How Card Payment Processing Works: A Plain Guide for SMBs
Every time a customer taps their card, a multi-step process runs in under two seconds — but the fees, settlement timing, and fraud checks involved have real consequences for your business. This guide breaks down how card processing works and what you actually need to care about as an SMB operator.
Quick Answer: When a customer pays by card, the transaction passes through your payment gateway, the card network (Visa or Mastercard), the issuing bank, and back, all in seconds. The merchant receives funds 1–3 business days later, minus a processing fee called the Merchant Discount Rate (MDR). Understanding this flow helps you choose the right gateway, manage cash flow, and avoid unnecessary costs.
Card payments feel instant to your customer. But underneath that tap or swipe, four or five different parties are talking to each other, exchanging risk, and taking a small cut. If you've ever wondered why card processing costs more than PayNow, or why your funds arrive two days after the sale, this is why.
What actually happens when a card is tapped?
Here's the sequence, from tap to settlement:
- Initiation — Your customer taps, inserts, or enters their card details. This happens at your card terminal, payment link, or checkout page.
- Gateway capture — Your payment gateway (the software layer you've signed up with) encrypts the card data and sends it to the payment processor.
- Card network routing — The processor routes the request through the relevant card network — Visa, Mastercard, or Amex. The network acts as the messaging layer between your bank and your customer's bank.
- Issuer authorisation — The card network contacts the customer's issuing bank (the bank that gave them the card). The issuing bank checks available funds, runs fraud detection, and sends back an approval or decline — typically within 1–2 seconds.
- Approval returned — The approval travels back through the network to your gateway, and you see the green light on your terminal or checkout.
- Clearing and settlement — At the end of the day, transactions are batched and submitted for settlement. Funds move from the issuing bank, through the card network, to your acquiring bank (the bank that processes payments on your behalf), and then into your merchant account.
The whole authorisation loop takes under two seconds. Settlement — the point at which money actually lands in your account — takes 1 to 3 business days for most card transactions in Singapore and Malaysia.
Who takes a cut, and how much?
Card processing is never free. The fee structure has three layers:
| Party | Fee type | Who pays |
|---|---|---|
| Issuing bank | Interchange fee | Merchant (via acquirer) |
| Card network | Scheme fee | Merchant (via acquirer) |
| Acquirer / gateway | Margin | Merchant |
Combined, these add up to the Merchant Discount Rate (MDR) — the percentage deducted from each card transaction. For Visa and Mastercard in Singapore, MDRs typically sit between 1.5% and 3% depending on your gateway, card type, and volume. Premium cards and international cards carry higher interchange, which is why a customer paying with a rewards card costs you slightly more than one paying with a basic debit card.
This is worth factoring into your pricing. If your margins are thin — common in F&B and retail — a 2.5% card fee on every transaction compounds quickly. Running the numbers before you set prices is not optional.
What is a payment gateway's role in all this?
Your payment gateway is the front door to this entire system. It handles encryption, fraud checks, routing, and the merchant interface you see. It is not the card network, and it is not your bank — it sits between you and both.
When you evaluate a gateway, the card processing flow above is the same regardless of which provider you use. What differs is:
- MDR — the rate the gateway charges you per transaction
- Settlement speed — how quickly net funds hit your account
- Fraud tools — whether 3D Secure (3DS) is included by default
- Supported methods — cards are one method; does the gateway also cover PayNow, GrabPay, or DuitNow?
- Monthly fees — some gateways charge a flat fee on top of MDR; others are purely per-transaction
For most Singapore SMBs, the practical question is which gateway combines local payment methods — PayNow, GrabPay, cards — with a fee structure that suits your volume. In Malaysia, prioritise DuitNow QR and FPX coverage alongside cards. If you're operating at enterprise scale and processing high volumes internationally, Stripe offers deep developer tooling and 100+ global payment methods, though the setup complexity is higher.
As Statista SEA e-commerce data shows, digital payment volumes in the region continue growing — which means more of your customers are paying by card or e-wallet, and the gateway decision matters more than it used to.
How does settlement timing affect your cash flow?
Card settlements typically land T+1 to T+3. That means if you process a batch of sales on Monday, funds arrive Wednesday at the earliest. Compare that to PayNow or DuitNow QR, which settle next business day in most cases.
For businesses running lean — hospitality, retail, event vendors — that 48-hour gap matters. Choosing a gateway with faster settlement, or supplementing card acceptance with QR-based methods, can meaningfully improve your cash position. The Google-Temasek e-Conomy SEA report consistently highlights digital payment adoption as a direct lever on SMB liquidity across the region.
What about fraud protection?
3D Secure (3DS) adds an authentication step for online card transactions — you've seen this as a one-time password sent to your customer's phone. It shifts liability for fraudulent transactions from you to the issuing bank, which is material if you sell online.
Always confirm your gateway includes 3DS by default for card-not-present transactions. If a fraudulent charge slips through without 3DS enabled and the customer disputes it, the chargeback lands with you. The Monetary Authority of Singapore (MAS) sets the compliance framework for payment service providers operating in Singapore, which includes requirements around fraud controls — another reason to use a licensed gateway rather than stitching together your own solution.
For in-person card transactions, EMV chip-and-PIN effectively eliminates counterfeit card fraud. Ensure your card terminal is EMV-compliant — this is standard on modern terminals, including modern card terminals from leading providers.
Frequently Asked Questions
Q: How long does card payment processing take to settle into my account?
Card payments typically settle in 1–3 business days (T+1 to T+3), depending on your payment gateway and acquiring bank. Some providers offer faster settlement options. PayNow and DuitNow QR generally settle next business day, which is one reason many SMBs use both card and QR acceptance.
Q: What is the Merchant Discount Rate (MDR) for card payments in Singapore?
MDR for Visa and Mastercard in Singapore typically ranges from 1.5% to 3% per transaction. The exact rate depends on your gateway, card type, and transaction volume. Premium and international cards carry higher interchange, which flows through to a higher effective MDR.
Q: What is 3D Secure and do I need it?
3D Secure (3DS) is an authentication layer for online card transactions that sends a one-time password to the cardholder. You need it for e-commerce — without it, chargeback liability stays with you if a transaction is disputed as fraudulent. Most reputable gateways include 3DS by default for card-not-present payments.
Q: Why do card payments cost more than PayNow?
Card payments involve multiple intermediaries — the issuing bank, card network, and acquirer — each taking a portion of the transaction as interchange and scheme fees. PayNow is a direct bank-to-bank transfer with no card network involved, which is why consumer fees are zero and merchant rates are significantly lower.
Q: Can I accept card payments without a monthly fee?
Yes. Several gateways, including HitPay, operate on a per-transaction model with no monthly or setup fee. You pay only when you process a transaction, which suits SMBs with variable or seasonal volumes. Always check whether the quoted MDR is all-in or excludes network fees. Most payment gateways include invoicing tools — check whether your provider includes this before signing up for a separate invoicing tool.