Peptide Processing vs Stripe, Square & PayPal

Why mainstream processors prohibit peptides, and what actually happens when merchants try. Freeze timelines, MATCH placement, and the specialist alternative.

By Blake Toves, Founder at Holistic Payments · Published April 17, 2026

Stripe, Square, and PayPal all prohibit peptide sales categorically. Their Acceptable Use Policies explicitly list pseudo-pharmaceuticals, research chemicals, and drug-regulated products as restricted. Merchants who try to process peptides through them typically get 30–90 days of clean processing before the platform's risk systems identify the SKUs, freeze the account with a 90–180 day fund hold, and often place the merchant on the MATCH list. Specialist high-risk processors like Holistic Payments are the compliant alternative.

What each mainstream processor says about peptides

Stripe

PayPal

Square

Shopify Payments

The freeze cycle, what actually happens

  1. Week 0–2. You sign up, your first transactions clear. Stripe/Square/PayPal don't flag immediately because their risk systems batch-analyze at the descriptor and SKU level over time.
  2. Week 2–6. Clean processing continues. You start to feel confident. Some merchants scale aggressively here, which accelerates the next step.
  3. Week 6–12. Risk systems identify the peptide SKUs or a chargeback triggers a manual review. Account gets paused pending documentation.
  4. Week 8–14. You submit documentation. The compliance team reviews and determines the merchant falls into a prohibited category. Account is terminated.
  5. Day 1–90 post-termination. Your funds are held. Stripe's standard is 90 days; PayPal's can run 180 days. You may get automated "your payout is on hold" emails with no clear resolution path.
  6. Day 30–60 post-termination. MATCH placement happens silently. You don't get notified, you find out when you apply to your next processor and get declined.

Specialist high-risk vs. mainstream: the real comparison

Stripe / Square / PayPalHolistic Payments (U.S. Bank)
Peptides allowed?❌ Prohibited✅ Yes, RUO positioning required
LegitScript required?N/A (banned)❌ Not required
Rate2.9% + $0.30 (if they accepted you, which they don't)6.5%–9.5% by volume tier
Settlement2–7 days48 hours, daily
Reserve0% (until freeze)10%/90d or 15%/60d, released to 0%
Account stabilityFreeze inevitable within 90 daysPurpose-built for peptides, stable
MATCH riskHigh, termination typically produces MATCHLow, compliant program
Subscription supportYes (before freeze)ACH today, card-on-file roadmap
Authorization rate~95% (low-risk systems)~90% with configurable sensitivity

"But I have a friend whose peptide store ran on Stripe for a year"

It happens. Stripe's risk systems aren't perfect, and small merchants sometimes stay under the detection threshold for longer, particularly if volume is low, chargebacks are zero, and product descriptors don't match obvious patterns. The problem is that the termination eventually happens, and when it does, it's sudden and total.

The merchants we hear from most often are the ones who scaled hard on Stripe for 8–14 months, hit $200K+/mo, and then got frozen with $400K of held funds and 90 days of angry customer chargebacks to handle. The long runway makes the crash much worse than starting on a compliant processor from day one.

FAQ

Can I use Stripe for non-peptide SKUs on the same store?

Not if Stripe classifies your business as a peptide vertical at the account level. Compliance reviews assess the whole merchant account, not individual line items. If Stripe sees peptide SKUs in your catalog, the whole account is at risk, including non-peptide revenue.

What if I mis-code peptide SKUs as supplements to get past Stripe?

Don't. This is MCC masking and it's grounds for immediate termination with MATCH Reason Code 07, typically the hardest code to recover from. See our MATCH recovery guide if you've already done this.

What about Authorize.Net or NMI?

Those are gateways, not processors. They relay transactions to an acquiring bank. The relevant question is always the acquirer. Authorize.Net is typically backed by Visa's Cybersource, which has the same peptide restrictions. NMI can be configured with a high-risk acquirer, that's actually how many specialist processors run.

How do I tell Stripe I want to process peptides before signing up?

You can't. Stripe has no signup flow for restricted verticals. If you declare peptides during signup, you'll be declined immediately. The freezes happen when merchants sign up without declaring, then get caught later. Don't try this path.

Skip the freeze cycle. Go direct to compliant processing.

Apply now. 1–2 week approval. U.S. bank. Written reserve-release letter.