A payment processor moves transaction data between your business, your customer’s card-issuing bank, and your own bank every time someone pays with a card or digital wallet, then coordinates the actual transfer of money into your account. So when people ask what a payment processor does, the short version is this: it authorizes the sale in a few seconds, batches approved transactions at the end of the day, and settles funds to you within one to three business days, taking its fees out along the way.
The Job in Plain Terms
At its core, a payment processor is a data courier. When a customer taps, swipes, or types in card details, the processor picks up that transaction data from the point-of-sale terminal or checkout page and routes it to the right financial institutions for approval, then carries the response back, all within a few seconds. Without this intermediary, every business would need to build and maintain direct connections to dozens of banking networks, which is neither practical nor affordable for most merchants.
The processor also handles the work that happens after the sale. It collects approved transactions into batches, transmits those batches for clearing, and coordinates the actual movement of money into your bank account. It doesn’t hold your money or make lending decisions, but nothing moves without it.
Who’s Involved in Each Transaction
Five parties are involved every time a customer pays with a card, though only two of them are visible at the counter. You, the merchant, initiate the request. Your customer provides the card. Behind the scenes, three institutions do the heavy lifting.
Your acquiring bank, sometimes called the merchant bank, is where your sales revenue lands. It maintains the account that receives settled funds and acts as your representative within the card network. On the customer’s side, the issuing bank is the institution that gave them their credit or debit card. When a purchase request comes through, the issuing bank checks whether the customer has enough credit or funds available and decides whether to approve it.
Overseeing everything are the card networks, such as Visa and Mastercard. These organizations don’t issue cards or hold anyone’s money. They set the rules, technical standards, and fee schedules that every other participant follows. When a transaction routes from acquiring bank to issuing bank, it travels over the card network’s infrastructure.
From Swipe to Deposit
Authorization
The moment a customer presents their card, the processor transmits the transaction details through the card network to the issuing bank. The issuing bank runs automated checks for fraud indicators, verifies the card is active, and confirms sufficient funds or credit are available. It then sends back an approval or denial code, which travels the same path in reverse. This round trip usually takes two to five seconds. An approval code is not a guarantee of payment. It’s a hold on the funds, and it can still be reversed later through chargebacks or fraud claims.
Clearing and Settlement
After the business day ends, approved transactions are grouped into a batch and sent to the processor. The processor forwards these records through the card network, which coordinates the transfer of funds from the issuing bank to the acquiring bank. Applicable fees are deducted during this step. The remaining amount is deposited into your account, typically within one to three business days. Some processors offer next-day or same-day funding for an additional charge, commonly 0.5% to 2% per transaction depending on the speed.
What You Pay
Processing fees come in three layers, and knowing which layer you’re looking at is the difference between negotiating effectively and overpaying without realizing it.
Interchange and Assessment Fees
The largest piece is the interchange fee, set by the card networks and paid to the issuing bank. It compensates the issuing bank for credit risk and fraud costs. Interchange rates vary by card type, transaction method, and merchant category. Credit card interchange generally runs higher than debit. For debit cards specifically, federal rules cap interchange at large banks (those with at least $10 billion in assets) at roughly 21 cents plus 0.05% of the transaction value, with an additional 1 cent for fraud prevention.1Federal Register. Debit Card Interchange Fees and Routing Average debit interchange across all networks worked out to about 0.73% of transaction value in 2024.2Federal Reserve. Regulation II – Average Debit Card Interchange Fee by Payment Card Network
On top of interchange, the card networks charge a small assessment fee for using their brand and infrastructure. These are usually a fraction of a percent and aren’t negotiable.
Processor Markup
The processor adds its own margin on top of interchange and assessment fees. This is the only part of your processing cost that’s actually negotiable, and the structure matters. Under interchange-plus pricing, also called cost-plus, you see the actual interchange rate on each transaction with a transparent, fixed markup added by the processor. Your statement shows exactly what went to the issuing bank and what went to the processor. Under tiered pricing, the processor bundles transactions into categories it defines, typically labeled qualified, mid-qualified, and non-qualified, each with a different rate. You rarely know which transactions fall into which tier or why, which makes it hard to tell whether you’re getting a fair deal. Interchange-plus is generally the better arrangement for cost transparency.
Incidental Fees
Beyond per-transaction costs, watch for chargeback fees (commonly $15 to $50 per dispute), monthly statement fees, PCI compliance fees, and batch processing fees. These vary widely between processors and are often where the real cost differences hide. All fees are deducted from your gross sales before the net amount reaches your bank account, so your deposit will always be less than your total sales.
Security Obligations Your Processor Enforces
Every processor that handles card data must comply with the Payment Card Industry Data Security Standard, known as PCI DSS. It’s a set of technical requirements maintained by the major card networks, covering firewall configuration, encryption protocols, and access controls. Your obligations scale with your transaction volume. A business processing millions of transactions annually faces on-site audits by qualified security assessors, while smaller merchants can complete a self-assessment questionnaire.
Two specific technologies are worth understanding. Encryption scrambles card data during transmission so it can’t be read if intercepted. Tokenization goes a step further and replaces the actual card number with a random string of characters (a “token”) that’s useless outside the specific transaction context. Even if someone intercepts tokenized data, there’s nothing they can do with it. If your processor doesn’t offer tokenization, that’s a red flag.
Non-compliance with PCI DSS can result in fines imposed by the card networks through your acquiring bank, commonly ranging from $5,000 to $100,000 per month depending on the severity and duration of the violation. Beyond fines, a data breach tied to non-compliance can mean liability for fraudulent charges, mandatory forensic investigations at your expense, and loss of the ability to accept card payments entirely.
What Your Processor Reports to the IRS
Your payment processor is required to report your sales to the IRS. If you accept direct credit or debit card payments, your processor files Form 1099-K for your total card sales regardless of the amount.3Internal Revenue Service. Understanding Your Form 1099-K There’s no minimum threshold. Even $500 in annual card sales gets reported.
The rules differ for third-party settlement organizations such as PayPal, Venmo, or marketplace platforms. For 2026, these services are required to report payments only when a merchant exceeds $20,000 in gross payments across more than 200 transactions in a calendar year.4Internal Revenue Service. 2026 Publication 1099 That threshold has been a moving target in recent years, so check the IRS website before filing season.
If you fail to provide your processor with a valid Taxpayer Identification Number, federal law requires the processor to begin backup withholding at 24% of your gross sales and send that money directly to the IRS.5Internal Revenue Service. Backup Withholding That rate is confirmed for 2026.6Internal Revenue Service. Publication 15 (2026), Circular E, Employer’s Tax Guide Getting your TIN on file with your processor before you start accepting payments avoids this entirely, and it’s one of those things that’s trivial to handle up front but painful to unwind after the fact.
When a Processor Treats Your Business Differently
Not every business gets the same treatment. Industries with high chargeback rates, regulatory complexity, or reputational risk are classified as “high-risk” and face steeper fees, stricter contract terms, and additional monitoring. Common high-risk categories include travel, subscription services, online gambling, firearms, CBD products, adult entertainment, debt collection, and e-cigarette sales. A short operating history, poor personal credit, or heavy international sales can also trigger the classification regardless of your industry.
The most serious consequence a merchant can face is placement on the MATCH list (Mastercard Alert to Control High-Risk Merchants), a shared database that acquiring banks and processors check when evaluating new applications. If your processing agreement is terminated for cause, whether for excessive chargebacks, fraud, or violating card network rules, your acquiring bank may add you to MATCH. Once listed, finding a new processor willing to work with you becomes extremely difficult. Those that will take the risk typically require longer contracts, higher fees, and a reserve account.
A rolling reserve is money your processor holds back from each settlement as a buffer against future chargebacks or losses. Reserves typically range from 5% to 15% of daily sales, held for six months to a year before being released back to you. If you’re in a high-risk category, expect a reserve requirement as a standard part of your processing agreement. Early termination fees are also common, and they can be substantial. Some processors charge liquidated damages based on projected revenue for the remaining contract term. Read the termination clause before you sign, because unwinding a bad processing relationship can be expensive.
A Note on Consumer Protections and Chargebacks
Federal consumer protections don’t apply directly to you as the merchant, but they shape the disputes you’ll deal with. The Electronic Fund Transfer Act limits a consumer’s liability for unauthorized debit card charges,7Office of the Law Revision Counsel. 15 USC 1693 – Congressional Findings and Declaration of Purpose8Office of the Law Revision Counsel. 15 USC 1693g – Consumer Liability and the Fair Credit Billing Act does the same for credit cards, capping consumer liability for unauthorized charges at $50 and giving cardholders the right to dispute billing errors. Most card networks go further with zero-liability policies. The practical result for you is that settled transactions can be reversed weeks or even months later through chargebacks, and the merchant or issuing bank typically absorbs the loss. Building that possibility into your cash flow assumptions matters more than tracking the exact consumer liability tiers.