Every card transaction needs a bank willing to stand behind the merchant. That bank is the acquirer, sometimes called the sponsor bank or sponsor FI. It holds the direct relationship with Visa and Mastercard, settles funds to the merchant, and, most importantly, accepts financial liability for the merchant’s chargebacks, refunds, fraud, and rule violations. Processors and ISOs extend the acquirer’s reach by selling, boarding, and servicing merchants under that sponsorship, but the liability ultimately flows back up the chain to the bank.
That structure explains how acquirers and ISOs make money. It also explains why the business only works when risk is priced correctly and watched closely long after a merchant is approved.
Who Earns What in the Acquiring Chain
Sponsor bank (acquirer): Holds the card network relationship and the BIN, carries the ultimate liability, and earns sponsorship fees, a share of processing revenue, and the benefit of merchant settlement and reserve balances held on deposit.
Processor: Provides the authorization, clearing, and settlement technology, and earns per-transaction and platform fees.
ISO or agent: Finds, underwrites (often under the sponsor bank’s policy), and supports merchants. ISOs typically earn residuals, a recurring share of the margin on every merchant they bring to the portfolio. Many ISOs also share in the liability through their agreement with the sponsor bank.
How Do Acquirers and ISOs Make Money?
Most of the price a merchant pays for card acceptance is a pass-through. Interchange goes to the cardholder’s issuing bank, and assessments go to the card networks. The acquirer and ISO earn on what sits on top:
The markup (discount rate): A percentage and/or per-transaction fee above interchange and network costs. This is the core revenue stream, and it grows with every dollar the merchant processes.
Account fees: Monthly service, statement, gateway, PCI program, and annual fees.
Incident fees: Chargeback, retrieval, and ACH reject fees charged when something goes wrong.
Value-added services: Fraud tools, dispute alerts, faster funding, currency conversion, and other services layered on top of processing.
Risk-based pricing: Higher rates, fees, and terms for merchants whose business carries more risk.
Because revenue is tied to volume, the formula looks simple: board more merchants, keep them processing, and keep them healthy. The last part is where the money is made or lost.
Why Higher Risk Merchants Pay More
When an acquirer boards a merchant, it is extending credit. If a merchant takes payment today for something it delivers next month, then goes out of business, cardholders charge back those sales, and the acquirer pays them when the merchant can’t. Add card network fines, regulatory scrutiny, and reputational damage, and it’s easy to see why riskier merchants cost more to support.
Higher risk merchants can pay several percentage points more per transaction than low-risk merchants. Pricing, reserves, and approval decisions usually hinge on factors like these:
Business type: Some industries carry more fraud, chargebacks, or regulatory exposure (nutraceuticals, travel, online gaming, firearms, and subscription services, to name a few). Business type is identified by the Merchant Category Code (MCC), and several high-risk MCCs require separate card network registration.
Time in business: Newer merchants have no track record, so they often see higher pricing, larger reserves, or a decline.
Processing and chargeback history: Prior statements show refund rates, dispute ratios, and whether the merchant has ever been terminated by another acquirer.
Billing model: Recurring, continuity, and free-trial billing generate more disputes than one-time sales.
Delivery timeframe: The longer the gap between payment and delivery (think travel, events, or pre-orders), the larger the acquirer’s potential exposure.
Financial strength: Business financials, bank balances, and owner credit show whether the merchant can cover chargebacks and refunds if sales slow.
Volume and growth: High volume magnifies every problem, and merchants that scale faster than their operations often fail to deliver.
Sales channel and geography: Card-not-present, cross-border, and affiliate-driven sales all add fraud and dispute exposure.
Pricing is only one lever. Acquirers and ISOs also manage risk with rolling or upfront reserves, delayed funding, monthly volume caps, and personal guarantees.
The Math Only Works If the Risk Is Priced Right
Consider a simple example. A merchant processing $500,000 a month at a 0.50% net margin earns the acquirer and ISO $2,500 a month. If that merchant collapses and leaves $300,000 in unrecoverable chargebacks behind, the loss equals ten years of margin from that merchant, wiped out in weeks.
Higher risk merchants offer higher margins, but they also require more oversight. The acquirers and ISOs that profit from higher risk portfolios aren’t the ones that simply charge more. They’re the ones that know their merchants best, both at boarding and every day after.
The Compliance Rubric Behind Every Approval
Before an acquirer or ISO can price a merchant’s risk, it has to confirm who the merchant is, who owns it, and what it actually sells. That work draws on banking regulations, card network rules, and sponsor bank policy.
Know Your Customer (KYC) verifies the individuals behind the business. Under the Bank Secrecy Act’s Customer Identification Program requirements, the sponsor bank must confirm the identity of the people it does business with.
Collect and verify each owner’s and controlling person’s name, date of birth, address, and government ID number.
Cross-check identities against public records, credit bureaus, and identity verification databases.
Review personal credit and any history of fraud or prior business failures.
Know Your Business (KYB) verifies the legal entity itself.
Confirm the business is legally registered and in good standing with the state, and that its EIN matches IRS records.
Identify beneficial owners. Under FinCEN’s Customer Due Diligence rule, that means every individual who owns 25% or more of the company, plus at least one individual with significant control over it.
Verify the physical business address, bank account ownership, and business licenses required for the industry.
Map complex ownership structures, including related entities and shared owners across multiple merchant accounts.
Beyond KYC and KYB, a complete underwriting review typically includes:
Sanctions and watchlist screening: Check the business and its owners against OFAC’s sanctions lists and screen for politically exposed persons and adverse media.
MATCH screening: Search Mastercard’s MATCH database (Member Alert to Control High-Risk Merchants) for owners or businesses previously terminated for cause. A MATCH listing lasts five years.
Card network program requirements: Register high-risk merchants under the Mastercard Registration Program and Visa’s high-integrity risk requirements (the Visa Integrity Risk Program), and comply with Mastercard’s Business Risk Assessment and Mitigation (BRAM) standards, which prohibit illegal or brand-damaging transactions.
Website and business model review: Verify that products, pricing, refund and cancellation terms, and customer service contacts are clear and legal, and watch for signs of transaction laundering (processing sales for an undisclosed business).
Financial review: Analyze bank statements, prior processing statements, and financial statements to set appropriate volume limits and reserves.
PCI DSS: Confirm the merchant has a plan to meet the relevant PCI level for how it accepts and stores card data.
Sponsor bank and regulatory oversight: Sponsor banks must meet BSA/AML obligations and the federal banking agencies’ Interagency Guidance on Third-Party Relationships, which means oversight of their ISOs and processors as well as the merchants those partners board. The Electronic Transactions Association’s Guidelines for Merchant and ISO Underwriting and Risk Monitoring serve as the industry’s best-practice baseline.
Ongoing monitoring: Watch for changes in the risk profile, red flags, and suspicious activity for as long as the merchant processes.
That last item is where most portfolios fall short.
Underwriting Doesn’t End at Approval
Most acquirers and ISOs still underwrite once at boarding, re-review annually, and react when a monthly report shows something is broken. But a merchant’s risk profile rarely stays the same. A new product, a new affiliate, a new traffic source, or a shift to trial offers can change a merchant’s risk within weeks, long before the next scheduled review.
Card network rules leave little room for delay. Under Visa’s Acquirer Monitoring Program (VAMP), for example, fraud and dispute ratios are measured at both the merchant and the acquirer level, so a handful of problem merchants can put the entire portfolio at risk of fines and remediation.
The answer is continuous underwriting: ongoing, transaction-level monitoring of every merchant, every day, instead of one-time or episodic reviews. Continuous underwriting protects margin in both directions. It catches deteriorating merchants before losses mount, and it gives acquirers and ISOs the confidence to board, and keep, profitable higher risk merchants they might otherwise turn away.
Turn Risk Oversight into a Profit Center with SLYCE360
SLYCE360 is a force multiplier for your risk and compliance team. It hydrates your merchants’ payments data with CRM data to provide a level of insight unavailable through simple processor reporting tools. Let the system sift through data against the thresholds you set, highlighting growing issues such as rising dispute rates, fraud spikes, billing anomalies, and problematic affiliates.
Healthier merchants process longer. SLYCE360 can extend merchant lifespans, and every extra month a healthy merchant stays in your portfolio is another month of residuals and margin.
Slyce360 becomes a profit center, with a new revenue stream, lower losses, healthier merchants who stay longer, and a portfolio your sponsor bank can trust.
Acquirers make money by taking on risk. The most profitable ones never stop watching it.