A credit card payment is a four-party transaction that moves money from a cardholder’s issuing bank to a merchant’s bank account, with the card networks (Visa, Mastercard, American Express, Discover) acting as the rails and a payment processor handling the technical work. The whole exchange takes about two seconds at the terminal, but settlement of the actual funds happens hours or days later through a separate batch process. Most business owners only see the approval message and the deposit, so the mechanics underneath stay hidden until a fee, a chargeback, or a held deposit forces a closer look.
ProTech Payments works with merchants across Katy, Houston, Sugar Land and Fort Bend County who want to understand exactly what they pay for and why. Knowing how the money moves is the difference between accepting a 2.9% rate as fixed and recognizing which slice of that rate is interchange (set by the card networks and non-negotiable) versus processor markup (negotiable). On a business processing $40,000 a month, trimming 0.30% off the markup returns about $1,440 a year, which is real money that comes straight from understanding the flow described below.
This guide walks through the authorization, clearing, and settlement stages, the parties that touch each transaction, what each layer costs, and the pitfalls that quietly raise a merchant’s effective rate. You can run your own numbers with the credit card processing fee calculator once the structure is clear.
The parties in a credit card transaction
Five distinct entities participate every time a card is swiped, dipped, tapped, or keyed. Understanding their roles explains why fees exist and where they go.
Cardholder and merchant
The cardholder owns the card and the credit line. The merchant is the business accepting payment. These two are the only visible parties at the counter, but they sit at opposite ends of a chain involving three financial institutions and a technology layer in between.
Issuing bank and acquiring bank
The issuing bank (issuer) gave the cardholder the card and extends the credit. Chase, Capital One, and Citi are common issuers. The acquiring bank (acquirer) holds the merchant’s account and receives the deposited funds. The acquirer takes on risk because it advances money to the merchant before the cardholder has actually paid the issuer.
Card networks and the processor
Visa and Mastercard are networks, not banks. They operate the rails, set interchange rates, and enforce the rules, but they never touch the funds directly. American Express and Discover act as both network and issuer in many cases. The payment processor (Fiserv, formerly First Data, is the largest in the United States) connects the merchant’s terminal or gateway to those networks and routes the authorization request. When you sign up for merchant services, you are effectively buying access to this entire chain through one provider.
The three stages: authorization, clearing, settlement
A card payment is not one event. It is three sequential processes that most people compress into the word “payment.”
Authorization
Authorization happens in roughly two seconds. The terminal or gateway sends the card number, amount, and merchant details to the processor, which forwards the request through the card network to the issuing bank. The issuer checks the credit line, runs fraud screens, and returns an approval or decline code. Approval places a hold on the cardholder’s available credit but moves no money yet. This is why a hotel or gas pump can hold $100 against a card before the final amount is known.
Clearing
Clearing happens after the merchant batches out, usually at the end of the business day. The processor sends the day’s approved transactions to the networks, which calculate interchange and forward the records to each issuing bank. Clearing reconciles what was authorized against what the merchant actually wants to collect. A restaurant that authorizes a $50 tab and then adds a $10 tip clears the full $60 at this stage.
Settlement
Settlement is the actual movement of funds. The issuing banks pay the network, the network pays the acquirer, and the acquirer deposits the net amount (sale minus fees) into the merchant’s bank account. For most merchants this lands in one to two business days. The gap between authorization and settlement is why a sale can show as “pending” before it becomes a real deposit.
| Stage | What happens | Timing | Money moves? |
|---|---|---|---|
| Authorization | Issuer approves or declines, places hold | ~2 seconds | No |
| Clearing | Transactions batched, interchange calculated | End of day | No |
| Settlement | Funds deposited to merchant, net of fees | 1 to 2 business days | Yes |
How card data is captured and secured
The capture method determines both security and cost. The same $100 sale can carry a different rate depending on how the card data enters the system.
EMV chip, magstripe, and contactless
EMV chip cards generate a unique cryptogram for each transaction, which makes the data useless if intercepted. The 2015 liability shift moved fraud responsibility to whichever party (merchant or issuer) had the less secure technology, which is why dipping a chip protects a merchant against counterfeit-card chargebacks that a magstripe swipe would not. Contactless taps (Apple Pay, Google Pay, tap-to-pay cards) use the same EMV cryptography plus tokenization. Magstripe is the oldest and least secure method and is being phased out.
Tokenization and PCI DSS
Tokenization replaces the 16-digit card number with a meaningless token, so the real number never sits in the merchant’s system. PCI DSS (Payment Card Industry Data Security Standard) is the rulebook every business that touches card data must follow, with requirements scaled to transaction volume. Maintaining PCI compliance is mandatory, and lapses carry fines plus higher liability if a breach occurs. For a deeper walkthrough, see our PCI compliance for small business guide and the breakdown of what EMV is.
What a credit card payment actually costs
The rate a merchant pays is built from three layers. Two are fixed by the networks and one is set by the processor, which is the only layer worth negotiating.
Interchange, assessments, and markup
Interchange is the largest component, paid to the issuing bank, and it varies by card type. A basic debit card carries low interchange because the Durbin Amendment caps debit fees from large banks at roughly $0.21 plus 0.05%. A premium rewards credit card can run 2.10% plus $0.10 or higher because the issuer funds the rewards from that fee. Assessments are the network’s smaller cut, around 0.13% to 0.15% for Visa and Mastercard. Markup is what the processor keeps.
| Cost layer | Who receives it | Typical range | Negotiable? |
|---|---|---|---|
| Interchange | Issuing bank | 0.05% + $0.21 to 2.95% + $0.10 | No |
| Assessments | Card network | 0.13% to 0.15% | No |
| Processor markup | Your processor | 0.15% to 0.50% (interchange-plus) | Yes |
Pricing models
Interchange-plus pricing exposes the true interchange and adds a flat markup, which is the most transparent structure. Flat-rate pricing (Square’s 2.6% + $0.10, for example) bundles everything into one number that is simple but usually more expensive at volume. Tiered pricing buckets transactions into qualified, mid-qualified, and non-qualified rates and tends to hide markup. Our interchange-plus pricing explained post compares these in detail. A dual pricing program can also offset most processing cost by offering a lower price to cash payers, which is legal in Texas when disclosed correctly.
Card-present vs card-not-present
Where and how the card is presented changes both the fraud risk and the interchange category the transaction falls into.
In-store transactions
A card physically dipped or tapped at the counter qualifies for the lowest interchange because the issuer can verify the chip. In-store payments on a Clover terminal capture EMV and contactless data directly, which keeps rates down and shifts counterfeit liability away from the merchant.
Online and keyed transactions
Card-not-present transactions (e-commerce checkouts, phone orders keyed into a virtual terminal, invoices) carry higher interchange because the card is not physically verified, raising fraud exposure. A payment gateway encrypts and routes these transactions, and address verification (AVS) plus CVV checks help qualify them for better rates. Recurring charges and saved cards run through tokenization so the merchant never stores raw numbers. If you take orders by phone or send invoices, the what is a virtual terminal guide explains the workflow.
Common mistakes that raise your effective rate
The advertised rate and the effective rate (total fees divided by total sales) are rarely the same. These habits widen the gap.
Not downgrading on data
Card-not-present transactions can downgrade to non-qualified interchange when AVS or CVV data is missing or when a batch is settled late. B2B and corporate cards qualify for lower Level 2 and Level 3 interchange only if line-item detail is passed, and most processors do not enable this by default. A merchant running corporate cards without Level 2 data can overpay by 0.50% or more on every such sale.
Ignoring the statement
Padded statement fees (PCI non-compliance fees, monthly minimums, batch fees, statement fees, and vague “network access” charges) inflate the effective rate without touching the headline percentage. Reading the statement line by line, or requesting a free statement analysis, is the fastest way to find them. Choosing a processor on the headline rate alone is the most common error, covered in choosing a payment processor for your small business.
Credit card payments for Texas businesses
Texas law gives merchants flexibility that shapes how the payment flow affects the bottom line. Texas permits credit card surcharging and dual pricing when the surcharge does not exceed the actual cost of acceptance and is disclosed at the point of sale and on the receipt.
Surcharging and dual pricing in Texas
A cash discount program or dual pricing setup lets a Katy or Houston merchant present a lower cash price and a slightly higher card price, moving most of the processing cost off the business. This is fully compliant when implemented to network rules. ProTech Payments configures the terminal and signage so the disclosure is correct.
Local support
Businesses in Katy, Houston, and Sugar Land work with a local team rather than an offshore call center, which matters when a deposit is delayed or a chargeback needs a fast response. Estimate your numbers with the dual pricing savings calculator before deciding.
Frequently asked questions
How long does a credit card payment take to reach my bank?
Authorization is instant, but settlement of the funds takes one to two business days for most merchants. The delay exists because the issuing bank, card network, and acquiring bank each have to reconcile and transfer the money in sequence. Same-day or next-day funding is available on some account types.
Why do I pay a fee on every credit card sale?
The fee covers three parties: the issuing bank (interchange), the card network (assessments), and your processor (markup). Interchange and assessments are set by Visa and Mastercard and cannot be negotiated, but the processor markup can be. Reviewing your statement shows exactly how the total splits.
What is the difference between authorization and settlement?
Authorization confirms the card has enough credit and places a temporary hold, moving no money. Settlement is the actual transfer of funds into your account, net of fees. A transaction can be authorized and then voided before it ever settles.
Is contactless payment safe?
Yes. Tap-to-pay uses the same EMV cryptography as chip cards plus tokenization, so the real card number is never transmitted to the merchant. Each tap generates a unique code that cannot be reused, which makes contactless one of the most secure methods available.
Can I lower my credit card processing fees?
You can lower the processor markup by switching to interchange-plus pricing, and you can offset most of the remaining cost with a dual pricing or cash discount program. You cannot reduce interchange itself. A statement analysis identifies which portion of your rate is actually negotiable.
Do I have to be PCI compliant?
Yes. Any business that accepts cards must follow PCI DSS, with requirements scaled to volume. Most small merchants complete an annual self-assessment questionnaire and a network scan. Non-compliance carries monthly fees and increases liability if a breach occurs.
Talk to ProTech Payments
Once you can see where each cent of your rate goes, the next step is checking your own statement against it. Start with a free statement analysis and we will show you exactly which part of your effective rate is interchange and which is markup you can cut. When you are ready to move, get started with a setup built around how your business actually takes payments, in-store, online, or both.
