A third-party payment processor is a company that handles the money movement between your customer's bank and your business account
When you swipe a card at checkout or enter payment details online, the money does not move directly from the customer's account to yours. A third-party payment processor sits in the middle, taking the transaction request, checking it against the customer's bank and card network (Visa, Mastercard, American Express), and then moving the funds to your merchant account. The processor keeps a small cut—usually 2 to 3 percent of the transaction—for handling that work.
The processor is not the same as your bank, your payment gateway, or your merchant account provider, though these often work together. The processor is the company actually talking to the card networks and the customer's bank. Without a processor, you would have to build those connections yourself, which is why almost every business that takes cards uses one.
Key Takeaways
- A third-party processor moves money from the customer's bank to your account and takes a percentage fee for doing so.
- The processor communicates with card networks and banks on your behalf, a job that requires expensive infrastructure and compliance certifications.
- Processors are different from payment gateways (which collect the information) and merchant account providers (which hold your money), though one company often provides all three services.
- Choosing a processor affects your transaction fees, settlement speed, fraud protection, and which payment types you can accept.
How a processor fits into the payment chain
The payment chain has several moving parts, and the processor is the one doing the actual transfer. Your customer enters their card details into a payment gateway—the form or terminal they see. The gateway encrypts that data and sends it to the processor. The processor then contacts the card network (Visa, Mastercard, etc.) and the customer's bank to check whether the card is valid and whether the account has enough money. The bank approves or declines the transaction and sends that answer back through the processor to your gateway, which tells your customer whether they succeeded.
If the transaction is approved, the processor holds the money temporarily in a merchant account—a holding tank for incoming payments. After a settlement period (usually one to three business days), the processor moves the money from the merchant account to your actual business bank account. During that holding period, the processor is also running fraud checks and handling chargebacks if a customer disputes the charge.
A single company often provides the gateway, the processor, and the merchant account all together. Stripe, Square, PayPal, and Authorize.net are examples of companies that do all three. But they are still three separate functions, and understanding which is which matters when something goes wrong.
Why businesses do not process payments themselves
Building your own payment processing system is theoretically possible but practically impossible for most businesses. To process cards, you need a direct connection to the card networks—Visa, Mastercard, American Express, Discover. Those networks do not give connections to individual merchants; they only work with certified processors. Becoming a certified processor requires passing security audits, maintaining expensive infrastructure, and carrying liability insurance. A small business cannot do this alone.
Processors also handle the compliance burden. Every card transaction is governed by PCI DSS (Payment Card Industry Data Security Standard), a set of rules about how payment data must be stored and transmitted. A processor that is PCI-certified means you do not have to be. If you tried to process cards yourself, you would be responsible for that certification, which costs thousands of dollars per year and requires constant security updates.
Using a third-party processor also means you do not hold the customer's card data on your own servers. The processor receives it, uses it immediately, and then deletes it or tokenizes it (replaces it with a code). This protects both you and your customer from data breaches.
What fees a processor charges and how they vary
Most processors charge a percentage of each transaction plus a flat fee per transaction. A typical rate is 2.2 percent plus 30 cents per transaction for credit cards, though this varies widely depending on the processor, the type of card, and your monthly volume. Debit cards usually cost less—around 1 percent plus 25 cents. American Express and Discover often cost more because those networks charge the processor higher fees to begin with.
Some processors also charge monthly fees, batch fees (a small charge each time you settle transactions), or chargeback fees (if a customer disputes a charge). A few processors offer flat-rate pricing instead—for example, 2.9 percent plus 30 cents on all card transactions, regardless of card type. This is simpler to predict but may cost more if you process a lot of premium cards.
The processor you choose directly affects your bottom line. A business processing $10,000 per month in transactions will pay roughly $220 to $300 in processor fees at typical rates. Over a year, that is $2,640 to $3,600. Comparing processors before you sign up can save hundreds of dollars annually.
Settlement speed and when you actually receive the money
The processor does not send you money immediately after a transaction approves. Instead, they hold it in your merchant account for a settlement period, which is usually one to three business days. During that time, the processor is batching your transactions, running fraud checks, and waiting for the customer's bank to confirm the funds are actually available.
After the settlement period ends, the processor moves the money to your business bank account via ACH transfer. ACH typically takes one to two more business days, so the total time from swipe to your account is usually three to five business days. Some processors offer faster settlement—next-day or same-day—but charge higher fees for it.
If a customer disputes a charge or files a chargeback weeks later, the processor can pull that money back out of your account, even if you have already spent it. This is why processors hold onto settlement funds for a few days—it gives them time to catch obvious fraud before your money leaves their system.
Fraud detection and chargeback handling
One of the main reasons businesses use a processor instead of handling payments themselves is fraud protection. The processor runs every transaction through fraud detection tools that look for patterns: a card used in two countries in one hour, a purchase amount wildly different from the customer's usual spending, a card that matches known stolen card lists. If the processor flags a transaction as high-risk, it can decline it automatically or send it to you for manual review.
If a customer later disputes a charge—claiming they never made the purchase or that the product did not arrive—the processor handles the chargeback process. The processor collects evidence from you (order confirmation, shipping proof, customer communication), sends it to the customer's bank, and argues on your behalf. If you lose the chargeback, the processor deducts the disputed amount plus a chargeback fee (usually $15 to $100) from your account.
Different processors have different fraud tools and chargeback success rates. Some offer machine learning that learns your business's normal transaction patterns. Others require you to manually review flagged transactions. Knowing what fraud protection a processor offers before you sign up can prevent costly disputes later.
Choosing between different types of processors
Processors come in several flavors, and the right choice depends on your business type and volume. Hosted processors like PayPal or Square handle everything—they provide the gateway, the processor, and the merchant account all in one. You pay their fees and use their interface. This is the easiest route for small businesses and one-off transactions.
Integrated processors
Wholesale processors
Your choice also depends on what payment types you need to accept. Most processors handle credit and debit cards, but not all handle ACH transfers, digital wallets (Apple Pay, Google Pay), or buy-now-pay-later services like Affirm. If you need to accept multiple payment types, confirm the processor supports all of them before signing up.
Frequently Asked Questions
Is the payment processor the same as my bank?
No. Your bank holds your business account and your settlement funds, but it does not process card transactions. The processor is a separate company that moves money from the customer's bank to your merchant account, which your bank then holds. Some banks offer processing services, but they are still acting as a processor, not as your regular bank.
What happens if a processor goes out of business?
Your merchant account and settlement funds are usually protected because they are held at a bank, not by the processor itself. However, you will need to move to a new processor quickly to keep accepting payments. Your transaction history and customer data may or may not transfer, depending on the processor's policies. This is why reading the contract before you sign up matters.
Can I use multiple processors at the same time?
Yes. Many businesses use one processor for online transactions and another for in-person card swipes, or they use different processors for different payment types. However, each processor charges its own fees, so using multiple processors increases your total costs. Compare fees carefully if you are considering this route.
Do I need a merchant account if I use a processor?
Yes. A merchant account is where the processor holds your money between the transaction and settlement. Some processors bundle the merchant account into their service (you do not see it as a separate thing), but it is still there. You cannot process payments without one.
What should I look for when comparing processors?
Compare transaction fees, settlement speed, fraud protection features, chargeback policies, monthly minimums, and contract length. Also check whether the processor supports all the payment types your customers use. Read reviews from other businesses in your industry—a processor that works well for a coffee shop might not work well for a subscription service.