Payment Processor vs. Acquirer vs. ISO: What's the Difference?
A processor moves data, an acquirer moves money and holds the risk, and an ISO sells and supports the account. Here is how the three actually differ.
By Gray Merchants Team
- A payment processor moves transaction data, an acquiring bank holds settlement risk and regulatory responsibility, and an ISO sells and supports accounts on the bank's behalf without being a bank itself.
- The OCC's Comptroller's Handbook confirms acquiring banks routinely outsource merchant-facing functions to third parties, which is the regulatory foundation for the entire ISO industry.
- A decline from one processor or ISO doesn't mean a decline everywhere, since the acquiring bank behind it sets its own risk appetite, and a different bank reached through a different ISO can answer differently.
- J.P. Morgan Payments processed 40.98 billion transactions in 2024 to become the largest US acquirer, serving a base of 34 million US merchant locations, showing how large and competitive this market actually is.
- A Payment Facilitator (PayFac) pools many sub-merchants under one shared account for faster onboarding, while an ISO arranges an individually underwritten, dedicated account through a proper acquiring bank relationship.
Payment processor, acquirer, and ISO get used like they mean the same thing, and that's the single biggest source of confusion for a business shopping for a merchant account. They're not the same thing. Each one does a different job, and knowing which is which explains a lot about how pricing, approval, and account stability actually work.
What a Payment Processor Actually Does
A payment processor is the technology layer. It receives an authorization request from a payment gateway, routes it to the right card network, and passes the approval or decline back down the chain. The Federal Reserve's own explanation of how payment systems work confirms this intermediary role, noting that depository institutions can delegate transaction-conducting authority to third parties operating on those payment rails (Federal Reserve).
The processor doesn't decide whether to approve your business for an account. It doesn't hold your settled funds. It moves data quickly and accurately between the systems that do.
What an Acquiring Bank Actually Does
The acquiring bank, or acquirer, is where the real regulatory weight sits. This is the bank that contracts with your business, takes on the settlement risk of every transaction, and answers to federal bank examiners for how it manages that risk. The OCC's Comptroller's Handbook lays this out directly: acquiring banks gather sale data, obtain authorization, collect funds from the card-issuing bank, and reimburse the merchant, all under active regulatory oversight of chargeback, fraud, and merchant-monitoring practices (OCC, 2014).
That same handbook makes an important admission: to control costs, acquiring banks frequently outsource merchant-facing functions to third-party organizations. That single sentence is the regulatory basis for the entire ISO industry.
What an ISO Actually Is
An Independent Sales Organization (ISO) is that third party. It's registered with the card networks, sponsored by an acquiring bank, and it sells and supports merchant accounts on that bank's behalf. Visa's own Third Party Agent Registration Program formally defines this role, requiring an ISO to undergo due diligence, financial vetting, and annual registration, always under the sponsorship of a Visa-member acquiring bank (Visa).
Here's the part that actually matters to a merchant: when you sign with an ISO, you're legally contracting with the sponsoring acquiring bank. The ISO is the bank's registered agent. It doesn't hold settlement risk directly, and it isn't itself a bank. What it does hold is specialization: relationships across multiple acquiring banks, underwriting expertise in specific industries, and the ability to place a business with whichever bank actually fits its risk profile, instead of a single bank's one-size-fits-all underwriting.
That's exactly what Gray Merchants is: an ISO with relationships across 70+ acquiring banks, placing merchants with the specific bank suited to their industry rather than forcing every business through one institution's risk appetite.
Why This Distinction Actually Matters to a Merchant
Understanding the split explains a lot that otherwise looks confusing:
- Why a decline from one processor doesn't mean a decline everywhere. The processor didn't decide anything. The acquiring bank behind it did, based on its own risk appetite. A different acquiring bank, reached through a different ISO, can have a completely different answer for the same business.
- Why an ISO can move faster than applying to a bank directly. An ISO already knows which of its sponsoring acquiring banks underwrites a given industry well, so it can route an application to the right fit instead of a business guessing and getting declined by trial and error.
- Why pricing varies so much between providers selling what looks like the same account. The acquiring bank sets the underlying cost structure. The ISO's markup on top of that is where real price competition happens, which is why interchange-plus pricing transparency matters so much when comparing offers.
The Scale Behind This System
This isn't a small industry running on a handful of players. J.P. Morgan Payments became the largest acquirer of US card payments in 2024, processing 40.98 billion transactions and edging out Fiserv's 40.72 billion, with Worldpay holding third place, across a market serving 34 million US merchant locations that accept cards (The Nilson Report, 2025). And the cost that flows through this system is real money: US merchants paid a record $187.20 billion in card processing fees in 2024, working out to $1.57 for every $100 in card payments accepted (The Nilson Report, 2025).
A competitive, multi-layered market this size is exactly why the processor/acquirer/ISO structure exists in the first place. No single bank could underwrite every industry well, and no merchant should have to accept the first decline as final.
How This Differs From a Payment Facilitator (PayFac)
A Payment Facilitator is a related but structurally different model. Instead of each merchant getting its own individually underwritten account through an ISO and acquiring bank, a PayFac signs up many sub-merchants under one master account it holds with its own sponsoring acquirer, taking on their due-diligence and chargeback risk itself (Visa Payment Facilitator and Marketplace Risk Guide). That's faster to onboard but means a business shares risk with every other sub-merchant on the platform, unlike the dedicated, individually underwritten structure an ISO arranges through a proper acquiring bank relationship.
What to Actually Ask When Evaluating a Provider
Is the company you're talking to actually the acquiring bank, or is it an ISO placing you with one? Which acquiring bank would your account actually sit with, and does that bank have real underwriting experience in your industry? Is the pricing structured as interchange-plus, where you can see what the bank charges versus what the ISO marks up? These questions cut through the sales pitch and get to what actually determines whether an account stays stable.
Frequently Asked Questions
Is Gray Merchants a bank or an ISO?
Gray Merchants is an ISO. We don't hold settlement risk directly. We place merchants with the acquiring bank, from our network of 70+ banking relationships, best suited to their specific industry and risk profile.
Does using an ISO cost more than going directly to an acquiring bank?
Not necessarily, and often the opposite. An ISO with strong acquiring relationships can often get better terms and faster approval than an individual business applying cold to a single bank, especially in a high-risk category most banks don't specialize in.
Can one business have accounts with multiple acquiring banks at once?
Yes. This is common for larger or higher-risk businesses and is the basis of a multi-MID structure, which spreads processing volume across several acquiring banks for redundancy.
What happens if my ISO stops operating?
Your actual merchant account and settlement relationship is with the acquiring bank, not the ISO. A well-structured account continues functioning even if the ISO that placed it is no longer involved, though ongoing support may shift elsewhere.
Is a Payment Facilitator (PayFac) better than the ISO model?
It depends on the business. A PayFac gets you processing faster with less individual underwriting, but you share risk with every other sub-merchant on the platform. A dedicated account placed through an ISO takes more setup but is underwritten specifically to your business.
How do I know which acquiring bank my account actually sits with?
Ask directly. A legitimate ISO will tell you exactly which acquiring bank holds your account, since that's the entity actually taking on your settlement risk and setting your underlying cost structure.
Trying to figure out which acquiring bank actually fits your business? Apply free for a 24 to 48 hour decision, or talk to a specialist about how our ISO network places accounts.
Gray Merchants Team
Gray Merchants is a payment ISO that places merchant accounts across every risk level — from low-risk retail and e-commerce to 67+ high-risk verticals. The editorial team writes on high-risk merchant accounts, chargeback defense, MATCH/TMF remediation, and ACH processing — whether you are new, scaling, switching processors, or rebuilding after a decline.