An acquiring bank is the financial institution that lets a business accept credit and debit card payments by holding its merchant account and connecting it to card networks like Visa and Mastercard. Every card transaction runs through an acquiring bank: it routes the authorization, moves the money, absorbs a share of the financial risk, and handles disputes when customers push back. Acquirers are sometimes called merchant banks, and the terms of the relationship shape a merchant’s fees, cash flow, and exposure for years.
What an Acquiring Bank Actually Does
When a customer taps, dips, or swipes a card, the acquirer kicks off a chain of communication that finishes in seconds. It receives the transaction data from the merchant’s terminal or payment gateway, sends it through the appropriate card network, and the network forwards it to the cardholder’s issuing bank. The issuing bank checks funds or available credit and returns an approval or decline. The acquirer relays that answer back to the terminal.
Behind the routing, the acquirer holds a merchant account where transaction funds accumulate before being paid out. It carries financial responsibility for those transactions to the card network. If a merchant shuts down or can’t cover refunds, the acquiring bank is on the hook. That exposure is why acquirers scrutinize applications, hold reserves on some accounts, and watch chargeback activity closely. When a customer disputes a charge, the acquirer sits in the middle of the process between the merchant and the issuing bank.
Acquiring Bank vs. Payment Facilitator
Not every company that helps a business accept cards is an acquiring bank. Square, Stripe, and PayPal operate as payment facilitators. Instead of giving each merchant its own dedicated merchant account, a facilitator aggregates many merchants under its own master account with an acquiring bank. The facilitator handles onboarding and underwrites merchants itself, which is why signing up takes minutes rather than days.
The tradeoff is control and cost. A direct relationship with an acquiring bank usually offers more negotiating leverage on fees, customized settlement terms, and a dedicated Merchant Identification Number. Facilitators offer speed and simplicity, but flat-rate pricing tends to cost more at higher volumes, and they can freeze funds or terminate accounts with less warning because the merchant sits under the facilitator’s umbrella. Businesses processing significant monthly volume often do better with a direct acquirer; smaller or newer businesses often find a facilitator more practical.
What You Need to Open a Merchant Account
Applying for a merchant account means assembling a set of business and personal documents. The acquiring bank uses them for identity verification, risk assessment, and regulatory compliance.
A valid Employer Identification Number is a baseline requirement. The IRS issues EINs to businesses, tax-exempt organizations, and other entities as a federal tax identifier, and acquirers use it to verify that the business is a legitimate legal entity.1Internal Revenue Service. Employer Identification Number Applicants also need current business licenses and recent financial statements, typically three to six months of bank statements, to show transaction history and financial health.
Federal rules require acquiring banks to run Customer Identification Program checks on every new account. Under the Bank Secrecy Act’s implementing regulations, banks must verify identity using unexpired government-issued photo ID such as a driver’s license or passport for individuals. For business entities, the bank needs documents showing the entity’s existence, such as certified articles of incorporation or a partnership agreement.2eCFR. 31 CFR 1020.220 – Customer Identification Program Requirements for Banks Anyone with significant ownership or control over the account may need to provide identification.
The application also asks for expected monthly transaction volume, average ticket size, and the correct Merchant Category Code, a four-digit number describing the merchant’s primary business.3Visa. Visa Merchant Data Standards Manual These figures directly shape the fee structure and risk tier, so accuracy matters. Inflating or deflating the numbers leads to delays, rejection, or post-approval problems when actual processing patterns don’t match what was reported.
E-commerce merchants face extra scrutiny. Underwriters review the site before approval and look for a privacy policy, refund and return policy, terms and conditions, the legal business name matching registration exactly, a physical address, contact information, HTTPS with TLS 1.2 or higher on any page handling customer data, visible card-brand logos, prices that include taxes and fees, clear disclosure of recurring billing, and product descriptions that match what the business actually delivers. A site missing these pieces routinely stalls or kills an application.
Underwriting looks at creditworthiness, industry risk profile, chargeback outlook, and whether the business model involves delayed delivery of goods or services. Underwriters pull credit reports on owners and cross-reference the business against card network databases like Mastercard’s MATCH list. Straightforward cases move from application to activation in five to seven business days. Complex models or incomplete applications take longer. Once approved, the bank issues the Merchant Identification Number that ties to all future processing on the account.
High-Risk Classifications
Acquirers flag certain industries as high-risk based on chargeback frequency, regulatory complexity, and fraud likelihood. Travel and tourism, online gambling, adult entertainment, pharmaceuticals and dietary supplements, tobacco and vaping, cryptocurrency exchanges, telemarketing, and debt collection or credit repair commonly land in this bucket. The label doesn’t mean a merchant account is unavailable, but it narrows the field. Many mainstream acquirers won’t take these categories at all, pushing the business to specialized high-risk processors that charge premium rates and impose stricter terms.
What You’ll Pay
Acquiring banks price merchant services three main ways, and the differences compound over thousands of monthly transactions.
- Interchange-plus: The acquirer passes through the interchange rate set by the card network and adds a fixed markup. The most transparent model because the network’s charge and the bank’s charge are visible separately.
- Flat-rate: A single percentage applies to every transaction regardless of card type. Simple, but usually more expensive for businesses with lots of standard debit transactions that would carry lower interchange rates elsewhere.
- Tiered: Transactions get sorted into qualified, mid-qualified, and non-qualified buckets, with rewards cards and card-not-present transactions falling into higher-cost tiers. The least transparent model, because the acquirer controls which bucket each transaction lands in.
As a reference point, one major bank’s published merchant services rates show per-transaction fees of 2.40% to 3.50% plus $0.15 per transaction, with the rate depending on monthly volume and whether the card is physically present.4Wells Fargo. Merchant Services Fees Monthly account fees at that institution run roughly $10 to $20 per merchant location, with a separate PCI compliance fee on top. Industrywide, per-transaction costs generally fall between 1.5% and 3.5% of the sale.
The Durbin Amendment, a provision of the Dodd-Frank Act, caps interchange fees on debit card transactions for issuers with $10 billion or more in consolidated assets. The current cap is 21 cents plus 5 basis points of the transaction value, with an additional 1-cent fraud-prevention adjustment for qualifying issuers.5Federal Register. Debit Card Interchange Fees and Routing The Federal Reserve proposed reducing this cap, but the rulemaking remains subject to ongoing legal challenges and has not been finalized. Smaller banks and credit unions are exempt from the cap, which is why debit interchange varies depending on who issued the card.
Reserves and Settlement Timing
Not every dollar of a merchant’s sales reaches the operating account right away. Acquiring banks use reserve accounts to protect themselves against chargebacks, refund obligations, and merchant insolvency, and this catches many new merchants off guard.
A rolling reserve withholds a percentage of each day’s sales, typically 5% to 15%, and holds the funds for a set period before release. Holding periods commonly run 30 to 90 days for lower-risk merchants and up to 180 days or longer for higher-risk industries. The money isn’t lost; it cycles back on a rolling basis once each day’s hold expires. During ramp-up, though, the cash-flow drag can be significant.
The Office of the Comptroller of the Currency expects acquiring banks to maintain written policies on when reserves are appropriate and to release funds according to the terms in the merchant agreement.6Office of the Comptroller of the Currency. Comptroller’s Handbook – Merchant Processing There’s no universal regulation dictating release timing; the terms are contractual. Read the reserve provisions before signing, because they vary widely between acquirers.
Settlement follows a similar contract-driven pattern. At the end of each business day, the merchant’s system batches authorized transactions and sends them to the acquirer for settlement. The acquirer routes them through the networks, which coordinate the transfer of funds from issuing banks. The acquirer deducts its processing fees, any reserve withholding, and other charges before depositing the net amount into the merchant’s designated bank account. Credit card settlement typically takes one to three business days after the transaction date. Some large acquirers offer accelerated or same-day funding for an additional fee. Debit transactions often settle a bit faster.
Chargebacks, Monitoring, and the MATCH List
A chargeback happens when a cardholder disputes a transaction through their issuing bank and the funds are pulled back from the merchant’s account. The acquiring bank runs the process. Each chargeback carries a fee, typically $20 to $100 per occurrence, and the merchant has a limited window to respond with evidence.
What counts as evidence depends on the transaction type. For physical goods, Visa’s dispute guidelines call for proof of delivery to the address that matched AVS verification. For digital goods, the merchant needs the item description, download date and time, and at least two corroborating data points such as the purchaser’s IP address, device ID, or an email address linked to the customer’s profile.7Visa. Dispute Management Guidelines for Visa Merchants For recurring transactions, the merchant needs a copy of the agreement authorizing the charges plus evidence the cardholder was actively using the service. All evidence must be legible and in English. Merchants who don’t collect and retain this documentation systematically will lose nearly every dispute.
Both Visa and Mastercard run monitoring programs that track chargeback and fraud ratios. Breaching thresholds triggers escalating monthly fines that the acquirer passes to the merchant. Visa’s Acquirer Monitoring Program (VAMP) flags merchants on a combined disputes-plus-fraud ratio, with the non-compliant threshold starting at a 0.5% ratio and at least 5 disputes, and an excessive threshold that triggers direct fines. Effective April 2026, the excessive threshold drops, and more merchants could be flagged if they don’t reduce dispute rates. Mastercard’s Excessive Chargeback Program works on a two-tier system: a merchant with 100 to 299 chargebacks at a 1.5% to 2.99% rate enters the first tier with fines starting at $1,000 per month, and a merchant exceeding 300 chargebacks at a 3% rate enters a higher tier where fines can reach $200,000 per month after 19 months.
The most severe consequence of excessive chargebacks, fraud, or other violations is being placed on Mastercard’s Member Alert to Control High-Risk Merchants (MATCH) list. An acquiring bank must add a terminated merchant to the MATCH database within five calendar days if the termination stems from a qualifying reason code.8Mastercard. Security Rules and Procedures – Merchant Edition Reason codes include excessive chargebacks (chargebacks exceeding 1.5% of sales over three months and totaling at least $5,000), excessive fraud (an 8% or higher fraud-to-sales ratio over three months), data breaches, transaction laundering, PCI non-compliance, and illegal activity.
A MATCH listing stays active for five years. During that period, virtually every acquiring bank sees it during underwriting and either declines the application or offers heavily restricted terms. There is no general mechanism for early removal based on improved performance. The only exceptions involve listings made in error, identity theft, or PCI non-compliance since remediated. In practice, a MATCH listing can shut a business out of card acceptance for years.
PCI Compliance
Every merchant that stores, processes, or transmits cardholder data must comply with the Payment Card Industry Data Security Standard, regardless of size or volume.9PCI Security Standards Council. Merchant Resources PCI DSS version 4.0 is now the enforceable standard, and it applies from a single-terminal coffee shop up to a multinational e-commerce operation.
For most small and mid-sized merchants, compliance means completing a Self-Assessment Questionnaire annually. The specific SAQ depends on how the business accepts payments. Higher-volume merchants may also need quarterly vulnerability scans by an approved scanning vendor. Failure to maintain compliance triggers monthly non-compliance fees from the acquirer, typically $20 to $100 per month for smaller merchants. Non-compliance is also one of the reason codes that can land a business on the MATCH list if the acquirer terminates the relationship. A data breach at a non-compliant merchant exposes the business to card network fines that can escalate to tens of thousands of dollars per month, plus liability for fraudulent transactions traced back to the breach.
Contract Terms to Read Before Signing
Merchant processing agreements typically run one to three years with automatic renewal clauses. The provisions that matter most before signing are the fee schedule, reserve terms, and early termination language.
Early termination fees generally fall into three categories:
- Flat fees: A fixed amount, commonly $100 to $500, charged regardless of when during the contract you cancel.
- Prorated fees: A fee that starts at a set amount and decreases over the life of the contract.
- Liquidated damages: The most expensive type. The processor calculates the average monthly fees you’ve been paying and multiplies that by the number of months remaining on the contract. On a three-year agreement canceled after six months, this can easily run into thousands of dollars.
Some contracts stack a flat termination fee on top of liquidated damages. Equipment leases create a separate trap: leasing a payment terminal at $35 to $180 per month over a multi-year term can cost far more than buying the same hardware outright for $200 to $900, and terminal leases often carry their own non-cancellable terms independent of the processing agreement. Canceling the merchant account doesn’t necessarily end the lease payments.
Pay particular attention to automatic renewal windows. Many contracts require written cancellation notice 30 to 90 days before the renewal date, and missing that window locks the business into another full term. That’s where most merchants get burned, not on the headline rate, but on the exit provisions they didn’t read.