How a payment processing company sits between you and the merchant
When you swipe a card or tap your phone at checkout, your bank does not talk directly to the store's bank. A payment processing company is the middleman that moves the transaction through a network of banks, card networks, and security checks — and takes a small cut for doing it. The processor receives your payment details, validates them, requests the funds from your bank, and sends confirmation back to the merchant in seconds.
The processor is not the same as your bank, the merchant's bank, or the card network (Visa, Mastercard, American Express). It is a separate company licensed to handle the technical and financial plumbing. Without it, every store would need direct connections to every bank in the country. Instead, the processor handles thousands of connections and speaks the language of all of them.
Understanding what the processor does — and what it does not do — explains why transactions sometimes fail, why fraud protection works the way it does, and why your receipt shows multiple company names.
Key Takeaways
- A payment processor is a licensed company that routes your transaction from the merchant's terminal through the card network to your bank and back, handling the technical connection between all parties.
- The processor checks that your card is valid and that funds are available, but your bank makes the final decision to approve or decline the charge.
- The processor charges the merchant a fee (usually a percentage of the sale plus a flat amount per transaction), not you directly.
- Common processors include Square, Stripe, PayPal, and Worldpay, though your bank may use a different processor behind the scenes for online transactions.
- If a transaction fails, the processor logs why — insufficient funds, incorrect PIN, card expired — and that information goes back to the merchant and your bank.
The three main jobs a processor handles in real time
The first job is authorization. When you insert your card or enter your card number, the processor sends your card details, the transaction amount, and the merchant's information to your bank. Your bank checks whether the card is real, whether it is expired, whether it is locked or reported stolen, and whether you have enough available funds. Your bank sends back a yes or no. This happens in about two seconds.
The second job is settlement. After authorization, the processor batches all the day's approved transactions and sends them to the card network (Visa, Mastercard, etc.), which then sends them to your bank for actual payment. Your bank pulls the money from your account and sends it to the merchant's bank. This usually happens overnight or the next business day, which is why you see a "pending" status on your statement before the charge becomes final.
The third job is reconciliation. The processor keeps records of what was authorized, what actually settled, and what failed or was refunded. It sends the merchant a report showing all transactions for the day, and it sends your bank a report of all charges that hit your account. If a transaction was authorized but never settled, or if a refund was issued, the processor tracks that and makes sure both sides of the ledger match.
Why the processor is different from your bank and the card network
Your bank holds your money and decides whether to approve a charge based on your account balance and fraud rules. The card network (Visa or Mastercard) sets the rules for how cards work, manages the brand, and handles disputes. The processor does none of those things — it is the traffic cop, not the bank or the brand.
A processor is licensed by the card networks and regulated by banking authorities, but it does not hold customer deposits and does not make lending decisions. It is a service company that charges merchants a fee to handle the technical work. Some processors are owned by banks (Chase owns Chase Paymentech), some are owned by payment networks (American Express owns American Express Merchant Services), and some are independent companies (Square and Stripe are independent).
This separation matters when something goes wrong. If your bank declines a charge, the processor cannot override it — the processor only passes the message back to the merchant. If the card network has a rule about refunds, the processor enforces it but did not write it. If you dispute a charge, your bank investigates; the processor provides the transaction record.
What happens to your transaction data at each step
When you hand over your card, the merchant's terminal (or website) captures your card number, expiration date, and CVV. The terminal does not store this data — it sends it when ready to the processor over an encrypted connection. The processor never stores your full card number either. Instead, it tokenizes it: it creates a unique code that represents your card for that transaction only.
The processor sends the tokenized data to the card network, which sends it to your bank. Your bank sees enough information to identify your account and verify the charge, but the full card number is not sitting on multiple servers. After the transaction settles, the merchant receives a confirmation but not your card number — only a reference number and the last four digits.
This is why data breaches at stores do not always expose your card number to criminals. The processor and the card network are designed so that the merchant never has access to your full card details in the first place. If a processor is breached, the attacker gets tokenized data, not usable card numbers.
How the processor charges merchants and why you do not see the fee
The processor charges the merchant a fee for each transaction. This fee usually has two parts: a percentage of the sale (often 1.5% to 3%, depending on the card type and the merchant's agreement) and a flat amount per transaction (often $0.20 to $0.30). For a $100 credit card sale, the merchant might pay $2.50 to $3.50 to the processor.
You do not see this fee on your receipt because it is a cost between the merchant and the processor, not a charge to you. Some merchants build the cost into their prices; others offer a discount for paying with cash or debit instead of credit. The processor's fee is separate from the interchange fee (which goes to your bank) and the card network's fee (which goes to Visa or Mastercard).
Different processors charge different rates, and merchants can negotiate. A large retailer might pay 1.5% per transaction, while a small online store might pay 2.9% plus $0.30. The processor's rate depends on the merchant's sales volume, the types of cards accepted, and the industry (restaurants and gas stations pay more because they have higher fraud rates).
What the processor does if a transaction fails or is disputed
If your card is declined, the processor logs the reason — insufficient funds, card expired, incorrect PIN, card reported stolen, or a fraud hold from your bank. The processor sends this reason back to the merchant's terminal in real time, so the merchant knows whether to ask you for a different card or to call your bank.
If you dispute a charge later (telling your bank it was unauthorized or that you never received the item), your bank contacts the processor and asks for proof that the transaction happened. The processor provides the authorization record, the settlement record, and any signature or address verification data that was collected. Your bank and the merchant then work through the dispute process. The processor does not decide who wins — it provides the evidence.
If a transaction is refunded, the processor reverses the settlement. The merchant's bank sends the money back to your bank, and your bank credits your account. This usually takes one to three business days after the merchant issues the refund.
Common payment processors and where you encounter them
If you shop online, you may see the processor's name at checkout. Stripe and Square are popular with small businesses and online stores. PayPal is both a processor and a wallet. Worldpay, Fiserv, and First Data (now Fiserv) process transactions for larger retailers. American Express Merchant Services processes American Express cards. Chase Paymentech processes transactions for many banks' merchant customers.
You may not see the processor's name at all. When you use your debit card at an ATM or swipe at a gas pump, your bank may use a processor behind the scenes that you never interact with directly. The processor is invisible to you — you see only your bank's name and the merchant's name.
If you are a merchant or a business owner, you choose your processor (or your bank chooses one for you). If you are a customer, the processor is already decided by the time you reach checkout. Your only choice is which card to use, and that choice determines which card network and which bank gets involved — but the processor is the same for all cards at that merchant.
Frequently Asked Questions
Can a payment processor see my full card number?
No. The processor tokenizes your card number when ready, converting it into a unique code for that transaction. The processor never stores or transmits your full card number. Your bank sees enough information to verify the charge, but the card number itself stays encrypted and is not accessible to the processor, the merchant, or the card network.
Why does my transaction show as pending for days after I made the purchase?
Authorization and settlement are two separate steps. The processor authorizes the charge in seconds, but settlement — when the actual money moves from your bank to the merchant's bank — usually happens overnight or the next business day. During this time, the charge shows as pending on your statement. Once settlement completes, it becomes final.
If my card is declined, can the processor override my bank's decision?
No. The processor only passes information between you, the merchant, and your bank. Your bank makes the final decision to approve or decline based on your account balance, fraud rules, and card status. The processor cannot force your bank to approve a charge your bank has declined.
Do I pay the processor's fee when I use my card?
Not directly. The processor charges the merchant a fee (usually a percentage of the sale plus a small flat amount). The merchant may pass this cost along in higher prices, or may offer discounts for cash or debit to offset it. You do not see a separate line item for the processor's fee on your receipt.
What happens to my transaction data if the processor is hacked?
The processor stores tokenized data, not your full card number, so a breach exposes the token rather than usable card details. However, the token could potentially be used to identify your transaction history. This is why processors are required to meet strict security standards (PCI compliance) and to report breaches to banks and customers. Your bank's fraud protection covers unauthorized charges even if a processor is compromised.