Why Stripe shut you down (and why it will happen again)

Almost every peptide operator I talk to has the same story. Stripe approved them in minutes. They sold for a few weeks, or a few months. Then an email arrived saying the account was closed for violating the acceptable use policy, the payouts stopped, and the balance sat frozen while they tried to work out what they had done wrong.

Here is the part worth understanding: nothing went wrong at the moment you were shut down. The decision was made the day you signed up. It just took a while to catch up with you.

Instant approval is not underwriting

Stripe is a payment aggregator. That model works by onboarding merchants automatically and sorting out risk afterward, which is exactly why signup takes ninety seconds instead of two weeks. No human read your website when you opened the account.

What happens next is a review triggered by volume, by a dispute, by a keyword sweep, or by a manual look at your storefront. When that review lands on a research-peptide store, the outcome is not really in question. The account gets closed, and because you were never the merchant of record in the first place, the funds sitting in it are not straightforwardly yours to move.

Expect a hold in the range of 90 to 180 days after termination. That is the number that ends most first attempts at this business, not the loss of the processor itself.

What Stripe's policy actually says

Peptides are not named as a category anywhere in Stripe's restricted-business list, which is why so many operators conclude they are in the clear. The risk engine is behavioral and keyword-driven rather than category-driven, and two prohibitions do the work. Stripe's restricted businesses list prohibits, verbatim:

• “Pseudo-pharmaceuticals or nutraceuticals that are not safe or make harmful claims”
• “Incorrectly labeled research chemicals”

A research-peptide storefront lands inside both buckets, and the second one is worth sitting with. “Incorrectly labeled” is judged against how your whole site reads, not against whether the words “research use only” appear somewhere on the page. Hedged wording still scores as a claim.

Shopify Payments is the same engine

Operators who lose Stripe often move to Shopify next and are surprised to end up in the same place. In the US, Shopify Payments is powered by Stripe, so the underlying risk assessment is the same one that just removed you.

Shopify's own eligibility documentation prohibits, verbatim, “Prescription drugs, medical devices, tobacco and related products” and “Pharmaceuticals and other products that make health claims that are not verified by a local or national regulatory body.”

One useful nuance most people miss: losing Shopify Payments does not mean losing Shopify. The storefront can stay where it is and connect to a third-party gateway instead. If you like the platform, the payment rail is the part that has to change, not the whole business.

PayPal and Square restrict this category through their own policies as well. Read the current language yourself before relying on any summary, including this one, because these documents get revised and the version that matters is the one in force on the day you apply.

Why the whole category gets declined

It is tempting to read this as a platform being unreasonable. It is more useful to understand that three separate pressures land on the acquiring bank behind the processor, and none of them are about whether your business is legal.

• Enforcement history. The FDA issued more than 50 warning letters to peptide sellers in 2025 alone, covering compounders, telehealth companies, and research-use-only vendors. That gives an acquirer a documented reason to decline the category outright rather than assess merchants one at a time.
• Marketing risk. Detection is automated. Copy that approaches drug-like or human-use framing scores the same as an explicit claim, and a blog post or an email counts as much as a product page.
• Card-network rules. Mastercard's Business Risk Assessment and Mitigation program treats unapproved pharmaceuticals and research chemicals as categories needing enhanced due diligence or rejection, with meaningful fines reported for acquirers who board non-compliant merchants. The specific schedule sits in a rulebook that is not public, so confirm the details with your acquiring bank rather than trusting a figure you read online.

The acquirer is not deciding whether you personally are trustworthy. They are deciding whether your category is worth the exposure, and on an aggregator platform nobody ever looked closely enough to tell the difference.

Why it happens again

The common next move is to open another aggregator account, sometimes under a different entity name or a tidier-looking storefront. That buys weeks, occasionally months, and ends the same way, because the same risk engine is doing the same job.

Worse, a termination for cause can put your business on the MATCH list, an industry database that blocks most acquiring relationships for five years. Repeatedly re-applying after a termination is one of the ways operators get there. The second shutdown is usually more expensive than the first.

What actually works

The fix is not a better-behaved aggregator. It is a processor and acquiring bank that know exactly what you sell and have priced that risk deliberately.

• A high-risk merchant account. Real underwriting, more documentation, higher rates, often a rolling reserve. In exchange you become the merchant of record and funds settle into your own business bank account.
• A second account, underwritten before you need it. Approval takes weeks. If your only processor drops you and you start looking then, you are offline for the whole of that gap.
• An ACH or eCheck fallback through a provider with banking relationships in this vertical, so a card problem never takes the business fully dark.
• A storefront that survives the review it will eventually get: research-use-only framing throughout, age verification, restricted-state blocking enforced at checkout, a certificate of analysis on every product, and no claim anywhere on the site.

That last point is the one operators underrate. Getting approved is a documentation exercise. Staying approved is a function of what your site says every day afterward.

This guide is general information, not legal, financial, or payments advice. Processor policies, card-network rules, and fine schedules vary and change over time; quoted policy language was accurate when written and should be verified against the current published version. Read your processor's acceptable-use policy in full and consult qualified professionals for your situation.