First, the requirements
- A registered business and a business bank account for settlements.
- A website served over HTTPS with a working checkout or e-commerce platform.
- Published refund, shipping and privacy policies, which processors commonly review.
- Approval from a processor or merchant account provider after a business review.
- A plan for PCI DSS: your scope depends on whether card data ever touches your servers.
These are general industry requirements. Your processor confirms the exact list.