What Is Payment Processing? A Complete Guide for Businesses
June 15, 2026
Payment processing is what happens between a customer tapping their card and a merchant seeing funds in their account. Every business that accepts electronic payments – whether at a register, through an online checkout, or via recurring billing – relies on payment processing, whether they've thought much about it or not.
Understanding what payment processing is and how it works is essential for selecting the right processor for your business. The platform you choose determines how much you’re paying in fees, how secure your payments are, and your capacity to scale profitably.
Payment processing is a chain of automated actions that moves money across banks, card networks, and payment systems in a matter of seconds every time someone pays by credit card, debit card, ACH transfer, or digital wallet.
Most businesses don't think much about that chain until they need to. A payment gets declined for no obvious reason. A fee appears on a statement that nobody can explain. A dispute takes longer than expected to resolve. As a business grows, understanding how payments move becomes increasingly important because it affects costs, cash flow, customer experience, and operational complexity.
This guide covers everything you need to know about payment processing: how it works, what it costs, the different types of processors, and how to evaluate your options as your business grows.
What is payment processing?
Payment processing is the end-to-end system that handles electronic payments from the moment a customer submits payment to the moment funds reach the merchant's account. It combines the technology, financial institutions, and network infrastructure required to verify a payment, approve it, and move funds from a customer to a business.
Three things happen in every payment processing sequence:
Authorization confirms that the customer's card is valid and the funds are available.
Clearing is when the transaction details are confirmed between the banks involved.
Settlement is the actual transfer of funds – typically completed within one to two business days.
Payment processing is not the same as a payment gateway or a payment processor, even though those terms often get used interchangeably. A payment gateway and a payment processor are both components of the broader payment processing system.
What are the key components of a payment processing system?
As many as six parties are involved in every card transaction. Most merchants only interact with one or two payment processing layers directly, but all six play a role in whether a payment goes through, how fast funds arrive, and what the whole thing costs.
Component | Role in payment processing | Who provides it |
|---|---|---|
Payment gateway | Captures, encrypts, and tokenizes card data at checkout or at the terminal before passing it to the processor | Third-party gateway providers, or bundled into the processor's service |
Payment processor | Routes payment data to the card network, coordinates authorization, and manages clearing and settlement | Payment processors (Finix, Stripe, Square, Adyen) |
Merchant account | A holding account where authorized funds land before transfer to the business's bank account | The acquiring bank, via the payment processor |
Card network | Sets interchange fees, enforces compliance standards, and routes authorization requests between the processor and the issuing bank | Visa, Mastercard, American Express, Discover |
Issuing bank | Approves or declines authorization requests based on available funds and fraud signals; receives the interchange fee on every approved transaction | The bank that issued the customer's card |
Acquiring bank | Holds the merchant account, receives settled funds from the card network, and manages risk at the merchant level | Banks and financial institutions that partner with payment processors |
1. The payment gateway
The payment gateway is the entry point for card data. When a customer enters their card details at an online checkout or taps their card at a terminal, the gateway captures that information, encrypts it, and replaces the actual card number with a token.
That tokenized, encrypted data is then passed to the payment processor. The gateway handles the customer-facing layer of the transaction, meaning it never holds funds and doesn't move money.
2. The payment processor
The payment processor is the routing engine. It receives the encrypted data from the gateway and sends it to the correct card network – Visa, Mastercard, Amex, or Discover – to request authorization. It also manages the back half of the transaction: coordinating clearing and settlement so that approved funds actually move from the customer's bank to the merchant's account.
3. The merchant account
The merchant account is a holding account typically maintained at the acquiring bank where authorized funds land before being transferred to the business's regular bank account. It's a necessary part of accepting card payments, but not all merchant accounts work the same way.
With some providers, merchants operate within a shared processing environment. Others provide dedicated merchant accounts that are individually underwritten for each business. The differences between these models can affect pricing transparency, account management, and operational support as a business grows.
4. The card network
Visa, Mastercard, American Express, and Discover are the main card networks. They set the rules, establish interchange fees, enforce compliance standards, and route authorization requests between the processor and the issuing bank.
Card networks are not payment processors – they don't have a direct relationship with most merchants. They're the rails that processors run on.
5. The issuing bank
The issuing bank is the customer's bank – the institution that issued the card being used to pay. When an authorization request arrives, the issuing bank checks whether the funds are available, verifies that the card isn't flagged for fraud, and sends back an approval or a decline. It's also the party that receives the interchange fee on every approved transaction.
6. The acquiring bank
The acquiring bank, sometimes just called the acquirer, is the merchant's bank. It holds the merchant account, receives settled funds from the card network after each transaction, and is responsible for risk management at the merchant level. The acquirer charges the merchant a service fee for this role. In many modern processing setups, the payment processor and the acquirer are the same entity or are tightly integrated.
How does payment processing work? A step-by-step breakdown
Regardless of where a payment takes place, every card transaction follows the same sequence.The whole thing, from the moment a customer submits payment to the approval message appearing on screen, takes under two seconds.
Here's what happens inside that window.
Step 1: Initiation
The customer submits payment. Online, that means entering card details at checkout – the payment gateway captures the data, encrypts it, and tokenizes the primary account number so the raw card number never touches the merchant's server.
In-store, the customer taps, swipes, or inserts their card at a POS terminal, which handles the same encryption and tokenization at the hardware level. Either way, the result is the same: a packet of secured payment data sent to the payment processor.
Step 2: Authorization
The processor routes that data to the appropriate card network, which forwards the request to the customer's issuing bank. The issuing bank checks available funds, looks for fraud signals, and sends back an approval or decline code.
That response travels back through the card network to the processor, and from there to the merchant's checkout or terminal. The whole exchange takes less than two seconds – most customers never notice it happening, but merchants notice when it doesn't.
Step 3: Clearing and settlement
Authorization confirms the payment, but it doesn't move money. That happens in two subsequent steps. Clearing is when the card network reconciles the transaction details between the issuing bank and the acquiring bank, confirming amounts and confirming the authorization was valid.
Settlement is the actual fund transfer: the issuing bank sends the approved amount to the acquiring bank, minus the interchange fee it retains. The acquiring bank then deposits the remaining funds into the merchant account, minus processing fees. Settlement typically takes one to two business days.
What are the main payment processing fees?
Payment processing fees are charged on every transaction, but they don't all go to the same place and they're not all negotiable. Understanding the three components helps you evaluate what you’re actually paying and whether their current pricing model is working in their favor.
Interchange fees
Interchange is the largest component of processing costs, typically accounting for 70–90% of the total fee on any given transaction. It's set by the card networks and paid to the customer's issuing bank as compensation for credit risk, fraud liability, and the float period between authorization and settlement.
Interchange rates vary depending on the type of card used (a basic debit card carries much lower interchange than a premium travel rewards card), whether the transaction is card-present or card-not-present, and the merchant's industry category. A restaurant and a software company processing the same transaction amount will often pay different interchange rates.
Visa and Mastercard publish their interchange schedules publicly and update them twice a year, in April and October.
Assessment fees
Assessment fees are charged by the card networks themselves for their role in routing and settling transactions. They're small, typically 0.13–0.15% of transaction volume, and unlike interchange fees, they don't vary by card type. Every transaction on a given network pays the same assessment fee regardless of whether the customer used a basic card or a premium one. No processor can change what the card networks charge.
Processor markup
The markup is what the payment processor charges on top of interchange and assessment fees. It's the only component of processing costs that merchants can actually negotiate, and it's where pricing model choice makes a significant difference.
Flat-rate pricing – the model used by Stripe, Square, and PayPal – bundles interchange, assessment, and markup into a single blended rate. It's simple and predictable, but it obscures the actual interchange cost. As volume grows, the blended rate increasingly works against the merchant: businesses with a favorable card mix and high card-present volume end up subsidizing the network's more expensive transactions without knowing it.
Interchange-plus pricing – the model Finix uses – shows two line items on every transaction: the exact interchange cost and the processor's fixed markup, separately. Nothing is blended or hidden. As payment volume grows, many businesses find that interchange-plus pricing provides greater visibility into costs and can become more cost-effective than flat-rate pricing, depending on their transaction mix.
Other fees to watch
Beyond the per-transaction components, most processors charge additional fees. Common ones include a monthly platform or account fee, chargeback fees, ACH transfer payout fees, and PCI non-compliance fees if annual compliance requirements aren't met.
Some processors also apply surcharges for specific card types – Amex and premium rewards cards in particular. Always ask for a full fee schedule up front. The per-transaction rate is rarely the whole story.
What are the different types of payment processors?
Not all payment processors work the same way, and the differences go beyond pricing. The type of processor a business works with affects account stability, underwriting, support, and what happens when something goes wrong.
PSP aggregators
Payment Service Provider (PSP) aggregators pool thousands of merchants into a single shared master account. The main appeal is speed: because there's no individual underwriting, businesses can start accepting payments almost immediately. Pricing is simple and flat-rate. The integration ecosystems are broad and well-documented.
Flat-rate pricing bundles interchange costs in a way that becomes more expensive as volume grows. A shared account also means a merchant's stability is tied to the risk profile of the entire pool. However, the simplicity of the model comes with trade-offs. Pricing is typically bundled into a flat rate, which can make it difficult to understand the true cost of processing. Because merchants operate within a shared processing environment, businesses with more complex payment operations may find they need greater visibility, flexibility, or account-level support as they grow.
Certified direct processors
A certified direct processor holds direct connections to the card networks and provides each merchant with a dedicated, individually underwritten account. Finix is a certified direct processor with connections to Visa, Mastercard, Amex, and Discover.
The underwriting process takes a little longer to set up than a PSP aggregator's near-instant onboarding. But what merchants get in return is an account that belongs to them, a risk profile assessed on their own business, and pricing that reflects their actual transaction mix.
Interchange-plus pricing means every transaction shows the exact card network cost and the processor's markup as separate line items. Fraud monitoring is included at no extra cost. Merchants have a named account manager and full card data portability if they ever want to switch processors.
Feature | PSP Aggregator | Certified direct processor |
|---|---|---|
Account type | Shared master account | Dedicated merchant account |
Underwriting | None | Individual underwriting |
Pricing model | Flat-rate blended | Interchange-plus |
Fee transparency | Low | High |
Account-hold risk | Higher | Lower |
Risk management tools | Varies | Included at no extra cost |
Support experience | Ticket-based or self-serve for most merchants | Dedicated account manager; 5-hour average resolution |
Data portability | Varies by provider | Full portability, no long-term contracts |
Best for | Early-stage or low-volume merchants | Businesses processing $5,000+/month |
Typical pricing approach | No monthly fee | $250/month platform fee |
Acquirers and bank-direct processing
Large acquiring banks like Chase, Bank of America, and Elavon also offer payment processing, typically as part of a broader banking relationship. This model is generally reserved for very large enterprises with specialized pricing arrangements and dedicated internal payments resources.
For most SMB and mid-market businesses, payment processor selection typically comes down to choosing between a PSP aggregator and a direct processing model. Bank-direct arrangements remain common among large enterprises with dedicated payments teams, complex requirements, and negotiated banking relationships.
How do you choose the right payment processor?
Choosing a payment processor is one of those decisions that feels administrative until it isn't. The provider a business signs affects day-to-day operations, cost structure, customer experience, and how much work the finance and ops teams carry every month.
1. Pricing model: Flat-rate vs. interchange-plus
The pricing model determines not just what you pay, but how clearly you can see what you're paying. Flat-rate pricing is predictable and easy to read on a statement, but it blends interchange costs in a way that obscures the actual cost per transaction.
At low volumes, that simplicity is worth something. Above $5,000 per month, interchange-plus is almost always cheaper, and the transparency makes it straightforward to audit your costs, identify high-cost card types, and have an informed conversation with your processor if something looks off.
2. Account stability: Dedicated vs. pooled
PSP aggregators pool merchants into a shared master account. Automated risk systems monitor that pool, and accounts can be frozen or terminated without warning based on activity that has nothing to do with the affected merchant.
A certified direct processor provides a dedicated merchant account with individual underwriting. The risk assessment is based on your business, not someone else's. For businesses with variable transaction patterns, high average order values, or recurring billing, it's worth asking any prospective processor directly: Will my account be individually underwritten?
3. Fraud monitoring: Included vs. add-on
Some processors include fraud monitoring in their base pricing. Others charge for it separately. Stripe Radar, for example, is a separately billed add-on. At large transaction volumes, that difference adds up. Before signing with any processor, ask for a complete breakdown of what security tools are included in the base rate versus what cost extra.
4. Omnichannel: One platform or several
Businesses that accept payments across more than one channel – online, in-person, recurring billing – often end up managing multiple processor relationships as they grow, one for ecommerce, another for their POS, maybe a third for subscriptions. That creates reconciliation complexity, higher total cost, and more potential points of failure.
A processor that handles all channels from a single integration and a single dashboard simplifies operations significantly. Finix is one of the only processors worldwide offering true unified omnichannel processing. Verify that any processor you're evaluating can actually handle every channel you need before committing.
5. Support and data portability
Two questions that don't get asked often enough: can you reach a real person when a payment fails, and can you take your card data with you if you leave?
On support, the difference between a dedicated account manager and a ticketing system becomes very clear the first time something goes wrong with a high-value transaction. On data portability, tokenized card data belongs to your business – a processor that won't return it is effectively holding your customer relationships hostage.
Finix offers dedicated account support with an average ticket resolution time of five hours, a 4.7/5 rating on Capterra, and full card data portability with no long-term contracts. Both are worth verifying with any provider before signing.
6. Ability to support future growth
The payment processor that works well for a business today may not be the best fit two years from now. Consider whether the provider can support new payment channels, higher transaction volume, recurring billing, embedded payments, or more advanced reporting requirements as your business evolves. Changing processors later can be disruptive, so it's worth evaluating long-term fit from the beginning.
Is payment processing secure?
Card payments move sensitive financial data across multiple systems and institutions in under two seconds. The security standards and technical controls built into that process exist specifically to protect that data at every step – at capture, in transit, and at rest.
PCI DSS compliance
The Payment Card Industry Data Security Standard (PCI DSS) is a set of security requirements that apply to any business that handles card data. Compliance isn't optional: card networks require it, and processors enforce it.
A processor that uses hosted payment forms and tokenization significantly reduces a merchant's compliance burden. When card data never touches the merchant's own servers because the gateway captures and tokenizes it before it gets there, the merchant typically qualifies for the simplest PCI self-assessment tier rather than a full audit. Choosing the right processor is, among other things, a PCI compliance decision.
Tokenization and encryption
Tokenization replaces a customer's card number with a valueless token at the moment of capture. The raw card number – the primary account number (PAN) – never reaches the merchant's server. Encryption protects the data in transit between systems.
Together, these two controls are the foundation of secure payment processing, and both operate at the platform level. With Finix, tokenization and encryption are handled by the processor, not passed down as a merchant responsibility.
Fraud monitoring
Real-time fraud detection sits alongside tokenization and encryption as a core security layer. Modern fraud tools analyze transaction patterns, device signals, velocity, and behavioral data to flag suspicious activity before funds move.
According to industry research, 79% of organizations were targeted by payment fraud in 2024. The question for merchants isn't whether fraud monitoring is important – it's whether their processor treats it as a core service or an upsell.
How does Finix handle payment processing?
Finix is a certified direct processor – the option the market has historically described as a merchant account: individually underwritten, directly connected to the card networks, with pricing that reflects the actual cost of each transaction rather than a blended rate that obscures it. It combines the economics of a direct processor with the speed and usability that growing businesses actually need.
Transparent interchange plus pricing
Every Finix transaction shows two line items: the exact card network interchange cost and Finix's markup, separately. Merchants processing above $5,000 per month consistently pay less than they would on a flat-rate alternative, and they can see exactly why on every statement. ACH payouts are $0.25 per payout rather than a percentage of the transfer amount. There are no long-term contracts.
Unified online, in-person, and recurring payments
One Finix integration handles card-present transactions through terminals, card-not-present transactions through online checkout and payment links, and recurring payments through subscription billing and ACH. Everything runs through a single dashboard with unified reporting across channels – no reconciliation across multiple processors, no separate statements to cross-reference.
For teams without a developer, Finix offers payment links, a virtual terminal, and plugins for Shopify, WooCommerce, and WordPress. For teams with one, the full API requires as few as three endpoints to go live.
Embedded payments for SaaS platforms
SaaS platforms and vertical software companies use Finix to embed payment processing directly into their product – allowing them to onboard their own merchants, handle the compliance and underwriting complexity, and earn a share of transaction revenue without becoming a fully registered Payment Facilitator.
Finix currently operates in the US and Canada. There's a $250 per month platform fee. For businesses processing under $5,000 per month, the economics of a direct processor may not outweigh the simplicity of a PSP aggregator – a point worth factoring into the decision. Speak to the Finix team today for an honest assessment of whether our platform is right for you.