Merchant Card Acceptance and Interchange

Why This Topic Matters
For most organizations that sell to consumers or other businesses, card acceptance is the single largest payment-related expense after payroll processing. Card fees routinely consume 1.5% to 3.5% of revenue, and for a company with $1 billion in card sales that is $15 million to $35 million a year flowing out the door. The treasury professional is expected to understand where that money goes, who sets the prices, what can be negotiated, what regulations constrain the system, and what operational and compliance risks (fraud, chargebacks, data breaches) accompany acceptance. The CTP exam places this topic inside the Financial Regulatory and Operational Risk domain precisely because card acceptance sits at the intersection of cost management, regulation (Dodd-Frank, Regulation II), industry self-regulation (PCI DSS, network rules), and day-to-day operational control.

What Merchant Card Acceptance Is
Merchant card acceptance is the process by which a business (the merchant) agrees to take credit, debit, and prepaid cards as payment and receives funds for those sales from a bank. To accept cards, the merchant signs a merchant agreement with an acquiring bank (also called the acquirer or merchant bank). The acquirer gives the merchant a merchant account, routes transactions through the card networks, collects funds from the cardholder's bank, and deposits the proceeds to the merchant, less fees.

The Key Participants
Cardholder - the consumer or business employee using the card.
Issuer (issuing bank) - the financial institution that issued the card, extends credit or holds the deposit, bills the cardholder, and bears most credit and fraud risk. Issuers receive interchange.
Merchant - the seller accepting the card.
Acquirer (merchant bank) - the merchant's bank that sponsors the merchant into the network, settles funds, and bears risk that the merchant fails to deliver goods or cannot cover chargebacks.
Card network (card association) - Visa, Mastercard, American Express, Discover. Networks set operating rules, set interchange rates, operate the authorization and clearing switch, and collect assessment fees.
Processor - a third party (often working for the acquirer) that handles the technical movement of authorization and settlement data. Many acquirers outsource this.
Payment gateway - software that connects an e-commerce site or point-of-sale system to the processor.
Independent Sales Organization (ISO) / Payment Facilitator - resellers that sign up smaller merchants on behalf of an acquirer.

Open-Loop (Four-Party) vs. Closed-Loop (Three-Party) Systems
Visa and Mastercard are open-loop or four-party systems: cardholder, issuer, merchant, and acquirer are distinct, with the network in the middle. The network does not issue cards or sign merchants; its member banks do. American Express and (historically) Discover are closed-loop or three-party systems in which the network itself acts as both issuer and acquirer, so there is technically no interchange - the network simply charges the merchant a discount rate. Exam questions frequently test this distinction.

How a Transaction Works
1. Authorization - The card is swiped, dipped (EMV chip), tapped (contactless), or keyed/entered online. The terminal or gateway sends the request through the processor and network to the issuer, who verifies the account, available credit or funds, and fraud indicators, then returns an approval or decline code in seconds. Authorization places a hold on the cardholder's available balance but does not move money.
2. Clearing - Usually at end of day, the merchant batches and submits approved transactions. The acquirer forwards them through the network to each issuer, which posts the charge to the cardholder's statement.
3. Settlement - The network nets positions among member banks; issuers pay acquirers the transaction amount minus interchange. The acquirer then credits the merchant's deposit account, typically within one to three business days, either gross (full amount, with fees billed monthly) or net (fees deducted daily). Treasury must know which method applies because it affects reconciliation and cash forecasting.

What Interchange Is and How Merchant Fees Are Built
The total fee the merchant pays is the merchant discount fee (or merchant discount rate). It has three components:
Interchange fee - Set by the card network but paid by the acquirer to the issuer on every transaction. It compensates the issuer for funding the transaction, credit risk, fraud losses, rewards, and the interest-free grace period. Interchange is by far the largest component, usually 70% to 90% of the total cost.
Network assessments (dues and assessments) - A smaller percentage (roughly 0.13% to 0.15%) plus per-item fees paid to the card network itself.
Acquirer / processor markup - The only fully negotiable component; covers the acquirer's services, risk, and profit.
So: Merchant Discount Fee = Interchange + Assessments + Acquirer Markup.

Factors That Determine the Interchange Rate
Networks publish hundreds of interchange categories. The rate applied depends on:
Card type - Debit (especially regulated debit) is cheapest; standard credit is higher; premium rewards, commercial, and corporate cards are the most expensive because issuers fund rewards from interchange.
Card-present vs. card-not-present (CNP) - A chip card read at a terminal qualifies for the lowest rates. Keyed, mail/telephone order, and e-commerce transactions are CNP and carry higher interchange because fraud risk is greater.
Merchant category code (MCC) and industry programs - Supermarkets, fuel, utilities, and certain B2B categories have special rates.
Data level for commercial cards - Level I data is basic (amount, date). Level II adds sales tax and customer code. Level III adds line-item detail (SKU, quantity, unit price, commodity codes). Passing Level II/III data on purchasing-card transactions qualifies for materially lower interchange - a classic treasury cost-reduction tactic.
Transaction size - Small-ticket programs and per-item components matter for low-dollar sales.
Timeliness - Transactions not settled within the required window (often 24 to 72 hours) or authorized amounts that differ from settled amounts can downgrade to a more expensive category.

Merchant Pricing Models
Interchange-plus (cost-plus / pass-through) - Merchant pays actual interchange and assessments plus a disclosed fixed markup (e.g., interchange + 0.20% + $0.10). Most transparent and generally best for mid-size and large merchants.
Tiered (bundled) pricing - Acquirer groups transactions into qualified, mid-qualified, and non-qualified buckets at set rates. Simple, but the acquirer controls bucket definitions, so it is opaque and usually costlier.
Flat-rate pricing - One rate for everything (common with payment facilitators like Square). Simple for small merchants; expensive for high volume or debit-heavy mixes.
Subscription / membership pricing - Monthly fee plus pass-through cost.

Regulation: Dodd-Frank and the Durbin Amendment (Regulation II)
The Durbin Amendment to the 2010 Dodd-Frank Act, implemented by the Federal Reserve as Regulation II, is the single most testable regulatory item in this area:
- Caps debit interchange for issuers with $10 billion or more in assets at $0.21 per transaction plus 0.05% of the amount, plus a $0.01 fraud-prevention adjustment if the issuer meets fraud standards. Issuers under $10 billion are exempt and still earn unregulated debit interchange.
- Credit card interchange is not capped.
- Requires each debit card to be enabled on at least two unaffiliated networks so merchants can route transactions (e.g., to a cheaper PIN debit network); the Fed extended this to CNP debit effective 2023.
- Permits merchants to set a minimum purchase amount of up to $10 for credit cards (not debit), and to offer discounts for cash, check, or debit.
- Networks cannot prohibit merchants from steering customers to lower-cost payment methods.

Surcharging and Steering
Following antitrust settlements beginning in 2013, merchants in most US states may add a surcharge on credit card (not debit) transactions, subject to network rules: the surcharge is capped at the merchant's cost of acceptance (network caps now 3%), must be disclosed, and the merchant must notify the networks and acquirer in advance. Some states still prohibit surcharging. Cash discounts are a separate, generally permitted practice.

Operational Risks: Chargebacks
A chargeback occurs when a cardholder disputes a transaction (fraud, item not received, not as described, duplicate billing) and the issuer reverses the charge, pulling funds from the acquirer and thus the merchant. Each chargeback carries a reason code, a fee (often $15 to $100), and a deadline for the merchant to represent (dispute) with evidence. Excessive chargeback ratios (roughly above 1% of transactions) place a merchant in network monitoring programs with fines and possible termination. Acquirers may hold a reserve (rolling or fixed) against high-risk merchants to cover chargeback exposure. For CNP merchants, the merchant - not the issuer - generally bears fraud chargeback losses, which is why tools such as Address Verification Service (AVS), card verification value (CVV/CVC), 3-D Secure, velocity checks, and tokenization matter.

EMV Liability Shift
Effective October 2015 in the US, liability for counterfeit card-present fraud shifted to whichever party (merchant or issuer) had not adopted EMV chip technology. A merchant without a chip-capable terminal now absorbs counterfeit fraud losses that the issuer previously bore. EMV does not address CNP fraud, which is why CNP fraud rose after migration.

Compliance Risk: PCI DSS
The Payment Card Industry Data Security Standard is a set of 12 high-level requirements (firewalls, no default passwords, protect stored data, encrypt in transit, anti-virus, secure systems, restrict access, unique IDs, physical security, logging, testing, security policy) created by the PCI Security Standards Council, which the major networks founded. Important nuance for the exam: PCI DSS is not a law; it is a contractual requirement imposed through the merchant agreement and network rules. Merchants are classified into four levels by annual transaction volume (Level 1 is over 6 million transactions and requires an annual on-site assessment by a Qualified Security Assessor; lower levels complete Self-Assessment Questionnaires). Non-compliance can result in fines, higher fees, liability for breach costs, and loss of acceptance privileges. Treasury reduces PCI scope by never storing full card numbers, using tokenization (replacing the PAN with a surrogate value), point-to-point encryption (P2PE), and hosted payment pages that keep card data off the merchant's systems.

Treasury Management Considerations
Cost control - Negotiate interchange-plus pricing, pass Level II/III data on B2B sales, route debit to the lowest-cost network, settle batches daily, avoid downgrades, and audit statements for assessment and markup creep.
Cash forecasting and liquidity - Know funding timing (next day vs. two to three days), gross vs. net settlement, and reserve holdbacks; weekends and holidays delay deposits.
Reconciliation - Match authorizations, batch totals, acquirer deposits, fees, and chargebacks to the general ledger; large retailers use automated reconciliation tools.
Bank relationship and concentration risk - The acquirer holds merchant funds briefly and may impose reserves; evaluate acquirer financial strength and contract terms (termination fees, exclusivity, fee escalation clauses).
Fraud and dispute management - Track chargeback ratios, invest in fraud screening proportional to CNP exposure.
Payment acceptance strategy - Decide which brands to accept (Amex rates are often higher), whether to surcharge or discount, and how to integrate mobile wallets (Apple Pay, Google Pay), which are tokenized and typically treated as card-present.

Exam Tips: Answering Questions on Merchant Card Acceptance and Interchange
1. Follow the money precisely. The merchant pays the merchant discount fee to the acquirer. The acquirer pays interchange to the issuer. Both acquirer and issuer pay assessments to the network. If an answer says the merchant pays interchange directly to the issuer, or that the acquirer sets interchange, it is wrong - networks set interchange, issuers receive it.
2. Know which component is negotiable. Interchange and assessments are pass-through costs set by networks; only the acquirer markup is negotiable. Questions about reducing card costs usually point to interchange-plus pricing, Level III data, debit routing, or avoiding downgrades - not to renegotiating interchange itself.
3. Memorize Durbin/Regulation II facts. Debit only (not credit); $10 billion issuer asset threshold; $0.21 + 0.05% + $0.01 fraud adjustment; two unaffiliated networks; $10 credit card minimum allowed; cash discounts allowed. Distractor answers often apply the cap to credit cards or to small issuers.
4. Distinguish four-party from three-party. Visa/Mastercard = open-loop, four-party, interchange exists. American Express = closed-loop, three-party, network is both issuer and acquirer, so it charges a merchant discount rate rather than interchange.
5. Remember PCI DSS is industry self-regulation, not a government regulation. If a question asks which requirement is imposed by law versus by the card networks, PCI DSS belongs to the networks; Regulation II belongs to the Federal Reserve under Dodd-Frank.
6. Card-present is cheaper and safer than card-not-present. Any question about higher interchange, higher fraud risk, or merchant-borne fraud losses is likely describing CNP (e-commerce, mail/telephone order). Any question about counterfeit fraud at a physical terminal is likely testing the EMV liability shift.
7. Rank card costs correctly. Regulated debit (cheapest) < unregulated/exempt debit < standard credit < rewards credit < commercial/corporate cards (most expensive). Level III data reduces commercial card interchange.
8. Identify the risk-bearing party. Issuer bears cardholder credit risk. Acquirer bears merchant risk (non-delivery, inability to fund chargebacks), which is why acquirers impose reserves on high-risk merchants. Merchant bears CNP fraud chargebacks.
9. Connect to treasury fundamentals. Expect scenario questions linking card settlement timing to cash forecasting, net vs. gross settlement to reconciliation, or tokenization to PCI scope reduction. Read for the underlying treasury concept, then apply the card-specific vocabulary.
10. Watch for absolute language. Statements that merchants may 'never' surcharge, that chip cards 'eliminate' fraud, or that interchange is 'always' the same rate are typically incorrect. Card rules are full of conditions and exceptions, and the best answer usually acknowledges them.

Quick Recap
Merchant card acceptance lets a business take cards through an acquirer under network rules. The merchant discount fee is mostly interchange (set by networks, earned by issuers), plus network assessments and acquirer markup. Rates depend on card type, presentment channel, industry, data level, and settlement discipline. The Durbin Amendment caps large-issuer debit interchange and mandates routing choice. Operational risks center on chargebacks, CNP fraud, EMV liability, and PCI DSS compliance. Treasury's job is to minimize total cost, protect card data, manage settlement timing and reconciliation, and maintain a sound acquirer relationship. Master the flow of funds and the regulatory thresholds and you will handle virtually any CTP question on this topic.