How Payment Technology Actually Works — From Your Card to the Store's Account

What payment technology does and who handles each step

When you swipe a card or tap your phone at checkout, your money does not move directly from your account to the store's. Instead, it travels through a chain of separate companies — your bank, the store's bank, a payment processor, and a card network — each taking a small cut and each with their own rules about timing, disputes, and what happens when something goes wrong.

Understanding this chain matters because it explains why a refund takes three to five business days, why a charge might appear twice, why some stores reject your card even though you have money, and what you can actually do about it. The technology is designed to protect both you and the merchant, but that protection comes with friction — and knowing where the friction lives helps you navigate it.

Key Takeaways

• Payment processors sit between your bank and the store's bank, converting your card data into a message both banks understand and then settling the money days later.
• Card networks (Visa, Mastercard, Discover, American Express) set the rules for how much merchants pay, how disputes work, and what counts as fraud.
• Authorization happens in seconds, but settlement — the actual movement of money — usually takes one to three business days.
• Chargebacks and disputes follow specific timelines and require documentation, so keeping receipts and transaction records protects you if something goes wrong.
• Different payment methods (debit card, credit card, ACH, digital wallet) move through different systems with different protections and different speeds.

How a single transaction moves through the payment system

The moment you hand over your card or phone, the store's payment terminal sends an encrypted message to a payment processor — a company like Square, Stripe, or First Data. That processor does not hold your money; it translates your card number and the dollar amount into a format that both your bank and the store's bank can read.

The processor then sends that message to the card network (Visa, Mastercard, Discover, or American Express), which routes it to your bank. Your bank checks whether you have the money and whether the transaction looks legitimate. If yes, your bank sends back an authorization code — a thumbs-up that takes about two seconds. The store sees that code on the receipt, and the sale goes through.

But your money has not actually moved yet. That happens later, in a process called settlement. At the end of the business day, the processor bundles all the store's transactions and sends them to the card network again, which sends them to your bank and the store's bank. Your bank pulls the money from your account; the store's bank deposits it into theirs. This usually takes one to three business days, which is why you see a "pending" charge before it becomes "posted."

Why authorization and settlement are two different things

A charge can be authorized but never settle, and that is when you see money disappear from your available balance but not from your actual balance. Hotels and rental car companies do this intentionally — they authorize a hold on your card to make sure you have the money, but they do not settle the charge until you check out or return the car. The hold usually drops after three to seven days if the charge never settles.

Sometimes a charge authorizes twice by accident. A store's terminal might time out, the customer might tap twice, or the processor might retry a failed message. You see two pending charges, but often only one settles. The other drops after a few days. If both settle, you have a duplicate charge, and you will need to contact the store or your bank to dispute it.

Understanding this gap also explains why your available balance and your actual balance can look different. Your available balance subtracts all pending charges; your actual balance only subtracts charges that have settled. Merchants see the authorization and assume the money is coming, so they ship the order or provide the service. If the charge never settles, the merchant loses the money and you keep yours — which is why merchants push back on chargebacks.

What card networks do and why they matter to you

Visa, Mastercard, Discover, and American Express do not move money themselves. They set the rules that your bank, the store's bank, and the processor all follow. They decide how much a merchant pays per transaction (usually 1.5 to 3.5 percent, depending on the card type and the merchant's size), what counts as fraud, how long a customer has to dispute a charge, and what documentation proves a dispute.

The card network also decides which merchants can accept which cards. Some small stores do not accept American Express because the fees are higher. Some online merchants do not accept debit cards because the chargeback rules are different. Gas stations might require a ZIP code or a PIN because the card network's rules say so. These are not the store's choices — they are the network's rules, and they affect what payment methods you can use where.

When you dispute a charge, you are not arguing with your bank or the store. You are filing a claim under the card network's rules, and the network decides who wins. That is why the timeline matters: Visa gives you 120 days to dispute a charge, but Mastercard gives you 120 days from when you first noticed the problem (not from when the charge posted). American Express is stricter. Knowing which card you used tells you how much time you have.

Different payment methods, different systems, different protections

A credit card, a debit card, and an ACH transfer all move through different technology and have different protections. A credit card charge goes through the card network and settles in one to three days. A debit card charge also goes through the card network but pulls directly from your bank account, so the money is gone immediately. An ACH transfer (like a direct deposit or a bill payment) goes through a completely different system called the Automated Clearing House and can take three to five business days.

Digital wallets like Apple Pay and Google Pay use the card network system but add an extra layer: your actual card number is never shared with the store. Instead, the wallet creates a one-time token that the processor converts back to your card number behind the scenes. This makes digital wallets more secure against theft at the point of sale, but the money still moves through the same card network and settles on the same timeline.

ACH transfers have their own rules because they do not go through a card network. Your bank and the receiving bank communicate directly through the Federal Reserve's system. ACH transfers are cheaper for merchants (sometimes free), which is why utilities and subscription services use them. But ACH also has weaker fraud protections than credit cards, and disputes take longer to resolve.

What happens when a charge goes wrong

If you see a charge you did not make, you have three options: contact the merchant, contact your bank, or file a chargeback through the card network. The fastest route is usually the merchant, because they can reverse the charge immediately without involving the bank or the network. If the merchant will not help, your bank can file a dispute, which asks the merchant's bank for proof that you authorized the charge. If the merchant cannot prove it, your bank refunds you.

A chargeback is a formal dispute filed through the card network, and it is the nuclear option. When you file a chargeback, the card network pulls the money back from the merchant's account and gives it to your bank, which credits your account. The merchant then has a chance to fight back with documentation — a signed receipt, an email from you, a tracking number showing delivery. If the merchant wins, the money goes back to them and comes out of your account again. Chargebacks are expensive for merchants (they pay a fee even if they win), so merchants take them seriously and often fight hard.

The timeline matters. You usually have 60 to 120 days to dispute a charge, depending on the card network. After that, the charge is final. Keeping receipts, emails, and transaction records protects you because if a dispute goes to the card network, you will need proof of what you authorized and what you received.

How payment technology protects against fraud

Every step in the payment chain has fraud checks. Your bank looks at the amount, the location, and your spending history — if you usually spend $50 a day and suddenly a $2,000 charge appears in another country, your bank might block it. The card network checks whether the merchant is legitimate and whether the transaction matches known fraud patterns. The processor checks whether the card number is valid and whether the expiration date matches.

Some fraud checks are automatic; others require you to act. If your bank blocks a charge, you might get a text asking you to confirm it. If you do not respond, the charge stays blocked. If a merchant's terminal asks for a PIN or a signature, that is a fraud check — it proves you physically have the card. If an online store asks for a CVV (the three-digit code on the back), that is a fraud check too, because a stolen card number alone is not enough.

The tradeoff is that these checks sometimes block legitimate charges. A charge from a new merchant, a purchase in a new location, or an unusually large amount can all trigger a block. This is frustrating, but it is also why fraudsters have a harder time using stolen cards than they used to. The more friction in the system, the more protection you have — but also the more times you might have to confirm a legitimate purchase.

Frequently Asked Questions

Why does a refund take longer than a charge?

A charge authorizes in seconds because your bank just checks whether you have the money. A refund has to settle through the same chain as the original charge — processor, card network, both banks — and that takes one to three business days. Some banks hold refunds for an extra day or two before posting them to your account, so you might see five to seven days total.

Can a store charge my card without my permission?

Not legally. Every charge requires authorization, either from you (you swiped or tapped the card) or from a signed agreement (a subscription or a recurring payment you set up). If a store charges you without either, that is fraud, and you can dispute it. Merchants who process charges without authorization face fines from the card networks and can lose their ability to accept cards.

What is the difference between a pending charge and a posted charge?

A pending charge is authorized but has not settled yet. It reduces your available balance but not your actual balance. A posted charge has settled — the money has actually moved from your bank to the merchant's bank. Pending charges usually become posted within one to three business days, but they can drop if the merchant never completes the settlement.

If I dispute a charge, will the merchant know it was me?

Yes, eventually. When you file a dispute with your bank or the card network, the merchant's bank notifies them that a chargeback has been filed. The merchant then has a chance to respond with proof that you authorized the charge. If you file a dispute and the merchant fights back with documentation, you might end up in a back-and-forth with the card network. It is better to contact the merchant directly first if you can.

Why do some stores ask for a ZIP code or ID when I use my card?

These are fraud checks required or recommended by the card networks. A ZIP code check confirms that the billing address on your card matches what you entered. An ID check confirms that you are the person whose name is on the card. Stores are not required to do these checks, but they reduce the store's liability if a charge turns out to be fraudulent, so many do them anyway.