How Payment Processing Works and What Happens to Your Money
What payment processing services actually do
Payment processing is the machinery that moves money from a customer's card or bank account to a merchant's account. When you swipe a card at a store or enter your information online, a payment processor is the intermediary that talks to your bank, the merchant's bank, and the card network (Visa, Mastercard, American Express) to confirm the money exists, hold it, and then settle it into the merchant's account—usually within one to three business days.
For a household budget, understanding this matters because it explains why money sometimes disappears from your account before it shows up somewhere else, why certain transactions get declined, and what happens if something goes wrong mid-transaction. If you run a small business or freelance, it also explains the fees you pay and why different payment methods cost different amounts.
Payment processors are not the same as payment gateways (the software that collects your information) or acquiring banks (the merchant's bank). A processor coordinates between all of them. Most people never see the processor's name—they see the merchant's checkout screen or their bank's transaction record—but the processor is doing the work behind the scenes.
Key Takeaways
- Payment processors move money from customer to merchant by coordinating between banks and card networks, and the process typically takes one to three business days from transaction to settlement.
- Merchants pay processor fees (usually a percentage of the sale plus a flat fee per transaction) that vary by payment method, with credit cards costing more than debit or ACH transfers.
- A transaction can be authorized (money held) but not yet settled (money moved), which is why your account shows a pending charge that disappears or becomes permanent days later.
- Chargebacks and disputes go back through the processor, which investigates and decides whether to return money to the customer or keep it with the merchant.
- Different processors have different fraud detection, customer service, and fee structures, so merchants choose based on their business size, transaction volume, and industry.
How money moves from authorization to settlement
When you make a purchase, two things happen at different times: authorization and settlement. Authorization happens immediately—the processor checks with your bank that the funds exist and the card is valid, then holds that money in a temporary account. Your bank shows it as pending. This is why you can see a charge on your account before the merchant has actually received the money.
Settlement happens later, usually one to three business days after authorization. The processor batches all the day's transactions, calculates fees, and sends the net amount to the merchant's bank account. Your bank releases the hold and the charge becomes permanent. If a merchant never settles a transaction (for example, if they close their account or there is a system error), the authorization can expire and the money returns to you—but this can take up to 30 days depending on your bank.
This gap between authorization and settlement is why a restaurant can authorize your card at the table but you do not see the final charge (with tip included) until the next day. The processor is holding the authorized amount, the merchant adds the tip, and then settlement happens with the new total.
What fees merchants pay and why they vary
Merchants do not pay the processor a flat monthly bill. Instead, they pay per transaction, and the cost depends on the payment method. A credit card transaction typically costs the merchant 2 to 3 percent of the sale plus 20 to 30 cents per transaction. A debit card costs less—often 1 to 2 percent plus a flat fee. An ACH transfer (direct bank-to-bank) costs even less, sometimes just a flat fee of 50 cents to $1.50 with no percentage.
Why the difference? Credit card networks (Visa, Mastercard, American Express) set interchange fees—the cut they take from every credit card sale. The processor passes this fee along to the merchant, plus adds its own margin. Debit networks have lower interchange fees by law (capped at 0.05 percent plus 21 cents for most transactions). ACH transfers are direct bank-to-bank, so there is no card network in the middle.
This is why some merchants offer a discount for paying by check or cash, or charge extra for credit cards. They are passing along the cost difference. It also explains why online merchants sometimes offer a "pay by ACH" option—it is cheaper for them than processing a card.
Authorization holds and why pending charges disappear or stick around
An authorization hold is not a charge—it is a temporary freeze on your money while the processor confirms the transaction. Gas pumps, hotels, and rental car companies often place holds larger than the final charge because they do not know the final amount yet. A gas pump might authorize $100 even though you only pump $40 worth of gas.
The hold typically expires in three to seven business days if the merchant never settles the transaction. When it expires, your bank releases the money and it returns to your available balance. You will see it disappear from pending and reappear as available. However, some banks take longer to release holds—up to 30 days in rare cases—so if you are counting on that money, do not assume it is yours until it is no longer showing as pending.
If the merchant does settle the transaction during the hold period, the hold converts to a real charge and the money stays gone. This is the normal path. The problem occurs when a merchant authorizes but never settles—for example, if a restaurant closes before processing the day's batch, or if there is a system failure. In that case, you get the money back, but only after the hold expires.
How chargebacks and disputes work through the processor
If you dispute a charge—either because you did not recognize it, the merchant did not deliver what you paid for, or the amount is wrong—your bank initiates a chargeback. The chargeback goes back through the processor to the merchant's bank. The processor investigates by asking the merchant for proof: a receipt, a shipping confirmation, an email exchange, or a signed authorization from you.
The merchant has a window (usually 7 to 10 business days) to respond with evidence. If they provide proof that you authorized the charge and received the goods or service, the chargeback is denied and the money stays with the merchant. If they do not respond or their evidence is weak, the chargeback is upheld and your bank returns the money to you. The processor documents the outcome and reports it to both banks.
Merchants track chargebacks because too many chargebacks (usually more than 1 percent of transactions) can result in higher fees, mandatory reserves, or account termination. This is why merchants ask for signatures, keep receipts, and send tracking confirmations—they are building a defense against chargebacks.
Different processors and how merchants choose
Large processors include Stripe, Square, PayPal, Adyen, and Worldpay. Each has different fee structures, fraud detection tools, customer service, and integrations with accounting software. A small business might use Square because it is simple and has in-person card readers. An online retailer might use Stripe because it integrates with their website platform. A nonprofit might use PayPal because it offers lower rates for donations.
Processors also differ in how they handle high-risk industries. A cannabis retailer, a gambling site, or a telehealth provider might struggle to find a processor because card networks restrict these industries. Some processors specialize in high-risk merchants and charge higher fees in exchange for accepting the business.
As a customer, you do not choose the processor—the merchant does. But understanding that processors vary helps explain why one store's payment system is fast and another's is slow, why one asks for your zip code and another does not, and why some online checkouts feel secure while others feel sketchy.
Fraud detection and why transactions get declined
Payment processors use fraud detection software to flag suspicious transactions before they settle. The software looks for patterns: a card used in two different countries within an hour, a purchase amount far larger than the customer's usual spending, a new card number with multiple failed attempts, or a transaction from a known fraud IP address.
When the software flags a transaction, it can either decline it outright or send it to the merchant for manual review. A decline happens instantly and the customer sees an error message. A manual review can take minutes to hours, during which the transaction stays pending. If the processor or merchant approves it, the transaction goes through. If they decline it, the authorization is canceled and the money is never held.
This is why a legitimate purchase sometimes gets declined—the fraud detection software made a mistake. If this happens to you, contact your bank or the merchant to ask why the transaction was declined. Your bank can whitelist the merchant or adjust your fraud settings. The merchant can contact the processor to review the decline and resubmit.
PCI compliance and data security
Payment processors handle sensitive information—card numbers, expiration dates, security codes—so they must follow PCI DSS (Payment Card Industry Data Security Standard). This is a set of rules created by Visa, Mastercard, and other card networks to protect customer data.
PCI compliance means the processor encrypts data, limits who can access it, regularly tests for vulnerabilities, and reports any breaches to the card networks and affected customers. Merchants also have PCI responsibilities—they must not store full card numbers, must use secure checkout pages, and must report breaches.
For a customer, this means your card data is encrypted when you enter it into a processor's system. The processor does not store your full card number on their servers in plain text. If there is a breach, the processor is required to notify you and the card networks. You can dispute fraudulent charges that result from a breach, and your bank will typically return the money while the processor investigates.
Frequently Asked Questions
Why does my bank show a charge as pending for days?
The charge is authorized but not yet settled. The processor is holding the money while the merchant batches transactions and sends them for settlement, which usually takes one to three business days. Once settled, the charge becomes permanent and the pending status disappears.
Can a merchant charge me twice for the same transaction?
It can happen by accident if the merchant or customer clicks submit twice, or if there is a system error. If you see a duplicate charge, contact the merchant first—they can often void the duplicate immediately. If they do not, file a dispute with your bank and the processor will investigate.
What happens if I pay by ACH instead of card?
ACH is a direct bank-to-bank transfer that bypasses card networks. It is cheaper for merchants (lower fees), but slower for you—ACH transfers typically take three to five business days. The processor still coordinates the transfer, but there is no authorization hold or card network involved.
Why was my transaction declined even though I have money in my account?
The processor's fraud detection software may have flagged it as suspicious, or your bank may have declined it for security reasons. Contact your bank to ask why. They can whitelist the merchant, adjust your fraud settings, or approve the transaction manually so you can try again.
Do I have to pay a fee to use a payment processor?
As a customer, no—the merchant pays the processor fees. However, some merchants pass the cost along by charging a convenience fee for credit card payments, or by offering a discount for cash or ACH. These fees are optional and the merchant must disclose them before you complete the purchase.