Acquirer

An acquirer (also called an acquiring bank or merchant acquirer) is the financial institution that enables merchants to accept card payments by processing transactions, settling funds to merchant accounts, and assuming liability for those transactions until they are authorized and funded by the issuing bank.

‍

‍

‍

Key Challenges in Acquirer Risk Management

‍

Downstream liability exposure: Acquirers remain financially responsible for merchant misconduct even after funds have settled. This includes chargebacks, fraud losses, and regulatory penalties that can surface weeks or months after the original transaction.

‍

Network accountability: Card networks hold acquirers liable for their entire merchant portfolio's compliance. A single merchant's violation can trigger fines, increased processing fees, or mandatory remediation programs that affect the acquirer's broader operations.

‍

Visibility constraints in intermediated models: When working through Payment Facilitators (PayFacs) or Independent Sales Organizations (ISOs), acquirers face limited direct access to merchant operations while retaining ultimate regulatory and financial responsibility. This is particularly challenging in merchant acquiring environments where multiple intermediary layers exist between the acquirer and the end merchant.

‍

Evolving fraud and policy violations: Merchants can drift from their approved business model over time. A merchant initially approved for one product category may expand into higher-risk areas without notification, creating latent exposure the acquirer only discovers after losses accumulate.

‍

Regulatory fragmentation: Acquirers must navigate card network rules (Visa, Mastercard), PCI DSS (Payment Card Industry Data Security Standard) requirements, regional payment regulations, and AML (Anti-Money Laundering) frameworks simultaneously. These requirements do not always align cleanly.

‍

‍

‍

How to Build a Defensible Acquirer Risk Program

‍

‍

‍1. Implement risk-based merchant underwriting

‍

Apply underwriting depth proportional to risk indicators. High-risk characteristics include subscription billing models, cross-border transactions, digital goods, merchants in MATCH-listed categories, and businesses with prior payment processing terminations.

‍

For elevated-risk merchants, underwriting should verify:

• Ultimate Beneficial Ownership (UBO) and Key Management Personnel (KMP) through registry checks and background screening
• Processing history with previous acquirers or payment service providers
• Website content review against prohibited categories and card network acceptable use policies
• Business license verification and regulatory standing in relevant jurisdictions
• Financial statements or bank references to assess solvency

‍

Streamlined underwriting can apply to established businesses with physical locations, predictable transaction patterns, and low chargeback risk, but baseline sanctions screening and identity verification remain mandatory.

‍

‍

2. Deploy continuous transaction and behavior monitoring

‍

Monitoring should detect both immediate fraud signals and gradual merchant drift. We recommend tracking:

• Chargeback ratio relative to card network thresholds (Visa and Mastercard define "excessive" at approximately 1.0%, with early warning at 0.9%)
• Refund rate as a percentage of total sales volume
• Transaction velocity changes that deviate from underwriting projections
• Average ticket size anomalies
• Geographic distribution shifts in cardholder or IP address data

‍

Merchant monitoring systems should also include periodic website reviews to detect content changes, new product offerings, or policy modifications that alter the merchant's risk profile.

‍

‍

3. Establish proportional reserve and holdback structures

‍

Financial buffers protect acquirers from timing gaps between transaction settlement and chargeback realization.

‍

Common approaches include:

• Rolling reserves: Holding a percentage of daily transaction volume for a specified period (for example, 10% held for 180 days)
• Fixed reserves: Requiring an upfront deposit held throughout the merchant relationship
• Settlement delays: Deferring funding to the merchant by several business days to identify early disputes

‍

Reserve levels should reflect the merchant's risk category, industry chargeback norms, operating history, and financial stability. We see reserve requirements range from 0% for low-risk established merchants to 25% or higher for merchants in volatile categories.

‍

‍

4. Maintain clear offboarding and remediation protocols

‍

When merchants breach terms, exceed chargeback thresholds, or engage in prohibited activities, acquirers need documented procedures for rapid response:

• Transaction suspension or termination authority with defined escalation paths
• Reserve liquidation processes to cover outstanding liabilities
• MATCH (Member Alert to Control High-Risk Merchants) reporting procedures to alert other acquirers
• Card network notification requirements for threshold breaches or fraud incidents

‍

Speed matters. We've seen delayed offboarding result in preventable losses when merchants accelerate transaction volumes knowing termination is imminent.

‍

‍

5. Build feedback loops between underwriting and portfolio performance

‍

Risk decisioning improves when teams systematically analyze which underwriting signals predict merchant problems. Tracking approval-to-termination rates by industry vertical, business age, average ticket size, and other segmentation variables helps refine underwriting models over time.

‍

Monthly portfolio reviews should examine:

• Chargeback concentration by merchant segment
• Time-to-problem metrics (how long between approval and first major issue)
• False positive rates (merchants flagged in underwriting but performing well)
• Reserve adequacy relative to actual loss experience

‍

‍

‍

Strategic Context: The Acquirer's Ecosystem Role

‍

Acquirers function as gatekeepers in the payments ecosystem. Their underwriting quality directly affects card network integrity, consumer protection outcomes, and systemic fraud levels. When acquirers approve merchants with inadequate due diligence, costs externalize to issuers (who bear initial fraud losses), cardholders (who must dispute transactions), and other acquirers (who inherit problematic merchants after termination).

‍

Card networks have responded by strengthening acquirer accountability programs. Visa's Acquirer Monitoring Program (VAMP) and Mastercard's Excessive Chargeback Merchant (ECM) program impose escalating interventions when portfolio metrics breach thresholds. These can include financial penalties, mandatory compliance plans, or processing restrictions.

‍

The tension between competitive pressure and risk control defines much of the operational challenge in merchant acquiring. Markets reward fast onboarding and high approval rates. Networks and regulators demand thorough due diligence and ongoing oversight. Successful acquirers build systems that automate low-risk decisions while directing human expertise to complex cases requiring judgment.

‍

Merchant underwriting workflows that combine automated data collection, risk scoring, and case routing can maintain both velocity and quality when properly implemented. When managing relationships with intermediaries like PayFacs and ISOs, partner oversight capabilities become critical for maintaining portfolio visibility.

‍

‍

‍

Example: Subscription Merchant Chargeback Spiral

An acquirer approves a merchant selling health supplements through a subscription model. Initial underwriting identifies moderate risk given the business model, and the acquirer sets a 5% rolling reserve with 90-day funding delays.

‍

In the first quarter, the merchant processes $800,000 with a 0.4% chargeback rate, performing within acceptable bounds. The merchant's marketing becomes more aggressive in quarter two, emphasizing "free trials" with automatic enrollment into monthly subscriptions. The website's terms of service remain unchanged, but the customer acquisition funnel obscures cancellation procedures.

‍

By month five, chargebacks begin accelerating. Cardholders claim they did not authorize recurring charges. The chargeback rate reaches 1.2%, breaching card network thresholds. The acquirer receives notification from Mastercard's ECM program.

‍

The acquirer places the merchant on immediate termination notice and freezes remaining reserves. However, chargebacks continue arriving for transactions processed up to 120 days prior. Total chargebacks reach $95,000, but the reserve holds only $40,000. The acquirer absorbs the $55,000 shortfall plus $25,000 in card network penalties.

‍

This scenario illustrates why acquirers must evaluate customer experience factors beyond fraud signals. The merchant's payment processing was technically functional, but billing practices created consumer harm that manifested as financial losses for the acquirer. Effective merchant onboarding includes assessment of refund policies, cancellation procedures, and customer service capacity, not just identity verification and sanctions screening.