Program ruleIn effectFederal

Mastercard now bills every online pharmacy transaction and requires written consent to acquire them

The August 2026 rules edition carries Mastercard's rewritten Specialty Merchant Registration Program: online pharmacies stay a registered category, acquirers need Mastercard's written consent to acquire them, and since June every registered transaction carries new network fees.

Source Aug 4, 2026Briefing Sep 21, 2026Reviewed Sep 21, 2026Next review Mar 21, 2027
01What changed

Mastercard's Security Rules and Procedures, Merchant Edition dated 4 August 2026, lists non face to face pharmaceutical merchants under MCC 5122 and 5912 as specialty merchants that must be registered, with every website URL, before acquiring. New section 9.1.1 requires Mastercard's express prior written consent to acquire for specialty merchants from 1 May 2026. Section 9.4.3 requires the acquirer to verify each pharmacy's legal compliance at registration, by legal opinion or accreditation by a recognized third party, and to reconfirm it at least every twelve months.

Bulletin 12568.1 sets the fees: the annual registration fee rises to USD 1,000 per merchant and a USD 50,000 High Risk Acquirer License Fee applies from 1 May 2026; a Specialty Merchant Transaction Fee of USD 0.02 and a Volume Fee of 10 basis points apply to registered merchants' purchases and credits from 3 June 2026, first billed 14 June.

02Who this affects
  • Online and mail order pharmacies acquired card not present under MCC 5122 or 5912.
  • Acquirers and payment facilitators that board them.

Applies to card not present pharmacy merchants coded MCC 5122 or 5912 and to the acquirers that board them. A storefront pharmacy's card present volume is outside the program.

03Key dates
Source publishedAugust 4, 2026Security Rules and Procedures, Merchant Edition, 4 August 2026.
EffectiveMay 1, 2026Prior written consent rule; updated registration fee; high risk acquirer licence fee.
EffectiveJune 3, 2026Specialty merchant transaction fee and volume fee, first billed 14 June 2026.
EffectiveOctober 1, 2026Prior consent rule in most of the Europe region.
04Why it matters

Two things moved. Every registered online pharmacy transaction on Mastercard now costs about ten basis points plus two cents more, and acquirers began passing that through in June. And an acquirer's compliance file on each pharmacy is now a network requirement with a twelve month clock, which is why acquirers ask for a certification at boarding and again at renewal.

05What to do now
  1. Check a June or July statement for new Mastercard specialty merchant fee lines.
  2. Ask your acquirer when your next twelve month reverification falls and what it will need.
  3. Confirm every URL you take payments on is registered with your acquirer.
06How this relates to certification

Payment and Compliance History. The Payment and Compliance History domain covers a pharmacy's standing with its acquirer and the card networks. The specialty merchant registration and its twelve month reverification are the network side of that record.

07Sources
All briefingsRevision 2783c18ae26a

Know where your pharmacy stands before the rules change again.

Certified pharmacies are re-verified nightly against state boards, federal enforcement records and their own websites.

Back to Regulatory Watch