Visa VIRP & Mastercard Rules for Lingerie & Intimate Apparel Brands: 2026 Compliance Guide

The Post-2021 Regulatory Reset

Everything about adult payment compliance changed after December 2020, when card networks came under intense scrutiny over illegal content on major adult platforms. Mastercard responded in 2021 with AN 5196 — the Revised Standards for New Specialty Merchant Registration Requirements for Adult Content Merchants — and Visa followed by replacing its Global Brand Protection Program with the Integrity Risk Program (VIRP) in 2023. Together they form the rulebook every lingerie brand now operates under.

The core shift: banks are no longer allowed to take a merchant's word for anything. Acquirers must verify controls before boarding, monitor continuously after, and file regular reports. Understanding what your acquirer is required to check is the fastest way to build a file that sails through underwriting.

Mastercard's Requirements (AN 5196 → Rules §9.4.1)

Mastercard's standards — announced as AN 5196 and now living in section 9.4.1 of the Mastercard Rules — impose five operational pillars on adult content merchants: (1) documented age and identity verification for every person depicted in content and everyone who uploads it, generally via government photo ID validated by a robust process (third-party verification vendors are recommended); (2) written consent from depicted persons, including consent to distribution; (3) pre-publication content review before anything goes live; (4) a complaint mechanism that resolves reports of illegal or non-consensual content within strict timelines, including removal while under review; and (5) monthly compliance reporting to the acquirer.

Critically for the AI era: Mastercard has confirmed these standards cover AI-generated and synthetic content. If a platform can generate or host adult imagery, the same consent, age-assurance, and review obligations apply — which is why the strategic decision is whether to board as standard apparel (cheaper, fragile) or high-risk (costlier, stable) — an honest broker will model both.

Visa's Integrity Risk Program (VIRP)

VIRP classifies high-integrity-risk merchants into three tiers — adult content sits in the most scrutinized tier alongside gambling and pharmaceuticals — and requires acquirer registration for each high-risk merchant at fees that have risen from $500 to $950 per year. Acquirers supporting these merchants must demonstrate dedicated risk controls, and Visa audits them, which is why serious adult acquirers now run compliance teams that inspect merchants the way the network inspects the bank.

Under VIRP, the acquirer is financially liable for its merchants' content failures. Translation for a lingerie brand: your bank's compliance requests aren't bureaucratic theater — a merchant who makes the acquirer's audit easy is a merchant whose account survives audits.

US Federal Law: 18 U.S.C. § 2257

Separate from card network rules, US federal law (18 U.S.C. § 2257) requires producers of actual sexually explicit content to maintain records verifying the age and identity of every performer, keep those records organized and available for inspection, and label content with the custodian of records. Card network age-verification obligations and 2257 obligations overlap heavily — the same documentation program generally satisfies both — but they're independent legal duties; you must comply with each.

For your vertical specifically, underwriters will focus on imagery review of the storefront and ads, returns policy, and fulfillment verification — presenting the business accurately up front prevents the mid-stream shutdown pattern. Building this documentation before applying, rather than in response to a bank's request list, typically cuts approval time in half.

What Compliance Actually Costs — and Pays Back

Realistic annual budget for a compliant lingerie brand: card brand registrations (~$950/year for Visa VIRP, comparable Mastercard registration costs), age/identity verification vendor fees (often per-check), content moderation tooling or staffing scaled to your catalog, and a few hours a month of reporting. For most operators this lands between $3,000 and $25,000 a year depending on scale.

The payback is concrete: compliant merchants get approved by better banks at better rates, keep accounts through audits, and avoid the catastrophic costs of termination — frozen funds, MATCH listing, and rebuilding on worse terms. Centurion runs a pre-underwriting compliance review with every adult application so gaps get fixed before a bank sees them. Call (561) 221-2273 for a confidential gap assessment.

Frequently Asked Questions