We have gas stations on our High Risk Customer List. Some of these gas stations that we have we are very familiar with the business and don't feel that they're necessarily high risk, but have them listed because of the business type they are. Are we required to have all gas stations on our High Risk Customer List or can we remove the ones that we are comfortable with, document our reasoning, and move on?

Why would a gas station be a high risk? Customer type might be a factor in your determination of risk, but it is not the only factor.

Being that they're cash intensive. Are there customers that are "required" to be on the High Risk Customer Listing? ie. attorneys, car dealerships, etc.

No one is required to be on a high-risk list. Your risk rating methodology should be tailored to your institution's risk profile (geography, products, services, customers, transaction volume, etc.)

I wonder if they are on the list because they aren't EMV compliant. We've had pump skimmers in our area since last August. They created counterfeit cards that they use at a handful of stations in another city about an hour away from us. I've wondered how long two of the stations were going to be able to hold out with the onslaught of chargebacks.