Who This Is For
This page is for the online merchants that conventional banking and card processing treat as a problem to be managed rather than a customer to be won. You are most likely one of the following, and the pattern repeats across all of them.
High-volume sellers moving serious transaction counts, where a single processor concentration is a business risk and reserves quietly tie up your working capital. Subscription and continuity models, where recurring billing, free-trial conversions and rebills attract the chargeback and dispute ratios that card schemes police most aggressively. Nutraceuticals, supplements and CBD-adjacent retail, where the product is legal but the category is flagged, and acquirers underwrite the whole sector cautiously. Marketplaces and platforms that take money on behalf of third-party sellers, which crosses from ordinary retail into regulated payments. Digital goods, software and content sellers with instant fulfilment, intangible delivery and global customers. And dropshipping at scale, where long delivery windows and supplier dependence push dispute rates up and underwriting confidence down.
What you have in common is not wrongdoing. It is a transaction profile that mainstream processors classify as high-risk, and a corporate structure that was usually set up for convenience rather than for surviving an acquirer’s diligence. We fix the second so the first stops being fatal. US persons are excluded as clients.
What High-Risk E-commerce Operators Need
A durable high-risk e-commerce build rests on four things we deliver directly: an operating entity in a jurisdiction that acquirers and banks will underwrite, a clean corporate and beneficial-ownership structure, VAT and tax registration matched to where you actually sell, and a payments setup with redundancy built in. Card acquiring and banking sit alongside these as supporting workstreams once the entity is clean.
The reason this matters is structural, not personal. Mainstream processors and aggregators de-risk whole categories rather than assess individual accounts: a subscription supplement brand and a fraudulent operator can look identical from the outside, so the safe institutional answer is to decline both. The Visa Acquirer Monitoring Programme and Mastercard’s chargeback programmes set merchant-level dispute thresholds that, once breached, trigger fines, reserves and eventually termination. An account closed mid-trading freezes settlement, traps a rolling reserve and can take a thriving shop dark overnight. Building the entity correctly is what lets an acquirer say yes and keep saying yes.
Sequence is what determines whether you launch cleanly. We form the company first, register it for VAT and set up its tax position in parallel, assemble the corporate and ownership documentation an acquirer will ask for, and arrange the payments layer so it is ready rather than improvised. We do not hand you a half-built entity and leave you to argue with an underwriter. The work is ours end to end and we are accountable for getting you to a merchant that can take money.
Choosing the Jurisdiction: EU Base vs Offshore
The first real decision is where the trading entity lives, and it is driven by where your customers are far more than by tax. The choice narrows to an EU base, an offshore base, or a hybrid that uses both. We model all three against your actual customer map before you commit capital.
An EU base (commonly an Estonian OÜ, or another EU private limited company) is usually the stronger choice when a meaningful share of your customers are in the EU. It gives you VAT registration and access to the One Stop Shop and Import One Stop Shop schemes, standing under EU consumer-protection law, and materially easier EU card acquiring because the acquirer is underwriting a regulated EU company rather than an offshore unknown. The trade-off is real reporting obligations and corporate-tax exposure, though Estonia’s regime defers corporate tax until profits are distributed, which suits a reinvesting e-commerce business.
An offshore base can be more efficient for a primarily non-EU customer base and for pure digital goods, with lower headline tax and lighter local administration. The cost is narrower banking and acquiring options, more diligence friction, and the fact that selling into the EU still triggers EU VAT and consumer obligations wherever the customer sits, regardless of where the company is. An offshore entity does not exempt you from the rules of the markets you actually sell into.
A hybrid structure is common for operators with genuinely global sales: an EU trading entity serving the EU market with clean local acquiring, and a separate vehicle for the rest of the world. Done properly this is legitimate and efficient; done carelessly it creates a structure an acquirer or tax authority reads as artificial. We keep the layering clean and defensible, with real substance where it is needed and a single accountable owner of the whole picture.
We weigh six things for you: where your customers are, your transaction volume and dispute profile, VAT and consumer-law exposure in your selling markets, the acquiring appetite for your category in each base, banking accessibility, and the corporate-tax outcome across the structure. We will tell you straight which base fits what you are building, and we will not set you up somewhere that looks cheap on paper but cannot get you a merchant account.
We Form the Company
Formation is simple in form and consequential in substance: the trading entity has to be incorporated in the right jurisdiction, with a corporate and ownership structure an acquirer and bank will underwrite, before the payments layer can be arranged. We incorporate it, structure the share capital, directors and shareholders, and build the documentation that holds up under diligence. This is our work, not a referral.
For an EU base we typically form a private limited company in Estonia or another EU member state, register it for VAT, appoint the directors and arrange the registered office and contact infrastructure. For an offshore base we form the appropriate private company or international business company and put real substance behind it where the model needs it. In every case we make the beneficial ownership transparent and the corporate purpose coherent, because the most common reason a clean business gets declined is an ownership structure that looks evasive rather than because of anything it actually does.
Structure for multi-entity operators is where we earn our place. A growing e-commerce business often ends up wanting a holding company, an intellectual-property or brand entity, and one or more trading entities by market. The trap is layering these across jurisdictions in a way that a tax authority later treats as artificial or that an acquirer cannot follow. We keep the structure as flat as the commercial reality allows: a clear trading entity in each market, a single holding layer above it, real substance where substance is required, and documentation that explains itself. We pre-clear the structure against the VAT and acquiring questions it will face, which routinely saves a redesign later.
Where in-country capacity is needed, we deliver through a controlled network of vetted lawyers, accountants and corporate-service specialists we work with directly, sequenced alongside the rest of the build. We never offload your file to an unverified third party. See the full company formation hub and the European company formation and offshore company formation regional pages for entity-level detail.
We Arrange the Licences and Registrations Where Required
Most high-risk e-commerce merchants do not need a financial licence to sell their own goods or services. They need a clean entity, the right registrations, and an acquirer that will underwrite the category. The licensing question only arises when the model starts holding or moving other people’s money, and getting that distinction right early avoids both unnecessary cost and an unexpected enforcement problem.
The ordinary merchant case. A shop selling its own products, a subscription brand billing its own customers, or a digital-goods seller delivering its own content uses a licensed acquirer or payment institution rather than becoming one. Here the work is registration rather than authorisation: VAT and, where relevant, sector registrations such as food-supplement or product-compliance notifications for nutraceuticals and CBD-adjacent lines, plus the corporate filings that let an acquirer onboard you. We handle these as part of the formation engagement.
The regulated-payments case. You cross into licensed territory when funds flow through you rather than to you. A marketplace that collects buyer payments and settles them to third-party sellers, a platform issuing wallets or stored value, or any model that routes money between users can require authorisation as a payment institution or electronic money institution under the EU Payment Services and E-Money frameworks, supervised by a national competent authority. The commercial-agent and limited-network exemptions sometimes apply, but they are narrow and frequently misread. We assess where your model genuinely sits and, where a payment institution or EMI authorisation is actually needed, we draft, file and manage the application and deal with the regulator directly. See the EMI and payment institution licensing page for the regulated route, and the licensing hub for the full picture.
In our experience the most expensive mistake here runs in either direction: a straightforward shop that wastes months pursuing a licence it never needed, or a marketplace that launches as if it were an ordinary retailer and discovers mid-growth that it has been operating an unauthorised payment service. We tell you which side of the line you are on before you build, not after.
Banking, Payments and Acquiring
Banking and card acquiring are one of our core services. A high-risk merchant with no live account and no acquirer is just a website, so we open them as part of the build once the entity is clean. The reason mainstream banks and aggregators decline these categories is the same de-risking behaviour the European Banking Authority has criticised: whole categories of customer are dropped without regard to individual risk. The practical answer is to present a regulated, transparent entity to institutions that actually underwrite the category, and to build redundancy so no single relationship can take you dark.
For day-to-day operations a licensed EU electronic money institution is often the realistic primary account for a high-risk merchant, issuing dedicated IBANs and running modern SEPA and KYC tooling that scales with transaction count, with a traditional credit institution reserved for treasury where it can be obtained. The structural answer to provider exits is never to rely on one: we plan for more than one banking relationship and more than one acquiring route from the start. We never name a specific bank, acquirer or payment provider here, by commercial choice; we discuss the realistic options with you directly once we know the entity and the category.
Card acquiring is the workstream most operators underestimate. Acquirers underwrite a high-risk merchant on the entity, the ownership picture, the product, the projected volume and the dispute history, and they hold a rolling reserve against chargeback exposure. Card-scheme monitoring programmes set the dispute thresholds that, once breached, trigger fines and termination, so chargeback-management tooling, clear refund and delivery terms, and clean descriptors have to be in place before processing goes live, not bolted on after the ratio spikes. We sequence the launch so the merchant account, alternative payment rails for redundancy and the dispute tooling are all ready together, rather than treating payments as a downstream afterthought.
Ongoing Compliance
Compliance for an e-commerce operator is a permanent operating commitment, and we build it into the structure rather than leave it for you to retrofit under audit pressure. The perimeter runs across VAT and reporting in every market you sell into, consumer-protection obligations, anti-money-laundering duties where your model attracts them, and the card-scheme programme management that keeps your merchant account alive.
VAT is the recurring operational burden. Distance sales of goods and digital services to EU consumers fall under the EU VAT regime, with the One Stop Shop scheme letting you account for EU-wide VAT through a single registration and the Import One Stop Shop scheme covering low-value imported goods, rather than registering in every member state. Digital goods are taxed where the consumer is located. We register the entity for VAT, set up OSS or IOSS where it fits the model, and build the reporting into the structure so it scales with your sales geography.
Consumer law follows the customer. Selling to EU consumers brings the EU consumer-rights framework into play: clear pre-contract information, the statutory withdrawal right for distance sales, transparent subscription and cancellation terms, and accurate pricing. Subscription and continuity models attract particular scrutiny on auto-renewal disclosure and cancellation friction, which is also where chargebacks originate, so getting the terms right protects both your compliance position and your dispute ratio at once.
AML obligations apply where the model warrants them. An ordinary retailer is not usually an obliged entity, but a marketplace, wallet or payments-adjacent model is, and the EU Anti-Money Laundering Regulation and the Anti-Money Laundering Authority are tightening that perimeter through the second half of the decade. Where your model brings you into scope we build the KYC and transaction-monitoring framework into the authorisation from the start. We size the compliance function to the real obligation and we are straight with you about the recurring cost rather than under-pitching it to win the work.
Realistic Timeline
For a straightforward high-risk merchant, the realistic end-to-end timeline from formation to a live merchant account is around 4 to 12 weeks, driven mostly by acquirer underwriting rather than by incorporation. A model that genuinely needs a payment institution or EMI authorisation runs far longer, because the regulator review sits on the critical path. Costs depend on the base, the structure and whether a licence is involved, so we quote them once we understand what you are building. Book a free consultation and we will scope it.
End-to-End Timeline
| Phase | Timeline | What we do |
|---|---|---|
| Company formation | 1 to 3 weeks | We incorporate the trading entity in the chosen base and structure the corporate and ownership picture |
| VAT and registrations | 1 to 4 weeks, in parallel | We register for VAT, set up OSS or IOSS where it fits, and complete any sector registrations |
| Banking and acquiring | 2 to 8 weeks, in parallel | We arrange the banking and card-acquiring layer with redundancy and dispute tooling in place |
| Payment institution or EMI authorisation (only if the model needs it) | 6 to 12 months regulator review | We draft, file and manage the authorisation and deal with the regulator directly |
| Total to a live merchant (no licence) | 4 to 12 weeks realistic | One accountable firm across the whole build |
What compresses the timeline: a clean trading entity with transparent ownership, accurate volume and product disclosure to the acquirer, chargeback tooling and clear terms ready before processing goes live, and a base matched to the customer map. What expands it: an opaque structure, an aggressive volume projection that fails diligence, a dispute history without remediation, and discovering late that the model needed a payments authorisation. We manage every one of these for you, which is the difference between a merchant that goes live and one that stalls at underwriting.
Frequently Asked Questions
Why do mainstream processors keep declining or terminating my e-commerce account?
It is rarely about you personally. High-volume, subscription, nutraceutical, CBD-adjacent, marketplace and digital-goods merchants sit in card-scheme categories that attract elevated chargeback and refund exposure, and aggregators de-risk whole categories at once rather than assess single accounts. The fix is structural: an operating entity in a jurisdiction acquirers will underwrite, a clean corporate and beneficial-ownership picture, and chargeback tooling in place before processing goes live. We build for that outcome from the first decision.
Should I base my e-commerce business in the EU or offshore?
It depends on where your customers are and how you sell. An EU base (commonly an Estonian OÜ or other EU private company) gives you VAT registration, One Stop Shop reporting, EU consumer-law standing and easier EU acquiring, which matters if you sell to EU consumers. An offshore base can be more efficient for non-EU customer bases and digital goods, but narrows banking and acquiring options and still triggers VAT and consumer obligations wherever you actually sell. Many operators run a hybrid: an EU trading entity for the EU market and a separate vehicle for the rest. We model both against your customer map before you commit.
Do I need a payments or EMI licence to run a high-risk online shop?
A straightforward merchant selling its own goods or services normally does not; it uses a licensed acquirer or payment institution rather than becoming one. You move into licensed territory when you start holding or moving other people’s money: a marketplace that settles to third-party sellers, a platform issuing wallets or stored value, or a model that routes funds between users. That can require a payment institution or electronic money institution authorisation under the EU Payment Services and E-Money frameworks. We assess where your model sits and, where a licence is genuinely needed, we file it.
How is VAT handled for a cross-border e-commerce business selling into the EU?
Distance sales of goods and digital services to EU consumers fall under the EU VAT regime, with the One Stop Shop and Import One Stop Shop schemes letting you account for EU-wide VAT through a single registration rather than registering in every member state. Digital goods are taxed where the consumer is located. We register the entity for VAT, set up OSS or IOSS where it fits, and build the reporting into the structure so it is not retrofitted under audit pressure.
How does Tomberg & Partners deliver an e-commerce formation and structuring project?
We deliver it directly. We form the operating entity in the right jurisdiction, structure the corporate and beneficial-ownership picture so acquirers and banks will underwrite it, register it for VAT and arrange any payments or marketplace authorisation the model genuinely needs. Banking and acquiring are arranged as a supporting layer once the entity is clean. Where in-country work is needed we use vetted lawyers and accountants we work with directly, never an unverified third party. You deal with one accountable firm end to end. For a scope and quote, book a free consultation.
Get Your E-commerce Business Bankable
We form, structure and stand behind high-risk e-commerce and retail builds: subscription, nutraceuticals, marketplaces, digital goods and high-volume merchants. One accountable firm, the right base, and an entity acquirers will underwrite. Tell us what you sell and where.
Banking & Payments
A company and a licence still need a bank account
Banking is one of our three core services. We help high-risk and regulated businesses open the bank and payment accounts that others refuse: we work directly with EU EMIs, payment institutions and crypto-aware banks, confirm appetite before you apply, and make the introduction. Take it with your company and licence, or on its own.
Related Services
- European Company Formation: the EU trading entity for an EU customer base, formed by us
- Offshore Company Formation: the offshore vehicle for non-EU and digital-goods models
- EMI & Payment Institution Licensing: for marketplaces and platforms that move other people’s money
- High-Risk Business Accounts: the supporting banking and acquiring layer for merchants others decline
- Multi-Currency Accounts & IBANs: dedicated IBANs and SEPA rails for cross-border settlement