An ISO is the middleman between your business and the bank that actually processes your card payments

An ISO stands for Independent Sales Organization. It is a company licensed by Visa and Mastercard to sign up merchants (that is, businesses like yours) and sell them payment processing services. The ISO does not actually move the money or hold it—a bank does that. The ISO's job is to recruit merchants, set up their accounts, provide customer support, and handle the paperwork that connects a business to the payment network.

Think of it this way: when you swipe a card at a store, the transaction flows through several hands before the money lands in the store's bank account. The ISO is the sales and support layer that sits between the merchant and the acquiring bank. Most small and mid-sized businesses work with an ISO rather than calling a bank directly, because ISOs are set up to handle merchant onboarding and ongoing service at scale.

ISOs come in different sizes. Some are large companies you have heard of—Square, Stripe, and PayPal all operate as ISOs (or ISO-like entities). Others are smaller regional companies or resellers who partner with larger ISOs. The key point is that they are all licensed by the card networks and all follow the same rules about how transactions are processed and how disputes are handled.

Key Takeaways

  • An ISO is a licensed middleman that signs up merchants and connects them to payment processing, but does not actually hold or move the money itself.
  • The ISO handles merchant onboarding, customer support, and compliance paperwork—the bank handles the actual movement of funds.
  • Large ISOs like Square and Stripe operate nationwide; smaller ISOs often serve specific regions or industries.
  • Every ISO must be registered with Visa and Mastercard and follow the same network rules about transaction processing and dispute resolution.

How an ISO fits into the payment chain

When you process a card payment through an ISO, several organizations touch the transaction. The ISO signs you up and provides the terminal or software. You swipe the card or enter the number. The ISO's system sends the transaction to an acquiring bank—the bank licensed to accept card payments on behalf of merchants. The acquiring bank checks with the cardholder's bank (the issuing bank) to confirm the funds are there. If approved, the money moves through the card network (Visa, Mastercard, American Express, or Discover) and eventually lands in your business bank account, minus the ISO's fee.

The ISO does not hold the money at any point. It is a service provider, not a bank. This matters because if something goes wrong—a chargeback, a dispute, or a transaction that needs to be reversed—the ISO coordinates the fix but the acquiring bank and the card networks make the final call. You deal with the ISO for day-to-day questions, but the bank and the networks set the rules.

What ISOs charge and how they make money

ISOs make money by charging you a percentage of each transaction (called the interchange rate or discount rate) plus sometimes a flat per-transaction fee. They may also charge monthly account fees, statement fees, or equipment rental fees. The exact amount varies widely depending on the ISO, the type of card being used (debit vs. credit, rewards vs. basic), and the industry you are in. A coffee shop might pay 2.2% plus $0.10 per transaction; a high-risk business like a subscription service might pay 3.5% or more.

The ISO keeps some of this fee and passes the rest up the chain to the acquiring bank and the card networks. The breakdown is not transparent to you—you see one rate, and the ISO negotiates with the bank behind the scenes. This is why shopping around between ISOs can save money: different ISOs have different relationships with banks and different cost structures.

The difference between an ISO and a payment processor

The terms ISO and payment processor are often used interchangeably, but they are not quite the same thing. An ISO is specifically a sales and support organization licensed by the card networks. A payment processor is the technology that actually handles the transaction—the software or hardware that reads the card, encrypts the data, and sends it to the bank. Some ISOs build their own processing technology; others partner with a separate processor and resell it.

From your perspective as a merchant, this distinction usually does not matter. You sign up with an ISO, they give you a terminal or app, and you process payments. But if something goes wrong with the technology itself—a terminal that will not connect, software that crashes—you might end up talking to the processor's technical team instead of the ISO's support line. Most ISOs handle this by having a processor partner on standby.

Why businesses use ISOs instead of going straight to a bank

Banks can sign up merchants directly, but most do not because it is not their core business. Banks focus on lending and deposits. ISOs focus on merchant services, which means they have the staff, the systems, and the expertise to onboard a business quickly, train you on the equipment, and answer questions about your statement. An ISO can usually get you set up in days; a bank might take weeks.

ISOs also specialize by industry. Some focus on restaurants, others on e-commerce, others on nonprofits. They understand the specific payment challenges in your industry and can offer advice on fraud prevention, chargeback management, or settlement timing. A bank's merchant services team is usually smaller and more generalist.

Finally, ISOs compete on price and service in ways banks do not. If you are unhappy with your ISO's rates or support, you can switch to another ISO relatively easily (though you may need to change your terminal or software). Switching banks is much harder.

How to know which ISO you are working with

Your ISO's name should appear on your merchant agreement and on your monthly processing statement. If you signed up through Square, Stripe, PayPal, Toast, or Clover, that company is your ISO (or acts as one). If you signed up through a local bank or a regional payment company, that entity is your ISO. If you are not sure, look at your statement or call the customer service number on your receipt machine—they will tell you.

Knowing your ISO matters because it determines who you call when something breaks, who sets your rates, and who handles disputes. It also matters for compliance: your ISO is responsible for making sure you follow the card networks' rules, and they can terminate your account if you violate them repeatedly.

What happens if your ISO goes out of business

If your ISO closes or loses its license, your account does not disappear—it gets transferred to another ISO or directly to an acquiring bank. The card networks require that merchant accounts be portable. Your transactions will keep processing, though there may be a brief interruption while the transfer happens. Your settlement account (the bank account where your money lands) stays the same unless you choose to change it.

This is one reason why working with a larger, more established ISO is generally safer than working with a tiny startup: there is less risk of sudden closure. But even small ISOs are required to have a transition plan in case they fail, so your money and your transaction history are protected.

Frequently Asked Questions

Can I switch ISOs if I do not like my current one?

Yes. You can move to a different ISO at any time, though you may need to return equipment or pay an early termination fee if you are under contract. Your new ISO will handle the account transfer. The process usually takes a few days to a week, and your transactions will keep processing during the switch.

Does my ISO have access to my money?

No. Your ISO cannot access your settlement account or hold your funds. The acquiring bank controls the money and deposits it into your business bank account on a set schedule (usually daily or weekly). The ISO can see transaction history and reports, but cannot move or freeze your funds.

What is the difference between an ISO and a payment gateway?

An ISO handles the merchant account and the business relationship. A payment gateway is the software that encrypts and transmits card data from your website or app to the payment processor. Some ISOs provide both; some only provide one. You may need both to accept online payments.

Why do different ISOs quote me different rates?

Rates depend on your industry, your average transaction size, your monthly volume, the types of cards you accept, and the ISO's relationship with their acquiring bank. A restaurant and an e-commerce store will get different quotes because they have different risk profiles. Shopping around is worth the time.

Is my ISO the same as my payment processor?

Not always. Your ISO is the company you have a contract with and who you call for support. The payment processor is the technology that handles the transaction. Your ISO may use their own processor or partner with another company. From your perspective, the ISO is your main point of contact.