Payment Processing Explained: How It Works

Payment processing is the invisible machinery that turns a customer tapping "Pay now" into money arriving in your bank account. Most business owners never see it, yet it touches every sale you make. If you've ever wondered why a card payment is "pending," why a processor takes a cut, or why funds land two days later, this guide explains exactly how payment processing works from start to finish.

By the end, you'll understand the players involved, the precise sequence of steps behind a single transaction, what the fees pay for, and how to choose and use a processor so you get paid faster and keep more of every sale. No jargon left unexplained.

What Is Payment Processing?

Payment processing is the set of steps that securely move money from a buyer's bank or card to a seller's bank when a purchase is made. It runs in the background of every checkout, invoice payment, and subscription charge.

Think of it as a relay race. The customer hands off the payment, several specialized companies pass it along, each one verifying that the money exists and the transaction is legitimate, and finally it lands with you. The whole authorization step often finishes in under three seconds, even though several institutions are involved.

There are two distinct phases that people frequently confuse:

• Authorization - checking, in real time, that the customer has the funds and that the payment is approved. This is what makes the screen say "Payment successful."
• Settlement - the actual movement of money between banks, which usually happens hours or days later in a batch.

Understanding that a payment is approved immediately but settled later explains almost every "where's my money?" question business owners have.

Card payments vs bank payments

Not all payment processing runs on the same rails. Card payments (Visa, Mastercard, Amex) travel over the card networks. Bank-to-bank payments like ACH in the US, Faster Payments and Bacs in the UK, or SEPA in the EU travel over banking rails. Card payments authorize fast but cost more; bank transfers are cheaper but can be slower to confirm. Most modern processors support both.

Digital wallets like Apple Pay and Google Pay sit on top of these rails rather than replacing them. When a customer pays with a wallet, a tokenized version of their card is still passed to the card network - the wallet simply makes the checkout faster and adds a layer of device-level authentication. For your business, wallet payments process exactly like a normal card payment but tend to convert better because there's no typing involved.

Why the distinction matters for your cash flow

Choosing which payment types to accept is really a cash-flow decision. If you need money fast and don't mind a slightly higher fee, cards win. If you're billing a large recurring amount where a percentage fee would sting, a bank transfer often makes more sense. Many businesses offer both and let the client decide, which removes the single most common reason invoices sit unpaid: friction at the moment of payment.

The Players: Who Is Involved in Every Transaction

A single card payment quietly involves five distinct parties. Knowing who does what removes most of the mystery.

The acquiring bank (or acquirer) is the merchant's side of the equation - it receives funds on your behalf and deposits them into your account. The issuing bank is the customer's side, which actually approves or declines the charge. The card network sits in the middle, passing messages between the two.

How Payment Processing Works, Step by Step

Here is the full lifecycle of a card payment, in order. The first five steps are authorization; the rest are settlement.

1. The customer enters payment details. On a checkout page, payment link, or invoice, they type their card number or use a saved method or digital wallet.
2. The gateway encrypts and sends the data. The payment gateway tokenizes the sensitive card data so it never travels in plain text, then passes it to the processor.
3. The processor routes to the card network. The processor identifies the card type and sends the authorization request through Visa, Mastercard, or another network.
4. The issuing bank decides. The customer's bank checks for sufficient funds, fraud signals, and whether the card is valid, then returns an approve or decline message.
5. The answer travels back. Within seconds, "approved" or "declined" returns to your checkout. The funds are now held but have not moved yet.
6. The transaction is batched. At the end of the day (or another set interval), the merchant's approved transactions are grouped into a batch for settlement.
7. Settlement is requested. The acquirer asks the card network to move the money; the issuing bank releases the funds.
8. Funds are deposited. After the network and banks reconcile, the money lands in your merchant or business account - typically one to three business days later, minus fees.

Why "approved" doesn't mean "paid"

This two-stage design is the single most useful thing to understand about payment processing. An authorization places a hold; settlement transfers the cash. That gap is why a refund issued seconds after a sale can sometimes simply void the authorization instead of moving money twice, and why a payment can be approved but still be reversed via a chargeback later.

It also explains a few everyday quirks. When you book a hotel or rent a car, the business often authorizes a larger amount than the final charge - that's a hold, not a payment, and it releases once the real amount settles. The same mechanism is why a pre-authorization can briefly make a customer's available balance look lower than expected. None of this money has actually moved; it's simply been reserved during the authorization phase.

Capture: the step between authorization and settlement

Some processors split authorization into two sub-steps: authorize and capture. Authorizing reserves the funds, and capturing tells the processor to actually collect them. Most online sales authorize and capture in one motion, but separating them is useful when you ship goods later or want to confirm a service was delivered before taking payment. If you never capture an authorization, the hold simply expires and the customer is never charged.

Gateway vs Processor vs Merchant Account

These three terms get used interchangeably, but they do different jobs. Modern platforms often bundle all three, which is why the distinction has blurred.

In the old model, you'd assemble these separately: one company for the gateway, another for processing, and a bank for the merchant account. It was slow and paperwork-heavy.

Today, providers like Stripe act as an aggregator. They give you the gateway, processing, and a pooled merchant account in one signup, so you can accept payments in minutes rather than weeks. This is why most freelancers and small businesses no longer apply for a traditional merchant account at all.

When you might still want a dedicated merchant account

High-volume businesses sometimes outgrow aggregators and negotiate a dedicated merchant account for lower per-transaction rates and more stable underwriting. A dedicated account is underwritten specifically for your business, which means fewer surprise holds and rates that can be tuned to your card mix. The trade-off is paperwork, monthly minimums, and a longer setup. For the vast majority of freelancers, consultants, agencies, and startups, the all-in-one model is faster, cheaper to start, and perfectly adequate.

Payment links and embedded checkouts

One development that's reshaped processing for small businesses is the payment link - a hosted URL that opens a secure, pre-built checkout. You don't need a website or developer; you just send the link on an invoice, in an email, or over a message. The processor handles the gateway, security, and settlement. For service businesses that bill per project, attaching a payment link to each invoice is often the entire payment setup they ever need.

What Payment Processing Actually Costs

Processing isn't free, and the fee is the price of all that infrastructure, fraud protection, and instant approval. There are three pricing models you'll encounter.

Flat-rate pricing

You pay one simple percentage plus a fixed amount per transaction, regardless of card type. This is what most aggregators offer (for example, a percentage of the sale plus a small per-transaction fee). It's predictable and ideal for smaller or variable volumes.

Interchange-plus pricing

You pay the true interchange fee set by the card network, plus a fixed markup from your processor. It's more transparent and usually cheaper at high volume, but the bill varies by card type and is harder to forecast.

Tiered pricing

Transactions are bucketed into "qualified," "mid-qualified," and "non-qualified" tiers with different rates. It's the least transparent model and generally worth avoiding because it hides how your effective rate is calculated.

The components inside any fee are roughly: the interchange fee (paid to the customer's bank), the network assessment (paid to Visa/Mastercard), and the processor markup (the part your provider keeps). Interchange is the largest piece and is the same no matter which processor you use - so two providers competing for your business are mostly competing on their markup.

Pros and Cons of Modern Online Payment Processing

Online payment processing has clear advantages over chasing bank transfers and checks, but it's worth seeing the full picture.

Pros

• Customers can pay instantly by card, wallet, or bank - fewer excuses, faster payment.
• Authorization happens in seconds, so you know immediately whether a sale went through.
• Strong built-in fraud and encryption tools that an individual business could never build alone.
• Automatic records and reconciliation reduce bookkeeping work.
• Supports recurring billing, payment links, and embedded "pay now" buttons on invoices.

Cons

• Per-transaction fees eat into margin, especially on small or high-volume sales.
• Settlement delays mean money isn't instant - usually a one-to-three-day wait.
• Chargebacks can claw back funds and sometimes carry a separate fee.
• Aggregator accounts can occasionally hold or freeze funds if activity looks unusual.

For most service businesses, the speed and reliability far outweigh the fees, particularly when you attach a payment option directly to your invoice.

A Real-World Example: Maya the Web Designer

Maya is a freelance web designer. She used to email a PDF invoice with her bank details and then wait - often three or four weeks - while clients "got around to it."

She switched to sending invoices with a built-in pay-now link backed by a payment processor. Here's what happens now when she invoices a $2,400 project:

1. Her client opens the invoice and clicks Pay.
2. The gateway captures the card; the processor sends it to the network; the client's bank approves it in about two seconds.
3. Maya gets a "paid" notification immediately - the authorization succeeded.
4. Two business days later, the funds settle into her account, minus a small processing fee.

The fee on that invoice was a few tens of pounds. But the project got paid in two days instead of three weeks. For Maya, that swing in cash flow is worth far more than the fee. She also stopped spending evenings sending "just checking in" reminder emails, because the processor and her invoicing tool handle the nudges automatically.

Security: PCI Compliance, Encryption, and Fraud

Handling card data carries responsibility, but reputable processors shoulder most of it for you.

PCI DSS compliance

The Payment Card Industry Data Security Standard (PCI DSS) is the rulebook for handling card data. When you use a hosted gateway or payment link, the card details are entered on the processor's secure systems, not yours - which dramatically reduces your PCI burden. You should still complete the simple self-assessment your provider points you to.

Encryption and tokenization

Two technologies protect every transaction. Encryption scrambles card data in transit so it's unreadable if intercepted. Tokenization replaces the real card number with a random "token" for storage, so even if your records are breached, there's no usable card number to steal.

Fraud tools and 3-D Secure

Processors run real-time fraud scoring, address verification, and 3-D Secure (the "verify with your bank" step). These reduce fraudulent charges and the chargebacks that follow them. You can usually tune how strict these checks are.

In some regions, stronger checks are not optional. Europe's Strong Customer Authentication (SCA) rules under PSD2, for example, require an extra verification step on many online card payments. Reputable processors apply these requirements automatically based on where the customer is, so you stay compliant without having to track the rules yourself. The practical upside for you is fewer fraudulent transactions and a lower chance of losing money to a disputed charge.

Common Payment Processing Mistakes

Even experienced business owners trip over the same issues. Avoid these.

• Confusing approval with settlement. Marking an invoice paid the instant a card is authorized is fine - but don't panic when the cash takes a day or two to appear. That delay is normal settlement.
• Choosing a processor on headline rate alone. A slightly lower percentage means nothing if payouts are slow, support is poor, or funds get frozen.
• Ignoring chargeback risk. Vague invoice descriptions and weak records make disputes harder to win. Clear line items and proof of delivery protect you.
• Storing card details insecurely. Keeping numbers in a document is both a breach risk and a compliance violation. Always tokenize.
• Offering only one payment method. Forcing a bank transfer when the client wants to pay by card adds friction and delays payment.
• Not reconciling payouts. Fees are netted out before deposit, so the amount that lands won't match the invoice total. Failing to account for this breaks your books.

Best Practices for Faster, Cheaper Payments

Follow these to get the most out of payment processing.

1. Put the payment option on the invoice itself. A one-click pay link removes the biggest source of delay - the client having to take a separate action.
2. Offer multiple methods. Card, digital wallet, and bank transfer cover almost everyone. Let the customer pick.
3. Match your pricing model to your volume. Flat-rate for low or variable sales; consider interchange-plus once volume is steady and large.
4. Automate reminders. Polite, scheduled nudges collect overdue invoices without awkward manual chasing.
5. Reconcile payouts weekly. Track gross, fees, and net so your accounting is accurate and you can see your true effective rate.
6. Use the fraud tools. Enable 3-D Secure and address verification, especially for higher-value or first-time clients.
7. Keep clean records. Detailed invoices and saved proof of work make chargeback disputes winnable.

Pairing a smart invoicing tool with a solid processor is the most reliable way to shrink the gap between sending an invoice and getting paid. A platform like Aviy lets you generate a professional invoice from a single sentence and attach an online payment option, so the processing steps above happen the moment your client clicks "Pay."

Summary

Payment processing is the coordinated relay between a customer's bank, a gateway, a processor, the card network, and your bank that moves money when a payment is made. It happens in two phases: instant authorization, then later settlement, which is why "approved" and "paid into your account" are not the same moment. Five players, a handful of fees, and a few seconds of behind-the-scenes verification make modern commerce possible.

For freelancers, agencies, and small businesses, the practical takeaways are simple: choose a transparent pricing model, offer customers easy ways to pay, lean on built-in security and fraud tools, and attach payment directly to your invoices. Do that, and payment processing stops being a mystery and becomes one of the fastest ways to improve your cash flow.

Frequently asked questions

What is payment processing in simple terms?

Payment processing is the chain of steps that moves money from a customer's bank or card to a business's bank when a purchase happens. A gateway captures the payment, a processor routes it to the card network, and the customer's bank approves it. The money is then settled into your account a day or two later, minus a small fee for the service.

What are the main steps in payment processing?

There are two phases. First, authorization: the customer enters their details, the gateway encrypts them, the processor routes the request to the card network, and the customer's bank approves or declines it in seconds. Second, settlement: approved transactions are batched, the banks reconcile, and the funds are deposited into your account, usually within one to three business days.

How long does it take for a payment to settle?

Authorization is near-instant, but settlement - the actual transfer of money into your account - typically takes one to three business days for card payments. Bank-based payments like ACH or Bacs can take longer. Some processors offer faster or instant payouts for an extra fee. Always check your provider's payout schedule so your cash flow expectations are accurate.

What is the difference between a payment gateway and a payment processor?

The gateway is the part the customer interacts with - it securely captures and encrypts their payment details at checkout. The processor works behind the scenes, routing that transaction between the card networks and the banks to get it approved and settled. Many modern providers bundle both together, which is why the two terms are often used interchangeably.

How much does payment processing cost?

Costs depend on the pricing model. Flat-rate plans charge one percentage plus a small fixed fee per transaction and suit most small businesses. Interchange-plus passes through the network's true fee plus a fixed markup and is cheaper at high volume. Every fee includes interchange paid to the customer's bank, a network assessment, and your processor's markup.

Do I need a merchant account to accept card payments?

Not usually. Traditional merchant accounts required separate applications and underwriting. Modern aggregators like Stripe pool many businesses into one account, so you get a gateway, processing, and a holding account in a single quick signup. High-volume businesses sometimes still benefit from a dedicated merchant account for lower rates, but most freelancers and small businesses don't need one.

Is online payment processing secure?

Yes, when you use a reputable provider. Card data is encrypted in transit and tokenized in storage, so real numbers are never exposed. Processors follow the PCI DSS security standard and run fraud scoring and 3-D Secure verification. Because customers enter details on the processor's secure systems, your own compliance burden stays minimal.

What is a chargeback?

A chargeback is when a customer disputes a charge with their bank and the funds are reversed, even after settlement. It can happen for fraud, unrecognized charges, or dissatisfaction. Chargebacks sometimes carry an extra fee. Clear invoice descriptions, proof of delivery, and good records help you win disputes and reduce how often they occur.

What is the difference between an issuing bank and an acquiring bank?

The issuing bank is the customer's bank - it issued their card and decides whether to approve or decline a payment. The acquiring bank is the merchant's bank - it receives the funds on your behalf and deposits them into your account. The card network passes messages between the two during every transaction.

How can I get paid faster using payment processing?

Attach a pay-now option directly to your invoices so clients can pay in one click instead of arranging a separate transfer. Offer multiple methods like card and bank payment, enable automatic reminders for overdue invoices, and use a tool that combines invoicing with online payments. This removes friction and is the single biggest driver of faster payment.

Conclusion

Payment processing can feel like a black box, but it's really just a well-rehearsed relay: a gateway captures the payment, a processor routes it, the card network connects the banks, and the customer's bank approves it in seconds before the money settles into your account a day or two later. Once you separate authorization from settlement and understand the handful of players and fees involved, every "pending" payment and processor charge makes sense.

For freelancers, agencies, and small businesses, mastering payment processing isn't about chasing the lowest rate - it's about removing friction so clients can pay you instantly. Choose a transparent pricing model, lean on built-in security, offer easy payment methods, and attach payment to your invoices. That's how processing quietly becomes one of your best cash-flow tools.

Related guides

• The Ultimate Guide to Online Payments for Small Businesses
• How to Accept Online Payments (Small Business Guide)
• Stripe vs PayPal for Small Businesses: Full Comparison
• Best Payment Gateways for Small Businesses (2026 Guide)
• Secure Online Payments: A Practical Guide for Small Businesses
• How to Get Paid Faster With Better Invoices

Sources and further reading

• PCI Security Standards Council
• Stripe Docs: How payments work
• Visa: How a Visa transaction works
• U.S. Small Business Administration
• Federal Reserve: ACH and payment systems