merchant risk definition