Which payment methods can a VPN business use to accept payments from its subscribers?

A bank saying no doesn't leave a VPN business with nothing. There are still five payment methods to choose from:

• Card processors that take high-risk businesses. Customers keep paying by card.
• App store billing. The store charges subscribers who pay inside your app.
• Resellers. A reseller sells your VPN service under its own name.
• Crypto. You can take it without any bank's approval.
• A mainstream card processor. It's worth applying, but don't build the business around staying approved.

Most VPN services use two or three of these at once. Cards bring in the most customers. Crypto keeps money coming in on the day a card account gets frozen. Below we cover why banks turn a VPN down, what each route costs and where it breaks, and how to take crypto for a subscription that renews every month.

Why do payment processors treat a VPN business as high risk?

A payment processor is the company that takes a card payment on your site and passes the money on to you. Behind it stands an acquiring bank that opens your merchant account, which is what lets a business accept cards at all. When they call a business "high risk", they mean they expect to lose money on it more often than on a typical online shop.

A VPN business sets off several alarms at once:

• Chargebacks. A chargeback is a customer asking their bank to reverse a card payment. Subscriptions attract them: someone forgets about a renewal, sees a charge they don't recognise and disputes it instead of cancelling.
• Stolen cards. Fraudsters test stolen card numbers on cheap digital services that deliver instantly, and a VPN is one. When the real cardholder notices, the payment comes back as fraud.
• Customers in every country. A VPN sells worldwide from its first day. Payments from foreign cards are harder to verify, and the processor carries that risk.
• Law that differs by country. Whether a VPN may be sold at all depends on where the customer lives. A processor serving your company is also serving your customers in those countries, and many would rather not take on that question.

Card networks count each merchant's share of disputed payments. A merchant who goes over their limit pays fines and can lose the right to accept cards. So a processor that expects a lot of chargebacks from a VPN would rather refuse it at the start.

A refusal isn't the worst outcome, though. The worst is getting approved and then closed down. A few months after launch the processor reviews your live payments, sees disputes growing, closes the account and holds your balance for a while to cover disputes that may still come in. Every subscription tied to that account stops renewing the same day.

None of this is peculiar to VPNs. The same underwriting file is opened on a travel agency, a ticketing site or an online school, and the common thread is the shape of the money — taken before delivery, renewing by itself, arriving from everywhere — rather than the industry name on the door. If you want the mechanics behind the label, including the four-digit category code that classifies a business before anyone reads its application, they are set out in why processors put a legal business on a high-risk merchant account.

Which payment methods can a VPN business still use?

The routes differ in who carries the risk, how much of each payment you keep and how easily they can be switched off:

• A mainstream card processor. Some large processors accept VPN services at sign-up, so it's worth applying. The weak spot is the review after launch: if disputes grow, the account can be frozen with your money inside.
• A high-risk merchant account. Specialist acquirers take businesses that others refuse. They charge more than mainstream processors and usually keep a rolling reserve, which is a share of every payout held back for months against future chargebacks. The reasons a high-risk rate climbs are explained in what drives online payment fees and how a business can cut them.
• App store billing. When someone subscribes inside your iPhone or Android app, the store charges them and pays you. The store keeps a commission, commonly 15 to 30 percent depending on the store, the region and the programme you qualify for. Apple only accepts VPN apps from developers enrolled as an organisation (App Review Guideline 5.4, in force September 2026).
• A reseller that becomes the seller of record. This kind of company, called a merchant of record, sells your subscription under its own name. It takes over the card payments and everything around them, and pays you what's left after its share. Some resellers accept VPN services and some list them among the businesses they refuse, so ask before you build the integration.
• Crypto. The customer sends coins from their own wallet to an address you control or that your crypto payment gateway creates. No card network is involved, so there are no chargebacks and no bank has to approve you. Crypto can still be stopped, though. Tether, the company behind USDT, can freeze USDT at any address, even in your own wallet. A crypto payment gateway is a provider like any other: it reviews projects and can close an account. The price is that renewals aren't charged automatically: the customer pays each one themselves.

What is a VPN merchant account, and how do you get one?

A VPN merchant account is an ordinary merchant account from an acquirer willing to work with high-risk businesses. Nobody sells a special product under that name. What changes is the checking before approval and the terms after it.

Here is how to get through the application:

1. Get the company papers ready. Acquirers sign contracts with registered companies, not individuals. They ask for registration documents, the owners' IDs and proof of address.
2. Publish your subscription rules on the site before you apply. The underwriter, the person who assesses your application, will open the site. They look for the price, when the plan renews, how to cancel, the refund policy, the terms of service and a way to contact you. Every missing page gives them a reason to say no.
3. Show your payment history. If you've taken cards before, send statements with monthly volume, refunds and chargebacks. A new VPN without history is judged on its plan, and its terms are stricter.
4. Explain how you keep disputes down. Underwriters want to see a recognisable company name on the customer's card statement, a reminder email before each renewal, cancellation in one click and quick refunds on request.
5. Read the reserve and termination terms before you sign. Check what share of payouts is held back, for how long, and what happens to your balance if the acquirer ends the contract. Two offers with the same rate can cost very different amounts once the reserve is counted.

How can a VPN service accept crypto payments?

A crypto payment is a transfer recorded on a blockchain, a public ledger that many computers keep at the same time. Once a transfer is recorded, only the person who received the money can send it back. If you have never handled crypto, start with what cryptocurrency is and how a blockchain records a payment.

A VPN service can take crypto in two ways:

• Straight to your own wallet. You publish an address and the customer sends coins to it. You pay nothing beyond network fees, but you match each payment to a subscriber by hand, and a customer who sends the wrong amount becomes a support ticket.
• Through a crypto payment gateway. A gateway, or crypto payment processor, gives every order its own amount and address, watches the blockchain and tells your site when a subscription is paid. You pay it a percentage of each payment for that work.

Which one makes sense usually depends on volume. Matching ten payments a month by hand is fine. Matching a thousand is a full-time job. The trade-offs, with real costs, are covered in accepting bitcoin and other crypto on a website.

A crypto payment gateway usually gives a VPN three ways to take a payment:

• An invoice link. You create an invoice for a plan and send the link by email, in a chat or in the customer's account. It works well for renewals and for sales made through support.
• A checkout button on your site. One button opens a payment window. The customer picks a coin, sees the amount and address, and pays without leaving the page.
• An API. Your billing system creates orders on its own and gets a notice when each one is paid, so a subscription is extended without anyone touching it.

At CryptumPay, the three work like this:

• Invoice. You create an invoice in the console and send the link anywhere.
• Checkout widget. You add one button to your site, and it opens the full checkout in a window.
• API. Orders, deposits and payouts run on CryptumPay's rails.

CryptumPay works with VPN services as subscription (SaaS) businesses. Onboarding at CryptumPay is identity verification plus a project review, usually within one business day, and the subscriptions offer is laid out in accepting crypto for plans, renewals and usage.

Which coins a VPN should accept

For a subscription priced in dollars, choosing a coin mostly comes down to whether the price still holds when you spend the money. Two coins cover most VPN customers:

• USDT, so the price holds. USDT is a stablecoin, a token that tracks the US dollar, so 10 USDT received today is still about 10 dollars next month. It's the easiest way to charge a dollar price in crypto, and how Tether works, what it costs and how to accept it explains it step by step.
• Bitcoin, for customers who already hold it. Some privacy-minded subscribers keep their savings in bitcoin and want to pay with it. Its price moves, so an annual plan paid in bitcoin can be worth noticeably less by the time you sell the coins.

A VPN that takes bitcoin doesn't have to carry that swing. The usual defence is to turn the coins into a stablecoin soon after they arrive, and the other options are in how to protect received crypto from price swings.

With USDT, one more choice remains: the network. USDT runs on several blockchains, and a customer can only pay on a network your checkout accepts. Most people sending USDT use TRON, so it's the network to support first. A transfer there isn't cheap, though: at September 2026 prices it costs the sender roughly $2–4 in TRX unless they hold energy, the TRON resource that pays for token transfers. Where that fee comes from and how it changes is covered in what USDT TRC-20 and TRX payments really cost a business.

Every extra coin brings a few more customers, but it also adds settings to maintain and support questions to answer. If you are weighing a longer list, look at which coins are worth accepting and how to set them up.

What a crypto payment costs

A crypto payment carries two separate charges:

• The network fee. The blockchain charges it for recording the transfer, and in a normal wallet payment the customer pays it. Its size depends on the network and on how busy it is, and next to a cheap monthly plan it can be noticeable. Where it comes from and who pays it is explained in how network fees, gas and gateway fees work.
• The gateway fee. The payment gateway takes a percentage of each payment. At CryptumPay it is 1% per successful payment, going down to 0.5% at higher volumes. The fee can be passed on to the customer, and settlement is in USDT.

There is no chargeback fee in crypto, because no bank can reverse the payment. For a business used to high-risk card terms, that changes the maths, and you can see how in what crypto acquiring costs a business in 2026.

Crypto still has a risk of its own: dirty money. A subscriber can pay from a wallet linked to theft or to sanctioned addresses, and that payment can be held for checks later. Payment gateways screen incoming transfers for this, and the checks involved are covered in AML, KYC and wallet screening for crypto payments.

Which payment methods should a VPN offer its customers?

For most VPN services, the safest setup combines the routes so that no single refusal cuts off income:

• Cards, if an account is open to you. Most buyers still reach for a card first. The cost is the reserve, the higher rate and the risk of a sudden freeze.
• Crypto right next to cards, not hidden behind a link. It keeps sales going if the card account stops, and privacy-minded subscribers choose it on purpose. The cost is that each renewal needs the customer to act.
• App store billing, only for people who install your app. The store takes the payment problem off your hands for mobile users. The cost is the largest commission of all the routes.

How you show these methods matters as much as which ones you pick. A customer who has to hunt for their method or re-enter details often leaves without paying, and the fixes for that are in how to get more of the people who reach checkout to pay.

Crypto's share grows when the pricing page treats it as a normal option, with the crypto price right beside the dollar price. Further steps are in how to bring in crypto customers and get more crypto payments.

What should a VPN check legally before taking the first payment?

The rules sit in different places, and a processor will ask about each of them:

• Whether your VPN may be sold where your customers live. Some countries restrict VPN services or require a licence to offer them. Apple's App Review Guidelines (section 5.4, in force September 2026) ask anyone offering a VPN app in a territory that requires a VPN licence to provide that licence. Check your biggest markets before you advertise in them.
• How crypto income is taxed where your company is registered. In the US, the IRS treats virtual currency as property. A business paid in crypto for a service reports ordinary income equal to the coins' dollar value on the day they arrive (IRS Frequently Asked Questions on Virtual Currency Transactions, Q9 and Q12, in force September 2026).
• What your payment providers' terms forbid. These are contracts, not law, but breaking them closes the account. Card processors commonly ban subscriptions sold with hidden or unclear renewal terms, so the price, renewal date and cancellation steps should be visible before payment.

What it comes down to

A bank's refusal closes one door for a VPN business, not all of them. Every route that is left has a weak spot, so the safest setup runs two routes side by side.

One of those two should be crypto priced in USDT, because no card network can switch it off. The other is whichever card route will have you, backed by subscription rules clear enough for an underwriter to approve.

Questions VPN owners ask

What is a VPN business account, and does a VPN need one?

A business account is a bank account opened in the company's name rather than yours. Every route except crypto pays out only to such an account, so any VPN that takes cards needs one. Banks run their own risk checks and can turn a VPN down just as processors do. Crypto payments arrive without a bank, but a company's own bills are usually paid in regular money, so sooner or later the coins go through an exchange into a business account.

In practice that means two accounts in the company's name on the crypto side: an exchange account where the coins are sold, and a bank account that will take money from that exchange. Each one checks the company before opening and asks for its own papers, so it helps to know up front which crypto business account a company needs and what opening one takes.

How do VPN providers handle chargebacks?

When a chargeback arrives, the money is taken back from the merchant, and the acquirer usually adds a fee. The merchant can contest it with evidence, and the customer's bank decides. A VPN that keeps no activity logs has little usage data to show, so its evidence comes down to what the customer agreed to and was reminded of before the charge. That's why VPN providers refund quickly when asked: a refund costs only the payment, while a chargeback adds a fee and counts against the account.

For a subscription, the evidence that holds up is much the same in any industry: the terms the customer accepted and when, the reminder sent before the renewal, and any message where they asked about their account. The reply also has to answer the reason code the bank sent, and the processor's deadline is short. Before the next wave of renewals, it is worth learning which evidence wins a chargeback dispute for each reason code.

Is it legal to accept crypto payments for a VPN service?

It depends on where your company is and where your customers are, and both the VPN itself and the crypto payment have to be allowed. In the US, FinCEN guidance FIN-2019-G001 (9 May 2019) treats a company that collects crypto for other merchants as a money transmitter that must register. Money a business accepts only as part of selling its own service falls under an exemption in the same rules. In the EU, the MiCA regulation (Regulation (EU) 2023/1114) requires crypto-asset service providers to be authorised, and the transition period for firms that had operated under national rules ended no later than 1 July 2026. If your company is in the EU, check that your payment gateway holds that authorisation.

The crypto half of that question has the same answer for a VPN as for any other seller. In the United States, the United Kingdom and the European Union, taking crypto for your own service needs no licence of its own. Türkiye, on the other hand, has banned paying for goods and services with crypto since 30 April 2021, and in China a September 2021 notice declared crypto business activity illegal. So the first thing to check for your company is which countries let a business accept crypto payments and which ban them.

Can a VPN business use Stripe or PayPal?

Often, yes, at least at the start. Stripe's published list of prohibited and restricted businesses doesn't name VPN services, so an application can be approved. Both companies keep reviewing live accounts, though, and a rising dispute rate or a wave of complaints can lead to a paused account with money held inside it. Set up a second route before your first big wave of renewals, not after a freeze.

How do you handle subscription renewals when customers pay in crypto?

Nobody can charge a crypto wallet without its owner's approval, so every renewal is a new payment the customer approves. The usual approach is to send a payment link a few days before the paid period ends, so the customer has time to pay before access runs out. Longer prepaid plans mean fewer renewals to chase. At CryptumPay, a regular wallet payment requires customer confirmation: there is no automatic charge, and the customer confirms each renewal.

This article is general information, not legal or tax advice.