Your Merchant Processing Statement Is Bleeding You: A Line-by-Line Audit

[IMAGE: A dense multi-page merchant processing statement on a desk with a yellow highlighter, several small line items circled]

Continuing the Stop the Bleed series, today we are going to spend some real time with one of the most consistently overpriced line items on a small-business P&L: merchant processing. If your business accepts credit or debit cards — in person, online, over the phone, or through an invoicing system — you are paying somewhere between two percent and four percent of your card volume to a processor, and I can tell you from experience that most businesses are paying meaningfully more than they need to. The difference between an efficient setup and a bloated one, on a small business, is routinely five to twenty thousand dollars a year. Sometimes more.

I want to walk you through how to read a merchant processing statement, where the hidden fees live, the pricing structures you need to understand, and how to run a proper audit. This is teacher territory — we are going to define terms, work examples, and go slowly enough that you will actually be able to do this yourself. Please stay with me.

Why merchant processing is so consistently overpriced

Before we get into the statements, I want you to understand, briefly, why this category is structurally expensive for small businesses. Knowing the underlying economics makes the rest of the article easier to follow.

When a customer swipes a card, four parties take a small slice of the transaction: the card-issuing bank, the card network (Visa, Mastercard, Discover, American Express), your processor, and typically an independent sales office that signed your account. The card-issuing bank and the card network together take the bulk of the fee, and that portion is called interchange. Interchange rates are set by the networks and are, for practical purposes, non-negotiable. They are what they are.

What is negotiable is everything else. Your processor and the sales office that signed your account add their own markup on top of interchange. That markup is where all the margin for your processor lives, and it varies enormously from one merchant to another. A business paying two point four percent and a business paying three point one percent on identical card volume are, most of the time, paying the same interchange. The difference is processor margin. Knowing that one fact is the whole foundation for everything that follows.

The two pricing models, and which one you probably have

Your processing agreement is almost certainly written in one of two pricing structures. Understanding which you have, and what each one costs you, is step one of the audit.

Flat-rate pricing

This is the model used by Square, Stripe, Toast, Clover's small-business plans, and most of the modern integrated payment platforms. You pay a single advertised rate — two point six percent plus ten cents per swipe, for example — and that is what shows up on your statement.

Flat-rate pricing is simple, predictable, and honest about what it is. Its strength is that there are no surprises. Its weakness is that the flat rate is always higher than the underlying interchange plus a reasonable markup. On the right volumes, the convenience is worth it. On higher volumes, the overpayment can be significant. As a rough rule, flat-rate pricing is reasonable below fifteen thousand dollars a month in card volume and becomes increasingly overpriced above that.

Interchange-plus pricing

This is the model most traditional processors use — often branded as "interchange-plus" or "cost-plus." You are charged the exact interchange rate for each transaction (it varies by card type and how the card was accepted), plus a transparent markup from the processor. A typical markup is between ten and thirty basis points plus five to ten cents per transaction, though I have seen both higher and lower.

Interchange-plus is almost always cheaper than flat-rate on significant volume, and it is transparent enough that you can actually see what the processor is making. Its weakness is that the statements are much harder to read, because every line item shows a different interchange category.

Tiered pricing (and why it is the one to avoid)

There is a third pricing structure, sometimes called "tiered" or "bundled" or "qualified/mid-qualified/non-qualified," that is offered primarily by legacy processors and some independent sales offices. In this structure, transactions are bucketed into three or four tiers, each priced at a higher rate than the last, and the processor decides which tier a transaction falls into.

This model is, in my opinion, the worst pricing structure a small business can accept. It gives the processor unilateral control over which bucket your transactions land in, and the "non-qualified" tier is often priced at three or four percent — well above interchange-plus equivalents. If your statement shows qualified, mid-qualified, and non-qualified rates, you are on a tiered plan. Switching off it, by itself, usually drops your effective rate by a full percentage point or more.

How to calculate your effective rate

Before we audit the statement in detail, we need to calculate one number: your effective rate. That is the single most important number in the entire exercise. Here is how you calculate it.

Open your most recent processor statement. Find the total fees the processor charged you for the month — this includes every fee on the statement, not just the main processing rate. Find your total card volume — the total dollar amount of card transactions for the month. Divide total fees by total card volume, and multiply by one hundred. That percentage is your effective rate.

Example: fifty-one thousand dollars in card volume, fifteen hundred and eighty dollars in total fees. Fifteen hundred and eighty divided by fifty-one thousand equals zero point zero three zero nine, or three point zero nine percent. That is the effective rate.

What effective rates look like across the small-business landscape

• Very well-negotiated interchange-plus on mostly in-person debit: 1.7% to 2.0%
• Well-negotiated interchange-plus on a mix of in-person credit and debit: 2.1% to 2.4%
• Reasonable flat-rate with some rewards cards: 2.5% to 2.8%
• Reasonable for card-not-present e-commerce: 2.6% to 2.9%
• What most businesses actually pay on tiered pricing: 2.9% to 3.4%
• What businesses on older tiered pricing with a lot of fee add-ons pay: 3.5% to 4.2%

If your effective rate is above three percent on in-person business with a typical card mix, you almost certainly have room to negotiate or switch. If your effective rate is above three and a half percent, you are overpaying and the audit in this article will pay for itself many times over.

The fee categories on your statement, explained

Now let us walk through a typical merchant processing statement line by line. I will use the most common names; your processor may use slightly different terminology, but the categories are universal.

The processing fee (discount fee)

This is the main line — the percentage and per-transaction fee you see as the headline rate. On a flat-rate plan, this is the single main charge. On interchange-plus, you will see it broken into interchange (pass-through from the networks) and the processor's markup. This is the largest line and where most of the cost lives.

Authorization fees

A small per-transaction fee (usually five to fifteen cents) charged every time a card is authorized, whether or not the transaction settles. On some statements this is folded into the per-transaction piece of the processing fee; on others it shows separately.

Assessment fees

Small percentages paid to the card networks (Visa, Mastercard, Discover, Amex) — typically 0.13% to 0.15%. These are genuine pass-throughs and are not negotiable with your processor. You will see them on any interchange-plus statement. Flat-rate plans bundle them into the headline rate.

PCI compliance fees

This is where the margin creep starts. PCI (Payment Card Industry) compliance is a security standard, and processors are required to track whether their merchants are compliant. Many processors charge a monthly or annual PCI fee — often ten to twenty dollars a month — to their merchants. Worse, they often charge a PCI non-compliance fee — typically thirty to fifty dollars a month — to merchants who have not completed their annual compliance questionnaire.

The PCI compliance fee itself is normal. The non-compliance fee is often a collection on merchants who did not know they needed to fill out a form. The form takes about thirty minutes to complete online through your processor's portal. If you are being charged a PCI non-compliance fee, log in today, complete the questionnaire, and the fee usually stops. If it does not, call your processor and insist.

Monthly minimum fee

A fee charged if your total processing fees for the month fall below a threshold. If you processed low volume one month, you might see "monthly minimum — twenty-five dollars" to top up to the minimum. This fee is negotiable; many processors will waive it.

Statement fees

A charge — usually five to fifteen dollars a month — for the privilege of receiving your statement. This is pure processor margin and should be negotiable or eliminable, especially if you opt for electronic statements only.

Batch fees

A small charge, typically ten to twenty-five cents, every time you settle (batch out) your daily transactions. On most accounts this is once a day. These add up: twenty-five cents a day times three hundred and sixty-five days is about ninety-one dollars a year.

Gateway and interface fees

If you are on e-commerce or accept cards through an online invoicing tool, you likely pay a payment gateway fee on top of the processing fee. Typical gateway fees are fifteen to thirty dollars a month plus a per-transaction charge. Some merchants are paying double — a gateway fee to a third party (like Authorize.Net) and a "virtual terminal" fee to their processor for the same function. Check.

Chargeback and retrieval fees

A chargeback is when a customer disputes a transaction with their card-issuing bank. A retrieval is when the bank asks for documentation. Each chargeback typically carries a fee of fifteen to forty dollars, regardless of outcome. These are normal, but on some statements they are priced high. Negotiate if your chargeback rate is low.

Equipment rental or terminal fees

If your processor is renting you a terminal, you may be paying thirty to ninety dollars a month for a piece of hardware that costs three hundred dollars to buy outright. Over a three-year contract, you might pay over two thousand dollars to rent a terminal worth three hundred. Buy the terminal. Always. If the processor refuses to let you use a purchased terminal, that is a signal about the relationship.

Regulatory product fees, compliance fees, industry fees

Every processor has a few fees with vague names — "network compliance fee," "regulatory recovery fee," "industry access fee." These are almost always pure processor margin dressed up as a required charge. They are usually negotiable. On an interchange-plus plan, question every one of them.

PCI data breach insurance, terminal protection, fraud monitoring

Some processors sell ancillary products and bill them monthly on the statement. A "breach protection" policy might be twenty dollars a month. "Fraud monitoring" might be fifteen. These are often unnecessary for small merchants and can be canceled.

Non-qualified downgrades — the silent killer

On tiered pricing plans, and sometimes on poorly structured interchange-plus plans, you will encounter the term "non-qualified" or "mid-qualified" in the detail section of your statement. This is a place where significant margin can hide, and I want you to understand it clearly.

When a customer uses a rewards card, a corporate card, an international card, or when a transaction is keyed in instead of swiped, the interchange rate is higher than for a standard consumer card swiped in person. That is a real cost from the networks. However, some processors respond to those higher interchange rates by moving the transaction to a "non-qualified" tier and charging the merchant an additional percentage — often one to two points on top of the difference in interchange. That extra percentage is pure processor margin.

If you see a lot of volume running through non-qualified or mid-qualified tiers on your statement, run the math: how much of your total fees are coming from those tiers? If it is a meaningful share, you have a strong case for switching to interchange-plus, where the higher interchange on rewards cards is passed through at cost with only the flat processor markup added.

A step-by-step statement audit, in plain English

Here is how I walk a client through a first audit. Set aside about ninety minutes. You will need your last three months of processor statements. Three months is the right amount because a single month can be atypical; three gives you a pattern.

Step one: calculate the effective rate for each of the last three months

Use the formula I gave you earlier — total fees divided by total volume, times one hundred. Write it down for each month. Look at the trend. Is the effective rate stable, or drifting up?

Step two: circle every line item that is not the main processing fee

On each statement, go to the summary of fees and circle every line that is not the main processing rate. Statement fee, PCI fee, PCI non-compliance, monthly minimum, batch fee, gateway fee, terminal rental, regulatory recovery, fraud monitoring, breach protection, anything unusually named. Every circle is a candidate for elimination or negotiation.

Step three: note your pricing model

Is your statement showing qualified/mid/non-qualified tiers? You are on tiered pricing. Is it showing every transaction with a specific interchange category (like "Visa CPS Retail" or "MC Merit I")? You are on interchange-plus. Is it showing a single percentage across all transactions? You are on flat-rate.

Step four: identify your card mix

Most statements show you a summary of what kinds of cards customers used — debit versus credit, Visa versus Mastercard, rewards versus standard, keyed versus swiped. Your card mix affects what kind of rate you can reasonably negotiate. Heavy debit and in-person swipes can get you a very low effective rate. Heavy rewards cards, corporate cards, or keyed/e-commerce transactions come with higher interchange that is genuinely unavoidable.

Step five: gather three competing quotes

I told you in the last article that three bids over a thousand dollars is the rule. A merchant processing relationship almost always costs more than a thousand dollars a year, so this one applies. Get three quotes from competing processors. Give each of them your last statement and ask for a written comparison. Reputable processors will do this for free — that is their sales process.

A word of caution. Merchant processing sales is, historically, a category with a lot of aggressive and occasionally dishonest sales tactics. Be skeptical of any quote that does not break out interchange, markup, and all ancillary fees in writing. Be skeptical of any quote that requires a long-term contract with a large early termination fee. And be very skeptical of any pitch that promises a flat savings percentage without seeing your statement.

Step six: negotiate with your current processor

Before switching, call your current processor and tell them you are shopping. Send them two of the competing quotes. Ask them to match or beat. Processors routinely retain business by matching competing quotes, because the cost to acquire a new merchant is much higher than the cost of sharpening pricing for an existing one. You may save most of what you would save by switching, without the hassle of switching.

Step seven: if you do switch, watch the transition carefully

Switching processors is usually straightforward, but there are details. Confirm the new account is set up before canceling the old one. Watch for any early termination fees in your current contract — some are genuine, some are negotiable, and some can be covered by the new processor as part of the onboarding incentive. Test a transaction on the new system before going live. Keep both processors active for a few days as a safety net, then cancel.

What a fair interchange-plus deal looks like in 2026

So you do not have to guess what a reasonable target is, here is a rough benchmark for what a small business with clean credit and modest volume should be able to negotiate on interchange-plus in 2026.

• Processor markup: 10 to 25 basis points (0.10% to 0.25%) above interchange, plus 5 to 10 cents per transaction.
• Monthly statement fee: waived or under $10.
• PCI fee: under $100 per year, often waived.
• PCI non-compliance fee: avoidable entirely by completing the annual questionnaire.
• Monthly minimum: waived.
• Batch fee: waived or under 15 cents.
• Gateway fee (if applicable): $15 to $25 per month.
• Contract term: month-to-month, or one year with no early termination fee above a nominal amount.
• Equipment: purchased outright, not rented.

If your current contract is meaningfully worse than those benchmarks on any line, you have leverage. If it is worse on several lines, you have a strong case for switching.

On early termination fees

One of the reasons merchants stay with overpriced processors is the early termination fee buried in the contract. Typical early termination fees range from two hundred and fifty to four hundred dollars, though some legacy contracts carry much larger "liquidated damages" clauses that can run into the thousands.

Before you sign anything new, read the early termination clause of your current contract. If it is large, two options: (1) wait until the contract term ends and switch at renewal — most contracts have a narrow cancellation window, so set a calendar reminder, or (2) have a new processor cover the termination fee as part of onboarding. Many will, especially if you are bringing meaningful volume.

On "free terminal" offers

You will occasionally see a processor offer a "free" point-of-sale terminal or system. Nothing is free. The cost is almost always recovered through a slightly higher processing rate, a longer contract term, a larger termination fee, or a monthly terminal service charge. Always ask the processor: "If I bought the terminal outright, what would my rate be?" Compare the two offers over the full contract term. The "free" one is almost never cheaper.

The special case of American Express

American Express has historically operated its own acquiring infrastructure and priced higher than Visa or Mastercard. In 2018 they launched "OptBlue," which allows smaller merchants to process Amex through their regular processor at more competitive rates. If you do not accept Amex currently because you heard the rates were high, revisit that decision. OptBlue pricing is often within half a percent of Visa and Mastercard, and losing a sale over refusing Amex is usually more expensive than accepting the slightly higher rate.

A word about surcharging and cash discounts

In most states, you are now legally allowed to either (a) add a small surcharge to credit card transactions to offset processing fees, or (b) offer a cash discount that effectively passes the cost of card acceptance to cardholders. The rules vary by state and by card network, and implementation has some complications, but for certain businesses — particularly business-to-business operations and categories with thin margins — this can eliminate the processing cost entirely for the business.

This is not a decision to make without thought. Surcharging can affect customer experience and, in some industries, is unusual enough to cost you sales. But for the right business in the right state, it is worth evaluating. Discuss it with your accountant and your processor.

PCI compliance, briefly

Since PCI compliance and non-compliance fees come up so often on statements, let me explain the core requirement in a sentence. The Payment Card Industry Data Security Standard (PCI DSS) requires any business that accepts cards to follow certain security practices — how you store cardholder data (ideally not at all), how you transmit it, how you protect the systems that touch it. For most small merchants, PCI compliance is demonstrated by completing an annual Self-Assessment Questionnaire (SAQ) through your processor's portal.

The SAQ takes about thirty minutes to complete for most merchants who use an integrated payment terminal or a compliant e-commerce platform. The questions are straightforward: are your devices physically secured, do you change default passwords, do you keep only the cardholder data you genuinely need. Complete it honestly once a year and the non-compliance fee disappears. Do not let the fee persist because the SAQ felt confusing — it is a thirty-minute task, not a compliance overhaul.

Putting it all together — the one hour a quarter rule

Here is the habit I want you to build. Once a quarter, for one hour, pull the most recent merchant processing statement, calculate your effective rate, and compare it to the prior quarter. If it is drifting up, call the processor and ask why. If you see new fees, ask what they are. If you see your non-qualified volume growing, ask whether a different pricing structure would serve you better. You do not need to do a full three-bid audit every quarter — that is for every two or three years — but a quarterly review keeps the relationship honest and stops quiet fee creep before it compounds.

If the statement is genuinely impenetrable — some of them are — many independent processing auditors will review a statement for free in exchange for the opportunity to quote you a replacement. Take the free review. You do not have to switch. You just have to know what you are paying.

One last piece of advice, and I will leave you with it. The processor who signed you up three years ago is not looking out for you. They are running a business, and their profit margin lives in the fees you have not questioned. That is not a criticism of the processor; it is just the structure of the industry. Your job as the business owner is to check, quarterly, what that relationship is really costing you. If it is fair, you leave it alone. If it is not, you negotiate or you move. The discipline is small. The returns, over the life of a business, are enormous.

Before next week, pull out your most recent statement and calculate your effective rate. That one number will tell you whether this article deserves a second read and a Saturday morning of your time. For most small-business owners, it will.