How MCCs Shape Every Transaction Your Team Makes
When a finance team rolls out company cards, they might naturally assume a coffee charge is "coffee" and an Uber charge is "transportation." In your dashboard, that's all the categorization most people ever see. Behind that label, though, is a four digit number called a Merchant Category Code, or MCC, that decides how the transaction is treated by the card networks, the issuing bank, the merchant's processor, and your accounting system.
That is exactly the type of hidden lever that separates a card program that works on autopilot from one that quietly leaks money. Rewards rates, fraud rules, IRS reporting, surcharges, country restrictions, and even the approval of a charge can all hinge on the MCC attached to a merchant. Once you understand how MCCs are assigned and what each digit signals, you can use them to enforce policy with much more precision than "approve or decline."
In this article, we’ll explain what an MCC is, why they matter, what some common codes are, and how they can be used to build spending controls. We will also look at Slash, a business banking platform that uses MCCs to make card programs more controllable.¹
With Slash, your team gets an integrated financial dashboard and an AI agent, Twin, that can read MCC level activity across every Slash Visa® Platinum Card in your business and apply merchant level rules so policy violations are caught before funds move. That means your finance team can shape cardholder behavior without rewriting an expense policy every quarter.
What Is a Merchant Category Code?
A Merchant Category Code is a four digit number assigned to a merchant that describes the primary type of business the merchant operates. The codes are maintained jointly by major card networks, with the underlying framework rooted in the ISO 18245 standard. Every card accepting merchant typically has one MCC tied to its merchant identification number (MID), and that code travels with each authorization message the merchant sends.
As a category, MCC sits alongside other transaction data such as the merchant name, location, and dollar amount. An important characteristic of MCCs is the fact that they are standardized across networks and, in most cases, across countries. That means a transaction at a German hotel and a transaction at a US hotel will usually share the same code (typically 7011, Lodging, Hotels, Motels, Resorts).
How Are MCCs Assigned to Merchants?
MCCs are assigned by the merchant's acquiring bank or payment processor when the merchant first sets up card acceptance. The acquirer typically picks the code that best matches the merchant's primary line of business, drawing from the network's published code list. The merchant has limited say in which code is used, although they can request a review if the code clearly does not match the business.
A few practical points to keep in mind:
- Multi line businesses may have several merchant identification numbers, each with a different MCC, so a single brand may show up under more than one category
- A merchant can sometimes be miscategorized, which can affect fraud rules and rewards
- Networks periodically refresh the MCC list; new codes have been added in recent years for streaming services, ride sharing, and digital goods
- The IRS uses certain MCCs to flag categories that may trigger 1099-K or other tax related reporting
Why MCCs Matter for Your Business
MCCs sit underneath several systems your finance team interacts with every day. Even if you never look at the codes directly, they are likely already influencing how your card program behaves.
Rewards categorization
Credit card rewards programs that promise "3% back on dining" or "2% back on travel" use MCCs to decide which transactions qualify. A bonus rate on "travel" might map to MCCs in the 3000s (airlines), 4000s (transportation), and 7000s (lodging), but a charge that looks like travel on the surface (a meal at an airport restaurant) may post under restaurant codes instead. Corporate cards that offer up to 2% cash back across all purchases, such as the Slash Visa® Platinum Card, won’t have to be mindful of these distinctions.
Fraud detection
Issuers and networks can build fraud models that monitor unusual MCC patterns. For example, if a business card is only ever used at office supply merchants, it may be flagged if it suddenly triggers a foreign cash advance code. MCCs can feed velocity rules, geographic rules, and abnormal merchant rules.
Tax reporting
MCCs drive IRS Form 1099-K reporting thresholds for payment processors and shape how some business expenses are categorized for the IRS. With the help of these codes, the IRS can distinguish between taxable service payments and non-taxable goods purchases. A misclassified MCC can end up complicating your year end reconciliation.
Spend controls
Card programs often allow users to allow-list or block-list specific MCCs at the cardholder level. If you’ve rolled out a corporate card for your marketing team, you may enable advertising MCCs while blocking restaurant-related MCCs. The Slash Visa® Platinum Card not only allows users to configure their allowed codes, but can also use these codes to identify unusual transactions that finance teams may not have accounted for.
Common MCCs by Category
The full MCC catalog runs to over 600 codes. The ones you see below are some of the more common codes you may encounter when reviewing transaction data:
A card transaction's MCC, combined with the merchant name, tells you most of what you need to know to classify the spend, even if the merchant name is unfamiliar.
How Do MCCs Affect Card Rewards?
Rewards programs typically use MCCs as the gating mechanism for elevated cashback or points categories. The published category names ("travel," "dining," "office supplies") are marketing labels for an underlying list of MCCs. A few patterns to be aware of:
- Rewards exclusions are typically written in MCC terms in the program disclosure, not in plain English, so the fine print may list code ranges like "MCCs 4829, 6010, 6011, 6051" rather than something like "cash advances and money transfers".
- Hybrid merchants can land in unexpected categories. A wholesale club that sells gas, groceries, and electronics may post all of those purchases under a single "warehouse club" MCC, which often does not earn a grocery or gas bonus.
- Aggregator and payment service codes can interfere with category bonuses. Some online platforms route charges under a payment service MCC rather than the underlying merchant MCC.
With Slash, your team can earn up to 2% unlimited cash back on business purchases on the Slash Visa Platinum Card without trying to optimize across rotating MCC categories. That removes one of the more common sources of rewards leakage in business card programs.
How Do MCCs Drive Fraud Detection?
Fraud models lean heavily on MCC patterns because they capture intent. A card that’s only used for SaaS subscriptions suddenly authorizing a wire transfer or money order MCC (4829 Money Orders or 6051 Quasi-Cash) is a textbook compromise pattern. Networks score authorizations against expected MCC distributions for the cardholder, the issuer, and the merchant geography.
Common MCC driven fraud signals can include:
- Velocity at high risk MCCs (cash equivalent, cryptocurrency adjacent codes)
- MCC mismatches between the card's normal use and a new transaction
- Foreign country plus high risk MCC combinations
- MCC changes inside a short window that match known card testing patterns
Issuers translate these signals into decline rules, step up authentication prompts, or alerts to the cardholder. From a finance team's perspective, that means a clean MCC profile across your card program is one of the cheapest forms of fraud reduction available.
How to Use MCCs to Build Spending Controls
With MCC-based controls, teams can actively enforce their policies instead of simply trusting everyone to follow them. Here are some steps to creating these controls:
- Inventory your current spend by MCC: Pull at least 90 days of card data, group by MCC, and identify the top 20 codes by volume. This gives you a baseline of where money is actually going.
- Map MCCs to your written expense policy: For each policy line item ("travel only on approved booking sites," "no alcohol on company cards"), identify the corresponding MCCs that should be allowed or blocked.
- Define cardholder profiles: Group cardholders by role (sales, engineering, executive, marketing) and decide which MCC bundles each profile should have access to.
- Apply MCC-level allow and block lists: Configure each card or card group with the right list. Slash supports merchant level limits and country restrictions so the rules can travel with the card rather than living in a separate document.
- Review exceptions monthly: Look at transactions that hit your block list and tune the rules over time.
Because Slash exposes MCC level data through your dashboard and through Twin, you can ask plain language questions like "show me all 5813 (drinking places) charges in the last month" or "compare advertising MCC spend across our marketing card group quarter over quarter".
How Slash Helps Finance Teams Use MCCs to Control Card Spend
Slash treats card policy as something that should live inside the card itself, not as a PDF that cardholders are supposed to follow on the honor system. Every Slash Visa® Platinum Card supports MCC-level allow and block lists, merchant level limits, country restrictions, and per cardholder spend caps. That means when you write a policy like "the marketing team can spend on advertising MCCs but not on cash equivalents," the rule is automatically enforced at authorization time.
This process is assisted by Twin, an AI agent that can read every transaction your business runs through Slash. Twin can pull MCC breakdowns, flag a sudden spike at a high risk MCC, identify cardholders whose usage drifts outside their assigned profile, and even draft proposed policy updates based on observed behavior. For finance leaders, that turns MCC analysis from a quarterly project into an always on view of card hygiene.
Slash also supports the broader workflow your card program is part of, such as sub-accounts for ringfencing certain spending, accounting integrations that map MCCs to GL codes, and approval workflows for unusual purchases.⁶ The result is a card program where MCC informed policies, real time controls, and downstream accounting all reinforce each other.
Here's what else you get with Slash:
- Working capital financing: Access short-term financing with flexible 30-, 60-, or 90-day repayment terms to help bridge cash flow gaps.⁵
- Accounting & ERP integrations: Sync transaction data with QuickBooks Online, Xero, or Sage Intacct to streamline reconciliation, reporting, and month-end close.
- Native cryptocurrency support: Hold, send, and receive USD-pegged stablecoins USDC and USDT across eight supported blockchains for faster, lower-cost global payments.⁴
- Diverse payment methods: Slash supports a wide range of payments, including card spend, global ACH, international wire transfers to over 180 countries via SWIFT, and real-time domestic payments through RTP and FedNow.
Apply in less than 10 minutes today
Join the 5,000+ businesses already using Slash.
Frequently Asked Questions
Can a merchant change its MCC?
In most cases, no, the merchant cannot directly change its MCC. The acquiring bank or payment processor assigns and updates MCCs based on the merchant's primary line of business. A merchant can request a review if the code clearly does not match the business, but the change must be approved by the acquirer and ultimately the card network.
Are MCCs the same across Visa, Mastercard, American Express, and Discover?
Mostly, yes. The major networks share the underlying MCC framework rooted in ISO 18245, so most codes mean the same thing across networks. Each network can extend or refine the list, so there are some network-specific codes, particularly in newer categories like digital goods or ride share.
How to Choose the Right Corporate Credit Card Program
How do MCCs affect IRS reporting and 1099-K?
MCCs are one of the inputs that payment processors use when generating IRS Form 1099-K reports for merchants who exceed the reporting threshold. They also help categorize business expenses for IRS deduction rules, although the IRS does not require MCCs on tax filings. Misclassified MCCs can make accurate categorization harder at year end.
1099-NEC vs 1099-MISC: Which Form Should Your Business File?
Do any codes come with surcharges and convenience fees?
Yes, some MCCs (notably government, education, and utility codes) are subject to surcharge limits or processing rules different from standard retail.
Read more from us
