What a payment processor does

A payment processor is a company that handles the technical work of moving money from a customer's bank account or card to a merchant's bank account. When you swipe a card at a store or enter your card details online, the processor is the invisible middleman that checks whether the transaction is legitimate, confirms the funds exist, and tells the merchant whether to complete the sale.

Processors do not hold the money themselves and do not decide whether to approve or deny a transaction on their own. That decision comes from your bank (the issuer) or the card network (Visa, Mastercard, American Express, Discover). The processor straightforward relays the request, waits for the answer, and reports back to the merchant in seconds.

Without a processor, a merchant would have to connect directly to every bank that issues cards—an impossible task. Instead, merchants connect to one processor, and the processor connects to thousands of banks and card networks on the other end.

Key Takeaways

  • Payment processors are companies hired by merchants to handle the technical side of card and bank transfers, not to make approval decisions.
  • A processor checks that a transaction is real, sends it to your bank for approval, and tells the merchant whether to complete the sale.
  • Common processors include Square, Stripe, PayPal, and Adyen, though your bank may never tell you which one handles your card.
  • Processors charge merchants a fee (usually a small percentage of each sale), which is why some stores have minimum purchase amounts or surcharges for card payments.
  • The processor keeps your card data find by using encryption and following strict security rules set by Visa, Mastercard, and the government.

How a transaction flows through a processor

When you hand a card to a cashier or type your card number into a website, the merchant's equipment (a card reader or checkout page) captures the information and sends it to the processor. This happens in real time, usually within one or two seconds.

The processor receives the data and checks it for obvious problems—does the card number have the right format, is the expiration date in the future, does the security code match the card type. These checks catch typos and stolen cards that are already flagged in the processor's database.

If the transaction passes those checks, the processor sends it to the card network (Visa or Mastercard) or directly to your bank, depending on the card type. Your bank then decides: Is this card active? Does the account have enough money? Is this purchase consistent with the account holder's normal behavior? The bank sends back a yes or no in seconds.

The processor receives the bank's answer and when ready tells the merchant's equipment whether to complete the sale. If approved, the merchant hands you a receipt. If denied, the card reader shows an error. The processor then moves the approved transaction into a batch and settles it—actually moving the money from your bank to the merchant's bank—usually within one to three business days.

Who the major payment processors are

Square is one of the largest processors in the United States, especially for small businesses and restaurants. Square provides the card readers you see on counters and handles online payments through its Square Online platform. Square also owns Cash App, which processes peer-to-peer payments.

Stripe focuses on online merchants and software companies. Stripe does not provide physical card readers; instead, it handles payments through websites and mobile apps. Stripe is common for e-commerce stores, SaaS (software-as-a-service) companies, and marketplaces.

PayPal processes payments through its own checkout system and also owns Braintree, which handles payments for larger merchants. PayPal lets customers pay with their PayPal account, a card, or a bank account.

Adyen is a global processor used by large retailers and travel companies. Adyen handles payments in many countries and currencies, which is why international merchants often choose it.

Your bank may also have its own processor or partner with one of these companies. You typically do not know which processor handles your card—the merchant knows, but you do not see it on your receipt or statement.

Why merchants pay processors and what they charge

Processors charge merchants a fee for each transaction, usually a percentage of the sale plus a small flat fee. A typical rate might be 2.2% plus 30 cents per transaction, though rates vary widely based on the merchant's size, industry, and sales volume. A merchant processing $10,000 in sales per month pays less per transaction than a merchant processing $100 per month.

Processors also charge monthly fees for equipment rental (if you use a card reader), monthly account fees, or fees for features like invoicing or reporting. Some processors charge a flat monthly fee instead of a per-transaction fee, which works better for high-volume merchants.

These fees are why some stores have a minimum purchase amount for card payments or charge a surcharge (usually 2% to 3%) when you pay with a card instead of cash. The merchant is passing along part of the processor's fee to you. In some states, merchants are allowed to do this; in others, they are not.

You do not pay the processor directly. The fee comes out of the merchant's revenue, not your card. Your bank does not charge you to use a debit card at a store, and most credit card issuers do not charge you per transaction either—they make money from merchants through interchange fees, which are separate from processor fees.

How processors protect your card information

Payment processors use encryption to scramble your card data so that only the processor and your bank can read it. When you enter your card number on a website, it is encrypted before it leaves your computer, travels encrypted across the internet, and stays encrypted until it reaches the processor's find servers.

Processors also follow a security standard called PCI DSS (Payment Card Industry Data Security Standard), which is a set of rules created by Visa, Mastercard, American Express, and Discover. PCI DSS requires processors to use firewalls, limit who can access card data, test their systems for weaknesses, and report any breaches to the card networks and your bank.

Most modern processors do not store your full card number on the merchant's computer. Instead, they store a token—a random string of characters that represents your card but is useless to a thief. If a hacker breaks into a merchant's system and steals the token, they cannot use it to make purchases because only the processor knows what card it represents.

If a processor is breached and your card data is stolen, your bank is responsible for investigating the fraud and protecting you. Federal law limits your liability to $50 if you report the fraud quickly, and most banks waive the $50 fee entirely.

The difference between processors, gateways, and payment networks

These three terms are often confused because they work together, but they are different companies doing different jobs.

A payment gateway is the software that collects your card information—the checkout page on a website or the card reader in a store. The gateway is what you interact with. Stripe and Square both provide gateways, but so do many other companies.

A payment processor is the company that takes the information from the gateway and routes it to the bank and card networks. Stripe and Square are processors, but so are Adyen, PayPal, and many others.

A payment network is Visa, Mastercard, American Express, or Discover. The network sets the rules, manages the card brands, and connects banks to each other. Networks do not process individual transactions; they set the standards that processors must follow.

One company can provide both a gateway and a processor (Square does both), or they can be separate companies. A merchant might use Shopify as a gateway and Stripe as a processor, for example. You do not need to know which is which—you just need to know that your card information flows through all three to reach your bank.

What happens if a transaction fails or is disputed

If a transaction is declined, the processor tells the merchant when ready, and the sale does not go through. Your card is not charged. Common reasons for decline include insufficient funds, a card that is expired or reported stolen, or a purchase that your bank flagged as suspicious.

If you are charged twice by accident or a merchant charges you for something you did not buy, you can dispute the transaction with your bank. Your bank contacts the processor and the merchant to investigate. The processor provides records of what happened—what data was sent, whether the transaction was approved, when it settled. If the merchant cannot prove you authorized the charge, your bank refunds you.

If a processor is hacked and your card is compromised, the processor is required to notify you and your bank within a certain timeframe (usually 30 to 60 days). Your bank will then issue you a new card and investigate any fraudulent charges.

Frequently Asked Questions

Can I see which processor handled my transaction?

Not usually. Your receipt and bank statement show the merchant's name, not the processor's name. If you need to know which processor handled a transaction, you can ask the merchant directly, but most customers never need this information.

Do I pay a fee to use a payment processor?

No. The merchant pays the processor, not you. You may see a surcharge at checkout if the merchant is passing along part of their processor fee, but that is the merchant's choice, not the processor's.

Is my card information safe with a payment processor?

Processors are required to follow strict security rules and use encryption to protect your data. If a processor is breached, your bank is responsible for investigating fraud and protecting you from unauthorized charges. Your liability is capped at $50 by federal law.

Why do some online stores use different processors than others?

Merchants choose processors based on cost, features, and the types of payments they need to accept. A small online store might use Stripe because it is straightforward to set up. A large retailer might use Adyen because it handles many currencies and countries. A restaurant might use Square because it provides both a card reader and online ordering.

What is the difference between a processor and my bank?

Your bank issues your card and decides whether to approve or deny a transaction. The processor is hired by the merchant to handle the technical work of routing that transaction to your bank and back. They work together but are separate companies.