What do Visa and Mastercard do? An intro to card networks @ tautology.town

Most people can recognize the Visa and Mastercard brands. Chances are, you use one of their cards to transact every day. You may have some notion that most places (in the US) take both, but some places only take Visa (e.g. Costco), and vice versa. So what do they do? Here’s Visa’s attempt to answer that question. A few things they don’t do1: They aren’t the company that issues the card. Those are called card issuers. They aren’t a bank, though the cards you have are probably issued by one (Chase, Capital One, BofA, etc). They don’t distribute point of sale methods or online checkouts, which are done by payment processors. They aren’t responsible for onboarding or underwriting stores and merchants, known as merchant acquiring. This is done by banks offering merchant accounts, but increasingly offered by modern payment processors (Stripe, Square, Adyen)2. They don’t manufacture or print cards. Nor do they manufacture the point of sale hardware. Instead, Visa and Mastercard are card networks3, facilitating card transactions by connecting the cardholders and issuers to the merchants and acquirers. This forms a two-sided market of all the participants in a transaction4: --- config: theme: 'neutral' fontFamily: system-ui, -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Oxygen, Ubuntu, Cantarell, 'Open Sans', 'Helvetica Neue', sans-serif; nodeSpacing: 20 rankSpacing: 25 flowchart: subGraphTitleMargin: {bottom: 20} useMaxWidth: true --- %% For some reason arrows are still showing up in the Obsidian preview, but not in Mermaid online editor flowchart LR subgraph Issuing[**Issuing**] direction TB CI[Card issuer] --- CH[Cardholder] end subgraph Acquiring[**Acquiring**] direction TB MA[Merchant acquirer] --- M[Merchant] end Issuing ---- CN[**Card network**] CN ---- Acquiring The key players in a card transaction. The card network’s job is to enable card transactions, and also to grow participation in their networks. This boils down to four key responsibilities: Run the telecommunications network to route transaction messages. Coordinate the banking network to move money and settle transactions. Set the incentives to encourage the use of the network. Set and enforce rules of the network, including a mechanism for disputes. For the rest of the discussion, we’ll focus on Visa, as it’s what I’m most familiar with from my years in the payment industry. Mastercard is more or less the same, with different names for things. 1. Run the telecommunications network When we talk about networks, we think of the Internet, computers connected together by fiber and deep sea cables. Card networks, being telecommunication networks, are no different. They maintain data centers and lease fiber optics cables to connect issuers and acquirers electronically. At their most basic technical level, Visa’s responsibility is forwarding transaction messages between its participating issuers and acquirers. Mastercard calls this activity “switching”, seeing itself as a network switch. Visa takes its data centers very seriously. They are highly secure, redundant, and fitted to survive all kinds of disasters. From Inside Visa’s Data Center (Network Computing, 2013): “The company’s flagship data center, dubbed Operations Center East, or OCE, is a 140,000-square-foot facility that Visa will only say is located “somewhere along the Eastern seaboard.” “Not surprisingly, the facility, which is also designed to withstand earthquakes and gale-force winds up to 170 miles per hour, is locked down like a digital Fort Knox. The roads entering the complex have hydraulic bollards that can shoot up fast enough to stop a vehicle traveling up to 50 miles per hour dead in its tracks. (The road is too curvy to drive safely at higher speeds.) Visitors must pass through a security gate, be cleared by roving security teams, and then be subjected to a biometric scan before being admitted.” And a 2012 headline from USA Today: Top secret Visa data center banks on security, even has moat That top secret location? In Ashburn, Virginia, conveniently located by Topgolf and Trader Joe’s. I think the "moat" is the pool of water on the top center-left. When a card is used, the card network routes a transaction request, known as an authorization, from the merchant to the issuer. The issuer then approves or declines the request in a response. Card numbers, also known as Primary Account Numbers (PANs), are used like IP addresses5. The first 6 to 8 digits of the PAN identifies the card issuer and is called the Bank Identification Number (BIN) An approved authorization places a temporary hold on the account for the amount of the transaction. Later, the merchant submits the final transaction amount (for example, adding tips written on receipts or voiding the transaction) to initiate the transfer of money, known as clearing6. Consider: before this was done by computers, this was done by people via phone calls7 and mail. 2. Coordinate the banking network In addition to a telecom network, Visa has a financial network of banks. After a transaction is finalized, money on both ends must move to fulfill the transaction, known as settlement. Visa’s second job is to route money for settlement by having financial relationships with each party. It can collect money from one and transfer to another. To be efficient, Visa does net settlement: every day, each network participant’s debits and credits are totalled, and at the end of the day the net money is moved to or from each participant once. For domestic transactions, moving money is relatively straightforward, thanks to central banks. Importantly, Visa is also able to settle internationally, even handling currency conversion. Visa acts as an adapter between banking systems with its global banking relationships. This greatly simplifies international money movement for participants in its network — without Visa, each participant would need to manage their own international banking relationships. --- config: theme: 'neutral' fontFamily: system-ui, -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Oxygen, Ubuntu, Cantarell, 'Open Sans', 'Helvetica Neue', sans-serif; nodeSpacing: 20 rankSpacing: 60 flowchart: subGraphTitleMargin: {bottom: 20} diagramPadding: 10 useMaxWidth: true --- flowchart LR CI[Issuer in Country A] --> VisaA["Visa's bank in A"] VisaB[Visa's bank in B] --> MA[Acquirer in Country B] subgraph **Visa** VisaA -.-VisaB end Visa as an adapter Shuffling this amount of money around and timing everything right is no easy feat. Visa faces non-payment risk in addition to maintaining a significant balance to cover payouts while waiting to receive settlement payments. From Visa’s 2024 annual SEC report: Most U.S. dollar settlements are settled within the same day and do not result in a receivable or payable balance, while settlements in currencies other than the U.S. dollar generally remain outstanding for one to two business days, which is consistent with industry practice for such transactions. … As of September 30, 2024, we held $11.2 billion of our total available liquidity to fund daily settlement in the event one or more of our financial institution clients are unable to settle, with the remaining liquidity available to support our working capital and other liquidity needs. The Company’s settlement exposure is limited to the amount of unsettled Visa payment transactions at any point in time, which vary significantly day to day. For fiscal 2024, the Company’s maximum daily settlement exposure was $137.4 billion and the average daily settlement exposure was $84.3 billion. 3. Set incentives The key to this whole arrangement are the fees required to participate in the network, largely set by the network. Let’s walk through an average credit card transaction in the US: A cardholder pays for a product at a merchant for $100.00. The merchant pays 2.5% ($2.50) of the transaction to their payment processor or merchant acquirer. The 2.5% is the merchant discount rate or MDR. The payment processor keeps 0.35% ($0.35), then pays 2% ($2.00) to the cardholder’s issuing bank and 0.15% ($0.15) to Visa. The 2% is the interchange fee, commonly known as interchange. The 0.15% is the network assessment fee. 8 The issuing bank keeps 2% ($2.00)! Surprisingly, the issuing bank keeps most and the network takes the least, by an order of magnitude! This is because for the tranasction, the issuer is traditionally considered to take on most of the risk (although merchants are likely to disagree). In addition to regulatory requirements, Visa and Mastercard offer zero-liability protection. This means that the issuing bank, not the cardholder, is liable for any charges made on a card if it is lost or stolen.9 The issuing bank also takes on credit risk, and must always pay for an approved transaction even if a cardholder cannot pay off their balance. Out of these, the network sets the interchange and network assessment fee. Interchange fees vary dramatically based on the kind of card, category of spend, and even the metadata attached to a transaction. The network’s goal is to set fees that incentivize desired behaviors on their network, including using more secure payment methods (lowering interchange fees for merchants), or for companies to do more business spending (higher interchange fees on commercial credit cards). Because of how much is given to the issuers, there are a lot of incentives for issuers to acquire customers and fund lavish rewards programs to encourage spending. This split also explains the recent rise of issuing processors, which make it easier for neobanks and fintechs to issue cards to access a more lucrative end of the market.