How card networks really work behind every retail checkout

Card networks how they work is one of those questions every retail finance lead, store manager, or e-commerce founder ends up asking the moment a chargeback letter lands or interchange line items balloon at quarter-end. The plastic in a shopper’s wallet hides a four-party choreography that moves money, risk, and data across continents in under two seconds. This guide walks through that choreography with the level of detail a US retail or e-commerce team can actually use when negotiating with processors, planning checkout, or reading a merchant statement.

In short: what every retailer should know about card networks

• Card networks are not banks. Visa, Mastercard, Discover, and American Express set the rules, route the messages, and clear the funds, but the actual money usually sits with issuing and acquiring banks.
• A swipe triggers two flows. Authorization happens in real time during checkout; clearing and settlement happen hours or days later in a batch cycle.
• Interchange dominates the cost stack. It is roughly 70 to 90 percent of what a US retailer pays per card transaction, and the network sets the schedule rather than the issuer.
• Network rules outrank merchant preferences. Surcharging, contactless limits, refund timing, and chargeback windows are written into card scheme rules that processors enforce on retailers.
• Tokenization and 3-D Secure 2 are now table stakes. Without them, e-commerce retailers absorb fraud liability that card networks would otherwise shift to the issuer.

Why card networks matter to US retailers in 2026

For most of the 20th century, US retailers thought about cards the way they thought about cash: a payment instrument, accepted at the register, reconciled at end of day. That mental model broke around 2015 when EMV chip liability shifted to the merchant, and it cracked again in 2026 when the Federal Reserve’s revised Regulation II cut debit interchange caps and pushed networks to publish new fee tiers. Knowing how retail payments are changing across cards, BNPL and crypto starts with understanding the networks themselves, because everything else, including buy-now-pay-later and stablecoin pilots, rides on rails the schemes built.

The four major networks in the US (Visa, Mastercard, American Express, and Discover) processed roughly 230 billion transactions in 2025, with combined US volume north of 9 trillion dollars. Visa alone touches more than 60 percent of card-present retail purchases. When a network changes a single rule, like the contactless limit moving from 100 dollars to 250 dollars, every US retailer with a card terminal feels it the following Friday.

That centralization is also why card networks are scrutinized so heavily by regulators, retailers’ trade groups, and the Department of Justice. Reading their rule manuals is dry work, but ignoring them is more expensive. A single missed compliance update can turn into per-transaction fines that show up six months later on the acquirer statement.

Key terms a retail finance team should be able to define cold

The vocabulary inside a payments meeting trips up smart people because the same word means different things at the network, the bank, and the processor. The list below is the bare minimum a category manager, controller, or e-commerce ops lead should be able to define without checking a glossary.

• Card network (also called card scheme): The entity that sets rules, brand standards, and clearing schedules. Visa and Mastercard are open-loop networks. American Express and Discover historically ran closed-loop, though Discover now licenses widely.
• Issuing bank (issuer): The bank that issues the card to the cardholder and carries the credit or deposit relationship.
• Acquiring bank (acquirer): The bank that holds the retailer’s merchant account and underwrites the risk of accepting card payments.
• Processor: The technology vendor that connects the retailer’s point-of-sale or checkout to the acquirer and the network. Examples include Stripe, Adyen, Fiserv, and Worldpay.
• Interchange: The fee the acquirer pays the issuer for each transaction, set by the network and passed through to the retailer.
• Assessment: The network’s own fee, smaller than interchange but charged on every transaction.
• Authorization: The real-time message that asks the issuer whether funds and credit are available.
• Clearing and settlement: The batch process that actually moves money from the issuer to the acquirer, usually one to three business days after authorization.
• Chargeback: A formal dispute filed by the cardholder through the issuer, governed by network rules and tight time windows.

How a single card swipe actually moves money

Walk through a 47 dollar grocery purchase on a Tuesday evening in Columbus, Ohio. The shopper taps a Visa debit card on the lane terminal. From the cashier’s perspective, the approval flashes green in about 1.4 seconds. Behind that flash, eight steps happen across four institutions.

1. Capture: The terminal reads the chip or contactless token, encrypts the data, and sends it to the processor.
2. Forward to acquirer: The processor routes the encrypted message to the retailer’s acquiring bank with merchant identifiers and the requested amount.
3. Network routing: The acquirer hands the authorization request to Visa over a dedicated leased line or secure internet pipe. Visa uses the bank identification number (BIN) on the card to identify the issuer.
4. Issuer decision: The issuing bank checks available funds, fraud scores, velocity rules, and any holds. It returns an approval or decline code in milliseconds.
5. Return path: Visa relays the decision back through the acquirer and processor to the terminal. The cashier sees “Approved.”
6. End-of-day batch: The retailer’s point-of-sale closes the batch and sends final captured amounts to the processor.
7. Clearing: Visa receives the batch, sorts transactions by issuer, and posts clearing files to each bank with net amounts owed.
8. Settlement: The next business day (or T+2 for some categories), funds move from the issuer through the network’s settlement bank to the acquirer, and finally land in the retailer’s deposit account net of fees.

The retailer sees one approval at the lane and one deposit two days later. The 47 dollars that came out of the shopper’s account turn into roughly 45.85 dollars on the merchant statement, with the difference split among interchange, network assessment, and the processor markup. A separate guide goes deep on interchange fees explained in numbers retailers can use, including how the schedules differ by merchant category code.

Why authorization and settlement are not the same thing

Plenty of retail incidents come from confusing the two flows. An authorization is a promise; settlement is the actual movement of money. A held authorization on a debit card looks identical to a posted charge in the shopper’s banking app, which is why a 1 dollar fuel pre-auth at a gas pump generates so many customer service calls.

For US retailers, the practical implications show up in three places. First, refunds reverse the settlement leg, so a refund issued before the original transaction settles still takes one to three business days to clear, even though the retailer’s books mark it the same day. Second, partial captures (common in apparel and grocery e-commerce) require the processor to support split shipment authorizations under network rules. Third, void windows are tight: voiding an unsettled authorization is cheap and instant, while reversing a settled transaction triggers a full refund cycle with its own interchange treatment.

Retailers that train front-line associates on this distinction see fewer false chargebacks. A shopper who calls about a “double charge” is usually looking at one authorization and one pending capture, not two real transactions. Coaching that one sentence into a register script cuts disputes by a measurable amount within the first quarter.

Open-loop versus closed-loop: why Amex used to feel different

Visa and Mastercard are open-loop networks. They never hold a cardholder relationship and never lend money. Their value sits in the rule book, the routing, and the brand mark on the card. Thousands of issuing banks compete to put their brand on Visa or Mastercard plastic, and thousands of acquirers compete to onboard merchants.

American Express historically ran a closed-loop model: Amex was the network, the issuer, and the acquirer in a single legal entity. That made Amex more expensive for merchants (no competition on interchange) but also gave Amex its famous direct relationship with cardholders. Discover is somewhere in between: it operates a network, issues most of its own consumer cards, but licenses issuing and acquiring to partner banks too.

For a retailer, the difference shows up in three line items.

Dimension	Visa / Mastercard	American Express	Discover
Model	Open-loop, four party	Mostly closed-loop, three party	Hybrid
Typical US retail discount rate	1.5 to 2.5 percent	2.3 to 3.5 percent	1.6 to 2.4 percent
Funding timing	1 to 2 business days	2 to 3 business days	1 to 2 business days
Chargeback process	Two-cycle rep and arbitration	Single-cycle direct dispute	Two-cycle rep and arbitration
Tokenization standard	VTS and MDES	Amex Token Service	Discover Tokenization

The closed-loop versus open-loop distinction is fading because Amex now partners with acquirers for OnePoint pricing, and Discover behaves like an open network for most US retailers. But the dispute mechanics still differ, and Amex’s single-cycle process catches retailers who built their chargeback playbook for Visa first.

How interchange is actually set, and why retailers often misread it

Interchange is the largest variable cost in card acceptance, but the way it is set is widely misunderstood. The network publishes an interchange schedule, often more than 200 pages long, broken down by card type, transaction type, merchant category, ticket size, and security level. The issuer collects interchange from the acquirer, and the acquirer either passes it through to the retailer or wraps it inside a blended rate.

A few patterns hold across networks. Credit cards cost more than debit cards because they include a risk premium for the issuer. Rewards cards cost more than no-frills cards because the interchange funds the cash back or miles. Card-not-present (CNP) transactions cost more than card-present chip transactions because fraud risk is higher. And small-ticket categories (under 15 dollars) have special interchange tables that can make a 4 dollar coffee disproportionately expensive.

US retailers operate under Regulation II for debit, which caps interchange at 21 cents plus 0.05 percent of the transaction, plus a 1 cent fraud-prevention adjustment for eligible issuers. As of the 2026 amendment, that cap drops to roughly 14.4 cents on average. Credit interchange remains unregulated and ranges from about 1.15 percent to 2.95 percent depending on card and category.

The practical takeaway is that retailers who negotiate “lower fees” without understanding interchange usually end up renegotiating the processor’s markup, which is the smaller slice. Real savings come from optimizing the interchange line: enabling level 2 and level 3 data for B2B, qualifying for small-ticket categories where applicable, and routing debit transactions over the cheapest available network under the Durbin amendment’s dual-routing requirement.

What card networks demand from retailers in return for acceptance

A retailer signs an acceptance agreement with the acquirer, but the rules underneath come from the network. These rules are non-negotiable for individual retailers and rarely visible until something goes wrong. The most consequential clusters for US retailers in 2026 are listed below.

• PCI DSS compliance: Any retailer that stores, processes, or transmits cardholder data must meet Payment Card Industry Data Security Standard requirements. The PCI Security Standards Council, founded by the four major networks, publishes the standard. Our deep dive on PCI DSS compliance for retailers without a compliance team walks through the SAQ types and scoping.
• EMV liability shift: Since October 2015, the party with the lowest security level in a card-present transaction bears the fraud loss. A retailer still swiping the magnetic stripe on a chip card eats the chargeback.
• Surcharging rules: Retailers may surcharge credit transactions in most US states, capped at 3 to 4 percent depending on the network. Surcharging debit is prohibited under Regulation II.
• Honor all cards: Accepting Visa means accepting all Visa cards, not just signature debit. This rule was relaxed in a 2011 settlement but still applies broadly.
• Discount rate transparency: The 2024 antitrust settlement requires acquirers to provide itemized statements showing interchange, assessment, and processor markup separately for retailers above a volume threshold.

Each network publishes its rule book. Visa’s Visa Core Rules and Visa Product and Service Rules are the canonical reference, updated twice a year. Retailers that want to challenge a chargeback or push back on a category-code mismatch need to be able to cite the rule, not just the processor email.

How fraud risk and chargebacks flow through the network

The card network is also the dispute referee. When a cardholder calls the issuer and claims a transaction was unauthorized or the goods were not received, the issuer files a chargeback through the network. The retailer’s acquirer receives the chargeback, debits the retailer, and gives the retailer a representment window (usually 30 to 45 days) to fight it.

Network-defined reason codes drive the entire process. Visa uses four-digit reason codes; Mastercard uses four-digit codes too but on a different schema; Amex uses three-letter codes. Each code has its own evidence requirements, time limits, and burden of proof. A “Goods or services not received” code, for instance, demands proof of delivery with signature for shipments over a network-defined threshold. A “Cardholder dispute of recurring transaction” code requires proof the cardholder consented to the billing.

For US retailers, the most expensive shift in the past five years is the move to fraud-related disputes under the Visa Claims Resolution framework. Genuine fraud (not “friendly fraud”) is now resolved in a single cycle, with no representment opportunity unless the retailer used 3-D Secure 2 authentication. That single sentence is why every serious US e-commerce retailer added 3-DS 2 in 2024 and 2025. Without it, fraud losses sit with the merchant; with it, liability shifts to the issuer.

Examples from US retail and e-commerce

The same network mechanics produce very different operating realities depending on the retail format. A grocer, a marketplace, and a D2C brand each interact with card networks in distinct ways, even though the rule books are identical.

Grocery chain with 600 lanes

A regional grocer with 180 stores and 600 lanes processes 12 to 15 million card transactions a month, with an average ticket of 38 dollars. Debit accounts for 64 percent of card volume. The economics live or die on debit routing: the chain uses the Durbin amendment’s dual-routing requirement to push PIN debit through the cheapest available network (often Accel, Star, or Pulse rather than Visa or Mastercard) and reclaims roughly 8 basis points on the entire debit book.

D2C apparel brand on Shopify

A direct-to-consumer apparel brand doing 60 million dollars a year online sees a different fee mix. Visa and Mastercard credit are 71 percent of volume, Amex is 14 percent, and the rest splits across Discover, Apple Pay, and Klarna. Effective rates run around 2.9 percent because card-not-present interchange is higher and rewards card mix is heavier on D2C. The brand uses 3-D Secure 2 to shift fraud liability, network tokens through Shopify Payments to lift authorization rates by 1 to 2 percentage points, and account updater to keep saved cards alive past expiry. For brands at this scale, the 2026 D2C scaling playbook worth following treats card acceptance as a margin lever, not just plumbing.

Marketplace with 80,000 sellers

A two-sided marketplace running on a payment facilitator model collects from buyers and pays out to sellers. The card networks treat the marketplace as the merchant of record, which means the marketplace owns the chargebacks, the PCI scope, and the relationship with the acquirer. The seller never sees the network. This concentration of compliance risk is why marketplaces invest heavily in fraud tooling and KYC at signup: a single seller running a card-testing scheme can trigger an excessive fraud monitoring program enrollment at Visa, which carries network-imposed fines of 25,000 dollars per month.

Tools, partners, and vendors worth knowing

The card network ecosystem is dense, and retailers rarely deal with the network directly. The vendor short list below covers the categories where a US retailer or e-commerce team can make a real choice. Names are illustrative, not endorsements.

• Processors and gateways: Stripe, Adyen, Braintree, Fiserv, Worldpay, Square. These touch every authorization and clearing message.
• Tokenization providers: Visa Token Service (VTS), Mastercard Digital Enablement Service (MDES), Amex Token Service, plus processor-native tokenization. Tokens reduce PCI scope and lift authorization rates.
• 3-D Secure 2 providers: Cardinal Commerce (Visa-owned), GPayments, Modirum, plus native 3DS server from major processors. Pick a provider that supports both browser and SDK flows.
• Fraud and risk scoring: Signifyd, Riskified, Forter, Kount, Sift. These layer on top of network fraud signals and either advise or guarantee against chargebacks.
• Dispute management: Chargehound, Verifi (Visa-owned), Ethoca (Mastercard-owned). Verifi and Ethoca operate as network-blessed pre-dispute resolution channels.
• Interchange optimization: CardX, Stax, Payroc. These help retailers route, recategorize, or surcharge to bring effective rates down.

Choosing among these is not a one-size decision. A small retailer with a single Shopify store usually leans on the platform’s built-in stack. A multi-channel retailer with point-of-sale, e-commerce, and call-center channels typically picks one acquirer with strong omnichannel tokenization, one fraud platform, and one dispute manager, then integrates them tightly.

Common mistakes retailers make with card networks

The same patterns show up in retailer-after-retailer post-mortems. Most are not glamorous. None require a payments PhD to fix.

1. Treating interchange as a fixed cost. Interchange is variable by category, ticket size, and data quality. A B2B retailer not submitting level 2 data is leaving 30 to 70 basis points on the table.
2. Skipping 3-D Secure 2 on e-commerce. Fraud liability stays with the merchant without it. The conversion drag from 3-DS 2 is roughly 1 percent, far less than the chargeback bleed it prevents.
3. Mis-categorizing the merchant category code (MCC). The MCC determines interchange rates and surcharging eligibility. A retailer registered as 5999 (Miscellaneous Retail) instead of 5651 (Family Clothing) can pay measurably more for years before noticing.
4. Ignoring representment windows. A chargeback ignored for 30 days is a chargeback lost. The win rate on contested disputes with proper evidence runs 35 to 60 percent depending on reason code.
5. Storing card data to “make it easier.” Storing PAN data inflates PCI scope from SAQ A to SAQ D, multiplying audit costs. Use processor tokens instead.
6. Building a chargeback playbook for one network. Visa, Mastercard, and Amex disputes follow different timelines and evidence rules. A one-size template loses winnable cases.
7. Not auditing the merchant statement. Acquirer statements often contain misapplied downgrades, surcharges, or assessment errors. A quarterly audit by an interchange analyst recovers real money in most US retailers.

What is changing about card networks in 2026 and beyond

The card network world is unusually fluid right now. Three shifts are worth tracking inside any 2026 retail finance plan.

First, the Federal Reserve’s revised Regulation II took effect in early 2026, dropping the debit interchange cap and adding a new fraud-prevention adjustment. Retailers should already be seeing lower debit costs in monthly statements, and acquirers should be passing the cut through if the contract is on interchange-plus pricing. Statements still showing pre-revision debit rates are a renegotiation opportunity, not an accounting nuance.

Second, network tokenization is becoming the default rather than an upgrade. Both Visa and Mastercard have signaled that card-on-file transactions without network tokens will see degraded authorization rates as issuers tighten controls. The lift from network tokens (often 1 to 2 percentage points of authorization rate on saved cards) is hard to ignore for any retailer running a subscription, replenishment, or one-click model.

Third, the card networks are competing with newer rails, including pay-by-bank, stablecoins, and account-to-account transfers powered by FedNow and RTP. Visa and Mastercard responded by buying into the rail-agnostic processor model, with Visa Direct and Mastercard Move pushing into push payments. For retailers, this means card networks will increasingly handle payouts (refunds, instant disbursements, payroll for gig sellers) and not just acceptance. The strategic question is whether to standardize on one network’s “money movement” platform or stay multi-rail. The fuller treatment lives in our pillar on how retail payments are changing across cards, BNPL and crypto, where these rails are mapped against each other.

How to apply this in your retail or e-commerce team this quarter

Knowing the mechanics is only useful if it changes behavior. A US retailer with a few hundred million dollars of card volume can usually act on five concrete tasks in a single quarter without a major systems project.

1. Pull the last 12 months of merchant statements and reclassify by interchange category. Look for downgrades and category mismatches. Even a one-time recovery often pays for the analyst’s quarterly fee.
2. Confirm 3-D Secure 2 is live on every e-commerce checkout flow, including guest, returning, and stored-card. Verify with the processor that liability shift is actually being recorded.
3. Audit debit routing on point-of-sale. Confirm dual routing is enabled and that the cheapest network (per Durbin amendment) is being selected on PIN debit.
4. Verify the merchant category code is correct. Ask the acquirer in writing. A wrong MCC carries forward forever until challenged.
5. Set up Verifi and Ethoca pre-dispute alerts. Both networks let retailers refund a transaction before it becomes a formal chargeback, keeping the chargeback ratio clean and avoiding excessive-dispute fines.

None of these require ripping out a processor. All of them produce visible savings or fraud reductions in one quarter. They are also the same tasks that surface in payments-strategy reviews at much larger retailers, just at smaller dollar amounts.

FAQ: card networks for retailers and e-commerce teams

Are Visa and Mastercard banks?

No. Visa and Mastercard are publicly traded payment networks. They set rules, route transactions, and clear funds, but they do not issue cards to consumers, do not lend money, and do not hold merchant accounts. The actual banking relationships sit with the issuing and acquiring banks that license the network’s brand.

Why does my Amex acceptance rate cost more than Visa?

American Express historically operated a closed-loop model, meaning Amex acted as the network, issuer, and acquirer in one entity. Without competing issuers and acquirers to pressure interchange, Amex’s effective rate sits 60 to 100 basis points above comparable Visa or Mastercard credit cards. Amex’s OnePoint pricing program has narrowed the gap in recent years.

What is interchange and who keeps it?

Interchange is the fee that flows from the retailer’s acquiring bank to the cardholder’s issuing bank on every card transaction. The card network publishes the schedule but does not keep the interchange. The network keeps a smaller separate fee called the assessment, typically 0.13 to 0.15 percent in the US.

How long does a card transaction take to settle into my bank account?

Authorization is real time, usually under 2 seconds. Clearing happens overnight after the retailer batches the day’s transactions. Settlement, meaning actual deposit of funds net of fees, typically lands one to two business days later for Visa, Mastercard, and Discover, and two to three business days for American Express. Some acquirers offer next-day or same-day funding for an additional fee.

Can a US retailer refuse to accept debit cards?

Yes, with limits. A retailer can choose not to accept a particular network, but the “honor all cards” rule means accepting Visa requires accepting all Visa-branded cards, including debit, credit, and prepaid. Retailers may also surcharge credit transactions in most US states, but cannot surcharge debit under federal law.

What is 3-D Secure 2 and why do retailers care?

3-D Secure 2 is the network-supported authentication protocol for card-not-present transactions. It passes 100-plus data elements to the issuer and lets the issuer step up to a biometric or one-time-passcode challenge when risk is high. When a 3-DS 2 authenticated transaction turns into a fraud chargeback, network rules shift liability from the retailer to the issuing bank. Without 3-DS 2, the retailer absorbs the loss.

What is the difference between a chargeback and a refund?

A refund is initiated by the retailer through the processor and reverses an original transaction voluntarily. A chargeback is initiated by the cardholder through the issuing bank under network dispute rules and is forced on the retailer, with a fee attached. Refunds keep the retailer’s chargeback ratio clean; chargebacks can trigger network monitoring programs and per-incident fees if they exceed thresholds.

Do card networks set the rules for buy-now-pay-later?

Indirectly. BNPL transactions that ride on virtual cards (such as Affirm’s virtual Visa or Klarna’s debit-funded model) follow network rules end to end. Pure account-to-account BNPL flows sit outside the card networks. Most US BNPL volume still rides card rails, which is why network policy on BNPL surcharging, refund timing, and tokenization matters to retailers offering installment options.

Card networks are the unglamorous plumbing of US retail, but they shape everything from checkout latency to gross margin. Treating them as a black box leaves money and security on the table. Treating them as a system that can be audited, optimized, and negotiated turns the card line item on a P&L into a lever a finance team can actually pull.