Glossary term
BRAM (Business Risk Assessment and Mitigation)
Mastercard's program for monitoring merchants and acquirers for prohibited or high-risk activity, with escalating penalties for violations.
BRAM, short for Business Risk Assessment and Mitigation, is Mastercard's program for identifying and acting on merchant activity that violates its standards. It covers prohibited content categories — including certain adult content, controlled substances, weapons, counterfeit goods, and intellectual property infringement — and applies across the card network.
When a violation is detected, penalties escalate: an initial notification, then fines, and ultimately termination and potential MATCH listing if the activity is not remediated. Because the card network fines the acquiring bank, the cost is typically passed down to the platform whose creator triggered the violation.
For creator economy platforms, BRAM is relevant because it reaches beyond a platform's direct processor relationship. Even a platform with a clean Stripe or PayPal account can face BRAM exposure through the underlying card network if a creator sells something Mastercard prohibits.
This definition is provided for general educational purposes and is not legal or compliance advice, and is not endorsed by or affiliated with Mastercard. Consult Mastercard's official rules for definitive requirements.
Related terms
VAMP (Visa Acquirer Monitoring Program)
Visa's program for monitoring acquirers and their merchants for excessive fraud and disputes, with fines when defined thresholds are exceeded.
MATCH List
Mastercard's shared blacklist of terminated merchants. A listing makes it extremely difficult to obtain a new merchant account for around five years.
Acquiring Bank (Acquirer)
The bank that holds a merchant's account and processes card transactions. It absorbs card network fines and passes them to the merchant or platform.
Enforcement Cascade
The escalating sequence of processor consequences — from warning to fine, reserve increase, termination, and MATCH listing — that follows an unaddressed violation.