Adult payment processing under the new age-verification regimes

Two compliance regimes, not one

Adult merchants are now underwritten against two separate sets of obligations, and satisfying one does not satisfy the other.

The card scheme rules apply everywhere you process, regardless of local law. They require registration as a specialty merchant, documented age and identity verification for every individual appearing in content, written consent covering the specific material published, and a content-removal process that actually works. These are contractual conditions of accepting cards.

National age-assurance law applies where your visitors are, and it is no longer uniform. The UK regime under the Online Safety Act, and comparable measures in Germany and Australia, set different standards and are enforced differently.

A merchant with excellent scheme compliance and a single global age gate is now half-compliant, and increasingly underwriters know it. Being able to say which mechanism you use in which market is a genuine advantage in an application, because most applicants cannot.

What the file actually needs to contain

The documents that matter here are unusual, and assembling them is the work:

1. Per-individual verification records. Government ID checked, retained, and retrievable for every person appearing in content — with the retention itself handled lawfully, which is its own data-protection question.
2. Consent tied to specific content. Not a blanket release signed once. Consent that identifies what was produced and where it may be published, because scheme rules require the link to be demonstrable.
3. A removal process with evidence of use. A published route, a stated response time, and a log showing requests received and handled. An unused process reads as decorative.
4. Market-by-market age assurance. Which mechanism, in which market, meeting which standard.

Platforms hosting third-party uploads carry all of this plus moderation obligations that studios producing their own content do not. Expect underwriting to focus there.

Descriptors, disputes, and the discretion problem

Adult carries elevated disputes for a reason that has nothing to do with fraud: a recognisable descriptor on a statement that someone else might see produces a dispute from a customer who knows perfectly well what they purchased.

The three measures that reduce this most, in order of effect:

• A neutral but recognisable descriptor. Neutral enough not to cause a problem at home, recognisable enough that the customer does not report the charge as fraud. Getting this wrong in either direction costs you.
• Renewal reminders before billing. A subscription the customer forgot about is the most common dispute in this category.
• Cancellation that takes two clicks. Friction here converts directly into chargebacks, and under the 2026 VAMP rules those count in the same ratio as fraud reports.

What we will not do

We introduce compliant adult merchants to acquirers with appetite for the category. We do not work with any business where the position on consent, age verification or the lawfulness of the content is unclear, and we will end a conversation rather than pass along an application we have doubts about.

This is not a moral posture about adult content, which is a lawful industry. It is that the compliance requirements in this category exist to prevent specific serious harms, and an introducer who treats them as paperwork is part of the problem.