What is a Merchant Account?

What Is a Merchant Account?

A merchant account is a specialised type of bank account that allows a business to accept card payments -- debit cards, credit cards, and prepaid cards. When a customer pays with a card, the money does not go directly into the business's regular bank account. Instead, it is held temporarily in the merchant account while the transaction is processed, verified, and settled. Once settlement is complete, the funds are transferred to the business's main bank account.

Every business that accepts card payments has a merchant account, whether they know it or not. If you use a payment service provider like Stripe or Square, they provide a pooled merchant account on your behalf. If you have a direct relationship with an acquiring bank, you have your own dedicated merchant account. The distinction matters for control, fees, and how your business is perceived by payment networks.

How Merchant Accounts Work

The Payment Flow

When a customer makes a card payment, the transaction follows this path:

• The customer presents their card (in-store, online, or over the phone)
• The payment terminal or gateway sends the transaction details to the acquiring bank (which holds the merchant account)
• The acquirer routes the transaction through the card network (Visa, Mastercard, etc.) to the customer's issuing bank
• The issuing bank checks the account, verifies the transaction, and sends an approval or decline response back through the chain
• If approved, the merchant sees a confirmed payment. The actual funds settle into the merchant account, typically within 1-3 business days
• From the merchant account, funds are transferred to the business's regular bank account, minus processing fees

The Settlement Process

Settlement is the process of moving money from the customer's bank to the merchant's account. It happens in batches -- typically once per day. The merchant's payment system sends all approved transactions from the day as a batch to the acquirer, which processes them through the card networks. After interchange fees, scheme fees, and the acquirer's margin are deducted, the remaining amount is deposited into the merchant account.

Dedicated vs Aggregated Merchant Accounts

Dedicated Merchant Account

A dedicated merchant account is held in the business's own name with an acquiring bank. The business goes through an underwriting process where the bank assesses the risk of the business, its industry, transaction volumes, and chargeback history. Once approved, the business has its own account with negotiated processing rates.

Benefits include lower processing fees (for higher volumes), more control over settlement timing, your own merchant identification number (MID), and a direct relationship with the acquirer. The downside is a longer setup process and ongoing compliance requirements.

Aggregated (Pooled) Merchant Account

Payment service providers like Stripe, Square, and PayPal operate under their own master merchant account and let businesses process payments through it. The business does not go through traditional underwriting -- they can often start accepting payments within minutes.

The trade-off is less control. Processing fees are typically higher and non-negotiable. Funds may be held for longer periods. And because you are sharing an account with thousands of other businesses, your account can be frozen or terminated if the provider's risk algorithms flag your activity -- sometimes with little explanation or recourse.

Getting a Merchant Account

The application process for a dedicated merchant account involves:

• Business documentation Company registration, directors' details, proof of address, and bank statements
• Processing history Previous transaction volumes, average transaction values, and chargeback rates if available
• Industry assessment Some industries are considered higher risk (travel, gambling, adult content, subscription services) and face stricter scrutiny or higher fees
• Compliance requirements The acquirer will want to know how you handle card data, whether you are PCI DSS compliant, and what security measures you have in place
• Website review For e-commerce, the acquirer typically reviews your website for clear terms, privacy policy, and refund policy

Merchant Account Fees

Several fee types apply to merchant accounts:

• Interchange fees Paid to the card issuer on every transaction. Rates vary by card type, transaction method (in-person vs card-not-present), and merchant category
• Scheme fees Paid to the card network (Visa, Mastercard). Typically small but add up at volume
• Acquirer margin The acquiring bank's markup, which is the negotiable element of the fee structure
• Monthly or annual fees Some acquirers charge a fixed fee for maintaining the account
• Chargeback fees A per-incident fee charged when a customer disputes a transaction
• PCI non-compliance fees Some acquirers charge a monthly fee if the merchant has not validated PCI DSS compliance

Merchant Accounts and Phone Payments

Businesses that accept payments over the phone need a merchant account that supports card-not-present (CNP) transactions, specifically MOTO (mail order / telephone order) transactions. Not all merchant accounts are configured for MOTO -- some are set up only for e-commerce or in-store use. The processing rates for MOTO transactions are typically higher than for in-person payments because card-not-present transactions carry a higher fraud risk.

When setting up a merchant account for telephone payments, businesses should also ensure their acquirer supports the payment methods they plan to use -- DTMF masking, IVR payments, and payment links may each have specific requirements or integrations that the acquirer needs to enable.

PCI DSS and Your Merchant Account

Acquiring banks require merchants to validate PCI DSS compliance as a condition of maintaining their merchant account. The level of validation depends on the merchant's transaction volume -- Level 1 merchants need an annual audit by a QSA, while smaller merchants complete a self-assessment questionnaire (SAQ). Failure to validate compliance can result in non-compliance fees, increased monitoring, or termination of the merchant account.

Using a PCI DSS-compliant payment provider to handle card data can significantly reduce the scope of the merchant's compliance obligations, making it easier and cheaper to satisfy the acquirer's requirements.