Provider comparisons focus on rates, which is the one thing you can renegotiate later. The terms you cannot change afterwards are the ones worth reading now.
Merchant account providers fall into three types: aggregators that onboard you in minutes under their own account, traditional acquirers that underwrite you individually, and merchant-of-record platforms that become the seller. The rate matters least. What matters is who owns the acquiring relationship, who carries tax and dispute liability, and what happens to your funds if the relationship ends.
The Three Types, and Why the Category Confuses People
Almost every comparison article treats these as one market. They’re three different products with different failure modes.
1. Aggregators
You sit under the provider’s master merchant account alongside thousands of other sellers. Onboarding takes minutes, there’s no individual underwriting, and pricing is blended.
The trade is that the provider’s rules become your rules — prohibited categories, reserve policy, payout schedule and risk thresholds are set for the platform, not negotiated with you. This is the right default at low volume and the thing you outgrow.
2. Traditional Acquirers
You’re underwritten as a specific business and get your own merchant ID. It takes days or weeks, usually costs something, and gives you a negotiated relationship, interchange-plus pricing and a human to call.
Worth it once transaction volume makes a fraction of a percent material. Pointless before that.
3. Merchant of Record Platforms
The platform becomes the legal seller. It holds the acquiring relationship, appears on the customer’s statement, and carries tax registration and dispute handling.
You give up direct control of the payment relationship and remove an entire category of work. For digital sellers with international customers this is frequently the correct answer, and it’s the one comparison sites omit because it isn’t a merchant account at all.
What to Compare Instead of Rates
Who Owns the Acquiring Relationship
If the provider is an aggregator or a reseller, you don’t have one — and you can’t negotiate interchange, add a second acquirer for redundancy, or take your merchant ID elsewhere.
Ask directly: who is the acquiring bank? A provider that won’t answer plainly is reselling, which is fine, but you should know before you build on it.
The Reserve Policy
A reserve holds back a percentage of your payouts against future refunds and disputes. It isn’t a fee — you generally get it back — but it’s cash you can’t use, and the amount held grows with volume.
Terms are set per merchant during underwriting rather than published, so the only figure that matters is the one in your agreement. Get it in writing, along with what triggers a change to it.
High dispute volume is the usual trigger for a reserve being imposed or raised, which makes dispute reduction a cash flow concern rather than only a cost one.
Payout Schedule, and What Extends It
Two providers with identical rates can have very different effects on your business depending on when they pay you.
For anyone buying traffic, the payout schedule is the cash conversion cycle — you fund the advertising now against money that lands later. Ask what the standard schedule is, then ask specifically what causes a hold, because risk review can extend it without renegotiating anything.
Prohibited and Restricted Categories
Read these against your roadmap, not your current products. Providers terminate accounts for category drift, and the seller usually didn’t realise they’d drifted.
What Happens If It Ends
The question nobody asks during onboarding and everybody asks too late.
Two parts. Can you export tokenised card credentials, so switching means migrating subscribers rather than re-acquiring them? And what happens to funds in transit and to your reserve on termination?
The Risk Nobody Mentions in a Sales Call
Provider choice has a consequence that outlasts the relationship, and it’s the strongest argument for taking underwriting seriously.
When a processing relationship ends badly, the processor is generally required to report the merchant to an industry database — Mastercard’s MATCH or Visa’s VMSS — which every provider checks when onboarding.
Per Stripe’s documentation of the criteria, the most common quantitative trigger is Mastercard chargebacks in a single month exceeding 1% of Mastercard sales transactions, where those chargebacks total $5,000 or more.
Three details make it serious. There’s no minimum chargeback count. It doesn’t matter if you later win those chargebacks. And records stay for five years, with removal essentially limited to entries added in error.
The listing includes the principal owner’s name, address and tax ID, so it follows the person rather than the company. Which reframes what you’re choosing when you pick a provider: you’re choosing whose risk system decides when your card acceptance ends.
Underwriting: What They’re Actually Assessing
Knowing what an underwriter looks at makes applications go faster and terms come back better.
They’re pricing the probability that they lose money on you, which comes down to four things: how likely your customers are to dispute, how likely you are to fail to deliver, how exposed your category is to regulatory action, and how predictable your volume is.
That’s why they ask for processing history. Six to twelve months of statements showing volume, refund rate and dispute ratio answers all four questions at once and is the single most persuasive document you can supply.
It’s also why disclosure beats discovery. Prior terminations, chargeback spikes and category changes get priced when you volunteer them and end applications when the underwriter finds them.
Where Compliance Sits
Your PCI obligation follows architecture rather than branding, and this is worth pinning down in writing during evaluation.
A hosted or iframed payment page keeps your scope narrow. Rendering card fields yourself expands it considerably, however convenient the integration feels.
The standard also moved. PCI DSS requirements 6.4.3 and 11.6.1 became mandatory on 31 March 2025 after three years as best practice. According to the PCI Security Standards Council, they exist because “scripts running in a consumer’s browser are now a significant target for attackers seeking to steal payment card data.”
They require you to inventory and authorise every script on your payment page, verify script integrity, and detect unauthorised changes. That’s ongoing operational work, and whether it lands on you depends on which provider architecture you chose.
Two Providers Is Not Paranoia
At meaningful volume, a single provider is a single point of failure for your entire revenue.
Splitting volume across two acquirers means a termination, an outage or a sudden reserve doesn’t stop you trading. It also gives you a live comparison and real negotiating leverage, since a provider that knows you can route elsewhere prices differently.
The cost is duplicated compliance, reconciliation and integration work, which is why this is a decision for real volume rather than a default. But the threshold is lower than most sellers assume — roughly the point where a week without card acceptance would be an existential problem rather than an inconvenience.
Worth noting this isn’t available under most aggregators or merchant-of-record platforms, since you don’t hold the acquiring relationship to duplicate. That’s part of what you’re trading away for the convenience.
Pricing, Briefly
Three structures. Knowing which you’re quoted prevents most comparison errors.
- Blended or flat rate. A single percentage applied to every card. Predictable, slightly costlier on average, and the aggregator default.
- Interchange-plus. The network’s cost and the provider’s margin quoted as separate numbers. More reconciliation work, less money at volume.
- Subscription plus cost-price interchange. A fixed monthly fee with interchange passed straight through. Pays off only once volume is substantial.
Two lines to check regardless: whether the original processing fee is returned when you refund a customer — often it isn’t — and what international and currency conversion add, commonly 1–2% and easy to miss until you sell abroad. Selling across borders is where global payment mistakes compound.
A Comparison Framework You Can Actually Use
Score providers on these rather than on headline rate.
- Acquiring relationship — yours, theirs, or not applicable
- Tax liability — yours or the platform’s
- Dispute handling — yours or the platform’s
- Reserve terms — in writing, with change triggers
- Payout schedule — standard, and what extends it
- PCI scope under their architecture — confirmed in writing
- Payment methods in each market you actually sell to
- Authorisation rate on comparable merchants
- Data portability on exit
- Prohibited categories against your roadmap
The last thing worth saying: the checkout page in front of whichever provider you pick moves more revenue than the difference between any two of them. Weight your evaluation accordingly.
Skip the Provider Comparison Entirely
Digistore24 acts as merchant of record — acquiring, tax registration, dispute handling and payouts are the platform’s responsibility rather than a stack you assemble and maintain.
FAQ
What is a merchant account provider?
A merchant account provider gives you the ability to accept card payments, either by underwriting you for your own merchant account or by letting you sell under theirs. The category also now includes merchant-of-record platforms, which become the legal seller and carry tax and dispute liability on your behalf.
What is the difference between an aggregator and a traditional merchant account?
An aggregator onboards you under its own master account in minutes with no individual underwriting, applying its own rules and blended pricing. A traditional merchant account is underwritten to your business specifically, takes days or weeks, and gives you your own merchant ID plus a negotiated relationship.
How do I compare merchant account providers?
Compare who owns the acquiring relationship, who carries tax and dispute liability, the reserve policy in writing, the payout schedule and what extends it, your PCI scope under their architecture, and whether payment credentials are portable if you leave. Rate is the one thing you can renegotiate later.
What is a rolling reserve and should I worry about it?
A rolling reserve holds back a percentage of each transaction for a set period to cover future refunds and disputes. Terms are set per merchant during underwriting rather than published. It matters most when you’re growing, because the amount held scales with volume exactly when you need cash.
Can a merchant account provider terminate my account?
Yes, and typically at their discretion under the agreement. More importantly, termination can trigger a report to MATCH or VMSS, industry databases every provider checks. Those listings last five years, attach to the principal owner personally, and generally can’t be removed on request.
Do I need my own merchant account or can I use a platform?
At low volume a platform or aggregator is almost always the better choice, since your own merchant account costs money and underwriting time to deliver nothing you currently need. Your own account becomes worthwhile once volume makes pricing differences material, or when you need to control the payment relationship directly.
