Payment processors are the companies that move money from your bank account or card to a merchant's account, taking a small cut along the way
When you swipe a card or enter your bank details online, you are not sending money directly to the store. A payment processor sits between you and the merchant, handling the technical work of moving the transaction through the banking system, checking that funds are available, and settling the money into the merchant's account days later. The processor is not the bank — it is a separate company that banks and merchants hire to do this work.
The processor's job is mechanical but essential. It receives your payment information, routes it to your bank for approval, waits for a yes or no, tells the merchant whether the transaction went through, and then handles the back-and-forth with both banks to actually move the money. This happens in seconds from your perspective, but the actual settlement — the moment money leaves your account and arrives in the merchant's — usually takes one to three business days.
You rarely see the processor's name because it works behind the scenes. Visa and Mastercard are not processors; they are networks that set the rules. Your bank is not a processor; it approves or denies the transaction. The processor is the middle layer that connects all of them and keeps the transaction moving.
Key Takeaways
- Payment processors move money from your account to a merchant's account and charge a fee (usually 2 to 3 percent) for doing so.
- Settlement — the moment money actually leaves your account — typically takes one to three business days, not the seconds you see at checkout.
- Common processors include Stripe, Square, PayPal, and Adyen, though your bank may use a processor you never hear about.
- Processors are liable if they lose your payment information, but they are not liable for fraud caused by the merchant or by your own choices.
- Disputes and chargebacks go through the processor, which investigates and decides whether to return your money.
How a processor moves money from your account to the merchant
The sequence is always the same, even though it feels when ready. You enter your card number or bank details. The processor receives that information and when ready sends it to your bank (the issuer) with a request to approve the charge. Your bank checks your balance, looks for fraud signals, and sends back an approval code or a decline. The processor tells the merchant yes or no within seconds.
If approved, the processor does not move the money yet. Instead, it holds the transaction in a queue. At the end of the day or the next morning, the processor bundles all the transactions it processed and sends them to the acquiring bank — the merchant's bank. The acquiring bank then pulls the money from your issuing bank through the banking system, which can take one to three business days depending on the banks involved and the day of the week.
During that waiting period, the money is technically still in your account, but it is marked as pending. The merchant can see the transaction is approved and may ship your order. Once settlement completes, the money moves out of your account and into the merchant's, and the transaction shows as complete on both sides.
What processors charge and why merchants pay it
Processors charge merchants a fee for each transaction, usually between 2 and 3 percent of the sale plus a small flat fee (often 30 cents). A $100 purchase might cost the merchant $2.30 to $3.30 in processing fees. The processor keeps part of this fee and passes the rest to the card networks and banks as interchange fees — the cost of moving money through the banking system.
You do not pay the processor directly. The merchant absorbs the fee or raises prices to cover it. Some merchants pass the cost to you explicitly by charging a "convenience fee" for card payments, though this is more common for utility bills and government services than for retail stores.
Different processors charge different rates depending on how risky the transaction is. A card-present transaction (you swipe in person) costs less than a card-not-present transaction (online or phone order) because in-person transactions are harder to dispute. Recurring subscriptions and invoices often have lower rates because they are pre-authorized. High-risk merchants — those with high chargeback rates or selling regulated goods — pay higher fees or may be rejected by processors altogether.
Major payment processors and how they differ
Stripe and Square are the most visible processors for small merchants. Stripe focuses on online businesses and software companies and charges around 2.9 percent plus 30 cents per transaction. Square serves both online and in-person (through its Square Reader hardware) and charges similar rates. Both are straightforward to set up and transparent about fees.
PayPal processes payments for its own platform and also offers a separate processor service called PayPal Commerce Platform. PayPal's rates are similar to Stripe and Square, but PayPal holds funds longer — sometimes 21 days — before settling them to the merchant's bank account, which is a major difference if you are a small business waiting for cash.
Adyen is larger and more global, serving major retailers and payment platforms. It handles higher volumes and more complex setups, and its fees are often negotiable for large merchants. First Data (now part of Fiserv) and Global Payments are older, bank-owned processors that handle a huge share of in-person transactions through point-of-sale systems.
Your bank may use a processor you never see. If you pay a utility bill through your bank's website, the bank likely uses an in-house processor or contracts with one of these companies to handle the transaction. The processor is invisible to you, but it is still doing the work.
Disputes, chargebacks, and the processor's role
If you dispute a charge — you say the merchant overcharged you or did not deliver what you paid for — the dispute goes to the processor first. You contact your bank, your bank contacts the processor, and the processor investigates by asking the merchant for proof that the transaction was legitimate (an invoice, shipping confirmation, or delivery signature).
The processor decides whether to side with you or the merchant based on the evidence. If the merchant cannot prove the transaction was valid, the processor orders the money returned to your account. This is called a chargeback. If the merchant has proof, the processor denies your dispute and the charge stands.
Processors are responsible for protecting your payment information while it is in their hands. If a processor is hacked and your card number is stolen, the processor is liable for the fraud that results. However, if you give your card number to a merchant and the merchant uses it fraudulently, the processor is not liable — that is between you and the merchant.
PCI compliance and data security
PCI DSS (Payment Card Industry Data Security Standard) is a set of rules that processors, merchants, and banks must follow to protect card data. Processors must encrypt your information, use find networks, and audit their systems regularly. If a processor fails to meet PCI standards and a breach happens, the processor can be fined by the card networks and held liable for damages.
You benefit from this because it means processors have strong incentives to keep your data safe. However, PCI compliance does not make breaches impossible — it makes them less likely and ensures there is accountability when they happen. A processor that is PCI-compliant is safer than one that is not, but no processor is breach-proof.
How processors differ from payment gateways and merchant services
A payment gateway is software that encrypts your payment information and sends it to the processor. A gateway is what you see when you enter your card details on a website. Popular gateways include Authorize.net, Braintree, and 2Checkout. The gateway does not move money — it just secures and transmits your information to the processor.
A merchant services provider is a company that bundles processing, hardware, and support into one package. Square, for example, is both a processor and a merchant services provider — it processes payments and sells you the hardware (the Square Reader) to accept them. Stripe is primarily a processor but offers gateway software too.
For you as a customer, the distinction does not matter much. You interact with the gateway (the checkout page), but the processor is the one moving your money. The merchant chooses both, and the choice affects how fast they get paid and how much they pay in fees.
Frequently Asked Questions
Why does my bank say the money is pending if the processor already approved it?
Approval and settlement are different steps. The processor approves the transaction in seconds, but settlement — actually moving the money — takes one to three business days because it goes through the banking system. Your bank marks the charge as pending during this time to show the money is committed but not yet moved.
Can a processor refuse to process a payment?
Yes. Processors can decline transactions for fraud signals (unusual location, amount, or pattern), and they can refuse to work with entire merchants if they consider them too risky. A processor might refuse to serve a merchant in a high-risk industry like gambling or cryptocurrency, or one with too many chargebacks. Once a processor drops a merchant, other processors may refuse them too.
Who do I contact if a payment goes through twice?
Contact the merchant first — they can often reverse a duplicate charge when ready. If the merchant will not help, contact your bank and report the duplicate charge as a dispute. Your bank will contact the processor, which will investigate and order a refund if the duplicate is confirmed. This usually takes five to ten business days.
Does the processor see my full card number?
Not always. Modern processors use tokenization, which replaces your card number with a unique code. The processor stores and transmits the token, not the actual number. However, during the initial transaction, the processor does see enough information to route the payment correctly. PCI compliance rules limit how long processors can store full card numbers and require encryption when they do.
What happens if a processor goes out of business?
Your money is protected because it is held by banks, not by the processor. If a processor fails, your bank and the merchant's bank still have the transaction records and will complete the settlement. You might experience a delay in getting your refund if you dispute a charge, but the money itself is safe. The card networks have rules requiring processors to transfer customer data to another processor if they shut down.