Mastercard AN 5196: Complete 2026 Compliance Guide for Adult Content Merchants

What AN 5196 Is

Mastercard's AN 5196 is the binding bulletin Mastercard issues to acquiring banks setting documentation requirements for merchants processing adult content payments. Acquirers in turn pass those requirements to merchants.

The key thing to understand: AN 5196 is not optional and not negotiable. There is no appeals process when an acquirer determines your documentation is insufficient. The consequence is loss of Mastercard processing — which, paired with parallel Visa VIRP requirements, effectively means loss of card-network revenue altogether.

AN 5196 has become the binding compliance pressure on adult content merchants in 2026, more so than federal 2257 in day-to-day operations.

What AN 5196 Requires

1. Documented Performer Age and Identity

For every performer in every piece of content monetized through Mastercard rails:

• A government-issued photo ID record proving age 18+ at production
• ID authentication (not just photographed — verified against the issuing standard)
• Cross-reference linking the performer to specific content
• The ID record retained throughout the content's distribution life

This overlaps substantially with federal 2257 but adds an explicit authentication requirement and a cross-reference requirement tied to AN 5196's audit framework, not just 2257's.

2. Signed Model Releases

Every performer must have signed a release explicitly consenting to the specific content. The release must:

• Identify the performer by legal name
• Identify the specific scene, clip, or content set
• Document the date of production
• Capture the performer's signature
• Be retainable as a PDF for audit

Model releases are an AN 5196 requirement, not a federal 2257 one — but in practice, no card-network-compliant producer is without them.

3. Custodian of Records Designation

A named Custodian of Records with a physical address. AN 5196 acquirer audits routinely verify this designation exists and that the address is real.

4. Removal Workflow

An unauthenticated intake form for anyone depicted in your content to request removal. The intake cannot require an account, login, or payment.

5. Monthly Acquirer Compliance Report

A monthly report submitted to the acquiring bank covering:

• Removal request volume and resolution times
• SLA breach summary
• Custodian of Records confirmation
• New performer count
• Affirmation of 2257 record retention

Easy2257 generates this automatically on the 2nd of each month for every active producer.

6. Defined Removal SLAs

Who Is in Scope

Every merchant processing Mastercard payments for adult content. That includes:

• Solo creators selling direct (your own site, custom content)
• Clip-site sellers with their own processor relationships
• Studios with merchant accounts
• Platforms at the platform level
• Subscription content businesses

If you sell only through a platform that handles AN 5196 at the platform level, the platform carries the obligation for those transactions. Any direct sale outside the platform moves the obligation to you.

What Happens When You're Not Compliant

The enforcement model is not fines. It's removal from card processing.

1. Acquirer audit finds insufficient documentation
2. Acquirer notice to merchant — usually a defined cure window
3. If not cured, acquirer terminates the merchant agreement
4. Mastercard placement — merchant is logged in Mastercard's MATCH (Member Alert to Control High-risk Merchants) file
5. No replacement processor — MATCH placement makes finding another acquirer extremely difficult

The practical effect of a MATCH placement is loss of card-network access for several years. Recovery requires demonstrable cure and a willing acquirer to take on the risk.

How Easy2257 Satisfies AN 5196

• Bank-grade ID authentication with document verification and facial comparison
• Signed model releases per performer per scene, PDF-archived
• Custodian of Records included on every paid plan — our address goes on your 2257 statement
• Cross-reference index auto-generated, searchable by every alias
• Unauthenticated removal portal at /report/removal — AN 5196 / VIRP / TAKE IT DOWN compliant
• Monthly acquirer compliance report auto-generated on the 2nd, PDF + JSON, SHA-256 hashed, emailed to you
• SLA enforcement automatic, with NCMEC routing for CSAM
• Annual compliance archive ZIP — everything an acquirer audit would ask for, ready to send

Solo Creator plan: $9.95/month or $107.40/year.

See pricing · How it works · Get started free

Related: Complete 2257 compliance guide (2026) · Visa Integrity Risk Program guide · Existing AN 5196 / VIRP overview

Informational only — not legal advice.