Complete Guide to Payment Processing for Small Business 2026

Complete Guide to Payment Processing for Small Business 2026

Every time a customer swipes a card at your business, a complex chain of events unfolds in milliseconds. Understanding how payment processing works helps you choose the right provider, negotiate better rates, and avoid costly mistakes.

The Four Parties in Every Transaction

Payment processing involves four key players working together:

1. The merchant — your business, accepting the payment
2. The customer — the cardholder making the purchase
3. The acquiring bank — your bank that receives the funds
4. The issuing bank — the customer's bank that holds their money

The card networks (Visa, Mastercard, Amex, Discover) sit in the middle, routing transactions and setting the rules everyone must follow.

How Money Actually Flows

The process happens in three stages:

Authorization happens at the moment of purchase. Your terminal sends the transaction to your processor, who routes it through the card network to the issuing bank. The bank checks whether the card is valid and funds are available, then returns an approval or decline — all within 1-3 seconds.

Capture occurs when you finalize the transaction. For most retail purchases, authorization and capture happen simultaneously. For restaurants (where tips are added later) or hotels (where final amounts vary), capture happens separately after the authorization hold is placed.

Settlement is when funds actually move. Your processor batches all your day's transactions and submits them to the card networks, which move money from issuing banks to your acquiring bank. This typically takes 1-2 business days, though some processors offer same-day or next-day funding.

Understanding the Three Fee Layers

Every card transaction has three cost components stacked on top of each other:

Interchange fees are set by Visa and Mastercard and go to the issuing bank. These range from 0.05% for basic debit cards to 2.4% or more for premium rewards cards. Interchange varies by card type, transaction type, and merchant category — you can download the full interchange tables from Visa and Mastercard's websites.

Assessment (network) fees go to the card networks themselves. Visa charges 0.13% + $0.0195 per transaction; Mastercard charges 0.1375% + fees that vary by transaction type. These are small but non-negotiable.

Processor markup is what your payment processor charges on top. This is the only fee you can negotiate. Different pricing models present this markup differently (see below).

Payment Gateway vs Processor vs Merchant Account

These three terms cause enormous confusion. Here's the plain-English breakdown:

• Payment gateway: the software that securely transmits card data from your checkout to the processor. Think of it as a secure pipe.
• Payment processor: the company that handles the actual transaction routing, settlement, and risk management.
• Merchant account: a special bank account that holds funds between settlement and deposit into your business bank account.

Modern processors like Stripe and Square bundle all three into one product. They're called "payment service providers" or "aggregators" — you're part of a shared merchant account rather than having your own dedicated one. This makes setup instant and simple, with the tradeoff that account stability can be lower for certain business types.

Key Decisions for Small Businesses

Flat-rate vs interchange-plus pricing: Flat-rate is simpler (one rate for all cards) and better for low-volume businesses. Interchange-plus is transparent and cheaper at higher volumes. The crossover is roughly $10,000-20,000/month.

Integrated vs standalone POS: Modern integrated systems (Square, Toast, Clover) combine payment processing with inventory, reporting, and employee management. Standalone terminals are cheaper upfront but create data silos.

Online-only vs in-person needs: Card-present transactions have lower fraud risk and lower interchange rates. If you have both online and in-person sales, choose a processor that handles both well and gives you unified reporting.