Brokers, ISOs, and the Hidden Compliance Risk in MCA Origination
Brokers and ISOs can create MCA compliance risk before underwriting sees the deal. This expanded guide covers how to become an ISO, what infrastructure is needed, what funders should require, and how to control channel conduct.
Brokers and ISOs shape the merchant’s understanding of price, speed, renewals, stacking, payoff, and collections. That makes them one of the highest-risk parts of MCA origination. A funder can have a strong agreement and still inherit a bad file if the channel created misleading expectations. Operator thesis Treat the ISO as part of the regulated workflow Even where the funder is the provider, the ISO may be the person explaining the offer, collecting documents, pushing urgency, and transmitting disclosures. Channel risk is therefore product risk. How to become an MCA broker or ISO Step What is needed Evidence a funder should request 1. Form the business Legal entity, EIN, bank account, business address, registered agent, insurance where appropriate, authority to transact where required. Entity docs, W-9, bank letter, ownership/control list, secretary of state status. 2. Define the role Broker, ISO, referral partner, exclusive sales agent, or in-house sales desk. The role affects duties, compensation, marketing rules, and state exposure. Written role description and sample merchant journey. 3. Build lead-source controls Owned marketing, purchased leads, affiliate traffic, referral relationships, trade shows, outbound calls, or renewal books. Lead-source list, consent/permission records where relevant, vendor contracts, banned-source policy. 4. Learn product economics Funding amount, purchased amount, factor rate, remittance method, estimated term, reconciliation, payoff, renewal, stacking, fees, and broker compensation. Training completion and approved offer explanation script. 5. Sign funder agreements ISO agreement, compensation schedule, non-circumvention, confidentiality, data security, prohibited conduct, complaint routing, audit rights, clawbacks. Executed agreements with every funder. 6. Register or qualify where required Some states can impose registration, authority, disclosure, or broker-specific obligations. This must be checked by state and product. State matrix, registrations or legal memo, annual renewal calendar. 7. Run a compliant sales process Use approved marketing, collect accurate merchant data, avoid misstatements, deliver disclosures when assigned, document merchant consent, and preserve communications. CRM records, call notes, disclosure transmission proof, signed merchant acknowledgments. What an ISO operating stack should include CRM: every merchant, owner, lead source, broker user, offer, communication, and document request should be timestamped. Document checklist: bank statements, processor statements, tax ID, owner ID, voided check, landlord or trade references when needed, payoff letters, and existing MCA statements. Compliance library: approved scripts, prohibited claims, state disclosure handoff rules, privacy/security policy, complaint process, and renewal guidance. Compensation ledger: funder, deal ID, merchant, commission, broker user, chargebacks, clawbacks, and any merchant-paid fees. Training: product economics, disclosure timing, reconciliation explanation, stacking risk, complaints, collections boundaries, and data handling. QA: sample calls, SMS/email review, merchant complaint review, disclosure timing review, and loss-rate review by broker. Funder onboarding checklist for brokers and ISOs Area Minimum funder control Identity and authority KYB on the ISO entity and principals, sanctions/adverse media where appropriate, authority to transact check, state registration evidence where required. Agreement No merchant misrepresentations, no unauthorized fees, no side contracts, data-security obligations, audit rights, clawbacks, complaint cooperation, disclosure transmission duties. Marketing Approved templates only, no guaranteed approval, no “loan” language where product is sold as receivables purchase, no undisclosed fees, no fabricated urgency. Offer delivery Broker cannot alter offer economics. If broker transmits a disclosure, the exact system-generated document and proof of delivery must return to the file. Compensation Commission disclosed where required, no merchant-paid broker fee unless allowed and documented, chargeback rules tied to early default or misrepresentation. Monitoring Monthly file sample, complaint review, early-default review, state exposure, concentration limits, and immediate suspension triggers. Sales claims that create downstream risk “No personal risk.” If the agreement includes guarantees, security interests, UCC filings, or default remedies, this claim can become a serious mismatch. “Fixed term.” A receivables purchase with estimated duration should not be sold like a fixed amortizing loan. “You can always renew out of it.” Renewal promises can hide real cost, stacking, and payoff risk. “The daily payment will never change.” If reconciliation exists, the merchant should understand how to request it and what evidence is needed. “This disclosure is just paperwork.” Disclosures are part of the offer, not a post-sale formality. ISO file checklist Before submission Before offer Before funding Merchant identity, business state, owner contact, lead source, consent/communication notes. Specific requested amount, current positions, payoff letters, broker fee/commission, state disclosure trigger check. Signed disclosure where required, signed agreement, ACH authorization, final merchant confirmation, cleared stipulations, no unresolved complaint. How funders should monitor ISOs Score by file quality: missing docs, corrections, mismatched merchant facts, late disclosures, and compliance exceptions. Score by performance: first-payment default, 30-day default, loss severity, renewal quality, complaints, and fraud flags. Score by conduct: call QA, email/SMS review, unapproved claims, disclosure timing, fee transparency, and merchant confusion indicators. Act on the score: lower caps, require pre-approval, hold commissions, retrain, suspend, or terminate. Opinion The best ISO relationships are boring Good channel partners do not need mystery. They can show where the lead came from, what the merchant was told, what offer was delivered, what compensation was paid, and why the file should fund. That is the standard funders should reward.