What you actually need to build a payment processor

A payment processing company moves money from a customer's account to a merchant's account, taking a cut along the way. To do this legally, you need a money transmitter license in every state where you operate, a sponsoring bank that will hold customer funds and settle transactions, and compliance infrastructure to prevent fraud and money laundering. You cannot straightforward build software and start processing payments. The regulatory framework comes first.

The sponsoring bank is the piece most founders miss. You cannot connect directly to the Federal Reserve or Automated Clearing House (ACH) network yourself. A bank must sponsor you, meaning they vouch for your operations and hold the reserve accounts where customer money sits before it moves to merchants. Without a bank willing to sponsor you, you have no way to actually move money. Finding one willing to take on a new payment processor is the hardest part of the entire process.

The money transmitter license requirement varies by state. Some states require it, some do not, and some have exemptions if you process below a certain dollar threshold. You must research your specific state's requirements through that state's financial regulator—usually the Department of Financial Services or equivalent. If you plan to operate nationally, you will need licenses in multiple states, each with its own process fee (typically $500 to $5,000 per state), its own renewal cycle, and its own compliance rules.

Key Takeaways

  • You must find a sponsoring bank before you can process a single transaction; no bank means no access to settlement networks.
  • Money transmitter licenses are required in most states and must be obtained before you launch; operating without one is illegal.
  • Compliance infrastructure—fraud detection, KYC (know your customer) verification, and AML (anti-money laundering) monitoring—must be built into your system from the start, not added later.
  • The entire process from bank sponsorship to first transaction typically takes 12 to 24 months and costs $500,000 to $2 million in legal, compliance, and technology expenses.
  • Most new payment processors start by targeting a specific merchant vertical (restaurants, e-commerce, nonprofits) rather than trying to serve all merchants at once.

Finding and securing a sponsoring bank

A sponsoring bank is a federally chartered or state-chartered bank that agrees to be your gateway to the payment networks. They hold the reserve accounts, they settle funds to merchants, and they take on the regulatory risk of sponsoring you. Banks are extremely selective about which payment processors they sponsor because if you commit fraud or facilitate illegal activity, the bank faces fines and reputational damage.

Banks typically want to see: a detailed business plan showing who your merchants will be, how you will detect fraud, what your pricing will be, and who your leadership team is. They want evidence that you have compliance informed on staff or under contract. They want to know your projected transaction volume and average transaction size. They want references from other financial institutions or payment industry veterans. Most importantly, they want to see that you have already thought through your compliance obligations, not that you plan to figure them out later.

The relationship is not transactional. Once a bank sponsors you, they will audit your operations regularly—sometimes quarterly, sometimes annually depending on your risk profile. They will require you to maintain certain reserve levels, report suspicious activity, and notify them of any significant changes to your business model. If they lose confidence in you, they can terminate the sponsorship, which effectively shuts down your business overnight. Choose a bank that understands your target market and has experience sponsoring processors in your vertical.

Money transmitter licensing by state

Money transmitter licenses are issued by state financial regulators, not federal ones. The process and requirements differ significantly. Some states (like New York) require extensive documentation, background checks on all owners and officers, and proof of net worth. Others (like Wyoming) have lighter requirements. Some states exempt processors that stay below a transaction threshold or only process for their own merchants.

The process typically requires: articles of incorporation, ownership structure, a detailed compliance plan, background checks on all principals, proof of net worth or capitalization, a description of your technology and fraud controls, and sometimes a surety bond (a financial may provide that you will follow the law). Processing times range from 30 days to 6 months depending on the state and how complete your process is. Incomplete applications get sent back, which delays everything.

Once licensed, you must renew annually or every two years depending on the state, and you must report any material changes to your business—new owners, new products, significant changes to your compliance program. Some states require you to file suspicious activity reports (SARs) directly with them; others require you to file with FinCEN (the Financial Crimes Enforcement Network) and notify the state. Read your state's specific rules carefully. Violating them can result in fines, license suspension, or criminal charges.

Building compliance infrastructure from day one

Compliance is not a department you add after you launch. It is a system you build into every transaction. You need Know Your Customer (KYC) verification, which means confirming the identity of every merchant and every customer before they can use your platform. You need Anti-Money Laundering (AML) monitoring, which means watching for patterns that suggest illegal activity—rapid movement of large sums, transactions to high-risk countries, sudden changes in transaction patterns. You need fraud detection, which means identifying transactions that look stolen or unauthorized.

Most new processors use third-party vendors for these functions rather than building them in-house. Companies like Socure, Jumio, and Sift provide KYC verification, identity verification, and fraud detection as APIs you integrate into your platform. This is faster and cheaper than building it yourself, and regulators trust established vendors more than homegrown systems. You will still need a compliance officer on staff—someone who understands the regulations, monitors your systems, and can explain your controls to your sponsoring bank and regulators.

You also need a system for reporting suspicious activity. If you detect a transaction that looks like money laundering, you must file a Suspicious Activity Report (SAR) with FinCEN within 30 days. You cannot tip off the customer that you filed a SAR—that is illegal. You need documentation of every decision you made about every merchant, every transaction you flagged, and every report you filed. Regulators will ask to see this documentation during audits. If you cannot produce it, you face fines.

Technology and settlement infrastructure

Your core technology needs to connect to your sponsoring bank's settlement system, the ACH network (for bank transfers), and the card networks (Visa, Mastercard, Discover, American Express). You do not connect directly to these networks yourself. Your bank does. Your software connects to your bank's API, and your bank handles the rest.

You need a merchant dashboard where merchants can see their transactions, disputes, and payouts. You need a customer-facing interface where customers can enter payment information. You need a backend system that logs every transaction, every error, every retry, and every settlement. You need to handle chargebacks—when a customer disputes a charge and the card network reverses it. You need to handle refunds—when a merchant wants to return money to a customer. You need to handle reconciliation—matching what you think happened to what your bank says happened.

Most new processors use existing payment infrastructure rather than building from scratch. Stripe, for example, offers a Connect platform that lets you build a payment processor on top of their infrastructure. You handle the merchant relationships and the user experience; Stripe handles the settlement and compliance. This is faster and cheaper than building your own infrastructure, but it means you are dependent on Stripe and you cannot differentiate on the core payment technology.

Capital requirements and timeline

Starting a payment processor is expensive. You need capital for legal and compliance setup (typically $50,000 to $150,000), technology development (typically $200,000 to $500,000), licensing fees across states (typically $10,000 to $50,000), and operating expenses while you build the business before you have revenue. Most new processors need $500,000 to $2 million in funding before they process their first transaction.

The timeline is long. Securing a sponsoring bank takes 3 to 6 months. Obtaining money transmitter licenses takes 2 to 6 months per state. Building your technology takes 6 to 12 months. Getting your first merchants live takes another 2 to 4 months. From the day you start to the day you process your first real transaction is typically 12 to 24 months. During that entire time, you are spending money and generating no revenue.

This is why most successful payment processors either start in a specific vertical (they only process for restaurants, or for nonprofits, or for e-commerce) or they start as a feature of a larger business (a marketplace like Shopify or Etsy that needs to process payments for its sellers). Trying to be a general-purpose payment processor competing with Square, Stripe, and PayPal is extremely difficult without massive capital and an existing customer base.

Regulatory oversight and ongoing obligations

Once you are licensed and operating, you are subject to regular audits and examinations. Your sponsoring bank will audit you. Your state regulator will examine you. FinCEN may request information about your transactions. The Consumer Financial Protection Bureau (CFPB) may investigate you if they receive complaints. You must respond to all of these requests on time and completely.

You must maintain detailed records of every transaction, every merchant, every customer, and every compliance decision for at least five years. You must report your transaction volume and suspicious activity to regulators on a schedule they set. You must notify your bank and your regulator of any material changes to your business—new products, new markets, significant changes to your compliance program. You must maintain adequate capital reserves. You must have cyber insurance and errors and omissions insurance.

If you violate the rules, the penalties are severe. Fines can reach millions of dollars. Your license can be revoked. Your officers can face criminal charges. Your sponsoring bank can terminate you, which shuts down your business when ready. This is not a business where you can move fast and break things. You move carefully and document everything.

Frequently Asked Questions

Can I start a payment processor without a sponsoring bank?

No. You cannot access the ACH network, the card networks, or any settlement system without a bank. A bank must sponsor you and hold the reserve accounts. Without a bank, you cannot move money, which means you cannot operate. Finding a bank willing to sponsor you is the first and most critical step.

Do I need a money transmitter license in every state?

Most states require one, but not all. Some states have exemptions if you process below a certain dollar threshold or only process for your own merchants. You must research your specific state's requirements through that state's financial regulator. If you plan to operate nationally, you will likely need licenses in multiple states, each with its own process and renewal process.

How much does it cost to start a payment processor?

Expect $500,000 to $2 million in total startup costs, including legal and compliance setup, technology development, licensing fees, and operating expenses before you generate revenue. The timeline from start to first transaction is typically 12 to 24 months. Most new processors need external funding to cover these costs.

What is the difference between a payment processor and a payment gateway?

A payment processor moves money between accounts and holds reserve funds. A payment gateway is the software interface where customers enter payment information. A processor needs a license and a sponsoring bank. A gateway is just software. Many companies offer both, but they are different functions with different regulatory requirements.

Can I use Stripe or Square's infrastructure instead of building my own?

Yes. Platforms like Stripe Connect let you build a payment processor on top of their infrastructure. You handle merchant relationships and user experience; they handle settlement and compliance. This is faster and cheaper than building from scratch, but you are dependent on them and cannot differentiate on core payment technology. It is a valid path for many new processors.