Transaction laundering: the merchant behind the merchant
Transaction laundering is card processing for a seller the acquirer never approved: a merchant with a clean account puts through payments for a hidden business, often one that would not get an account of its own. The card schemes hold the acquirer responsible for what runs through its merchants, and Visa has written the same rule into its terms for AI agents that pay. Dated events on payments and compliance are in the calendar below.
How transaction laundering works
A front website sells goods that pass the acquirer's review and gets a merchant account. Payments from other sites are then routed through that account and booked as the front's sales. The cardholder sees the front merchant's name on the statement, and the money of the hidden business reaches a bank account as ordinary card revenue. Monitoring firms such as LegitScript describe the job as uncovering hidden front sites and shell merchants.
Because the payment is booked as a sale, transaction laundering is also a money laundering route: the proceeds of the hidden business enter the financial system with a clean merchant behind them. The transaction monitoring page covers how banks look for such patterns in account flows.
What the card scheme rules say
The Visa Core Rules limit who may deposit transactions for whom. A payment facilitator must not deposit transactions on behalf of another payment facilitator, and a marketplace may deposit only for retailers that sell through it. Entering illegal or brand-damaging transactions into the Visa system is a breach of the Visa Integrity Risk Program (VIRP).
If an acquirer, merchant or agent changes a merchant's name, data or performance to get around the Visa Acquirer Monitoring Program or VIRP, Visa may charge the acquirer USD 25,000 per merchant per month and permanently bar the merchant and its principals from the Visa system. Mastercard runs its own program, BRAM, which the monitoring firms name next to VIRP.
Agentic payments: the same rule for AI agents
AI agents that buy on behalf of a cardholder bring a new party into the chain. The Visa Core Rules require an agentic payment enabler to enroll in the Visa Intelligent Commerce program, to sign a contract with each agentic payment provider that lets it terminate the provider for fraudulent activity, and to obtain a token directly from Visa when it uses a stored card. The enabler must not submit or deposit transactions on behalf of an agentic payment provider.
That is the transaction laundering rule applied to software: whoever deposits a payment must be the party the acquirer knows. The agentic payments page covers how AI agents pay.
Upcoming events on payments and compliance in Germany
Is transaction laundering illegal?
It breaks the card scheme rules in every case, and Visa can charge the acquirer and bar the merchant. Whether it is also a criminal offense depends on national law and on what is being hidden, for example when it moves the proceeds of crime. A payment institution in Germany carries anti-money laundering duties under the Geldwäschegesetz, as the AML in Germany page explains.
What are red flags for transaction laundering?
The common sign is a mismatch between the shop the acquirer reviewed and the payments it sees, such as card volume that does not fit the website or disputes about goods the merchant does not sell. Monitoring firms confirm suspicions with test purchases on the suspected sites.
Transaction laundering and Finance Loop
Finance Loop is the meeting place for acquiring, risk and compliance teams at payment service providers in Germany, Austria and Switzerland. Finance Loop supports When Banks Say 'No', a payments seminar in Frankfurt on payments governed by sanctions and anti-money laundering law.
Finance Loop is a professional network and has the goal of driving the adoption of emerging technologies in finance, such as AI, digital payments, cloud and blockchain solutions. Finance Loop helps its members build skills and personal networks in these fields: Investment & Digital Assets, Payments & Digital Money, Digital Infrastructure & Sovereignty, and Risk & Compliance.