Transaction Laundering
Transaction laundering (also called factoring) is when a merchant uses its approved payment account to process transactions for a different, undisclosed business, usually one that would not qualify for its own account. It is a severe violation of card-scheme rules and a criminal offense in many jurisdictions.
Definition
Transaction laundering (also called factoring) is when a merchant uses its approved payment account to process transactions for a different, undisclosed business, usually one that would not qualify for its own account. It is a severe violation of card-scheme rules and a criminal offense in many jurisdictions.
How transaction laundering actually works
A transaction laundering scheme looks like this. A merchant is approved by an acquirer for a benign business category: a gift shop, a consulting practice, a florist. The approved merchant then sells a different product through a different, undeclared website. When the buyer pays, the transaction is routed through the approved merchant account and settles as if it were a gift-shop sale. The acquirer sees low-risk card activity. The real underlying business is invisible.
The practice is sometimes called factoring. It exists because the prohibited or high-risk business (unlicensed pharmaceuticals, counterfeit goods, unauthorized financial products, illegal gambling) cannot get its own account. The only path into the card network is to hide behind another merchant's approved account.
Why it evades traditional monitoring
Classical merchant monitoring inspects the declared website. If the declared site is a genuinely benign florist page, classical monitoring finds nothing wrong. The laundered transactions are happening on a different URL that was never declared. The acquirer does not know that URL exists.
That is why entity discovery (searching the open web for merchant properties the acquirer has never seen) is the first line of defense. If the merchant's brand, email, phone number, or payment descriptor appears on a URL that is not on the onboarding form, the monitoring system must surface it.
Detection signals that matter
- Undeclared URLs. Open-web searches that surface secondary storefronts, marketplace listings, and landing pages linked to the merchant by contact details or brand.
- MCC drift on the declared site. Sudden changes in the declared merchant's content (new categories, new product lines, new payment gateways) that do not match the approved merchant category code.
- Volume and chargeback patterns. Transaction behavior that does not fit the approved merchant's typical baseline.
- Adverse media. Complaints and public mentions of the merchant's name in connection with undisclosed or prohibited activity.
The operational workflow
When entity discovery surfaces a candidate URL, the analyst reviews the evidence (snippet, source query, link graph, and any content match) and either dismisses it as unrelated or promotes it to a case. A confirmed laundering case triggers merchant notice, remediation SLAs under BRAM, and if termination is warranted, a MATCH listing under reason code 09.
Kenal AURA ties this together: entity discovery feeds case creation, case resolution drives MATCH reporting, and evidence stays attached to the merchant record for the full retention window.
Frequently asked questions
- Why is transaction laundering a problem?
- It lets a merchant that should have been declined, priced at a higher risk tier, or blocked entirely slip into the payment system under another merchant's profile. The acquirer's underwriting and monitoring controls are bypassed. The card schemes treat it as a severe compliance violation.
- What signals typically indicate laundering?
- Mismatched MCC behavior, undeclared URLs linked to the merchant account, content drift on the declared website, volume spikes, and discovered secondary storefronts that are not on the application form.
- How does Kenal AURA detect it?
- Through entity discovery sweeps that find undeclared merchant URLs, MCC drift detection on the declared site, pinned-page drift monitoring, and adverse media screening for complaints that mention the merchant's name in connection with undisclosed activity.
- What's the penalty for a laundering case?
- The merchant can be terminated and MATCH-listed under reason code 09. The acquirer can face scheme fines, mandatory audits, and escalated compliance scrutiny. Civil and criminal liability may also apply depending on the underlying activity being laundered.
See how Kenal AURA handles this in production
Kenal AURA is the merchant lifecycle risk operations platform for acquirers, PSPs, and fintechs across Malaysia and ASEAN.