An MCC (merchant category code) is a four-digit number that tells the card network what kind of business a merchant is. For a company card, that number decides how a payment is classified in reports, whether a spending rule lets it through, and how risk systems read it. If you issue cards to employees, understanding MCCs is the foundation of any usable card policy.

This guide explains what MCCs are, who assigns them, how to apply them to company cards, how to check the code behind a transaction, and what to do when a code looks wrong. It is written for finance leaders and founders at Lithuanian and other EU businesses.

DemivoltManage Business Card Spending ClearlyDemivolt provides business cards, role-based user management and payment solutions for businesses managing expenses and cross-border operations.Visit Demivolt

TL;DR

An MCC is a four-digit code that classifies a merchant by the goods or services it mainly sells. Merchants do not pick it themselves; their acquirer or processor assigns it.
On business cards, MCCs are the basis for allow lists, block lists and expense categories, so a clear card policy usually starts with a short list of categories per card type.
An MCC is a useful signal, not a guarantee. The code reflects how the merchant is registered, so a payment can land in a category you did not expect.
A wrong MCC is not by itself a ground for a chargeback. Dispute outcomes follow the card network’s rules, as the Bank of Lithuania has confirmed in a published decision.
Build rules on MCCs together with limits, roles and approvals, not on MCCs alone.

What an MCC code is and what it classifies
Who assigns an MCC and how it is chosen
What an MCC changes in card transactions
Designing MCC rules by card type
How to check the MCC behind a transaction
When the MCC looks wrong
Common mistakes with MCC rules
Our perspective
Setting up MCC-based controls with Demivolt
Practical checklist before you issue cards
FAQ
Sources

What an MCC code is and what it classifies

A merchant category code is a four-digit number that identifies the type of business a merchant runs. Card networks such as Visa and Mastercard use it for every card payment, whether the card is credit or debit. Experian describes MCCs as identifiers that classify businesses by the goods or services they offer and that influence processing, fees, fraud detection and eligibility for rewards.

The codes cover everything from retail to transport. The Bank of Lithuania publishes card payment statistics broken down by merchant category, and its dataset by merchant category shows how the classification looks in practice: for example 0742 for veterinary services, 4131 for bus lines and 4900 for utilities (electric, gas, water and sanitary). The same dataset covers cards issued by Lithuanian payment service providers and separates payments made at terminals in Lithuania from those made abroad, which is a reminder that MCCs travel with the card payment across borders.

Two points matter for a business cardholder:

The code describes the merchant, not the item you bought. A hardware purchase from a general retailer is classified under the retailer’s code, not under “hardware.”
The code is the same no matter which of your cards is used. That is why it works as a consistent basis for rules across a whole card programme.

Who assigns an MCC and how it is chosen

Businesses cannot assign their own codes. Acquirers and payment processors set the MCC when they onboard the merchant, using information the merchant provides about its activity. The Visa Merchant Data Standards Manual sets out the standard approach: the code reflects the merchant’s primary line of business, and where a merchant runs several lines, it uses the code for the line with the highest annual sales volume or assigns separate codes to distinct outlets or lines of business.

This has a practical consequence for you as the card-paying side. A supplier with a mixed business can appear under a category that matches only part of what it sells. A software company that also resells hardware, a hotel with a restaurant, or a marketplace with many sellers may all show a code that surprises your finance team.

The same manual notes that the major networks follow common standards but may keep their own variations and definitions, which can lead to minor differences in how a code is applied. In daily use the difference is small, but it is a reason to test a rule with a real payment before you rely on it for a strict control.

What an MCC changes in card transactions

For a company, MCCs affect four areas.

Spending controls

The most direct use is a rule on the card itself. You can define which categories a card may spend in (an allow list) or which it may not (a block list). A travel card might allow airlines, hotels and car rental, while an advertising card might allow only digital advertising categories. Our guide to merchant blocking on business cards and MCC rules explains the difference between rules set on the card and blocks applied by the bank.

Expense categorization

MCCs give each payment a first label before anyone touches it. Experian notes that MCCs let you track and categorize spending. For a finance team, this means a card statement can be grouped by category automatically, with only exceptions needing manual review. The label is a starting point: a code for a general retailer still needs a human decision on whether the purchase is office supplies or equipment.

Risk and fraud screening

Card issuers and networks use categories as one signal when screening for suspicious activity. Experian lists examples of categories commonly treated as higher risk, such as money transfers, cryptocurrency, dating services, betting and casino gambling, and tobacco. For a company, this is a good reason to block categories your business never uses. A transaction in a category nobody should be spending in then fails at the point of sale instead of surfacing in next month’s reconciliation. See also our overview of card fraud prevention for businesses in Lithuania.

Rewards and fees

On consumer and some corporate products, MCCs determine rewards, and some providers apply different fees to certain categories. Check the terms of your own card product, because these differ by issuer.

Designing MCC rules by card type

A short, deliberate rule set works better than a long one. The table below shows an example structure. The categories are illustrations of how to think, not a recommendation for a specific business.

Card type	Typical purpose	Rule approach	Review focus
Travel card	Flights, hotels, transport	Allow list of travel and transport categories	Out-of-trip spending
Software and subscriptions	SaaS, cloud, digital tools	Allow list of digital services and software	Duplicate or forgotten subscriptions
Advertising card	Ad platforms	Allow list of advertising categories	Monthly cap against budget
Office and operations	Supplies, utilities, small purchases	Block list of high-risk and personal-use categories	Mixed-category retailers
Virtual card for one vendor	A single recurring supplier	Narrow allow list plus a low limit	Any decline on renewal

A few habits make the rules hold up:

Start narrow for single-purpose cards. A card used only for one vendor needs one or two categories at most.
Use block lists for general cards. Where employees need flexibility, blocking categories the company never uses is easier to maintain than listing every allowed one.
Pair MCCs with limits and roles. A category rule says where a card can be used. A limit says how much. Role-based access says who can see and change the rules.
Write the rules down. Your company card policy should name the categories each card type may use and who approves exceptions.

How to check the MCC behind a transaction

The MCC is not always shown on a card statement. Where it is not visible, there are three practical routes:

Your card provider’s transaction details. Many business card platforms show the merchant name, category and amount for each payment. Look at the transaction record or export first.
Your finance or bank contact. If the code is not displayed, ask your issuer or account manager to confirm the category applied to a specific payment.
The merchant or its acquirer. The merchant’s payment provider knows which code it is registered under and can tell you when asked.

If you expect to depend on a rule for a supplier, make one small test payment before you go live. A declined test is cheap. A declined payment on the day a contract renews is not.

When the MCC looks wrong

Sometimes a payment appears under a category that does not match the merchant’s activity. Processors may update a code they consider inaccurate, and in some cases flag the merchant for review, according to the Visa Merchant Data Standards Manual. Formal disputes follow card network rules.

A Lithuanian case shows the limit of what a code can do for you. In a published decision, the Bank of Lithuania examined a consumer’s complaint that merchants had used incorrect MCCs while the consumer sought chargebacks. The decision of the Bank of Lithuania found that an MCC mismatch alone is not a ground for a chargeback under Mastercard rules when the rule requirements are not met. It also states that Lithuanian and EU law do not regulate the conditions of Mastercard chargeback procedures; the scheme rules set the applicable cases and process.

For your business, this leads to a simple sequence:

Keep the evidence: the transaction record, the order or invoice, and your correspondence with the merchant.
Contact the merchant first and ask for a correction or refund.
If that fails, report the payment to your card provider with the facts and the reason you consider it wrong, including the category issue if it is relevant.
Expect the resolution to depend on the card network’s dispute reasons, not on the code alone.

Our guide on chargeback management for businesses in Lithuania covers the process in more detail, and payment risk management shows how to place card disputes inside a wider control framework.

Common mistakes with MCC rules

Treating the code as a description of the purchase. It describes the merchant. Your accounting still needs to classify what was bought.
Blocking too broadly. Blocking an entire group of categories can stop legitimate payments from mixed-activity suppliers. Review declines in the first weeks and adjust.
Forgetting online and cross-border payments. Merchants abroad are classified under the same system, but their registration may differ from what you expect. Test before you restrict.
Setting rules once and never reviewing them. New suppliers, new tools and new teams change the categories you need. Review the rule set when you review the policy.
Relying on MCCs instead of limits. A category allow list does not stop an unusually large payment inside an allowed category.

Our perspective

We see MCC rules as one layer of control that works best when the account structure underneath it is clean. A category rule is only as useful as the card it is attached to: if every employee shares one card, no category list will give you clear accountability.

That is why we build around separate accounts, dedicated IBANs and cards issued per purpose, with role-based access so that the people who set the rules are not the people who spend. When a card has one job, its category rules can be short, and exceptions are easy to spot and explain.

Our approach is designed for businesses that need clarity and compliance in daily operations: segregated client funds, transparent fees, and card programmes that give finance teams control without slowing teams down. We recommend starting with a small number of card types, applying category rules to each, and reviewing the declines after the first month.

dd

Setting up MCC-based controls with Demivolt

If you are building a card structure for a company or a client, the account setup matters as much as the rules. Demivolt offers business accounts with dedicated IBANs, multi-account structures and role-based user management, and card programmes for issuing virtual and physical business cards. Account opening, verification and monthly maintenance are listed at 0 on our site, and fees for payments are published openly.

To discuss a card structure for your team or your clients, see our card programmes page or contact us to get started. Advisors who place clients with us can also look at the reseller programme.

Practical checklist before you issue cards

Use this list when you roll out or revise a card programme:

List the card types you need (travel, software, advertising, operations, single-vendor).
For each type, decide whether an allow list or a block list fits, and write down the categories.
Set limits per card and per period, independent of categories.
Assign roles: who creates cards, who changes rules, who approves exceptions.
Run a small test payment with each new supplier category.
Review declines and unexpected categories after the first month.
Store the rule set with your card policy and update it when suppliers change.

If your cards are tokenized in digital wallets, check how the rules apply there as well; our article on card tokenization for businesses explains what tokenization covers.

FAQ

What does MCC stand for on a card?

MCC stands for merchant category code. It is a four-digit number that classifies a merchant by the main goods or services it sells. Card networks and issuers use it to categorize payments, apply rules and screen for risk.

Can a company choose or change its own MCC?

No. The merchant’s acquirer or payment processor assigns the code, based on the information the merchant gives at onboarding and the network standards. If a merchant believes its code is wrong, it must raise this with its processor, which may update it.

Can I block specific categories on company cards?

Yes, where your card provider supports category rules. You can usually allow only chosen categories or block unwanted ones per card. Our guide to merchant blocking on business cards explains how these rules differ from bank-level blocks.

Is a wrong MCC enough to win a chargeback?

No, not on its own. The Bank of Lithuania found in a published case that an MCC mismatch alone is not a ground for a Mastercard chargeback when the scheme’s requirements are not met. Collect evidence about the payment and file the dispute under the applicable reason.

Do all card networks use the same MCC list?

They follow shared standards, but Visa, Mastercard and others may keep variations in definitions. Differences are usually minor, so test a rule with a real payment before you depend on it for a strict control.

MCC Codes for Business Cards: How They Work and How to Use Them