What a Credit Card Processing ISO Does
A credit card processing ISO, or Independent Sales Organization, is a company that signs up merchants to accept card payments and then routes their transactions through a sponsoring bank, known as the acquiring bank. The ISO handles the sales, onboarding, and day-to-day merchant support, while the sponsor bank manages the actual movement of funds and the connection to card networks like Visa and Mastercard.
More from this site
Keep reading the latest coverage
For many small and mid-sized businesses, an ISO is the main point of contact for payment acceptance. The merchant rarely interacts directly with the acquiring bank, and the ISO steps in to explain pricing, provide terminals or payment gateways, and troubleshoot issues. This structure lets banks focus on risk and compliance while ISOs focus on merchant relationships and sales.
How ISOs Fit Into the Payment Chain
To understand an ISO, it helps to see where it sits between the merchant and the card networks:
- Merchant — the business accepting the card payment.
- ISO — enrolls the merchant, provides the processing tools, and serves as the merchant's advocate.
- Sponsor Acquiring Bank — the bank licensed by the card networks that actually settles the transaction.
- Card Network — Visa, Mastercard, or another network that routes and authorizes the transaction.
- Issuing Bank — the bank that issued the cardholder's credit or debit card.
Once a sale is made, the ISO passes the transaction data to the sponsor bank, which sends it through the card network. The issuing bank either approves or declines the charge, and the response travels back through the same chain. The ISO's role is not to move money itself but to manage the setup and ongoing service on behalf of the merchant.
How ISOs Earn Revenue
ISOs make money primarily from the spread on interchange and assessment fees. When a card is processed, the network sets an interchange fee that the issuing bank collects. The acquiring bank pays part of that fee to the ISO, and the ISO keeps the difference after passing the rest to the merchant. On top of that, many ISOs charge merchants a monthly fee, a per-transaction fee, or a percentage markup on processing costs.
Some ISOs also earn revenue by selling value-added services such as payment gateway access, virtual terminal software, point-of-sale hardware, chargeback management tools, and recurring billing platforms. Because margins on basic processing can be thin, these extras often make up a significant share of an ISO's profit.
ISO vs. Payment Service Provider vs. Payment Gateway
The terms are sometimes used interchangeably, but they describe different roles:
| Entity | Core Function |
|---|---|
| ISO | Merchant acquisition and ongoing support under a sponsor bank |
| Payment Service Provider (PSP) | Aggregates multiple merchants under one processing account, often with a unified tech stack |
| Payment Gateway | The software layer that securely transmits transaction data from the merchant to the processor |
A single ISO may use several gateways or processors, while a PSP often handles everything under one roof. Understanding the difference matters when you are evaluating who actually controls your data, your settlement timing, and your pricing structure.
What to Look for When Choosing an ISO
Not all ISOs operate the same way, and the wrong partner can lead to hidden fees, poor support, or compliance headaches. Key factors to evaluate include:
- Sponsoring bank reputation — the bank's stability and standing with the card networks affect your risk of sudden account termination.
- Pricing transparency — look for clear interchange-plus or flat-rate pricing and a breakdown of all monthly and per-transaction fees.
- Contract terms — check for early termination fees, automatic renewal clauses, and length of commitment.
- Settlement speed — how quickly funds move from the card network into your bank account.
- Support and tools — 24/7 support, a robust merchant dashboard, and access to chargeback and fraud tools.
- Compliance — the ISO should be registered with Visa and Mastercard and follow PCI DSS standards.
Are ISOs Regulated?
ISOs are not banks, so they are not directly regulated like depository institutions. However, Visa and Mastercard impose rules on registered ISOs, including registration requirements, operating standards, and compliance with card network policies. In practice, the sponsor bank carries much of the regulatory weight, but the ISO is still accountable to the network for how it treats merchants and handles sensitive card data.
The Bottom Line
A credit card processing ISO is a vital link in modern payment acceptance, especially for merchants who want a dedicated partner to handle setup, pricing, and support. The model works best when the ISO is transparent about fees, partnered with a stable sponsor bank, and clear about the services it provides. Before signing up, compare pricing structures, read the contract carefully, and ask how disputes and account changes are handled. A good ISO should make accepting cards simpler, not more complicated.