Payment System Analysis
How modern payment infrastructure actually works — from the moment a card is tapped to the final movement of funds between financial institutions.
The Invisible Infrastructure of Commerce
Every card payment, bank transfer, or mobile wallet transaction triggers a chain of real-time decisions, risk assessments, and financial settlements involving multiple institutions operating under shared rules and standards.
This analysis explains how these systems are structured, who the participants are, how they interact, and what economic and regulatory forces shape their design. The goal is not to recommend any system, but to explain how each one functions and what trade-offs it involves.
The Four-Party Model of Card Payments
Most credit and debit card transactions in the world operate on a four-party (or four-corner) model, a structure developed in the 1960s and still fundamental to understanding payment economics.
Cardholder
The consumer who initiates a payment using a credit, debit, or prepaid card issued by their bank. The cardholder has a contractual relationship with the issuer, not directly with the network.
Merchant
The business accepting the payment. Merchants contract with an acquirer (or payment processor) to receive card payments and are subject to network acceptance rules.
Issuing Bank
The cardholder's bank. It issues the card, sets the credit limit or manages the account balance, and is responsible for authorizing or declining transactions.
Acquiring Bank
The merchant's bank. It processes the merchant's card transactions, provides the terminal or gateway, and settles funds to the merchant account after clearing.
Where the Network Sits
The card network (Visa, Mastercard, UnionPay, etc.) sits in the center of this model as the rule-setter and routing infrastructure. It does not issue cards or hold merchant accounts. Instead, it:
- Sets the technical and commercial standards that all parties must follow
- Routes authorization requests between acquirer and issuer in real time
- Manages the clearing and settlement process between financial institutions
- Sets interchange fee schedules that determine how revenue flows through the ecosystem
How a Payment Is Processed in Three Phases
Authorization (milliseconds)
When a card is presented, the merchant terminal or online gateway sends an authorization request to the acquirer. The acquirer forwards this to the card network, which routes it to the issuing bank. The issuer performs a real-time check — sufficient funds or credit, fraud scoring, card validity, geographic restrictions — and returns an authorization code or decline. This entire chain typically completes in 1–3 seconds, often faster.
Clearing (hours to one day)
At end of day, the merchant's terminal or gateway submits a batch of authorized transactions for clearing. The network exchanges the transaction data between issuing and acquiring banks, calculates net positions, and prepares the data required for settlement. Interchange fees are calculated at this stage. Most clearing cycles operate on a T+1 basis, though some systems clear on T+0.
Settlement (one to two business days)
The actual movement of funds between financial institutions. The card network instructs the settlement bank to debit the issuer and credit the acquirer for the net settlement amounts. The acquirer then funds the merchant's account, minus the merchant discount rate (MDR). The cardholder's statement is updated at end of billing cycle. Net settlement between large institutions is handled through central bank infrastructure or correspondent banking arrangements.
Account-to-Account Real-Time Payment Systems
FedNow & RTP
The US has two competing real-time payment rails: the Federal Reserve's FedNow (launched 2023) and The Clearing House's RTP network (launched 2017). Both enable 24/7/365 account-to-account transfers with final settlement in seconds. Adoption is growing but remains uneven across financial institutions.
SEPA Instant Credit Transfer
SCT Inst enables euro-denominated transfers up to €100,000 within 10 seconds, available around the clock. The EU's Instant Payments Regulation (2024) mandates PSPs to offer instant payments at no additional cost compared to standard credit transfers, driving rapid adoption.
UPI, PayNow & PromptPay
India's Unified Payments Interface (UPI) processed over 100 billion transactions in 2023 through a model-based open API architecture. Singapore's PayNow and Thailand's PromptPay operate on similar real-time infrastructure, and regional interoperability schemes now allow cross-border real-time payments between several ASEAN markets.
| System | Region | Operator | Settlement Timing | Availability |
|---|---|---|---|---|
| FedNow | USA | Federal Reserve | Instant (final) | 24/7/365 |
| RTP | USA | The Clearing House | Instant (final) | 24/7/365 |
| SCT Inst | Eurozone | EPC / ECB | Under 10 seconds | 24/7/365 |
| Faster Payments | UK | Pay.UK | Under 2 hours | 24/7/365 |
| UPI | India | NPCI | Instant | 24/7/365 |
| PIX | Brazil | Banco Central do Brasil | Instant (final) | 24/7/365 |
Interchange, MDR, and the Fee Waterfall
How Fees Are Distributed
When a consumer uses a credit card, the merchant pays a Merchant Discount Rate (MDR) — typically 1.5% to 3.5% of the transaction value in most markets. This fee is not retained by a single entity. It flows through the payment chain as follows:
- Interchange fee — the largest component, paid to the issuing bank. Regulated in many jurisdictions (EU cap: 0.2% debit, 0.3% credit).
- Network assessment fee — a small percentage retained by the card network (Visa, Mastercard).
- Acquirer margin — the remainder retained by the acquiring bank or payment processor.
Regulatory Pressure on Fees
Interchange regulation has been a major policy focus globally. The EU's Interchange Fee Regulation (IFR) capped consumer card interchange at 0.2% and 0.3% in 2015. The UK retained equivalent caps post-Brexit. The US Durbin Amendment (2010) capped debit interchange for large banks.
These regulations aim to reduce costs for merchants and, indirectly, consumers — though economic research on the actual pass-through of savings to end users is mixed. In markets without caps, interchange rates remain determined by network rules and competitive dynamics.
Authentication and Fraud Prevention
PCI DSS
The Payment Card Industry Data Security Standard sets baseline requirements for any entity that stores, processes, or transmits cardholder data. Compliance is mandatory and enforced through acquirer contracts and network rules.
3D Secure (3DS)
An authentication protocol operated by card networks (Visa Secure, Mastercard Identity Check). Version 3DS2 enables risk-based authentication — most transactions are frictionless, with step-up challenges applied only to higher-risk payments.
Tokenization
A primary account number (PAN) is replaced with a unique token for a specific device, merchant, or transaction type. If a token is compromised, the underlying card data is not exposed. Apple Pay and Google Pay rely on tokenization via the EMVCo Token Service Provider framework.
AI-Based Fraud Scoring
Issuers and networks apply machine learning models to score each transaction for fraud probability in real time. Features include velocity patterns, geographic anomalies, device fingerprints, and behavioral biometrics. Model accuracy directly affects both fraud losses and false positive rates.