Loading...
Understanding the ecosystem you’re working in is critical, both for the developers building payment systems and the businesses that rely on them:
Developers: Developers want to design secure, efficient, and scalable applications that integrate all the payment functionalities necessary to provide the best user experience, all while thinking about compliance. To do both, developers need to know which APIs they’re calling and who owns risk.
Businesses: Business leaders need a solid understanding of the payments ecosystem to make informed decisions about the systems they need to scale their operations and meet customer demands for fast and secure transactions. Understanding all the players and their roles is key to choosing the right partners and technologies and effectively negotiating costs.
As Stripe says – the payment ecosystem is “a complex web” of interlinked roles. From gateways to processors, each is designed to ensure transactions are seamless and secure.
Virtually all card-based transactions leverage the Four-Corner Model. This is a framework for card payment security, guaranteeing global acceptance, traceability, and adherence to security standards like PCI-DSS. The model involves four different entities:
The payments ecosystem is made up of the four entities in the Four-Corners Model – key players in the ecosystem – as well as some other key players and a few supporting players. The key players include:
 | Card Brands Card associations like Visa or Mastercard that operates a network. |  | Issuer Financial institution that issues cards to customers to use for payments. |
 | Acquirer Financial institution that allows merchants to process card transactions on a card brand’s behalf. |  | Merchant Seller of goods or services. Can be an individual, a business, or a large enterprise. |
 | Cardholder Customer who is issued a payment card to use for purchases. |
Two of the most complex aspects of building a card payment system are sending payments between a merchant and an acquirer and processing card payments.
This is where technology partners – payment gateways, developers that know how to work with them, and payment processors – play an important supporting role.
A payment processor (aka card processor or payment provider) is a company that works with banks and other financial institutions to help a merchant process card payments by managing transaction routing (authorization, clearing, and settlement).
A payment gateway is a technology service used to facilitate the secure transmission of transaction data. Using payment gateways simplifies the process of sending payments between a merchant and an acquirer, by securely capturing and routing payment data.
A payment service provider (PSP) bundles payment gateway, payment processing, and often fraud/settlement services into one service to make it easier for merchants to accept various payment methods. This makes a PSP ideal for merchants needing a single API solution.
PayFac-as-a-Service or PayFac for short is a specialized provider that enables merchants under a master account (sub-merchants) to accept payments. Using PayFac controls risk for merchants and streamlines settlement and helps independent software vendors (ISVs) scale with less complexity.
An independent software vendor (ISV) is a company or individual that creates specialized payment solutions tailored to specific industries or markets and uses APIs to integrate them with other systems and platforms.
Embedded ecosystem players provide specialized solutions, including:
Stay tuned for Module 4 where we’ll explore common payment methods. (Coming soon)