The Anatomy Of A Card Network
November 1, 2023
You tap, you swipe, you enter your pin, what happens next? Let’s unpack the blackbox of money movement, starting with card networks - our most frequently used tool in North America.
For a lot of consumers understanding how a transaction works is a question that they’ve never really asked, or really had the need to understand. But understanding how money is moved around both regionally and globally is an important fundamental in determining where opportunities for innovation or improvements are available. There are lots of ways to move money but let’s start with one of the most common ways to perform a transaction today in North America; Debit and Credit cards.
Debit and Credit cards fundamentally run on the exact same technology infrastructure in the United States and most of the world for that matter. If you are using a card to pay for something, there is a good chance one of Visa or Mastercard is going to be responsible for enabling that transaction. As consumers we take for granted the layers of technology that exist to facilitate a payment but at least from a high level, it’s not as hard to understand. For this discussion we’ll look at who is involved in a transaction, the lifecycle of a transaction, and how a transaction is secured.
What’s important to think about while reading this is where new companies and technologies have inserted themselves to improve or augment this process. For example, Stripe changed how online businesses process card payments, Chime and Nubank changed how consumers access card services, Lithic and Unit enabled fintechs to build card products.
While credit and debit card networks involve similar players and processes, there's a key difference. Credit card transactions use the cardholder's line of credit from the issuing bank, while debit card transactions directly withdraw funds from the cardholder's bank account. This means that debit card transactions require real-time authorization from the issuing bank to confirm sufficient funds, adding a layer of complexity to the process. However because this check is done, even if the settlement and clearing process hasn’t completed yet, the transactions will be considered as good as cleared even if the banks haven’t settled yet. This is why you can typically see debit card transactions right away but credit card payments can take a couple hours or even a few days to show up on your account.
With credit card purchases, the card provider (i.e Visa) can keep track of the balances available since they facilitate the movement of the transaction information related to that line of credit. This means they don’t always need to check the issuing bank for available credit - they can poll the bank periodically for balance availability. Balance discrepancies can sometimes occur if a customer has transferred money off a credit card through non network activities (like cash advances from a branch or through online money movement in the bank customers account). The same thing doesn’t occur with debit cards since the authorization of available funds happens in real time, checking the actual balance.
Security is the one of the most important aspects of every financial transaction and it’s a blend of proactive and reactive technologies. Asides from encryption, Some of the innovations we’ve seen are digital card tokenization and chip and pin cards.
However, Fraud is still one the most important and challenging attacks to prevent against. Card Networks, Payment Processors, and Gateways all try employee various fraud detection techniques and services. These can be developed in house or provided by third party companies like, sardine.ai which analyzes transactions at time of processing for possible fraud. These techniques can be checking lists of known fraudulent cards or looking at location and transaction patterns. For example, if a transaction occurs outside your country or if you are making 10 purchases faster than a normal human would be able to, or just things you don’t commonly buy.
Fraud detection is always a battle between speed and assuredness. The lifecycle of an entire transaction is around 1-2 seconds, and everything described above needs to happen in that time period. Visa and Mastercard set strict response time limits on their networks and technology developers building ontop of these networks could be penalized for slow performance and lose access to the networks.
New techologies can both unlock new security threats but also enable new fraud detection solutions. This is why the best security is often blocking a transaction before it can even start. Companies like DataDome offer browser and device fingerprinting techniques to identify profiles of fraudulent actors before they can even initiate the transaction. For companies that offer Buy Now Pay Later services, there can also be steps involved to identify the payor and use their transaction histories available through their bank to understand their shopping behaviours.
Visa, MasterCard, and American Express are three of the largest credit card networks. They form the backbone of the consumer payments infrastructure in most of the world. Even Regions like Latin America, South East Asia, and India which have large consumer economies that function without cards – are seeing increasing card network penetration from these three providers - though Amex less so. So its important to understand the scale of these companies and what they do, because if you are offering card services, one of these three is likely involved.
For individuals who don’t really interact with card payments technologies, they may assume all the revenue comes from interest on card balances. However that’s not entirely true, another substantial chunk of that revenue comes from interchange fee’s - this is the card network collecting a fee that is typically a percentage of the transaction for use of their services. For example Visa may collect 0.5%-1% of a transaction, and other service provides will layer their own take ontop of that - Stripe typically charges 2.9% + 30cents a transaction and the reason is because they pay a lot of the 2.9% to various other service providers in the lifecycle . This is why merchants typically don’t like credit card payments because its the merchant the bears the cost of the interchange fee, whereas debit is typically a flat charge of 0.25 cents to $1. The unit economics of card transaction is another topic all together but a lot of the money for card service providers is made by inserting themselves into the interchange fee stack.
The credit card networks play one of the most vital global roles in authorizing consumer payments. However, their job is just to form the connectivity between major institutions and the individuals’ exchanging goods and services. This has created a lot of opportunity in the last decade for new companies to build on top of these rails. Even legislation in Europe (SEPA and PSD2) enabled opportunities for new fintechs to further evolve payment networks.
Which leads into a the next topic of discussion. Card networks represent only one way to move money around globally. There are still many other topics to discuss; ACH, FedNow, Interac, Apple Pay, Wire Transfers, Swyft, UPI, Digital Wallets, Account to Account Payments, etc. Moving money is a complex consideration of speed, cost, and security, where Cards are just the tip of the iceberg. Look out for future releases on more of these technologies.
