What a merchant credit card is and who needs one
A merchant credit card is a payment processing account that lets a business accept credit and debit card payments from customers. When a customer swipes, taps, or enters their card number, the merchant account processes that transaction, deposits the money into your business bank account, and handles the paperwork between your business, the customer's bank, and the card networks (Visa, Mastercard, American Express, Discover).
You need a merchant account if you take card payments in any form: in a physical store, online, over the phone, or through a mobile device. Without one, you can only accept cash, checks, or bank transfers. Most small businesses set up a merchant account within their first few months of operation, though some use a third-party processor like Square or PayPal instead of opening a traditional merchant account directly.
The merchant account itself is separate from your business bank account. The processor holds funds briefly, deducts their fees, and then deposits what remains into your bank account — usually within one to three business days.
Key Takeaways
- A merchant account lets you accept card payments and deposit the proceeds into your business bank account, minus processing fees.
- You pay interchange fees (set by card networks), assessment fees (set by card networks), and processor markup (set by your provider) — the total usually ranges from 1.5% to 3.5% per transaction.
- Traditional merchant accounts require a business license, tax ID, and often a personal may provide; third-party processors like Square have lower barriers but higher per-transaction costs.
- Monthly minimums, statement fees, and PCI compliance costs are common add-ons that vary widely between providers.
- Comparing total cost across all fees — not just the per-transaction rate — is the only way to know which provider will cost you less.
How fees work and what you actually pay
Merchant processing fees have three layers, and understanding each one prevents sticker shock when your first statement arrives. The first layer is interchange, which is the fee the card networks (Visa, Mastercard, etc.) charge every time a card is processed. You do not negotiate this — it is set by the network and varies by card type. A rewards credit card costs more to process than a basic debit card. A business card costs more than a consumer card. Interchange typically runs 1.3% to 2.2% of the transaction amount.
The second layer is the assessment fee, also set by the card networks. This is smaller — usually 0.1% to 0.3% — and covers the network's operating costs. Again, you cannot negotiate this.
The third layer is your processor markup, which is what your payment processor (your bank, a payment company, or a third-party service) charges on top of interchange and assessment. This is where you have room to negotiate. A traditional merchant account provider might charge 0.25% to 0.5% markup. A third-party processor like Square or Stripe might charge 2.6% + $0.10 per transaction, which bundles all three layers into one straightforward rate.
Your total cost per transaction is the sum of all three. On a $100 credit card sale, you might pay $1.50 to $3.50 in fees depending on the card type and your processor. Monthly statement fees, PCI compliance fees, and gateway fees add to this. Always ask a processor for an itemized fee schedule before signing up — the advertised rate is never the whole story.
Traditional merchant accounts versus third-party processors
A traditional merchant account is opened directly with a bank or a dedicated merchant services company. You provide a business license, tax ID (EIN), personal credit report, and often a personal may provide (meaning you are liable if the business cannot pay). The underwriting process takes three to seven business days. Once approved, you receive a terminal or online gateway to process cards. You pay interchange, assessment, and the provider's markup separately, which means you see exactly what each layer costs.
A third-party processor like Square, Stripe, PayPal, or Toast bundles all fees into one rate and handles underwriting in minutes. You do not need a business license or tax ID in many cases — a Social Security number and a bank account are often enough. Setup is faster and the barrier to entry is lower. The trade-off is that the bundled rate is usually higher than what you would pay with a traditional account if you process high volume, because the processor is taking on more risk and does not know your business history.
Choose a traditional account if you process more than $10,000 per month and can wait a week for approval. Choose a third-party processor if you are just starting out, process lower volume, or need to accept cards when ready. Some businesses use both — a third-party processor for in-person sales and a traditional account for online orders, for example.
What happens during underwriting and approval
When you explore for a traditional merchant account, the processor runs a background check, reviews your business structure, and looks at your personal credit report. They are assessing the risk that you will process fraudulent transactions or disappear without paying chargebacks. The process usually takes three to seven business days, though some banks take longer.
You will need to provide: a copy of your business license or articles of incorporation, your tax ID (EIN) or Social Security number, a voided business check, and sometimes a copy of your lease or utility bill to verify your business address. If you have been in business less than two years, they may ask for personal tax returns or bank statements to verify income.
Third-party processors skip most of this. They verify your bank account by depositing two small amounts and asking you to confirm them, and they may run a soft credit check. Approval happens in minutes to hours. The downside is that if fraud occurs, the processor can freeze your account and hold funds while they investigate — sometimes for weeks.
Monthly costs and hidden fees to watch for
Beyond per-transaction fees, merchant accounts often charge monthly statement fees ($5 to $15), PCI compliance fees ($10 to $30 per month if you store card data), gateway fees ($10 to $30 per month if you process online), and batch fees ($0.25 per batch of transactions). Some providers charge a monthly minimum — you pay at least $25 or $50 per month regardless of volume. If you process less than that, you pay the difference.
Annual fees are less common but do appear. Some providers charge an annual PCI compliance fee or a gateway renewal fee. Always ask whether the quoted rate includes or excludes these add-ons. A processor advertising "1.5% per transaction" might actually cost you 2.2% once you add the monthly fees and divide by your transaction volume.
Third-party processors usually have no monthly minimum and no hidden fees — what you see is what you pay. This makes budgeting easier for a new business, though the per-transaction rate is higher. Calculate your expected monthly volume and multiply it by each provider's total cost to compare apples to apples.
Chargebacks, disputes, and your liability
A chargeback occurs when a customer disputes a charge with their bank and the bank reverses the transaction, pulling the money back from your account. Common reasons are fraud, the customer claiming they never received the item, or the customer claiming the charge was unauthorized. When a chargeback happens, you lose the sale amount plus a chargeback fee (usually $15 to $100 per dispute).
You can dispute a chargeback by providing evidence — a signed receipt, a tracking number showing delivery, an email from the customer authorizing the charge. If you win the dispute, the money is returned and the fee is waived. If you lose, the money stays gone and the fee stands. Too many chargebacks (usually more than 1% of your monthly volume) can get your merchant account closed.
This is why keeping clear records matters: save order confirmations, shipping receipts, and customer communications. For in-person transactions, always get a signature or PIN verification. For online transactions, use address verification and CVV checks to reduce fraud risk. Your processor can show you your chargeback rate and help you identify patterns.
PCI compliance and data security requirements
PCI compliance refers to a set of security standards set by the card networks to protect customer card data. If you store, process, or transmit card information, you must follow these standards or face fines and account closure.
The simplest way to stay compliant is to never store card data yourself. Use a payment processor or gateway that is PCI-certified — they handle the security and you do not touch the raw card numbers. If you use Square, Stripe, or PayPal, they manage PCI compliance for you at no extra cost.
If you do store card data (for recurring billing, for example), you must pass an annual PCI audit, which costs $500 to $2,000 depending on your volume and the auditor. You must also use encrypted connections, keep software updated, and use strong passwords. Many small businesses avoid this by using a processor that handles storage and compliance for them, even if the per-transaction fee is slightly higher.
Comparing providers and choosing the right fit
Start by listing what you need: Do you need in-person processing, online processing, or both? Do you need to process recurring charges? How much volume do you expect in your first year? Do you need reporting features or integration with accounting software?
Then get quotes from at least three providers. Request an itemized fee schedule that shows interchange, assessment, markup, monthly fees, gateway fees, PCI fees, and chargeback fees. Calculate your expected monthly cost by multiplying your expected transaction volume by the per-transaction rate and adding the monthly fees. Do this for each provider.
Do not choose based on the advertised rate alone — that number is meaningless without the full fee picture. A provider advertising 1.5% might cost you more than one advertising 2.6% + $0.10 if the first one has high monthly fees and the second one does not. Read reviews from other small businesses in your industry, because costs and service vary by business type. Restaurants, nonprofits, and high-risk businesses (like cannabis retailers) often pay more.
Frequently Asked Questions
Do I need a separate merchant account or can I use PayPal or Square?
You can use either. PayPal and Square are merchant accounts — they just handle underwriting and setup differently. A traditional merchant account through a bank may have lower per-transaction fees if you process high volume, but PayPal and Square are faster to set up and have no monthly minimums. Choose based on your volume and how quickly you need to start accepting cards.
What happens if my merchant account is closed?
The processor will notify you in writing and usually give you 30 to 60 days to process remaining transactions and withdraw your funds. Common reasons for closure are too many chargebacks, fraud, or processing in a high-risk category without disclosure. To avoid this, keep your chargeback rate below 1%, process only legitimate transactions, and disclose your business type honestly during underwriting.
Can I negotiate merchant fees?
You can negotiate the processor's markup, but not interchange or assessment fees — those are set by the card networks. If you process high volume (over $50,000 per month), you have more leverage. Ask your processor if they offer volume discounts or if they can lower their markup in exchange for a longer contract. Third-party processors have fixed rates and do not negotiate.
How long does it take to receive money after a customer pays?
Most processors deposit funds within one to three business days. Some offer next-day deposits for an extra fee. Weekend and holiday transactions may take longer. Check your processor's settlement schedule before signing up if cash flow timing matters to your business.
What is the difference between a merchant account and a payment gateway?
A merchant account processes the transaction and moves money. A payment gateway is the software that securely transmits card information to the processor. You need both. Many providers bundle them together, so you do not think about them separately — but some businesses use one company's gateway with another company's merchant account.