How Money Moves From Your Card to a Business's Bank Account
What a payment processor does
A payment processor is the company that moves money from your card or bank account to the business you're paying. When you swipe, tap, or enter your card number, the processor doesn't hold the money—it passes your payment information to the right banks, checks that the money exists, and tells the business whether the transaction went through. The processor takes a small cut (usually a percentage of the sale plus a flat fee) for doing this work.
Think of it this way: you have a bank, the business has a bank, and the processor is the messenger between them. Without a processor, a coffee shop would have to call your bank directly every time someone bought a latte. Instead, the processor handles thousands of transactions per second, routes them to the correct banks, and settles the money into the business's account within one to three business days.
Key Takeaways
- A payment processor connects your bank to the business's bank and verifies that your payment is real before the money moves.
- The processor charges a fee (usually 2 to 3 percent of the sale plus 20 to 30 cents per transaction) that the business pays, not you.
- Your card information is encrypted and never stored on the business's computer—the processor handles all the sensitive data.
- Money from your card does not go directly to the business; it goes to the processor first, then to the business's bank account within one to three business days.
- Different types of processors (payment gateways, payment service providers, merchant acquirers) handle different parts of the transaction, and a business may use more than one.
The step-by-step path of a single transaction
When you hand over your card or type in your number, several things happen in seconds. First, the payment gateway—the software that collects your information—encrypts your card details so they cannot be read in transit. That encrypted data goes to the processor, which sends it to your card's network (Visa, Mastercard, American Express, or Discover).
The card network routes the request to your bank, called the issuing bank. Your bank checks whether the card is real, whether it is stolen, whether you have enough money or credit, and whether the transaction matches your normal spending patterns. Your bank sends back a yes or no in less than a second.
If the answer is yes, the processor tells the business the payment is approved. The business completes the sale. Behind the scenes, the processor then sends the transaction to the business's bank, called the acquiring bank. The acquiring bank deposits the money into the business's account—minus the processor's fee—usually within one to three business days. This delay is called the settlement period.
Why processors charge fees and what they cover
Payment processors charge fees because they assume risk and handle infrastructure. When you dispute a charge or your card is fraudulent, the processor and the acquiring bank often absorb the loss, not the business. The processor also maintains the servers that handle millions of transactions per day, encrypts your data, and complies with security rules (called PCI compliance) that protect your card information.
A typical processor fee is 2 to 3 percent of the sale plus 20 to 30 cents per transaction. A $100 purchase might cost the business $2.30 to $3.30 in processor fees. Online transactions usually cost more than in-person ones because the processor cannot verify your physical card, so the fraud risk is higher. The business pays this fee, not you—it is built into the price you see.
Some processors also charge monthly fees, batch fees (for processing a group of transactions), or fees for chargebacks (when you dispute a charge). A small business might pay $20 to $100 per month just to keep a processor account open, on top of per-transaction fees.
The difference between payment gateways, processors, and acquiring banks
These three terms are often used interchangeably, but they do different jobs. A payment gateway is the software interface—the checkout page you see, the card reader at the register, the form you fill out online. It collects your information and encrypts it. A payment processor is the company that takes that encrypted data and routes it to the banks. An acquiring bank is the business's bank, which receives the money and deposits it into the business's account.
A single company might provide all three services (like Square or Stripe), or a business might use separate companies for each. A large retailer might use one company for the checkout software, another for processing, and their own bank as the acquiring bank. A small online store might use Shopify, which bundles the gateway and processor together. Understanding which company does what matters when something goes wrong—if money does not arrive, you need to know whether to contact the processor, the acquiring bank, or the gateway company.
How your card information stays protected
Your card number never sits on the business's computer. When you enter it at checkout, the gateway encrypts it immediately using a security standard called SSL encryption. The encrypted data is unreadable without a key, and only the processor and your bank have that key. Even if a hacker breaks into the business's computer, they cannot read your card number because it was never stored there in the first place.
Processors also follow PCI DSS compliance rules, a set of security standards created by the card networks. These rules require processors to use firewalls, monitor for fraud, test their systems for vulnerabilities, and limit who can access card data. If a processor is breached and card information leaks, the processor is liable for the costs—not the business and not you.
Some processors offer tokenization, which replaces your actual card number with a random code. If you save your card for future purchases, the processor stores the token, not your number. When you make another purchase, the token is sent instead of your card details. This means even if the token is stolen, it cannot be used anywhere else because it only works with that specific processor.
What happens when a transaction fails or is disputed
If your bank says no—because you do not have enough money, the card is expired, or the transaction looks fraudulent—the processor tells the business the payment was declined. The business does not charge you, and no money moves. You see the decline immediately at checkout.
If the payment goes through but you later dispute it (you say you did not make the purchase, or the item never arrived), your bank investigates. The processor and acquiring bank provide evidence—the timestamp, the amount, whether the card was present, shipping confirmation if applicable. If your bank agrees with you, the money is returned to your card and the business is charged back. If the business disagrees, they can provide their own evidence and the bank makes a final decision.
Chargebacks hurt businesses because they lose the money, pay a chargeback fee (usually $15 to $100), and damage their reputation with the processor. If a business has too many chargebacks, the processor may close their account. This is why businesses ask for tracking numbers, signatures, or photos of delivery—they are building evidence in case you dispute the charge later.
Different types of processors for different situations
Not all processors work the same way. Payment service providers (like Square, PayPal, or Stripe) are all-in-one: they provide the gateway, process the payment, and deposit money into your bank account. They are simple to set up and good for small businesses or one-time payments. Merchant acquirers are banks or large companies that work directly with businesses; they often require more paperwork and higher volume but may offer lower fees. Third-party processors handle the routing and verification but do not touch the money—they work behind the scenes for larger businesses or specialized industries.
Some processors specialize in certain industries. A nonprofit might use a processor that handles recurring donations. A restaurant might use one that integrates with their point-of-sale system. An online retailer might use one that handles international cards. Choosing the right processor depends on how you sell (in person, online, by phone), how often you sell, how much you sell, and what features you need.
Frequently Asked Questions
Why does it take one to three days for money to show up in my business account?
The processor does not move money instantly because it has to verify thousands of transactions, check for fraud, and coordinate with two banks. The acquiring bank also batches transactions together and processes them in groups rather than one at a time. This delay also gives customers time to dispute a charge before the money is final, which protects both sides.
Can a processor see my full card number?
Yes, the processor sees your full card number because it needs to route the transaction to your bank. But the processor is required by law to encrypt it, store it securely, and never share it with the business. If a processor is breached, they are liable for the damage, which is why they invest heavily in security.
What is a payment gateway and how is it different from a processor?
A payment gateway is the software you interact with—the checkout page, the card reader, the form. A processor is the company that takes the data from the gateway and routes it to the banks. Some companies provide both, but they are technically different services.
Do I pay the processor fee or does the business?
The business pays the processor fee. It is not added to your bill as a separate line item; it is built into the price of goods and services. The business absorbs the cost as part of doing business.
What happens if the processor goes out of business?
Your money is protected because it goes to your bank and the business's bank, not to the processor. The processor is just the messenger. If a processor closes, the business has to switch to a new one, but your card and the business's bank account are unaffected.