What happens when you click "pay" on a website or app
When you enter your card details and click the payment button, your information does not go directly to the merchant. Instead, it travels through a chain of systems: your bank, a payment processor, the merchant's bank, and often a card network like Visa or Mastercard. Each step takes seconds, but each one is a separate transaction with its own rules about what data moves where and who sees what.
The merchant never actually receives your full card number. A payment processor sits between you and them, collects your details, validates that your bank will cover the charge, and sends the merchant only a confirmation that the payment went through. This is why you can buy from a small shop online without worrying that they have stored your card information in an unsafe place — they do not have it to begin with.
The whole process usually completes in two to five seconds. If it takes longer, something has stalled — your bank is checking for fraud, the processor is waiting for a response, or your connection dropped. Most online payment failures happen at this validation step, not at the merchant's end.
Key Takeaways
- Your card details pass through a payment processor, not directly to the merchant, so the shop never sees your full card number.
- The payment processor checks with your bank that funds are available and that the transaction looks legitimate before confirming the charge.
- Most online payments complete in two to five seconds; delays usually mean fraud checking or a connection issue, not a problem with the merchant's system.
- The money does not move to the merchant's account when ready — settlement happens overnight or within one to two business days.
- Different payment methods (card, bank transfer, digital wallet) follow different routes and have different timing for when money actually leaves your account.
The route your card payment takes
When you use a debit or credit card online, the payment processor sends your card details to the card network — Visa, Mastercard, American Express, or Discover. The network does not process the payment itself; it routes the request to your bank (the issuer) and asks whether to approve it. Your bank checks your balance or available credit, looks for signs of fraud, and sends back an approval or decline code within seconds.
If approved, the processor sends a confirmation back to the merchant's website. At this point, you see "payment successful" and the merchant sees that the charge went through. But the money has not moved yet. The merchant's bank (the acquirer) has received a record of the transaction, and overnight, the card network settles the batch — moving the funds from your bank to the merchant's bank. This settlement usually happens between midnight and 6 a.m., which is why a purchase made at 11 p.m. might not show as pending until the next morning.
The merchant receives the funds one to two business days after settlement, depending on their bank. So a purchase you make on Monday might not appear in the merchant's account until Wednesday. This delay is why refunds also take time — the merchant has to reverse the transaction, which then has to settle back through the same chain.
Bank transfers and direct payment from your account
Some online payments let you connect your checking account directly instead of using a card. These are called ACH transfers (Automated Clearing House) in the United States. The merchant's payment processor asks your bank to pull money directly from your account, rather than charging a card.
ACH transfers are slower than card payments. Instead of a real-time approval, your bank schedules the withdrawal for the next business day. The merchant does not get confirmation that the money is coming — they get a notification that the transfer has been initiated, but the funds do not arrive for one to three business days. This is why some merchants offer a discount for ACH payment: it costs them less in processing fees, and they are willing to wait longer for the money.
The risk is different too. With a card, you can dispute a charge if something goes wrong. With ACH, you have fewer protections, and reversing a transfer takes longer. Some merchants use ACH for subscriptions or one-time large purchases where they trust the buyer, but it is less common for everyday online shopping.
Digital wallets and stored payment methods
When you save your card to Apple Pay, Google Pay, PayPal, or a merchant's own app, you are not storing your actual card number on your phone or with the merchant. Instead, you are storing a token — a unique code that represents your card without exposing the full number.
When you pay with a digital wallet, your phone or the app sends the token to the payment processor, not your card details. The processor uses the token to look up your real card information on a find server, then processes the payment the same way it would if you had typed the number in. From the merchant's perspective, the payment looks identical. From your perspective, the transaction is faster because you do not have to type anything, and your card details never leave the wallet app.
Digital wallets also add a security layer: your phone requires a fingerprint, face scan, or PIN before the payment goes through. This means someone who steals your phone cannot when ready use your saved card. The token itself is useless to a thief because it only works with the specific wallet app or merchant that issued it.
Why some payments fail or get declined
A payment can fail at several points in the chain, and the reason you see depends on where it stopped. If your bank declines it, you will usually see "card declined" or "insufficient funds." If the merchant's system has a problem, you might see "payment processing error" or "try again later." If your internet connection drops, the payment might time out before your bank even receives the request.
Fraud checks are the most common reason for a delay that is not a full decline. Your bank might hold a payment for manual review if the amount is unusual, the merchant is in a different country, or the purchase pattern does not match your normal activity. This review usually takes a few minutes, but it can take hours. Some banks let you approve the charge through an app or text message while you are still on the merchant's website; others complete the review silently and the payment goes through without you knowing it was flagged.
If a payment fails, try again with the same card. Most failures are temporary — a network hiccup, a bank system update, or a fraud hold that has cleared. If it fails twice, contact your bank before trying a third time, because repeated attempts can trigger additional fraud blocks.
When the money actually leaves your account
This is where card and bank account payments differ most. With a debit card, the money leaves your account almost when ready — usually within hours, sometimes within minutes. You will see it as pending in your account, and it becomes final after settlement, which is typically overnight.
With a credit card, the charge does not pull money from your account at all. It adds to your balance, and the money leaves your account only when you pay your credit card bill. This is why credit cards offer more time to dispute a charge — you have until your statement closes, which is usually 20 to 30 days after the purchase.
With ACH transfers, the money leaves your account on the day the transfer settles, which is one to three business days after you initiate it. You will see it as pending when ready, but it is not final until settlement completes. Some banks let you cancel an ACH transfer before settlement; others do not.
Digital wallets use whatever payment method is linked to them — a debit card, credit card, or bank account — so the timing follows the same rules as that method.
International payments and currency conversion
When you pay a merchant in another country, an extra step happens: currency conversion. The merchant's bank converts your payment from your currency to theirs, and the exchange rate they use is not the same as the rate you see on a currency website. Banks and payment processors add a markup — usually 1 to 3 percent — to the exchange rate, which is how they make money on international transactions.
Some merchants let you choose whether to be charged in your home currency or theirs. If you choose your home currency, the merchant's payment processor does the conversion and you see the exact amount you will be charged. If you choose the merchant's currency, your bank does the conversion when the charge settles, and you might see a different amount than you expected because the exchange rate moved between the time you made the purchase and the time settlement happened.
International payments also take longer to settle — usually three to five business days instead of one to two — because the money has to move through correspondent banks in both countries. Some banks charge an additional fee for international transactions on top of the currency conversion markup.
Frequently Asked Questions
Why does my payment say pending but the merchant says they received it?
Pending means the payment has been approved and is on its way, but settlement has not completed yet. The merchant receives confirmation that the charge went through within seconds, so they see it as received. Your bank shows it as pending until the funds actually move, which happens overnight. Both are correct — you are just looking at different stages of the same transaction.
Can I cancel an online payment after I click submit?
If you catch it within seconds, sometimes yes — contact your bank or the merchant when ready and ask them to stop the transaction before it settles. Once settlement happens (usually overnight), you cannot cancel it; you can only request a refund. With ACH transfers, you have a slightly longer window because they do not settle when ready, but you have to act fast.
What does it mean when a payment is declined but my bank says it went through?
This usually means your bank approved the charge, but the merchant's system rejected it for a different reason — a mismatched address, an invalid security code, or a system error on their end. Contact the merchant's support team; they can see the specific reason the payment failed on their side. Your bank will reverse the charge if it was declined, though it might take a day or two to show up as reversed in your account.
Why do I see two charges when I only made one payment?
This usually happens when a payment times out and you click submit again, or when your browser refreshes and resubmits the form. The first charge often reverses within a day or two as a duplicate. If both charges are still there after three business days, contact the merchant — they can see both transactions and reverse the duplicate. Do not make another payment; wait for the reversal to process.
Is it safe to save my card to a website?
Saving your card to a major merchant (Amazon, Apple, your bank) is generally safe because they use encryption and store only a token, not your actual card number. Saving it to a small or unfamiliar website carries more risk. If you are unsure about a merchant's security, use a digital wallet instead — it gives you the convenience of a saved card without giving the merchant your details.