -- released as new funds are held).
MedusaJS Integration Strategy¶
Gateway Compatibility Matrix¶
| Gateway | MedusaJS Plugin | 3DS Support | High-Risk Friendly |
|---|---|---|---|
| Authorize.net | Community plugin exists | Yes (via Accept.js) | Yes (through ISOs) |
| NMI | No plugin -- custom build needed | Yes | Yes (common for high-risk) |
| USAePay | No plugin -- custom build needed | Yes | Yes (common for high-risk) |
| Stripe | Official plugin | Yes (Payment Element) | NO -- bans research chemicals |
| EPD Gateway | No plugin -- custom build needed | Likely | Easy Pay Direct only |
Recommended Integration Path¶
Phase 1: Authorize.net via Community Plugin
Authorize.net is the most practical starting point because: 1. An existing MedusaJS community plugin handles authorize, capture, void, and cancel. 2. It is supported by Easy Pay Direct, Soar Payments, and other recommended processors. 3. It has well-documented 3D Secure support via Accept.js. 4. The plugin provides standard payment operations that match MedusaJS's payment flow.
Phase 2: Custom NMI Module (if needed)
If the primary processor assigns an NMI gateway:
1. Build a custom payment provider extending AbstractPaymentProvider.
2. NMI's API supports all required operations (auth, capture, void, refund).
3. NMI supports 3D Secure 2.0.
4. NMI's load balancing features pair well with Easy Pay Direct's multi-MID setup.
3D Secure Implementation¶
MedusaJS supports 3D Secure through its payment session status flow:
1. Payment session is initiated with requires_more status when 3DS is needed.
2. Storefront catches the error and presents the 3DS challenge to the customer.
3. After customer completes 3DS, storefront retries cart completion.
4. This liability shift is critical for high-risk merchants -- it moves fraud liability
to the card issuer, which directly reduces chargeback exposure.
Final Recommendation¶
Primary: Easy Pay Direct + Authorize.net Gateway¶
- Apply with LegitScript certification in hand.
- Request Authorize.net as gateway for MedusaJS compatibility.
- Use multi-MID load balancing from day one for risk mitigation.
- Start with domestic accounts for faster payouts.
Backup: Durango Merchant Services¶
- Apply simultaneously if Easy Pay Direct requires extended underwriting.
- Request compatibility with Authorize.net or NMI gateway.
- Their 20+ year track record provides stability.
Tertiary: AllayPay or PayDiverse¶
- If both primary and backup are slow to approve, these provide additional options.
- PayDiverse's 4+ bank minimum provides similar redundancy to Easy Pay Direct.
- AllayPay's transparent pricing model is a plus.
Application Strategy¶
- Apply to Easy Pay Direct and Durango simultaneously.
- Have all underwriting documents ready (see underwriting-packet.md).
- If LegitScript certification is a blocker, start with Durango while pursuing certification.
- Once approved, implement Authorize.net integration in MedusaJS first.
- Add NMI module as a fallback gateway.
Is Card Processing Worth It?¶
The Case FOR Card Processing¶
- Customer expectation: Most e-commerce customers expect to pay by card. Offering only BTC + ACH will lose a significant percentage of potential customers.
- Conversion rates: Cart abandonment increases dramatically when preferred payment methods are unavailable. Industry data suggests 7-10% of shoppers abandon carts specifically due to lack of preferred payment options.
- Legitimacy signal: Accepting cards signals a legitimate, established business. Research customers purchasing RUO chemicals expect a professional buying experience.
- Competitive necessity: Other RUO suppliers accept cards. Not offering cards puts Research Relay at a competitive disadvantage.
The Case AGAINST Card Processing¶
- Cost: At 5%+ effective rate, card processing is 5-10x more expensive than BTC (Lightning ~0.5-1% in routing fees) and ACH (typically 0.5-1%).
- Regulatory risk: Mastercard BRAM and Visa VAMP programs can shut down processing with little warning. One bad month of chargebacks could end card acceptance entirely.
- Cash flow impact: Rolling reserves lock up 10% of card revenue for 6 months. On $20K/month, that is $12,000 in inaccessible capital at steady state.
- Operational complexity: Chargeback management, 3D Secure implementation, PCI compliance, descriptor management, and ongoing monitoring add significant overhead.
- Personal guarantee: Most high-risk processors require personal guarantees from LLC owners, creating personal financial liability.
Recommendation¶
Pursue card processing, but treat BTC + ACH as the primary payment rails.
- Launch with BTC (Lightning) and ACH first. These are cheaper, more reliable, and under your direct control.
- Apply for card processing in parallel. The underwriting process takes 1-4 weeks.
- Price products to account for card processing costs. Consider a small discount (3-5%) for BTC/ACH payments to incentivize cheaper rails.
- Set realistic volume expectations for card processing. Even at $20K/month in card volume, the $1,100/month in fees is manageable if margins support it.
- Have an exit strategy. If chargebacks push you near monitoring thresholds, be prepared to scale back card acceptance rather than risk MATCH listing.
The three-rail approach (BTC + ACH + Cards) provides maximum customer choice while allowing the business to steer cost-conscious customers toward cheaper payment methods.