Epoch Payment's security record and what it means for your transactions
Epoch Payment is a payment processor that handles credit card transactions, recurring billing, and digital wallet payments for merchants. The company has operated since the mid-1990s and processes transactions across multiple industries, including e-commerce, subscription services, and high-risk merchants.
Whether Epoch is safe depends on what you mean by safe. The processor itself maintains standard encryption and fraud detection tools that most major payment processors use. However, Epoch has faced regulatory scrutiny, lawsuits, and complaints from both merchants and customers over the years—facts that matter more to your actual risk than the existence of security features alone.
If you are a customer making a payment through Epoch, your transaction-level security is comparable to other processors: your card data is encrypted during transmission, and you have chargeback rights through your card issuer if something goes wrong. If you are a merchant considering Epoch, the calculus is different—you need to weigh their rates and features against their compliance history and customer service reputation.
Key Takeaways
- Epoch uses standard encryption and fraud detection, but these features exist on most processors—security infrastructure alone does not determine whether a processor is trustworthy.
- The company has faced multiple regulatory actions, lawsuits, and complaints about billing practices, account freezes, and fund holds that went unresolved for months.
- As a customer paying through Epoch, your card issuer's chargeback protections apply regardless of Epoch's practices, but disputing a charge may take weeks.
- Merchants report inconsistent communication when accounts are frozen or flagged, making it difficult to resolve payment holds quickly.
- Epoch's safety profile is weaker than major processors like Stripe or Square, but stronger than unregulated payment services with no fraud monitoring.
Epoch's regulatory history and what complaints reveal
Epoch Payment has been the subject of regulatory complaints and lawsuits that go beyond normal processor disputes. In 2013, the company settled with the Federal Trade Commission over allegations that it failed to honor customer cancellation requests for recurring charges—a pattern that suggests billing system problems rather than a one-time error.
Customer complaints filed with the Better Business Bureau, state attorneys general, and payment processor review sites consistently mention three issues: unauthorized recurring charges that persist after cancellation, account freezes without clear explanation, and funds held in reserve for weeks or months without communication about when they would be released.
These complaints matter because they point to operational failures, not just security gaps. A processor can have strong encryption and still harm customers if it does not process cancellations correctly or if it freezes accounts without a clear dispute resolution process. Epoch's track record suggests both technical and procedural weaknesses.
How Epoch's payment processing actually works
When you make a payment through Epoch, your card information is encrypted and routed through Epoch's systems to your card issuer's bank. Epoch does not store your full card number—it tokenizes the data, meaning it replaces your actual card details with a unique code that can only be used with that specific merchant.
For one-time purchases, this process is straightforward: your card is charged, the transaction settles within one to three business days, and the merchant receives the funds. For recurring billing—subscriptions, memberships, or automatic payments—Epoch stores the token and charges your card on a schedule you agreed to.
The vulnerability in Epoch's system historically has not been encryption but billing automation. Complaints suggest that cancellation requests sometimes do not reach the billing system, or reach it but do not stop future charges. This is a software and process problem, not a security breach in the cryptographic sense.
Chargeback protection if something goes wrong
If you are charged through Epoch and the charge is unauthorized, incorrect, or the merchant does not deliver what you paid for, you have the right to dispute the charge with your card issuer. This right exists whether Epoch is processing the transaction or any other processor.
To file a chargeback, contact your credit card company or bank and explain the problem. You will need to provide documentation: the transaction receipt, proof of cancellation if you cancelled a subscription, or evidence that the merchant did not deliver. Your card issuer will investigate and typically reverse the charge within 30 to 90 days if they find in your favor.
Chargebacks are your safety net, but they are not instant. During the dispute period, the charge remains on your account, and you may need to pay the bill while the investigation proceeds. If Epoch's system charged you repeatedly after you cancelled, you may need to file multiple chargebacks—one for each unauthorized charge.
Red flags that suggest a merchant using Epoch may not be trustworthy
Epoch processes payments for legitimate businesses, but it also has a reputation for accepting high-risk merchants—including some that operate in gray areas. If you are considering a purchase from a merchant that uses Epoch, watch for these warning signs: no clear cancellation policy, difficulty finding contact information, vague descriptions of what you are paying for, or pressure to pay immediately.
Merchants that use Epoch sometimes do so because they have been rejected by mainstream processors like Stripe or Square due to compliance concerns. This does not automatically mean the merchant is fraudulent, but it means they have already failed a stricter vetting process elsewhere.
Check whether the merchant has a physical address, a phone number you can call, and clear terms of service. Search the merchant's name plus "complaint" or "scam" to see what others have experienced. If the merchant is unwilling to answer questions before you pay, that is a sign to look elsewhere.
Epoch versus other payment processors: where it stands
Compared to Stripe, Square, or PayPal, Epoch has weaker brand reputation and more regulatory baggage. Those processors have invested heavily in compliance infrastructure and customer service, and they reject merchants that pose higher fraud risk. Epoch's willingness to work with high-risk merchants is a business choice that makes it more accessible to some sellers but also means you encounter more fraud risk as a customer.
Compared to unregulated payment services or peer-to-peer apps with minimal fraud monitoring, Epoch is more secure. It maintains fraud detection systems, processes chargebacks, and is subject to payment card industry standards. But that is a low bar.
If you have a choice between paying through Epoch and paying through a major processor, choose the major processor. If you must pay through Epoch, use a credit card rather than a debit card—credit cards offer stronger chargeback protections and do not drain your bank account while a dispute is resolved.
What to do if you are charged incorrectly by a merchant using Epoch
First, contact the merchant directly. Explain the charge and ask for a refund. Provide your order number, the date of the charge, and the amount. Give the merchant five to seven business days to respond. Many incorrect charges are resolved at this stage without involving your bank.
If the merchant does not respond or refuses to refund, contact your card issuer. Call the number on the back of your card and ask to dispute the transaction. You will need to explain the problem and provide any documentation you have: the merchant's response (or lack of response), your cancellation request if applicable, or proof that the product or service was not delivered.
Your card issuer will assign the dispute a case number and begin an investigation. You may be asked to provide additional documentation. Do not ignore requests from your bank—respond promptly to strengthen your case. The investigation typically takes 30 to 90 days, and your card issuer will notify you of the outcome in writing.
Frequently Asked Questions
Is my credit card information safe when I pay through Epoch?
Your card data is encrypted during transmission, and Epoch does not store your full card number. However, encryption alone does not make a processor trustworthy. Epoch's compliance history is weaker than major processors, so the real question is whether the merchant using Epoch is trustworthy. If the merchant is legitimate, your card is reasonably safe. If the merchant is questionable, Epoch's lower vetting standards mean you face higher fraud risk.
What should I do if Epoch keeps charging me after I cancelled?
Contact the merchant first and provide written proof of your cancellation request—an email, a screenshot, or a dated letter. Ask them to stop the charges and refund the unauthorized ones. If they do not respond within a week, file a chargeback with your card issuer for each unauthorized charge. Provide your cancellation request as evidence. You may need to file multiple chargebacks if you were charged repeatedly.
Can I get my money back if I paid through Epoch and the merchant disappeared?
Yes, through a chargeback. Contact your card issuer and explain that the merchant is no longer reachable and did not deliver what you paid for. Provide any documentation you have: order confirmations, emails, or proof that the merchant's website is down. Your card issuer will investigate and reverse the charge if they determine the merchant failed to deliver.
Why do some merchants use Epoch instead of Stripe or Square?
Epoch accepts merchants that Stripe and Square reject—often because those merchants operate in high-risk industries, have higher chargeback rates, or have compliance issues. Epoch charges higher fees in exchange for accepting this risk. If a merchant uses Epoch, it may mean they could not get approved elsewhere, which is worth considering before you buy.
Is it safer to use a debit card or credit card with Epoch?
Use a credit card. Credit cards offer stronger chargeback protections and do not drain your bank account while a dispute is being resolved. Debit card chargebacks take longer and may leave you without access to your own money during the investigation. If you only have a debit card, consider using a virtual card number or a prepaid card loaded with only the amount you need to spend.