What happens when you swipe or tap your card
When you hand over your card or enter the number online, you are not sending money directly to the merchant. Instead, you are starting a chain of handoffs between at least four separate companies, each taking a small cut and each checking that the transaction is real. The merchant never touches your bank account. Your bank never talks to the merchant's bank. A network company in the middle makes sure both sides play by the rules.
The whole process takes seconds on the surface, but the actual movement of money happens later—sometimes the next day, sometimes three to five days out. What you see happen when ready is authorization: a yes or no answer to the question "does this person have the money or credit to do this right now?" The actual transfer of funds is a separate event that follows.
Key Takeaways
- Your card issuer (your bank) and the merchant's bank never communicate directly; a payment network like Visa or Mastercard sits between them and enforces the rules.
- Authorization happens in seconds and only confirms you have available funds or credit; the actual money movement happens hours or days later in a batch process.
- The merchant pays a fee (typically 1.5 to 3.5 percent) that is split among the card network, the merchant's bank, and the card issuer, which is why some businesses charge extra for card payments.
- If a transaction is disputed, the card issuer can reverse the charge while the investigation happens, which is why chargebacks exist and why merchants fear them.
- Different card types (debit, credit, prepaid) follow the same network path but have different rules about when money leaves your account and who bears the fraud risk.
The four players and what each one does
Your card issuer is the bank or credit union that gave you the card. They own the relationship with you. They set your credit limit, they send you the bill, and they are the ones you call if the card is stolen. When a transaction comes through, they decide whether to approve it based on your available balance or credit limit. They also bear the risk if someone uses your card fraudulently—they have to refund you, which is why they care about security.
The merchant's bank (called the acquiring bank) is the bank that the store or website uses to receive payments. The merchant does not have a direct relationship with this bank the way you do with your issuer; instead, the merchant pays a processor or a payment service to handle the relationship. The acquiring bank settles the money into the merchant's account at the end of each day or week.
The payment network (Visa, Mastercard, American Express, Discover) is the company that owns the rules and the infrastructure. They do not hold your money or the merchant's money. They set the interchange fee (the cut that goes to your bank), they decide what fraud protections exist, and they fine both banks if either one breaks the rules. Think of them as the referee and the rule book combined.
The payment processor is often a separate company that sits between the merchant and the acquiring bank. They handle the technical side: they run the card reader, they encrypt the data, they send the transaction to the network, and they handle the settlement. Some large merchants do this themselves; most small businesses use a processor like Square, Stripe, or PayPal.
How the authorization step works
When you insert your card or type the number, the processor sends an encrypted message to the payment network with your card number, the amount, and the merchant's ID. The network routes this to your card issuer in real time. Your issuer checks three things: Is this card active? Is there enough available credit or funds? Does this transaction look like fraud based on your history and the merchant's history?
Your issuer sends back a one-word answer: approved or declined. This happens in under a second in most cases. If approved, the network gives the merchant a confirmation code. The merchant sees "approved" on their screen and hands you the receipt. At this moment, the money has not moved. Your available balance or credit limit has been reduced by that amount (you will see it as "pending"), but no actual transfer has happened yet.
If your issuer suspects fraud, they can decline the transaction outright. If they are uncertain, some issuers will ask for a one-time code sent to your phone before approving. This is called two-factor authentication, and it is becoming standard for online purchases and high-value transactions.
The settlement process: when money actually moves
At the end of each business day, the merchant's processor gathers all the approved transactions from that day and sends them to the acquiring bank in a batch. The acquiring bank then sends these transactions to the payment network, which sorts them by card issuer. The network sends each issuer a list of all the transactions their cardholders made that day.
Your issuer receives this list and pulls the money from your account (or adds it to your credit card bill if you are using a credit card). The money goes to the acquiring bank, which deposits it into the merchant's account, minus the fees. This whole process typically takes one to three business days, which is why you might see a transaction as "pending" for a day or two before it becomes final.
The fees come out at this stage. If you bought something for $100 with a credit card, the merchant might receive $97 or $96.50, depending on the fee structure. The $2.50 to $3 goes to the card network, the acquiring bank, and your card issuer, split according to rules set by the network. This is why merchants sometimes charge extra for credit card payments or offer discounts for cash—they are trying to offset this cost.
Why chargebacks exist and how they work
Because your card issuer bears the fraud risk, they have the power to reverse a charge if you dispute it. You call your bank and say the transaction was unauthorized or the merchant never delivered the goods. Your issuer can issue a provisional credit to your account within one to three business days while they investigate. The merchant is notified that a chargeback has been filed.
The merchant then has a window (usually 7 to 10 days) to respond with evidence that the transaction was legitimate: a signed receipt, a tracking number showing delivery, an email confirming the order, proof that you contacted them about a problem and they refused to refund you. If the merchant does not respond or their evidence is weak, your issuer keeps the money and the merchant loses it. If the merchant's evidence is strong, the chargeback is reversed and the money goes back to them.
This system protects you but creates a risk for merchants. A merchant who receives too many chargebacks can be flagged by the payment network and forced to pay higher fees or even lose the ability to accept cards. This is why merchants sometimes ask for a signature or a photo ID—they are building a paper trail in case they need to defend a chargeback later.
How debit cards, credit cards, and prepaid cards differ in this process
The network path is the same for all three, but the timing and the risk are different. With a debit card, the money leaves your bank account when ready after authorization (or within one business day). You have fraud protection—your bank will refund unauthorized charges—but the burden is on you to notice and report it. If someone uses your debit card fraudulently and you do not report it within a certain window (usually 60 days), you may not be fully protected.
With a credit card, the transaction is added to your bill and you do not pay until your statement date. The card issuer bears the fraud risk entirely; you are protected by law and do not have to pay for unauthorized charges. This is why credit cards are safer for online shopping and why merchants prefer them (they know the issuer will back the transaction).
With a prepaid card, the money was already in the account before you used it. The authorization and settlement process is identical to debit, but there is no credit line behind it. Fraud protection varies by card issuer and by the network; some prepaid cards offer strong protection, others offer very little. Always check the terms before loading money onto a prepaid card.
What can go wrong and where
A transaction can fail at authorization if your card is declined (insufficient funds, fraud block, or expired card). It can fail during settlement if the merchant's processor goes down or if there is a network outage. It can fail after settlement if the merchant never ships the goods or ships something different from what you ordered.
A transaction can also be reversed by your issuer if you report it as fraudulent, even if the merchant claims it was legitimate. The merchant then has to prove it was not fraud. This is why merchants ask for signatures and delivery confirmation—they are building a defense against chargebacks.
For the merchant, the biggest risk is a chargeback after they have already shipped the goods. They lose the product and the money. For you, the biggest risk is not noticing a fraudulent charge in time to dispute it. This is why it is important to check your statements regularly and report anything suspicious within 60 days.
Frequently Asked Questions
Why does my bank show a transaction as pending for days after I made the purchase?
The authorization (the yes/no decision) happens when ready, but the settlement (the actual money movement) happens in batches at the end of each business day. Your bank reduces your available balance right away to prevent you from overspending, but the transaction does not become final until the merchant's bank sends it through the network and your bank pulls the funds. This typically takes one to three business days.
If I dispute a charge, do I get my money back right away?
Most card issuers will issue a provisional credit within one to three business days while they investigate. This credit is temporary; if the merchant provides strong evidence that the transaction was legitimate, the chargeback can be reversed and the money goes back to them. The full investigation usually takes 30 to 90 days.
Why do some merchants charge extra for credit cards but not debit cards?
Merchants pay a higher fee for credit card transactions (typically 2 to 3 percent) than for debit card transactions (typically 1 to 1.5 percent). The difference goes to your card issuer as an incentive to issue credit cards. Some merchants pass this cost to you by charging a credit card fee or offering a debit card discount. This is legal in most states.
Can a merchant see my full card number or bank account information?
No. The payment processor encrypts your card number before it leaves the card reader or your browser. The merchant never sees the full number; they only see the last four digits on the receipt. Your bank account number is never shared with the merchant at all. This is enforced by the payment networks and by law.
What happens if the payment network goes down?
If the network is down, transactions cannot be authorized in real time. Most merchants have a backup system that allows them to process cards offline and settle them later when the network comes back up. You might see a delay of a few hours to a day, but the transaction will go through once the network is restored.