Payment processing is the backbone of modern commerce. Every time a customer swipes a card, taps their phone, or enters payment details online, a complex system works behind the scenes to move money from their account to a business. Payment processing companies, also referred to as payment service providers (PSPs), facilitate these transfers electronically through a secure and fast process. For businesses of any size, understanding how this system works is essential to managing costs, ensuring security, and maintaining smooth operations.
Credit and debit card transactions, including peer-to-peer (P2P) transactions, will continue to grow in place of check payments, making payment processing services more critical than ever. Modern businesses need to know not just how to accept payments, but how their processor works, what fees they're paying, and what options exist to optimize their payment strategy.
Payment processing is the act of transferring funds from a customer to a business when a customer makes a payment with a credit card, debit card, or through online payments such as a digital wallet. What seems instantaneous to a customer actually involves multiple steps and multiple institutions working in coordination.
The flow typically begins with a transaction initiation. The customer initiates a transaction when a customer presents their card to a retailer, either in person or online. From there, the payment data travels through a series of networks and institutions before settling into the merchant's account.
Understanding this journey helps businesses recognize why payment processing isn't free and why different pricing models exist. Each step involves costs—not all of which are within a business's control.
Many business owners use the terms "payment gateway" and "payment processor" interchangeably, but they serve distinct roles. A payment processor facilitates the transaction and a payment gateway is a tool that communicates the approval or decline of transactions between you and your customers.
Payment gateways are responsible for collecting and securely transmitting payment data from customers, while payment processors handle the actual processing of credit card payments behind the scenes. A payment gateway is the technology customers interact with. For online businesses, it's the checkout page; for brick-and-mortar stores, it's often the card reader or point-of-sale terminal.
Payment data is passed through the payment gateway, which transmits the cardholder's name, account number, and other card data securely. The gateway encrypts this information and sends it onward for authorization.
A payment processor executes the transaction by transmitting data between you, the merchant; the issuing bank (i.e., the bank that issued your customer's credit card); and the acquiring bank (i.e., your bank). The processor handles all the behind-the-scenes communication, fraud checks, and settlement of funds.
At the end of the business day, the merchant sends all the authorized transactions in a batch to their payment processor. The processor then forwards these batches to the card networks, which settle the transactions with the issuing banks. After settlement, the funds are transferred from the issuing bank to the merchant's bank, also known as the acquiring bank.
A payment transaction moves through several distinct phases. Knowing what happens at each stage helps businesses understand processing times, potential delays, and where issues might arise.
Authorization phase: The customer initiates a transaction when a customer presents their card to a retailer, either in person or online. Payment data is passed through the payment gateway, which transmits the cardholder's name, account number, and other card data securely. The gateway sends this encrypted data to the payment processor, which checks with the customer's bank to verify funds are available and the card is legitimate.
Settlement phase: Approved transactions are then batched for settlement at the end of the business day. Once settled, the customer's account is charged for the transaction, and the money is deposited into your bank account. Settlement typically occurs within a few business days, though some processors offer faster deposit options.
Payment processing is not free for businesses. Each time a business processes a credit card transaction, it pays three main fees: interchange, service, and processing. These make up a total payment fee. Each layer serves a different purpose and differs in negotiability.
An interchange rate refers to the amount that the credit card issuer (such as Discover, Visa, and Mastercard) charges the receiving bank every time a customer pays using a credit card. The purpose of the interchange fee is to help the issuing bank cover handling costs and the risk of approving the sale, as well as any fraudulent transactions that may occur.
These fees are set by card networks, not individual processors. The interchange fees are set by each network, and they vary depending on the issuer. The interchange rate is also affected by the type of card, the risk level of the merchant's business, as well as how the merchant accepts the payment (swipe, online, or typing into a terminal). They are typically not negotiable.
Processor markup is the fee your payment provider charges for handling authorization, settlement, reporting, fraud tooling, and support – along with their margin. Unlike interchange and network fees, processor markup is negotiable, and it's the only part of your payment cost you can actually influence.
This negotiability makes processor markup worth investigating. Businesses with higher transaction volumes or lower-risk profiles often have more leverage to negotiate better rates.
Payment processors use different pricing structures to charge merchants. The model a business chooses can significantly impact its bottom line. Here's a comparison of the main approaches:
| Pricing Model | How It Works | Best For |
|---|---|---|
| Flat Rate | One fixed percentage per transaction, sometimes with a small per-transaction fee added | Businesses with predictable volume and those that value simplicity |
| Interchange Plus | Merchant pays interchange rate set by card networks, plus a processor markup on top | Higher-volume merchants who want transparency and cost control |
| Subscription | Monthly or yearly fee for access to processing services, sometimes with per-transaction charges | Businesses that prefer predictable fixed costs |
| Tiered | Different rates for different types of transactions (qualified, mid-qualified, non-qualified) | Merchants willing to accept variable rates based on transaction type |
Interchange plus fees charge interchange fees per transaction on top of a set additional fee for processing. A typical charge would be 2% of the total transaction plus an additional fee of 0.5%. Flat-rate models, by contrast, offer simplicity but typically carry higher overall costs for high-volume businesses.
The right model depends on a business's sales volume, industry, and risk profile. The type of payment processor you choose should depend on your sales volume, where your transactions take place, and the products or services involved.
Payment processing involves handling sensitive customer financial data. Modern payment processors incorporate multiple layers of security to protect both businesses and customers.
Security is paramount in digital payments. Ask about encryption methods, fraud detection capabilities, and adherence to Payment Card Industry Data Security Standards (PCI DSS). These standards ensure that payment data is handled securely and consistently across the industry.
High-risk transactions such as e-commerce transactions and over-the-phone transactions come with higher processing fees than low-risk transactions such as physical swiping at a payment terminal. This is because certain transaction types have higher rates of fraud or chargebacks, increasing the risk processors and banks absorb.
Choosing a payment processor is an important business decision. The processor will handle customer funds, impact cash flow timing, and directly affect operating costs. Here are key factors to evaluate:
Payment processing continues to evolve. Digital payment methods are expanding beyond traditional cards. Mobile wallets, buy-now-pay-later services, and international payment options are becoming standard expectations.
An upcoming addition to payment processing compliance is the U.S. open banking rule that was proposed in October 2023 and is set to be finalized in 2024—Dodd-Frank Section 1033. The forthcoming rule will guarantee consumers' right to access and share their financial data. These regulatory changes affect how processors handle data and may create new opportunities or requirements for businesses.
Processing speeds continue to improve, with some providers offering near-instantaneous authorization and settlement. However, faster processing typically comes at a premium cost.
Effective payment processing goes beyond simply choosing a vendor. It involves thinking strategically about payment acceptance, cost management, and customer experience.
Businesses should regularly audit their payment processing expenses and compare rates across providers. Processor markup is negotiable, and it's the only part of your payment cost you can actually influence. You can reduce it by switching providers, renegotiating terms, or optimizing your payment setup. Even small reductions in processor fees compound significantly over time for high-volume businesses.
Consider the payment experience from your customer's perspective. Having a smooth payment process ensures a positive customer experience which ultimately increases loyalty and sales down the road. This might mean offering multiple payment methods, minimizing checkout steps, or enabling mobile payments.
Payment processing is a critical but often overlooked aspect of running a business. By understanding how it works, what fees you're paying, and what options are available, you can make informed decisions that protect your business, improve your cash flow, and enhance your customers' experience. The right payment processor is not necessarily the cheapest—it's the one that aligns with your business's needs, volume, risk profile, and growth plans.