Payments, retention and operations
How payment processing works: one $69 order from the Pay button to your bank account
A card payment is approved in seconds, but the money takes days to reach you and months to become final. To show how payment processing works, this follows one $69 supplement order from the Pay button to your bank: who approves it, who takes which part of the fee, and how the sale can still be reversed.
Reading pathPart 3 of 8 · Getting paid, from the CTA click to the bank
- Checkout Abandonment: Why Buyers Leave, How to Fix It
- Trust Badges: Which Help at Checkout and Which Mislead
- How Payment Processing Works, From Pay to Payout
- Payment Authorization Rate: Declines and Retry Rules
- 3D Secure: Liability Shift, SCA and When to Use It
- Card Testing: How to Spot and Stop a Carding Attack
- Chargeback Representment: How to Win a Chargeback
- How to Reduce Chargebacks: Fix Each Dispute Reason
On this page
- How payment processing works for one $69 order
- Who does what: issuer, acquirer, network, gateway, processor
- When each step happens, from the purchase to the payout
- Where the fee on a $69 order goes
- Merchant account, payment facilitator or merchant of record
- Where a sale can still come undone
- What to ask your processor before you scale
- Frequently asked questions
Payment processing works in two halves. At the moment of purchase, your gateway passes the card details to your processor, the card network routes an authorization request to the bank that issued the card, and that bank approves or declines. Over the following days the sale is captured, cleared and settled between the banks, and your acquirer pays you the amount minus its fee.
How payment processing works for one $69 order
A buyer watches your video sales letter, clicks through to checkout, picks one bottle at $69 and pays with a Visa credit card. Open each stage to see what happens, why it matters to you and what can go wrong:
The life of one $69 order
Open a stage to see what happens there
1The buyer presses Pay
What happens: Your checkout collects the card details, and the payment gateway sends them to your processor.
Why it matters: Mistakes made here come back as declines.
What goes wrong:
- A form that accepts a mistyped number or a past expiry date
- No security code or address check, both of which Visa recommends
2Sometimes: the issuer checks who is paying
What happens: With 3D Secure, the issuer can authenticate the buyer, in the background or with a prompt such as a one-time code.
Why it matters: Required for most online card payments in Europe, optional in the US, where stores use it to shift fraud liability.
What goes wrong:
- Treating the liability shift as guaranteed
- Skipping it for cards from Europe, whose banks may decline unauthenticated payments
Read more: 3D Secure: Liability Shift, SCA and When to Use It
3Authorization: the issuer says yes or no
What happens: The card network routes the request to the card’s issuer, which approves or declines. An approval holds $69 on the card.
Why it matters: The issuer decides, and only it knows why it said no.
What goes wrong:
- Generic declines that don’t say why
- Retries the network doesn’t allow
Read more: Payment Authorization Rate: Declines and Retry Rules
4Capture: you collect what was held
What happens: Capturing collects the held amount, at once or later.
Why it matters: For most online card payments a hold lasts about a week; if it expires first, the money is released.
What goes wrong:
- A backorder that outlives its hold
- Shipping an order you suspect is fraud instead of canceling it
5Clearing: the sale reaches the statement
What happens: The purchase details reach the issuer, which posts the charge to the buyer’s statement, usually within a day.
Why it matters: This is where the buyer meets your billing descriptor, often long after watching your video.
What goes wrong:
- A descriptor the buyer doesn’t recognize
- Presenting the sale too late, which Visa ties to dispute condition 11.3
Read more: Billing Descriptor: What Buyers See and Recognize
6Settlement and payout: the money reaches you
What happens: The network nets what each bank owes, interchange goes to the issuer, and your acquirer credits you the sale minus its fee.
Why it matters: Your ad spend went out long before.
What goes wrong:
- A reserve that holds back part of each sale
- Risk reviews that keep an account off the default payout timing
Read more: High-Risk Merchant Accounts for Supplement Brands
7Later: a chargeback runs it backwards
What happens: The buyer can dispute the payment, typically for up to 120 days, and the issuer can take the money back.
Why it matters: Only the issuer can start one, and the networks’ monitoring counts disputes won or lost.
What goes wrong:
- Disputes still arriving months after a strong month
- Refunding after the dispute opened, which doesn’t undo it
Read more: Chargeback Ratio: How Visa and Mastercard Count It
You start the payment and you receive the money, but every decision in between belongs to someone else: the issuer approves, the network sets the rules and the interchange, and your processor and its bank decide when you're paid. When something breaks, the first job is knowing which of them to ask.
Who does what: issuer, acquirer, network, gateway, processor
The Federal Reserve describes a card payment as four parties: the cardholder, the issuer (the bank that issued the card), the merchant and the acquirer (the merchant's bank). The card network, such as Visa or Mastercard, carries the data between the two sides, and specialized processors can do some of the work in between (Federal Reserve).
Online, the payment gateway captures the card details at your checkout and passes them to the payment processor, the company that handles the authorization for you (Authorize.net). One company can fill several roles: Authorize.net sells its gateway and a merchant account together or separately.
Two of the parties decide most of what happens to your money. The issuer approves or declines, and most declines come back classified as generic, with the details discussed only with the cardholder (Stripe). The acquirer carries your risk. Visa's dispute monitoring is the Visa Acquirer Monitoring Program, and Visa's paper on payment facilitators makes acquirers responsible for the acts of both the facilitators and the merchants they sign up (Visa). Underwriting, reserves and dispute limits start there.
When each step happens, from the purchase to the payout
Authorization happens while the buyer is still at checkout. Everything after it runs on the banks' schedule and your processor's:
From Pay to payout: when each step happens
Typical timings for an online card payment
- At purchaseAuthorizationThe issuer approves or declines.
- Within the holdCaptureAbout a week for most online card payments.
- Usually within a dayClearingFor payments authorized first (Mastercard).
- After clearingSettlement between banksThe network works out what each bank owes (Federal Reserve).
- 2 business daysFunds availableOn Stripe in the US.
- 7 to 14 daysA new account’s first payoutTypical on Stripe, by industry, country and risk level.
- Typically 120 daysThe dispute window closesLonger in some cases.
Three of those dates shape a paid-traffic funnel.
The hold. An authorization only reserves the money, and if it expires before you capture, the funds are released (Stripe). For most online card payments that's about a week, so a pre-order or a backorder can outlive its hold.
The payout. On Stripe in the US, funds typically become available two business days after a payment, and a new account's first payout usually arrives within 7 to 14 days of its first live payment, depending on industry, country and risk level (Stripe). Other processors set their own schedules. Either way, the ads get paid first: at an illustrative $3,000 a day, a new account can spend $42,000 on traffic before its first payout lands.
The dispute window. Card networks typically let cardholders dispute a payment within 120 days, longer in some cases (Stripe), so money in your bank isn't final money. Visa and Mastercard also count those disputes against your account, whether you win them or not.
Where the fee on a $69 order goes
You never get an interchange bill. The card network sets interchange and your acquirer pays it to the card's issuer, while you pay your acquirer a merchant discount that covers it (Federal Reserve). The fee you pay has three parts: interchange for the issuer, network fees (the networks' own scheme fees, which can include authorization and cross-border fees, per Stripe) and the processor's markup. On interchange-plus pricing, the processor passes the first two through at cost and adds its markup. On a flat rate, you pay one percentage plus a fixed fee per transaction, whatever card the buyer used (Stripe).
Interchange is the part anyone can look up. Since April 18, 2026, Visa's US table puts consumer credit cards used online in a "Card Not Present Fee Program", with rows such as "Product 1" and "Non-Qualified Consumer Credit". The same $69 order costs very different amounts depending on the card:
Interchange on the same $69 online order, by card
Four rows of Visa’s US table, rates effective April 18, 2026
The smallest bar is set by regulation. For debit cards from issuers with $10 billion or more in assets, the Federal Reserve's Regulation II caps interchange at 21 cents plus 0.05% of the sale, plus up to 1 cent for issuers that meet its fraud-prevention standards (Federal Reserve). Visa's April 2026 table still applies that cap. In August 2025 a federal court in North Dakota found the regulation contrary to law, then put its ruling on hold while the Fed appeals (ABA Banking Journal). The Eighth Circuit heard the appeal in May 2026 (Courthouse News) and had not ruled as of October 2026, so check before you plan around the number. On a big bank's debit card, the same bottle carries less than a fifth of the interchange it carries in the cheapest credit row above.
That spread is what a flat price has to absorb. Say your processor charges an illustrative flat 3.5% + $0.30: $2.72 on the $69 order. With a card in the "Product 1, All Other Products" row, $1.40 of it goes to the issuer and $1.32 is left for network fees and the processor. With a card in the "Non-Qualified" row, the issuer takes $2.27 and $0.45 is left. Interchange-plus shows you each card's real cost instead. Which model is cheaper depends on your card mix, so compare offers on your effective rate: a month's fees divided by a month's card sales. If 600 orders at $69 bring in $41,400 and the month's fees come to $1,630, your effective rate is 3.9%, and that's the number to hold against any quote.
RevvyScales' profit tracking, on the Growth plan and up, subtracts gateway fees from revenue along with ad spend and product costs, so the margin it shows for each campaign is the margin after fees (profit tracking).
Merchant account, payment facilitator or merchant of record
How you're signed up decides who carries the risk, whose rules you follow and who answers the disputes. A supplement brand has three options:
Three ways to take card payments
You’re the merchantYour own merchant account
You sign with an acquirer directly, after its underwriting.
- Terms and any reserve set for your business
- Refunds and chargebacks are yours
The catch: paperwork and time, and a supplement brand may be treated as high risk.
You’re a sponsored merchantPayment facilitator
A provider signs you on behalf of its acquirer and receives your settlement first.
- The provider holds the relationship; Visa’s merchant rules still apply
- You stay the merchant of record: refunds and chargebacks are yours
The catch: the provider’s own risk reviews decide reserves and holds.
Someone else is the merchantMerchant of record
Another company sells to your buyer and is legally responsible for the payment.
- It handles refunds, chargebacks and sales tax
- It carries compliance duties such as PCI DSS
The catch: much of the control sits with that company.
The payment facilitator route has a ceiling. Once a sponsored merchant's annual Visa sales pass US$1,000,000, Visa requires the acquirer to be added to its agreement (Visa). A footnote in Visa's overview of the model excludes high-integrity-risk merchant categories and merchants that take advance payments, and points to the Visa Rules for details, so a supplement brand nearing that line should ask its provider what applies.
"Merchant of record" is industry language rather than the networks'. Visa's own papers describe merchants, payment facilitators and marketplaces, and the marketplace is the model in which the platform handles refunds and disputes between buyer and seller. Whichever set-up you choose, get three answers in writing before the first sale: who the buyer's bank sees as the merchant, who answers the disputes, and who can hold back your money.
Where a sale can still come undone
Three parties can still stop the money: the issuer, the cardholder and your provider.
A decline is the issuer's call. It comes before any money moves, and the response code says whether you may try again. Visa allows no reattempt on a decline the issuer will never approve and, since May 2025, 20 reattempts in 30 days on the other kinds, according to processor documentation (Checkout.com). Measuring your approval rate shows what those declines cost you.
A chargeback is the cardholder's move. It runs the chain backwards, and only the issuer can start one (Mastercard). On Stripe the disputed amount and a fee come out of your balance at once, and the amount stays held until the case is decided (Stripe). Answering it is chargeback representment, with deadlines and evidence rules of its own.
A reserve is your provider's cushion. Stripe describes it as a temporary hold on part of your funds to cover expected future disputes, set on industry conditions, payment activity, dispute rate, refund rate and financial stability, and says it doesn't stop you accepting payments (Stripe). Shopify Payments' risk factors include extended billing cycles, heavy chargeback activity, rising refunds, long delivery timelines and big volume surges (Shopify). A subscription offer with a slow warehouse and ad-driven spikes can tick several boxes at once.
Three questions to check the map:
Who does what? A quick check
Show the answer
The bank that issued the card. The issuer approves or declines; the gateway, the processor and the network carry the request to it and back.
Show the answer
Your processor and the bank behind it. The network settles between the banks, but your processor sets the payout schedule, which on Stripe depends on your industry, country and risk level.
Show the answer
Only if the court gives final approval. Preliminary approval opens notice and comments; final approval is still the court’s to give.
What to ask your processor before you scale
Most of this stays invisible until it costs you, so ask while you're still small:
- Which pricing model am I on? On interchange-plus, ask to see interchange and network fees per payment. On a flat rate, work out your effective rate.
- When do I get paid? Your settlement timing, the payout schedule and what could move your account off the default.
- Is there a reserve? The percentage, the holding period and what releases it, in writing.
- How do retries count? Whether automatic retries count toward Visa's 20 reattempts in 30 days, and whether you'll see the raw decline codes.
- When does 3D Secure run? Always, only when an issuer asks, or on rules you set. Which orders should get it depends on where your cards and your fraud come from.
- What will buyers see on their statement? Make the descriptor the brand from your ad (billing descriptor).
- What does a dispute cost, and how long do I have to answer? Your processor sets its own deadline, often one to three weeks.
Frequently asked questions
What is the difference between a payment gateway and a payment processor?
The gateway is the link between your checkout and the payment system: it captures the card details and sends them to the processor. The processor is the company that gets the payment authorized, sending the request toward the card network and the issuing bank and handling the messages between the banks. One provider can sell both: Authorize.net, for example, offers its gateway with or without a merchant account.
How long does payment processing take?
The authorization happens at the moment of purchase. Clearing usually follows within a day, by Mastercard’s description, and the banks then settle what they owe each other. When you see the money depends on your processor: on Stripe in the US, funds typically become available after two business days, and a new account’s first payout typically arrives within 7 to 14 days, depending on industry, country and risk level.
Who pays the interchange fee?
Your acquirer does, strictly speaking: the card network sets interchange and the acquirer pays it to the bank that issued the card. You pay it indirectly, inside the merchant discount your acquirer or processor charges you, which is why Visa says merchants don’t pay interchange fees directly. On interchange-plus pricing it appears as its own line; on a flat rate it’s folded into one price.
Can a card payment be reversed after the money arrives?
Yes. A payout isn’t final. Through a chargeback, the cardholder’s bank can take the money back, and card networks typically give cardholders 120 days from the payment to dispute it, longer in some cases. A processor can also hold the money while the case runs: Stripe takes the disputed amount and a fee from your balance as soon as the dispute opens. Keep cash aside for that tail.
Is the Visa and Mastercard merchant settlement final?
Not as of October 2026. Visa disclosed the proposed settlement in November 2025, and a federal judge in Brooklyn gave it preliminary approval on June 9, 2026, which lets merchants be notified and comment before the court decides on final approval. Until then the current rate tables and the honor-all-cards rule still apply, so check the court’s decision before planning around lower credit card rates.
Do I need my own merchant account to sell supplements online?
Not to start. A payment facilitator can sign you up under its own acquirer, and a merchant of record can sell to your buyers under its own responsibility. Your own account gives you terms set for your business, in exchange for full underwriting. Visa also requires the acquirer to join a sponsored merchant’s agreement above US$1,000,000 a year in Visa sales, with a footnote carving out some high-risk categories, so ask your provider.
Sources
- Chargebacks Made Simple Guide (September 2023) — Mastercard
- Regulation II final rule notice (June 2011) — Federal Reserve Board
- Press release on the final debit card interchange rule (June 29, 2011) — Federal Reserve Board
- Federal Reserve files reply brief in Reg. II appeal (April 1, 2026) — ABA Banking Journal
- Eighth Circuit presses Federal Reserve on 21-cent debit card fee cap (May 13, 2026) — Courthouse News Service
- What is a payment gateway? — Authorize.net
- Card declines — Stripe Docs
- Place a hold on a payment method — Stripe Docs
- Receive payouts — Stripe Docs
- How disputes work — Stripe Docs
- Visa USA Interchange Reimbursement Fees (rates effective April 18, 2026) — Visa
- What are merchant fees? — Stripe
- A guide to managing network costs — Stripe
- Visa Inc. Form 8-K (November 10, 2025) — SEC
- Court approves Visa-Mastercard settlement (June 9, 2026) — Payments Dive
- Visa’s Payment Facilitator Model (February 2024) — Visa
- Beyond the Acquirer: Additional Visa Acceptance Entities (February 2024) — Visa
- What is a merchant of record? — Stripe
- When can I retry a declined transaction? — Checkout.com
- Reserves: frequently asked questions — Stripe Support
- Overview of reserves in Shopify Payments — Shopify Help Center
