A payment processor is the company that moves money between your customer’s bank and yours every time someone pays with a credit card, debit card, or digital wallet. It handles authorization, security checks, and settlement, and it typically deposits funds into your merchant account within one to three business days. Choosing one is less about the logo on the terminal and more about the fee model, the contract length, the reserve terms, and the tax reporting attached to the account.
What a Payment Processor Actually Does
The work starts the instant a customer taps, swipes, or enters card details online. The processor encrypts the card data and routes it through the card network (Visa, Mastercard, American Express, or Discover) to the bank that issued the card. That issuing bank checks whether the account has funds or credit available and sends back an approval or decline. The round trip usually takes two to five seconds.
After approval, the transaction enters settlement. Throughout the day your processor batches approved transactions and submits them to the card networks for clearing. The issuing bank transfers funds to your acquiring bank (the one that holds your merchant account), and the money lands in your account. Most processors settle within one to three business days, though some offer next-day or same-day funding for an added fee. Alongside all of this, the processor acts as a security layer, monitoring for suspicious patterns and validating cardholder identities.
Every step must comply with the Payment Card Industry Data Security Standard (PCI DSS). If your business stores, processes, or transmits cardholder information and falls out of compliance, your processor will typically charge a non-compliance fee, often $20 to $40 per month, until you complete the required validation. Each financial participant in the chain also has anti-money-laundering obligations under the Bank Secrecy Act.1Federal Deposit Insurance Corporation. Bank Secrecy Act / Anti-Money Laundering (BSA/AML)
Merchant Account or Third-Party Aggregator
The first real choice is between a dedicated merchant account and an aggregator, and the difference matters more than most business owners realize.
A dedicated merchant account gives your business its own identification number within the banking system. The acquiring bank underwrites you individually, evaluating your business risk, financials, and transaction history before approving the account. Application takes longer, but rates are more negotiable and your account isn’t affected by what other businesses on the platform are doing.
Third-party aggregators like Square, Stripe, and PayPal hold one large merchant account and process transactions for thousands of sub-merchants underneath it. You can usually start accepting payments within hours because individual underwriting is skipped. The tradeoff is control: the aggregator can freeze or hold your funds if its automated risk systems flag your account, and rates aren’t negotiable. For businesses processing under roughly $10,000 per month, aggregators are often simpler and cheaper. Above that volume, a dedicated merchant account almost always saves money.
How Processors Charge You
Every card transaction carries an interchange fee set by the card network and paid to the issuing bank. Rates vary by card type, transaction method, and merchant category: a standard in-person debit swipe costs less than a rewards credit card used online. Interchange is not negotiable. It is the baseline cost that every pricing model builds on top of.
One federal exception exists. For large banks with over $10 billion in assets, the Federal Reserve caps debit card interchange under Regulation II (the Durbin Amendment). The current cap is $0.21 plus 0.05% of the transaction value, with an additional $0.01 fraud-prevention adjustment for eligible issuers.2Federal Reserve. Average Debit Card Interchange Fee by Payment Card Network Credit card interchange has no federal cap.
Interchange-Plus Pricing
Interchange-plus adds a fixed markup on top of the actual interchange rate, quoted as something like “interchange + 0.25% + $0.10 per transaction.” It’s the most transparent model because you can see exactly what the card networks charge and what the processor earns. It tends to produce the lowest overall cost for businesses with moderate to high volume.
Flat-Rate Pricing
Flat-rate pricing charges the same percentage on every transaction regardless of card type, typically between 2.6% and 3.5% plus a small per-transaction fee. Predictable and simple, but you overpay on cheap debit transactions to subsidize higher interchange on premium rewards cards. It works best for low-volume businesses that value simplicity over savings.
Tiered Pricing
Tiered pricing sorts transactions into categories such as “qualified,” “mid-qualified,” and “non-qualified,” each with a different rate. The cheapest tier usually covers standard debit cards swiped in person; the most expensive covers manually keyed corporate cards. This is the hardest model to audit because the processor decides which transactions fall into which tier, and the criteria aren’t always transparent. Most merchants who overpay without realizing it are on a tiered plan.
Monthly and Incidental Fees
Beyond per-transaction costs, most processors charge recurring monthly fees for account maintenance, statement generation, and gateway access. Subscription-based processors charge a flat monthly fee, sometimes $99 or more, in exchange for lower per-transaction markups. Watch for PCI compliance fees, batch fees, and monthly minimums where you pay a penalty if your processing volume falls below a stated threshold.
Contract Terms and Early Termination
Many traditional processors lock merchants into multi-year contracts, often three years with automatic renewal clauses. Cancel early and you’ll owe a termination fee. These come in two forms: a flat amount (commonly $400 to $600 per location) or a liquidated damages calculation that multiplies your average monthly fees by the months remaining on the contract. The liquidated damages formula can produce bills in the thousands if you leave early in a long contract.
Read the termination clause carefully before signing. Look for automatic renewal language that extends the contract by a year unless you cancel within a narrow window, sometimes as short as 30 days before the anniversary date. Aggregator-style processors generally offer month-to-month terms with no termination fee, which is one reason many small businesses start there.
Rolling Reserves and Holds
If a processor classifies your business as higher risk, expect a rolling reserve. The processor withholds a percentage of each day’s sales, typically 5% to 15%, and holds those funds for a set period, commonly 180 days. After the holding period, funds release on a rolling basis. The reserve protects the processor against chargebacks and refunds that might exceed your account balance.
Even standard-risk merchants can face temporary holds if a sudden spike in volume triggers fraud alerts. Understand your reserve terms before signing: a 10% hold on a business processing $50,000 a month means $5,000 in cash flow tied up at any given time. Negotiate the percentage and release timeline during the application process where possible.
What You’ll Need to Open an Account
Approval requires documentation that satisfies both underwriting and federal regulatory requirements. You’ll need a valid Employer Identification Number issued by the IRS.3Internal Revenue Service. Get an Employer Identification Number Sole proprietors without employees can sometimes use a Social Security number instead, but an EIN is standard for any business expecting to process card payments. You’ll also need a business bank account in the company’s name and any applicable business licenses.
Federal anti-money-laundering rules require processors to verify who they’re dealing with. Section 326 of the USA PATRIOT Act sets minimum identity verification standards for financial institutions opening new accounts,4Financial Crimes Enforcement Network. USA PATRIOT Act and FinCEN’s Customer Due Diligence rule requires identification of anyone owning 25% or more of the business entity.5Financial Crimes Enforcement Network. CDD Final Rule In practice you’ll submit government-issued ID, your Social Security number, and sometimes personal financial statements for each principal owner.
Processors will also ask for estimated monthly processing volume, average transaction size, and the nature of your business. These details set your fee tier, transaction limits, and risk classification. Industries with elevated chargeback rates or regulatory complexity (travel, subscription services, adult content, CBD products) often face stricter terms or outright rejection from mainstream processors.
Chargebacks and Network Monitoring
A chargeback happens when a customer disputes a transaction and the issuing bank reverses the charge. You lose the sale amount, and your processor adds a chargeback fee. Fees for fighting a chargeback and losing can stack to roughly $30 per case when network-level fees at the pre-arbitration and response stages are included.
Card networks also monitor your chargeback ratio. Mastercard’s Excessive Chargeback Program flags merchants who exceed 100 chargebacks in a month with a ratio above 1.5%, and escalates to the “High Excessive” tier at 300 chargebacks with a ratio above 3%. Visa consolidated its monitoring into the Visa Acquirer Monitoring Program and, as of April 2026, classifies a U.S. merchant as excessive when the combined fraud-and-dispute ratio hits 1.5% or higher of settled transactions.6Visa. Visa Acquirer Monitoring Program Fact Sheet Cross those thresholds and you face fines, mandatory remediation plans, and potential loss of your ability to accept that network’s cards.
Form 1099-K and Backup Withholding
Payment processors are legally required to report your gross transaction volume to the IRS on Form 1099-K. For third-party settlement organizations (aggregators like PayPal, Venmo, and similar platforms), reporting is required when gross payments exceed $20,000 and you have more than 200 transactions in a calendar year.7Office of the Law Revision Counsel. 26 USC 6050W – Returns Relating to Payments Made in Settlement of Payment Card and Third Party Network Transactions This threshold was temporarily scheduled to drop to $600 under the American Rescue Plan Act of 2021, but the One, Big, Beautiful Bill retroactively restored the original $20,000 and 200-transaction standard.8Internal Revenue Service. IRS Issues FAQs on Form 1099-K Threshold Under the One Big Beautiful Bill
Payment card processors handling direct credit and debit card transactions through a merchant account must report all gross amounts regardless of threshold. Every dollar you process through a dedicated merchant account shows up on your 1099-K.
If you fail to provide a valid taxpayer identification number to your processor, federal rules require the processor to withhold 24% of your gross payments as backup withholding and remit it to the IRS on your behalf.9Internal Revenue Service. Backup Withholding Getting your EIN on file before you start processing avoids the problem entirely.
EMV Liability for In-Person Sales
Since October 2015, the major card networks have enforced an EMV liability shift for in-person transactions. If a customer’s chip-enabled card is counterfeited and used at your terminal, and your terminal is not chip-capable, you bear the liability for the resulting fraud. When both the card and the terminal support EMV chip technology, liability shifts back to the issuing bank. This is a card-network rule rather than federal law, but it functions the same way in practice: merchants without chip-capable terminals absorb counterfeit fraud losses that would otherwise fall on the bank.
Basic mobile card readers start around $40 to $85. Standalone countertop EMV terminals with chip and contactless capability run from roughly $125 to $510 depending on features. Some processors provide “free” terminals in exchange for higher transaction rates or long-term contracts, so calculate total cost of ownership over the life of the agreement before accepting the offer.