Card Payments & Acquiring
Card payments move through a chain of parties: the merchant's gateway captures the payment, the acquirer sends it through a card network such as Visa or Mastercard to the issuing bank for authorization, and the acquirer later settles the funds to the merchant after clearing.
Card acceptance looks like one API call to a merchant and is a chain of contracts, messages and risk decisions underneath. These guides follow a card payment through gateways, acquirers, networks and issuers, and cover the standards, devices and operating work that keep acceptance reliable.
The full topic archive.
Card-present vs card-not-present transactions: what is the difference?
Whether the card was present decides more than the checkout screen. It sets the fraud risk, who pays for fraud, the interchange rate, the data the issuer sees and, in Europe, how authentication works.
EMV certification levels L1, L2 and L3 explained for POS terminals
A terminal with an EMVCo approval is not yet ready to take payments with your acquirer. Level 3 is where your configuration, host and card networks meet, and where most launch delays sit.
What is girocard? Card acceptance in Germany explained
Most German debit cards carry girocard plus an international brand. The international logo is easy to accept; girocard changes routing, refunds and recurring payments.
How do contactless card payments work? NFC, EMV contactless and limits
A tap is a full chip transaction squeezed into a short radio exchange. What changes is verification, and in the UK the fixed £100 regulatory cap ended in March 2026 even though most cards still stop there.
How does a payment gateway process a card payment? Step by step
The approval a customer sees in two seconds is only the second of six steps. Clearing, settlement and funding decide when the merchant is actually paid.
Interchange-plus vs flat-rate pricing: how to read card fees and spot overpaying
Every card fee contains interchange, scheme fees and a provider markup. Pricing models only change how much of that split you can see and negotiate.
ISO 8583 vs ISO 20022: will card payments move to ISO 20022?
Swift finished its ISO 20022 switch in November 2025. ISO revised ISO 8583 in 2023. For card products, that points to coexistence, not a cutover.
What is mada? How card payments work in Saudi Arabia
A mada card is co-branded with Visa or Mastercard, so one plastic can run on two networks. Knowing which one a payment uses is most of a merchant's setup work in Saudi Arabia.
What does an acquirer's merchant support operation do?
A merchant sees one support number. Behind it, an acquirer runs onboarding, terminal, settlement, dispute and risk teams that each own a different part of the same payment.
Network tokens vs gateway tokens: what is the difference?
A gateway token keeps the card number out of your database. A network token keeps it out of the payment itself. Most card-on-file merchants end up using both.
How do you choose a payment gateway in Saudi Arabia? mada, SAMA licensing and integration
In Saudi Arabia a technical gateway can connect you to mada, but only a bank or a SAMA-licensed payment company may onboard you and settle your money.
Does a payment gateway in the UAE need a CBUAE licence? Licensing and how to choose a provider
In the UAE the licence follows the money, not the label. A gateway that only moves data can sit outside the CBUAE regime; whoever acquires, aggregates or settles your funds cannot.
How do you choose a payment gateway in the UK? A checklist for cards and pay by bank
There is no best UK payment gateway, only one that fits your sales, risk and finance team. Here is what to check and what evidence to ask for.
Why did my payment processor hold my funds? Reserves, paused payouts and reviews
A processor holds funds when it fears refunds and chargebacks your balance cannot cover. Identify which hold you have, then answer the risk with evidence.
POS vs mPOS vs SoftPOS: what is the difference for merchants?
A phone can now take a contactless card payment with no extra hardware. Whether it should replace your terminals depends on chip insert, PIN, volume and who carries the certification.
How card acceptance works in the UAE: a merchant guide
UAE card acceptance now has three layers: international schemes, the new Jaywan national scheme and Aani instant payments. Each one changes what you should ask an acquirer.
What is EMV? How chip cards and EMVCo standards work
A magnetic stripe hands over the same data every time. An EMV chip proves it is genuine with a fresh cryptogram on every payment, which is why copied card data stopped being worth much in stores.
What is merchant acquiring and how does it work?
An acquirer lets a merchant accept cards, pays that merchant, and answers to the card networks when the merchant's chargebacks or failure cost money.
What is Visa Token Service (VTS) and how does it work?
VTS replaces the 16-digit card number with a token that only works where it was issued, and keeps it current when the card changes. Here is how the pieces fit.
Read the ISO 8583 profile before copying a field table
An old field table cannot establish a new partner's interface contract. Find the governing profile and resolve conflicting source documents before mapping.
Choose a payment gateway with a responsibility map
A gateway feature list cannot tell a merchant who will resolve a stalled refund. Test the responsibility map for the actual contracted route.
ISO 8583 Payment Message Lifecycle
ISO 8583 gives card participants a common message interface. The network profile and acquirer contract determine the fields, code meanings, timing, and recovery behavior your integration must implement.
Wallet Tokens Protect Credentials. Operations Still Own the Payment.
A wallet tap changes the credential used to pay. Product teams still need clear payment outcomes, token lifecycle handling and reconciliation.
Approved Is Not Paid Out
A card tap can be approved while the merchant still waits for capture, settlement and payout evidence. Product teams should model each state separately.
Payment Aggregator vs Payment Gateway vs Payment Processor: Who Does What
A card payment can involve a merchant-facing provider, gateway, processor, network, and acquirer. Companies may bundle these functions, so map the contract, transaction path, and settlement responsibilities for the exact product.
Syria Card Reconnection Needs Acceptance Proof
Syria's card-network reconnection is not only a symbolic POS payment. Operators need proof across merchant onboarding, authorization, settlement, refunds and support.
Jaywan Acceptance Needs Payment Evidence, Not Just Logos
Jaywan acceptance is no longer only a scheme-launch claim. The useful operator question is whether merchants, acquirers, issuers and the network can prove what happened after every payment.
UAE Open Finance Pay by Bank Needs Checkout Gates
UAE Open Finance is moving Pay by Bank from framework to checkout. Here is the go-live gate I would require before scaling it for merchants.
Marqeta and Riskified Move False Declines Into Issuer Controls
Marqeta and Riskified's issuer-risk integration is a card-programme signal: false declines are partly an issuer authorization problem. Issuers need merchant intelligence, rule feedback, override paths, and evidence that protects approvals without weakening fraud controls.
Checkout.com UAE SVF Approval Turns Liquidity Into a Payment Control
Checkout.com's UAE SVF in-principle approval is a MENA payments signal: unified acquiring and issuing only works when liquidity, safeguarding, authorization, settlement, and reconciliation controls are designed before scale.
Splitit and 1stMILE Make Installments an Issuer Control Surface
Splitit and 1stMILE's automotive repair rollout turns BNPL distribution into an issuer-control problem: authorization, merchant funding, disputes, and support all need ownership before scale.
Visa VIA Makes Acquirer Routing an Evidence Test
Visa Intelligent Authorisation is useful because it makes acquiring modernization measurable: routing, resilience, risk alerts, visibility, and settlement oversight have to become one evidence loop.
Thredd and Pliant Make U.S. Credit Issuing a Control Test
Pliant's U.S. commercial credit launch with Thredd, Visa, and Coastal is not only a market-entry story. It is an issuing-control test across sponsorship, authorization, credit policy, ledger evidence, and customer operations.
Adyen's Peak Season Data Needs an Acquiring Control Room
Peak season is not only a traffic test. It is a pressure test of the acquiring operating model across payment methods, authorization, fraud, refunds, incident ownership, and post-season learning.
Mastercard's Scam Rules Move Fraud Into Acquirer Operations
Mastercard's scam-merchant monitoring shift is not just a fraud-rule update. It moves scam detection into acquirer and payment facilitator operations, where merchant onboarding, monitoring, dispute evidence, and shutdown authority have to work as one control loop.
Marqeta and zerohash Turn Stablecoins Into Card Programme Controls
A stablecoin-backed card programme is not a crypto shortcut. It is an issuing operating model where custody, authorization, ledgering, fiat merchant settlement, risk policy, and customer disclosures have to meet inside one decision loop.
Capital One's Discover Test Turns Issuing Into Network Strategy
The Discover integration is not just a card-portfolio migration. It is a test of whether an issuer can move economics, acceptance, wallets, servicing, and customer trust onto a new network without making the customer feel the operating model.
Checkout Friction Is an Acceptance Operating Model
Checkout conversion does not improve because a merchant adds one feature. It improves when onboarding, saved credentials, payment choice, routing, and trust are run as one acceptance system.
Marqeta's STIP Lesson: Issuer Resilience Is a Product Control
Stand-in processing is not just uptime insurance. It is a live authorization policy that decides which cardholders can still transact when the core path is broken.
Acceptance Rate Is an Operating Model, Not a Dashboard Metric
Acceptance rate only creates value when a merchant can explain the numerator, the denominator, the retry policy, and the owner of each decline state.
Spreedly's Standalone Vault Turns Credential Ownership Into Product Strategy
A payment vault is not only a security store. It is the control point that decides how much future product optionality a merchant keeps.
Mastercard Wallet Services Makes Wallets an Issuer Operating Model
Mastercard Wallet Services is not just another SDK. It turns issuer wallets into a tokenization, secure element, lifecycle, and support operating model.
Ajman Bank and AFS Make Merchant Acquiring a Platform Bet
The Ajman Bank and AFS MoU is not just partnership news. It shows how banks turn merchant acquiring into a broader business platform.
Checkout.com Shows Pay-In and Payout Need One Control Plane
One vendor for acquiring and issuing removes handoffs, but the value only lands when customer collection, supplier payout, liquidity, risk, and reconciliation agree in one control plane. Travel exposes the gap first.
85,000 Amex Locations: The UAE Acceptance Work Starts Now
American Express and Network International can widen UAE acceptance quickly. Sustainable value depends on merchant activation, clean settlement, and repeat card use.
Adyen's UAE License Makes Merchant Acquiring More Local
Adyen's UAE approval is not just expansion news. It changes who controls settlement, compliance loops, and merchant operating reliability.
Authorization Rate Is a Merchant P&L Metric, Not a Gateway KPI
Authorization rate belongs in the merchant P&L, but only when teams measure clean attempts, incremental approvals, fraud, fees, and fulfilment together.
Visa DCAP Makes Authentication an Acquiring Economics Decision
Visa's Digital Commerce Authentication Program makes Data Only 3DS a commercial acquiring decision: the savings matter only when eligibility, authorization, latency, and disputes are measured together.
Mollie's EEA Expansion Is a Localisation Infrastructure Bet
Mollie is committing EUR350 million over five years to ship local payment methods, onboarding, support, settlement, and reconciliation as one merchant operating system. Country coverage was always the weak proxy.
Hosted Checkout vs Direct Card Processing: A Product Decision Guide (MPGS, MDES, 3DS)
A practical way to decide which card-acceptance responsibilities to retain, outsource and validate with providers.
BIN Routing and Scheme Selection: When To Override the Card-Brand Default
BIN routing is the last unglamorous lever in card acquiring. It sits below product, below 3DS2, below tokenisation, and on a portfolio the size of a billion, it moves more authorisation rate than most things the team will ship this year.
Click to Pay (VCTP / MCTP): The Scheme-Led Checkout Standard, How It Actually Works
Click to Pay is the schemes' answer to Apple Pay and Google Pay: a scheme-owned checkout standard that lifts authorisation rate and removes card-number entry. It works. It is just badly marketed. This is the practical map.
Compelling Evidence 3.0 (Visa): What Changed, and How To Actually Win Disputes Now
Compelling Evidence 3.0 is the most consequential dispute-rule change Visa has shipped in a decade. The mechanics look like a documentation update; the operating implication is a complete rework of how acquirers capture, store and present transaction evidence.
CyberSource Architecture: The Visa-Owned Payment Gateway, How It Differs From MPGS
CyberSource is the gateway Visa wants you to standardise on. The product surface is broader than MPGS: Decision Manager and Flex Microform have no Mastercard equivalents, but the integration patterns and lifecycle traps are different in important ways.
EMV 3DS2: Step-Up Logic, Frictionless Flow and the Auth-Rate Optimisation Nobody Explains
EMV 3-D Secure exchanges authentication data between payment participants. Learn the frictionless and challenge paths, what merchants can control, and where regulatory exemptions fit.
PSD2 SCA Exemptions and MITs: An Operator Guide
PSD2 defines specific cases where a payment service provider may not apply SCA. MITs are treated separately. This guide maps the distinction to payment operations without assuming issuer approval.
Scheme Settlement: T+1 vs T+0 vs Real-Time and the Working-Capital Math That Decides
Every PM in card acquiring eventually meets the merchant who wants 'same-day settlement'. The mechanics behind the ask are usually misunderstood by both sides. Scheme settlement timing is partly a product feature, partly a working-capital problem, and almost entirely about which balance sheet carries the float.
Network Tokenization: Lifecycle, Portability and PCI Scope
Network tokens can replace PAN in supported payment flows, but token types, provider relationships, lifecycle support, and PCI scope still need careful design.
MPGS Architecture: How Mastercard Payment Gateway Services Actually Works (and Where It Breaks)
Mastercard Gateway offers hosted payment interactions and APIs whose behavior depends on the acquirer configuration and integration version. Choose a flow by requirements, then validate its actual contract and state handling.
Common questions about Card Payments & Acquiring.
What is the difference between card-present and card-not-present payments?
A card-present payment is made with the physical card or a mobile wallet at a terminal, so the chip or contactless interface can authenticate the card. A card-not-present payment, online, in an app or by phone, relies on other checks such as 3-D Secure, so fraud patterns, liability rules and costs differ.
What does a merchant acquirer do?
An acquirer contracts with the merchant to accept card payments, submits the merchant's transactions to the card networks and settles the funds to the merchant. It also underwrites the merchant, because it remains responsible to the networks for risks such as chargebacks the merchant cannot cover.
What are network tokens?
Network tokens replace the card number with a token issued through a card network's token service, such as Visa Token Service or Mastercard Digital Enablement Service (MDES). The token can be limited to one merchant or device and is updated when the underlying card is replaced.