Five warning signs your merchant underwriting process is obsolete. Qredible's Noah Fitzgerald, CPP contrasts modern underwriting needs against legacy underwriting processes that struggle with regulated merchant risk management.

Five Warning Signs Your Underwriting Process Is Already Obsolete

Author: Noah Fitzgerald, CPP
Date: July 24, 2026

Five Warning Signs Your Underwriting Process Is Already Obsolete

Why the Future of Merchant Risk Management Looks Nothing Like the Past

""The problem with legacy processes is not that they were poorly designed. The problem is that they were brilliantly designed for a world that no longer exists."
- Noah Fitzgerald

 


Introduction

Noah Fitzgerald, CPP - Chief Revenue Officer, Qredible, Inc.Take a moment and imagine you were asked to build merchant underwriting from scratch in 2026.

You have access to:

  • Artificial Intelligence
  • Continuous merchant monitoring
  • Product intelligence
  • Regulatory intelligence
  • Website intelligence
  • Real-time portfolio analytics
  • Automated evidence collection
  • Merchant transparency tools
  • Continuous due diligence capabilities

Would you design the same underwriting process your organization uses today?

Would you require:

  • PDF documents?
  • Spreadsheet tracking?
  • Point-in-time reviews?
  • Annual portfolio audits?
  • Merchant category assumptions?
  • Manual website reviews?

For most organizations, the honest answer is probably no.

That isn't because underwriting has failed. In fact, traditional underwriting has done an exceptional job protecting the payments ecosystem for decades.

The reality is much simpler:

Commerce evolved faster than merchant underwriting.

This article is intended to help leadership teams evaluate whether their underwriting programs are prepared for the future of commerce.

Warning Sign #1

Your Underwriting Process Ends at Merchant Approval

Many organizations still view underwriting as a single event.

The workflow typically looks something like this:

  • Merchant applies
  • Merchant is reviewed
  • Merchant is approved
  • Merchant begins processing
  • Merchant is periodically reviewed

The underlying assumption is that merchant risk remains relatively stable after approval.

The problem?

Modern merchants are anything but static.

Merchants continuously change:

  • Products
  • Websites
  • Marketing claims
  • Sales channels
  • Business models
  • Regulatory obligations

If your underwriting process effectively ends after merchant approval, your organization is likely managing yesterday's version of merchant risk.

Questions to Ask

  • How much do we know about our merchants six months after approval?
  • What changes could materially impact risk after onboarding?
  • Are we underwriting merchants or continuously understanding merchants?

Warning Sign #2

Your Teams Spend More Time Collecting Information Than Making Decisions

Highly skilled underwriting and compliance professionals are among the most valuable resources within any organization.

Unfortunately, many spend a significant portion of their time:

  • Collecting documents
  • Reviewing websites
  • Searching for information
  • Managing spreadsheets
  • Requesting remediation documents
  • Preparing audit reports

Very little of that work represents actual underwriting expertise.

The industry's most experienced professionals should be spending their time:

  • Making informed decisions
  • Identifying emerging risks
  • Supporting merchant growth
  • Developing policies
  • Improving portfolio quality

If your teams are functioning as information gatherers rather than intelligence-driven decision makers, your underwriting model may already be showing its age.

Questions to Ask

  • What percentage of our underwriting process remains manual?
  • How much time is spent gathering information versus making decisions?
  • What could our teams accomplish if intelligence was readily available?

Warning Sign #3

You Don't Know What Your Merchants Are Actually Selling

This is perhaps one of the most important questions facing the payments industry today.

Ask yourself:

Can we confidently identify every product being sold across our merchant portfolio?

For many organizations, the answer is surprisingly difficult.

Modern merchants frequently sell:

  • Multiple product categories
  • Regulated products
  • Digital products
  • Subscription services
  • Marketplace products
  • International products

Traditional underwriting typically focuses on businesses.

Increasingly, merchant risk originates from products themselves.

Examples include:

  • Hemp products
  • Vape products
  • Functional mushrooms
  • Alcohol
  • Nutraceuticals
  • Peptides
  • THC beverages
  • Digital services

Merchant intelligence without product intelligence is increasingly incomplete.

Questions to Ask

  • Do we understand our merchants or simply their business category?
  • Could we identify prohibited products across our portfolio today?
  • Are we monitoring products or merchants?

Warning Sign #4

Your Compliance Program Is Reactive

Many organizations unknowingly operate reactive compliance programs.

They become aware of issues when:

  • Regulators issue new guidance
  • Card brands implement new programs
  • Sponsor banks request portfolio reviews
  • Merchants trigger chargebacks
  • Audits reveal deficiencies
  • Regulatory changes create operational challenges

This isn't necessarily poor compliance management.

It's simply the natural outcome of point-in-time merchant intelligence.

The organizations best positioned for the future of commerce will likely possess:

  • Continuous merchant intelligence
  • Continuous regulatory intelligence
  • Continuous product intelligence
  • Continuous portfolio intelligence

The objective is not to react faster.

The objective is to identify meaningful changes before they become operational problems.

Questions to Ask

  • Are we discovering issues or anticipating them?
  • How quickly can we respond to regulatory changes?
  • Are our compliance programs continuous or event driven?

Warning Sign #5

Your Underwriting Model Cannot Scale With Regulatory Change

Over the past five years alone, regulated commerce has experienced significant changes involving:

  • Hemp regulations
  • Vape regulations
  • Card brand monitoring requirements
  • Sponsor bank expectations
  • Product transparency initiatives
  • Age verification requirements
  • International commerce regulations

Ask yourself:

  • If Congress passed legislation tomorrow impacting 10,000 merchants within our portfolio, could we identify those merchants within 24 hours?

If the answer is no, your underwriting model is unlikely to scale effectively as regulatory expectations continue to evolve.

The organizations that succeed over the next decade will not necessarily have larger compliance departments.

They will have better intelligence infrastructures.

Questions to Ask

  • Can our compliance programs adapt quickly?
  • Are we prepared for portfolio-wide regulatory changes?
  • What would happen if we needed to audit our entire merchant portfolio this week?

Introducing The Merchant Intelligence Maturity Model™

One concept we've begun discussing internally is what we call Merchant Intelligence Maturity™.

Organizations generally fall somewhere along this spectrum.

Level One

Static Merchant Underwriting

  • Merchant applications
  • Point-in-time reviews
  • Manual processes

Level Two

Digital Underwriting

  • Workflow automation
  • Basic monitoring
  • Improved onboarding

Level Three

Continuous Merchant Intelligence

  • Product intelligence
  • Merchant intelligence
  • Portfolio intelligence
  • Continuous monitoring

Level Four

Intelligent Commerce

  • Continuous intelligence
  • Regulatory intelligence
  • Merchant trust
  • Evidence-based risk management

No level is inherently "bad."

The important question is understanding where your organization is today and where it needs to be tomorrow.


Why We Built Qredible

The inspiration behind Qredible was never to build another underwriting platform.

We asked ourselves a much larger question:

If merchant underwriting were invented today, what would it look like?

We quickly realized that the future wasn't simply about improving underwriting workflows.

The future required:

  • Merchant Intelligence™
  • Product Intelligence™
  • Portfolio Intelligence™
  • Regulatory Intelligence™
  • Continuous Merchant Monitoring™
  • Trusted Commerce™

Commerce continues to evolve every day.

Merchant intelligence should evolve with it.


Looking Forward

Your underwriting process may not be broken.

It may simply be outdated.

And that's okay.

Every major industry transformation begins by recognizing that yesterday's solutions were successful enough to bring us to where we are today—but may not be sufficient to take us where we're going tomorrow.

Merchant underwriting will continue to play an essential role in commerce.

What will change is the intelligence layer powering it.

The future of merchant risk management is not about replacing underwriting.

It's about augmenting underwriting with continuous merchant intelligence.


Questions for Leadership Teams

Take a moment and ask yourself:

  • Does our underwriting process stop at approval?
  • Could we audit our entire merchant portfolio this week?
  • Do we know what our merchants are actually selling?
  • Is our compliance program proactive or reactive?
  • Can our underwriting model adapt to future regulatory changes?
  • If we built our underwriting process today, would it look the same?

The answers to those questions may tell you everything you need to know about whether your underwriting program is ready for the next decade of commerce.


Final Thought

The future of merchant underwriting isn't faster approvals, more automation, or even artificial intelligence.

The future is better intelligence.

And organizations that begin building that intelligence infrastructure today will be the ones leading commerce tomorrow.

 

About Qredible

Qredible is redefining merchant underwriting through Merchant Risk Intelligence (MRI)—a product-first approach that continuously analyzes what businesses sell, how they market those products, and the evidence required to support compliant payment acceptance. By moving beyond static industry classifications, Qredible helps banks, payment processors, ISOs, and sponsor banks make faster, more informed, and more defensible underwriting decisions while reducing manual effort and strengthening ongoing portfolio oversight. Learn more about Qredible's product-first automated compliance management platform for regulated industries →



crossmenu