Merchant services and payment processing get used as if they mean the same thing, on provider websites, in sales calls, in every explainer article recycled across the internet for the last decade. That's not an accident. Vendors who bundle both have a financial reason to keep the distinction blurry.
When you don't know what you're buying, you compare the wrong things. You shop on processing rate when the real question is whether you have a dedicated merchant account. You focus on the transaction fee when you should be asking what happens to your business when your account gets frozen on a Tuesday.
They're not the same thing. Here's the line.
TL;DR: Payment processing is the two-second technical transaction. Merchant services is everything around it: the account, gateway, hardware, compliance support, and the vendor relationship. The real decision is whether you have a PSP aggregated account or a dedicated merchant account. At scale, that choice is worth $500–$1,100/month.
What payment processing actually is
Payment processing is the technical sequence: not a company, not a service tier, just the steps.
When a card is swiped, tapped, or entered online, the processor sends transaction data to the card network (Visa or Mastercard), waits for authorization from the customer's bank, and routes the approved funds toward settlement. About two seconds, start to finish.
Your processor doesn't hold your money or own your account. It's the rails. Most small businesses never deal with it directly. They deal with whoever sits in front of it.
The five parties behind every transaction
Most merchants think of "the processor" as a single entity. There are actually five parties moving data and money every time a card is used. Knowing who they are changes how you evaluate a provider.
1. The cardholder: your customer, initiating the transaction by tap, swipe, or entering a card number online.
2. The payment gateway: the digital bridge that captures and encrypts transaction data at the point of sale before sending it anywhere. A hardware terminal has a gateway built in. An e-commerce checkout uses a hosted gateway like Stripe's or a third-party integration. The gateway doesn't move money; it moves encrypted data to the processor.
3. The processor and acquiring bank: the processor routes the authorization request through the card network on your behalf. The acquiring bank (also called the merchant bank or acquirer) is the financial institution that actually holds your merchant account and receives settled funds on your behalf. In many setups these are the same company or closely linked; in PSP arrangements, the PSP acts as the acquirer for thousands of merchants under one master account.
4. The card network: Visa, Mastercard, Discover, or Amex receives the authorization request, routes it to the right issuing bank, and sets the interchange fee charged on every transaction. Interchange rates are published by Visa and Mastercard and are not negotiable. Every merchant pays the same base rate for the same card type.
5. The issuing bank: your customer's bank (Chase, Wells Fargo, whatever issued the card). It approves or declines the transaction and ultimately transfers funds through the card network back to the acquiring bank.
How money moves:
- Customer taps card → gateway encrypts and forwards data
- Processor/acquirer routes authorization request through the card network
- Card network forwards to the issuing bank: approve or decline in ~2 seconds
- Response travels back through the same chain to the merchant terminal
- At batch close (end of day): issuing bank sends funds → card network → acquirer → merchant account
- Acquirer deposits to your business bank account, typically 1–2 business days after settlement
Authorization is nearly instant. The actual money movement takes 1–2 days.
ISOs: the middlemen most merchants never think about
Many merchants sign up for processing not through a bank directly, but through an ISO (Independent Sales Organization), a company registered with Visa and Mastercard to resell merchant services on behalf of an acquiring bank. Most regional payment reps, local "merchant services companies," and cold-calling payment agents are ISOs.
ISOs don't own the underlying processing infrastructure. They resell access to an acquirer's network at a markup and handle the merchant relationship. That's not inherently a problem. Many ISOs offer strong local support and competitive pricing. The risk is that ISO quality varies enormously. Some use multi-year contracts with $500–$5,000 early termination fees. Some quote a processing rate that omits PCI fees, batch fees, and monthly minimums. Some sign merchants to equipment leases that cost $3,000–$5,000 over 48 months for hardware worth $300.
When you get a cold call about your "processing rates," you're usually talking to an ISO rep. Knowing that changes what you ask: Are you a direct acquirer or do you resell through a bank? Which acquiring bank? What are the full contract terms, including exit?
What merchant services actually is
Merchant services is the full business relationship around accepting card payments: the merchant account, the gateway, the hardware, the support, and the processing infrastructure underneath all of it. Payment processing is one piece inside that relationship.
What a full payments provider gives you:
- A merchant account: a dedicated holding account where settled funds sit before transferring to your business bank
- A payment gateway: software connecting your terminal, website, or app to the card networks
- Hardware: terminals, card readers, POS systems (purchase, not lease, if you have any say)
- Chargeback management: staff and tools to dispute and prevent chargebacks before they damage your account standing
- Reporting: transaction history, batch reports, reconciliation data
- PCI DSS compliance support: scope reduction, SAQ guidance, and compliant infrastructure
- Support that actually reaches a person when something breaks on a Friday night
Payment processing is the engine. Merchant services is the car, the insurance, the roadside plan, and the person you call.
PCI DSS: the compliance requirement most small businesses ignore
PCI DSS (Payment Card Industry Data Security Standard) is a set of 12 security requirements maintained by the PCI Security Standards Council and enforced by Visa and Mastercard. Every business that accepts card payments is subject to it. It's not optional, and it's not just for enterprise.
What compliance requires in practice:
- An annual Self-Assessment Questionnaire (SAQ) and, for larger merchants, a formal audit by a Qualified Security Assessor (QSA) certified by the PCI SSC
- Secure network configuration, encrypted cardholder data transmission, and access controls on payment systems
- Not storing raw cardholder data (card numbers, CVV codes) in any system that isn't specifically secured for it
Non-compliance after a data breach exposes your business to fines from $5,000 to $100,000 per month, potential liability for fraudulent transactions, and possible loss of the ability to accept card payments.
A full merchant services provider handles most of the compliance infrastructure for you: tokenization instead of raw card storage, encrypted terminals, compliant gateway, and scope reduction that keeps most of your business systems out of PCI scope entirely. PSPs like Stripe and Square also handle this under their shared account model. Where merchants get exposed is when they build custom integrations without following the guidelines, store card data in spreadsheets or email, or let their annual SAQ lapse.
If your payment provider hasn't mentioned PCI compliance, ask them: What is my SAQ type? Are you handling scope reduction? What happens if I have a breach and I'm not compliant?
The difference that actually costs merchants money
Two models exist for accepting card payments. U.S. merchants paid a record $187.20 billion in card processing fees in 2024 on $11.9 trillion in card volume, a blended effective rate of 1.57% across all card types (Nilson Report, March 2025). Most small businesses on flat-rate PSP pricing are paying 2.6–2.9%. The gap comes down to which model you're in.
Payment service providers (PSPs) like Stripe, Square, and PayPal don't give you a dedicated merchant account. Your transactions run through a shared master account the PSP holds with an acquiring bank. You're one merchant among thousands under that umbrella.
Setup is fast, there's no underwriting, and the flat rate is easy to budget. The catch: the PSP is the account holder, not you. Their automated risk systems can freeze or hold your account without warning, without context about your business, and often with no one to call. Square charges 2.6% + $0.10 per in-person swipe. Stripe is 2.9% + $0.30 online. At $100,000/month in volume, that's $2,600–$2,900 in processing costs before anything else.
Dedicated merchant accounts require underwriting (usually 1–3 business days for most categories), but the account is in your name, and you price on interchange-plus pricing. Visa and Mastercard publish their interchange rates; your provider passes them through at cost and adds a fixed markup. Most consumer credit cards land in a 1.5–2.1% interchange band, per Visa's published rate documentation and the current Mastercard schedule. Add a 0.20% processor markup and your effective rate sits around 1.8–2.0%, versus 2.6–2.9% flat.
At $100,000/month, that gap is $600–$1,100/month. On $1.2M/year in volume, you're looking at $7,200–$13,200. It leaves quietly, every month, on a statement most owners don't read closely enough.
| PSP (Stripe, Square, PayPal) | Dedicated merchant account | |
|---|---|---|
| Setup time | Minutes, no underwriting | 1–3 business days |
| Pricing model | Flat-rate (2.6–2.9% + fee) | Interchange-plus (~1.8–2.0% effective) |
| Account type | Shared master account | Dedicated to your business |
| Account freeze risk | Higher (automated thresholds) | Lower (underwritten relationship) |
| Chargeback support | Limited | Dedicated team |
| PCI compliance support | Self-managed | Provider-assisted |
| Best for | Under $15K/month, low risk | Over $15K/month or higher-risk category |
Which model fits your business
PSPs make sense when you're under $10,000–$15,000/month in card volume, need to start taking payments quickly, and your sales are straightforward. The math doesn't punish you at low volume, and the simplicity is worth something.
A dedicated merchant account starts making financial sense around $15,000/month, or immediately if you're in a category that trips PSP risk filters more than typical retail: restaurants, construction, subscription billing, healthcare. An account freeze that lasts days or weeks might not matter much for a low-volume boutique. For a contractor waiting on a $40,000 project payment, it's a real problem.
The scenario we see most often: businesses that started on Stripe or Square because it was easy, grew to $60,000–$80,000/month, and never switched because switching felt complicated. At that volume, the flat-rate markup over interchange-plus runs $500–$900/month. One roofing contractor in our portfolio had been on QuickBooks Payments for years. After switching to interchange-plus with a dedicated merchant account, their first statement came back $300–$400 lower. Same volume, same card mix. The pricing model was the only variable.
The pick: For most established businesses over $15,000/month in card volume, a dedicated merchant account on interchange-plus pricing is the better long-term setup. The rate difference is real and the account stability matters. If you're still under that threshold and your sales are low-risk and straightforward, the setup speed of a PSP is worth the rate premium for now.
Where this breaks down: If your business is in an industry that banks won't underwrite at standard rates (adult content, cannabis, certain nutraceuticals with aggressive subscription billing), you may not qualify for a traditional dedicated merchant account at all. In that case, a PSP may be your only entry point, with a high-risk merchant account as the upgrade path once your processing history is established.
What to ask before you sign
Start with pricing structure. Flat-rate is predictable. Interchange-plus is transparent and cheaper at scale. Tiered pricing ("qualified," "mid-qualified," "non-qualified") is the one to avoid. The processor decides which bucket each card falls into, and business cards and rewards cards almost always land in non-qualified, the highest rate tier.
Get contract terms in writing: month-to-month or multi-year, early termination fees, whether equipment is leased or purchased. Leasing is almost always a bad deal for the merchant.
Ask specifically about chargeback management. Does the provider alert you before a dispute becomes a formal chargeback? Is there a team who knows your account, or a generic support queue? The Electronic Transactions Association maintains standards for how ISOs and processors should handle dispute resolution. A provider that references these standards knows their compliance obligations.
Clarify settlement timing. Standard is 1–2 business days. For restaurants and contractors managing tight cash flow, next-day or same-day funding changes how you operate.
Ask about PCI compliance. Who handles your SAQ? What's your compliance tier? Does the provider's gateway handle tokenization so cardholder data never touches your servers?
And ask what support looks like at 6pm on a Saturday.
Processing fee ranges reflect publicly available interchange schedules from Visa, Mastercard, Amex, and Discover as of 2025–2026. Your actual effective rate will vary based on card mix, transaction method, monthly volume, and processor markup. This post is for informational purposes only and does not constitute financial or legal advice.
Frequently Asked Questions
Are merchant services and payment processing the same thing?
No. Payment processing is the technical sequence that authorizes and settles a card transaction. Merchant services is everything around it: the merchant account, gateway, hardware, fraud management, chargeback support, PCI compliance support, reporting, and the vendor relationship. Processing is what happens in two seconds. Merchant services is the business relationship that makes it happen reliably over years.
Do I need a merchant account, or can I just use Stripe?
You don't technically need a dedicated merchant account to accept card payments. Stripe, Square, and PayPal let you start without one. The trade-off is that you're not the account holder; the PSP is. A dedicated merchant account makes practical sense once you're past $10,000–$15,000/month in volume, or anytime you're in an industry where a surprise account hold would cause real cash flow damage.
What is a payment service provider (PSP)?
A PSP like Stripe, Square, or PayPal aggregates merchants under a master account it holds with an acquiring bank. You sign up fast, skip underwriting, and process under their umbrella. The upside is speed. The downside is that the account belongs to them. When their automated risk system sees something unusual (a volume spike, a chargeback ratio crossing a threshold), they can freeze funds without warning, without knowing your business, and with no dedicated rep to escalate to.
What is an acquiring bank?
The acquiring bank (also called the acquirer or merchant bank) is the financial institution that holds your merchant account and receives settled funds from the card networks on your behalf. When a transaction settles, the card network routes funds from the customer's issuing bank to your acquirer, which then deposits them into your merchant account. When you use a PSP, you don't have a direct relationship with the acquiring bank; the PSP is the account holder and sits between you and the acquirer.
What is an ISO in payment processing?
An ISO (Independent Sales Organization) is a company registered with Visa and Mastercard to resell merchant services on behalf of an acquiring bank. Most local payment reps and regional "merchant services companies" are ISOs. They don't own the underlying processing infrastructure but act as the sales and service layer between merchants and the bank. ISO quality varies widely: some offer excellent local support and competitive pricing; others use multi-year contracts with high early termination fees and hardware leases that cost far more than purchase. When evaluating any provider, ask directly: Are you a direct acquirer, or do you resell through a bank? Which acquiring bank underwrites your merchants?
What is PCI DSS compliance and who is responsible for it?
PCI DSS (Payment Card Industry Data Security Standard) is a set of 12 security requirements that apply to every business accepting card payments, maintained by the PCI Security Standards Council. Compliance involves completing an annual self-assessment (or formal QSA audit for larger merchants), securing your network and payment systems, and not storing raw cardholder data. The merchant is ultimately responsible for compliance, not the processor. A good merchant services provider handles most of the compliance infrastructure (tokenization, encrypted terminals, compliant gateway) and assists with annual SAQ completion, but the obligation stays with you. Non-compliance after a breach can result in fines of $5,000–$100,000 per month and potential loss of card acceptance privileges.
What does a merchant services provider actually do?
They set up and manage a merchant account in your name, provide the gateway and hardware to accept payments, handle the processing relationship with the acquiring bank, assist with PCI DSS compliance, and support you through chargebacks, fraud disputes, equipment issues, and reporting. One point of contact for your entire payments operation, not just the two-second transaction piece.
What is the cost difference between a PSP and a dedicated merchant account?
PSPs charge 2.6–2.9% plus a per-transaction fee. Dedicated merchant accounts on interchange-plus pricing typically run 1.7–2.2% effective rate depending on card mix and volume. The gap is small at low volume and meaningful at scale. A business processing $75,000/month usually saves $400–$600/month by switching, often $5,000–$7,000/year.
What is interchange-plus pricing?
Interchange-plus pricing passes the card network's base interchange rate through to you at cost, then adds a fixed processor markup, typically 0.10–0.30% plus a small per-transaction fee. Visa and Mastercard set the base rate; your processor doesn't control it. What you see on your statement is the actual base rate plus the fixed markup, with no categories and no surprise buckets. It's the right pricing model for any business with meaningful card volume.
If you're choosing a payment provider based on processing rate alone, you're comparing one number in a much bigger relationship. Account stability, chargeback support, settlement timing, PCI compliance support, and who picks up the phone all matter more than most merchants realize until something goes wrong.
Get a free rate comparison. We'll run the numbers on your actual card mix and show you exactly what the switch to interchange-plus would save you at your current volume.
Kaleb Dickhaut — Founder, ClickWerxs. Kaleb works directly with merchants to identify and eliminate unnecessary payment processing costs. linkedin.com/in/kaleb-dickhaut
Sources
- Processing rates, fee ranges and effective-rate figures in this post are industry-typical ranges compiled from published network schedules and from accounts reviewed in the ClickWerxs ISO portfolio. They are not quoted rates. Interchange itself is set by Visa and Mastercard on published schedules that change twice yearly; your actual cost depends on card mix, MCC, ticket size and volume.
- Federal Reserve Board, Regulation II debit card interchange fee standard — covered issuers may not receive more than $0.21 plus 0.05% of transaction value, plus a $0.01 fraud-prevention adjustment where eligible. federalreserve.gov
- Competitor and platform pricing referenced in this post is taken from each company's published pricing or legal pages as of the date noted in text, and is subject to change without notice. ClickWerxs does not link to competitor websites; references are given in text so they remain verifiable. No affiliation is implied.
- ClickWerxs ISO portfolio, aggregate observation — patterns described from merchant accounts under ClickWerxs management. Anonymized and reported in aggregate; individual account terms vary. Operator data.
ClickWerxs facilitates merchant account applications and provides ongoing account management as an authorized representative of our banking and processing partners. Approval, rates, and terms are determined by the issuing processor and acquiring bank — ClickWerxs does not guarantee approval for any merchant account application. Processing rates and fee structures cited in this post reflect publicly available industry data and general ranges; your actual rate depends on your industry, volume, and card mix. This post is not legal or financial advice. For a custom quote, see clickwerxs.com/payments/get-a-quote.