24. Visa and Mastercard Networks

Learn Visa and Mastercard Networks as part of the Domain Knowledge learning path for software engineers and architects.

Introduction

Whenever a customer pays using a Visa or Mastercard credit card, the payment appears almost instantaneous.

A customer simply:

Taps a card
Swipes a card
Inserts an EMV chip
Pays online
Uses a mobile wallet

Within a few seconds, the transaction is approved or declined.

Behind this simple experience is one of the world's largest financial networks connecting millions of merchants and thousands of financial institutions across hundreds of countries.

Visa and Mastercard do not usually issue cards directly to customers or maintain merchant accounts. Instead, they provide the secure global payment network that enables financial institutions to communicate with one another.

They are responsible for:

Routing payment messages
Defining payment standards
Managing network rules
Supporting fraud prevention
Coordinating settlement
Enabling global interoperability

Without these payment networks, a customer with a card issued by one bank would not be able to make purchases at merchants using another bank.

Learning Objectives

After completing this article, you will understand:

What Visa and Mastercard are
Why payment networks exist
Open-loop payment model
How Visa and Mastercard fit into the payment ecosystem
Participants involved in payment processing
Responsibilities of each participant
Visa vs Mastercard overview
Global payment infrastructure
End-to-end transaction overview

What is a Payment Network?

A payment network is a global financial communication system that securely connects financial institutions so payment transactions can be authorized, cleared, and settled.

Instead of every bank building direct connections with every other bank, payment networks provide a standardized infrastructure that all participating institutions can use.

Think of a payment network as a high-speed highway connecting thousands of banks and millions of merchants worldwide.

Why Do Payment Networks Exist?

Imagine there are:

8,000 issuing banks
6,000 acquiring banks

Without a payment network, every bank would need direct connections with every other bank.

Bank A ↔ Bank B

Bank A ↔ Bank C

Bank A ↔ Bank D

...

Thousands of direct connections

Managing this would be extremely complex.

Instead, every participating bank connects to Visa or Mastercard.

flowchart LR

IssuingBank

IssuingBank --> VisaMastercard

AcquiringBank --> VisaMastercard

VisaMastercard --> Merchant

This dramatically simplifies payment processing.

What are Visa and Mastercard?

Visa and Mastercard are global payment network companies that provide the infrastructure used to process card payments.

They:

Connect banks
Route payment messages
Define operational standards
Support fraud prevention
Coordinate clearing and settlement
Enable worldwide card acceptance

They are network operators, not retailers or merchants.

Brief History

Visa

Visa originated from the BankAmericard program introduced in the late 1950s and later evolved into a global payment network.

Today, Visa processes billions of transactions annually across more than 200 countries and territories.

Mastercard

Mastercard began as the Interbank Card Association (ICA) in the 1960s before becoming one of the world's largest payment technology companies.

Like Visa, Mastercard operates a global network connecting financial institutions and merchants worldwide.

Open-Loop Payment Model

Visa and Mastercard primarily operate using an open-loop payment model.

In this model:

Different banks issue cards.
Different banks acquire merchants.
The payment network connects them.

flowchart LR

Cardholder

Cardholder --> Merchant

Merchant --> AcquiringBank

AcquiringBank --> VisaMastercard

VisaMastercard --> IssuingBank

This allows customers to use their cards at millions of merchants regardless of which participating bank issued the card.

Closed-Loop vs Open-Loop

Open-Loop	Closed-Loop
Multiple issuing banks	Same organization often acts as issuer and network
Multiple acquiring banks	Direct relationship with merchants
Broad merchant acceptance	More integrated ecosystem
Examples: Visa, Mastercard	Examples: American Express, Discover (selected markets)

Payment Ecosystem

Several organizations participate in every transaction.

flowchart LR

Customer

Customer --> Merchant

Merchant --> Gateway

Gateway --> Processor

Processor --> AcquiringBank

AcquiringBank --> VisaMastercard

VisaMastercard --> IssuingBank

Every participant has a specific responsibility.

Key Participants

Cardholder

The customer using the payment card.

Responsibilities:

Initiates purchases
Protects card information
Completes authentication
Repays the issuing bank (credit cards)

Merchant

The business accepting card payments.

Responsibilities:

Sell products or services
Accept customer payments
Submit payment requests
Process refunds
Respond to disputes

Examples:

Online stores
Restaurants
Airlines
Hotels
Retail chains

Payment Gateway

Receives payment requests from merchants.

Responsibilities:

Secure payment information
Encrypt sensitive data
Tokenize card information
Validate requests
Forward transactions

Payment Processor

Acts as the communication bridge between merchants and financial institutions.

Responsibilities:

Format payment messages
Route transactions
Track processing status
Support clearing
Support settlement

Acquiring Bank

Represents the merchant in the payment ecosystem.

Responsibilities:

Maintain merchant accounts
Receive payment requests
Submit requests to the payment network
Receive settlement funds
Deposit funds into merchant accounts

Visa or Mastercard

The payment network connects financial institutions.

Responsibilities:

Route authorization requests
Apply network rules
Identify issuing banks
Exchange financial messages
Coordinate clearing
Coordinate settlement
Support dispute management

The payment network does not determine whether a transaction is approved.

Issuing Bank

Issues payment cards to customers.

Responsibilities:

Verify customer identity
Check available credit or account balance
Detect fraud
Approve or decline transactions
Bill customers (credit cards)

Examples include:

Chase
Bank of America
Capital One
Citi
Wells Fargo

Responsibilities of Visa & Mastercard

Visa and Mastercard perform numerous business functions beyond simply routing payments.

Major responsibilities include:

Global transaction routing
Network connectivity
Payment standards
Card numbering standards
Clearing services
Settlement coordination
Fraud prevention services
Risk management
Chargeback rules
Dispute resolution frameworks
Merchant acceptance standards
Operational compliance

Global Acceptance

Visa and Mastercard cards are accepted by millions of merchants around the world.

This broad acceptance allows customers to:

Shop online
Pay in stores
Withdraw cash from ATMs (if supported)
Travel internationally
Use mobile wallets
Pay subscription services

Their global reach enables cross-border commerce while maintaining consistent payment standards.

High-Level Transaction Flow

flowchart LR

Customer

Customer --> Merchant

Merchant --> VisaMastercard

VisaMastercard --> IssuingBank

IssuingBank --> Approval

Approval --> Merchant

Merchant --> Customer

This simplified diagram highlights the role of the payment network as the communication bridge between the merchant's financial institution and the cardholder's issuing bank.

Real-World Example

Sophia purchases a laptop for $1,200 from an online electronics retailer.

Sophia enters her Visa card details.
The merchant sends the payment request through its payment gateway and processor.
The acquiring bank forwards the request to the Visa network.
Visa identifies Sophia's issuing bank and routes the authorization request.
The issuing bank verifies the card, available credit, and fraud indicators.
The issuing bank approves the transaction.
Visa returns the approval through the acquiring bank, processor, and gateway.
The merchant confirms the order within a few seconds.

Although the customer experiences a simple checkout, multiple organizations cooperate behind the scenes to complete the transaction securely.

Benefits of Payment Networks

Benefits for Customers

Worldwide card acceptance
Fast payment approvals
Secure transactions
Fraud protection
Reliable payment experience

Benefits for Merchants

Access to global customers
Standardized payment processing
Secure transaction routing
Reduced operational complexity
Support for multiple issuing banks

Benefits for Banks

Shared payment infrastructure
Standard communication protocols
Global interoperability
Reduced integration complexity
Trusted network operations

Common Business Challenges

Operating a global payment network requires addressing challenges such as:

High transaction volumes
Network availability
Cross-border regulations
Currency differences
Fraud attempts
Cybersecurity threats
Peak shopping events
Regulatory compliance

Visa and Mastercard continuously invest in infrastructure and security to maintain high levels of reliability.

Key Terminology

Term	Meaning
Payment Network	Infrastructure connecting financial institutions
Issuing Bank	Bank that provides the payment card
Acquiring Bank	Bank that serves the merchant
Authorization	Decision to approve or decline a payment
Clearing	Exchange of financial transaction information
Settlement	Transfer of funds between financial institutions
Interchange	Fee paid to the issuing bank
Card Network	Organization that routes payment transactions

Key Takeaways

Visa and Mastercard are global payment networks, not banks.
They primarily operate using an open-loop payment model.
Payment networks connect issuing banks and acquiring banks.
They provide standardized infrastructure for authorization, clearing, settlement, and dispute management.
Visa and Mastercard do not usually approve or decline transactions; the issuing bank makes that decision.
Their global infrastructure enables secure, fast, and interoperable card payments across millions of merchants worldwide.

Business Interview Questions

What is a payment network?
What are the primary responsibilities of Visa and Mastercard?
Why do payment networks exist?
How does an open-loop payment model work?
What is the difference between an issuing bank and an acquiring bank?
Does Visa or Mastercard approve a transaction?
How do payment networks simplify communication between banks?
What business value do Visa and Mastercard provide to merchants?
Why are standardized payment rules important?
How do payment networks enable global card acceptance?

Authorization & Transaction Routing

After understanding the role of Visa and Mastercard in the payment ecosystem, the next step is learning how these networks route authorization requests between acquiring banks and issuing banks.

Every time a customer taps a card at a retail store or clicks Pay Now on an e-commerce website, Visa or Mastercard acts as the communication bridge that securely delivers the authorization request to the correct issuing bank.

Most authorization requests are completed within 2–5 seconds, even though they travel across multiple organizations and geographic regions.

Learning Objectives

In this chapter, you'll learn:

How authorization works
Transaction routing
Visa and Mastercard message flow
Network identifiers
ISO 8583 overview
Authorization hold
Stand-In Processing (STIP)
Retry mechanisms
Response codes
Decline reasons
Real-world authorization example

Authorization Overview

Authorization is the process of determining whether a payment transaction should be approved.

The issuing bank verifies:

Card validity
Available credit or account balance
Fraud indicators
Spending limits
Card status

If everything is valid, the issuing bank approves the transaction.

Authorization Flow

flowchart LR

Customer

Customer --> Merchant

Merchant --> Gateway

Gateway --> Processor

Processor --> AcquiringBank

AcquiringBank --> VisaMastercard

VisaMastercard --> IssuingBank

IssuingBank --> Approval

Approval --> VisaMastercard

VisaMastercard --> AcquiringBank

AcquiringBank --> Processor

Processor --> Gateway

Gateway --> Merchant

Merchant --> Customer

Step 1 – Customer Initiates Payment

The transaction begins when a customer chooses to pay.

Examples:

Tap card
Insert EMV chip
Swipe magnetic stripe
Enter card details online
Pay using a digital wallet

Example

Purchase Amount

$150

Merchant

Coffee Shop

Step 2 – Merchant Creates Authorization Request

The merchant creates a payment request containing transaction information.

Typical information includes:

Field	Example
Merchant ID	M100245
Order ID	ORD-45891
Amount	$150
Currency	USD
Card Number	Tokenized
Transaction Time	Current Timestamp
Merchant Category	Restaurant

The merchant sends the request to the payment gateway.

Step 3 – Payment Gateway

The gateway performs several checks.

Responsibilities:

Validate request
Encrypt sensitive data
Tokenize card information
Authenticate merchant
Forward transaction

The gateway ensures the request is secure before entering the payment network.

Step 4 – Payment Processor

The processor converts merchant requests into network-compatible messages.

Responsibilities include:

Message formatting
Routing preparation
Connection management
Transaction tracking
Response delivery

The processor forwards the request to the acquiring bank.

Step 5 – Acquiring Bank

The acquiring bank represents the merchant.

Responsibilities include:

Verify merchant account
Accept authorization request
Submit request to Visa or Mastercard
Receive authorization response

The acquiring bank does not decide whether the transaction is approved.

Step 6 – Visa or Mastercard Routing

This is where Visa and Mastercard perform their core function.

The payment network:

Receives authorization request
Identifies issuing bank
Validates network information
Applies routing rules
Delivers request to issuer

flowchart LR

AcquiringBank

AcquiringBank --> VisaMastercard

VisaMastercard --> IssuingBank

The network acts like a global payment switch.

How Does the Network Identify the Issuing Bank?

Every payment card begins with a Bank Identification Number (BIN), also known as an Issuer Identification Number (IIN).

Example

411111xxxxxx1234

The first digits identify:

Card Network
Issuing Bank
Country
Card Type

Visa or Mastercard uses this information to determine the correct destination for the authorization request.

Example BIN Lookup

Card Prefix	Network	Example Routing
4	Visa	Visa → Issuer
51–55	Mastercard	Mastercard → Issuer
34, 37	American Express	Amex Network
65	Discover	Discover Network

The actual BIN ranges are more extensive, but the principle remains the same.

Step 7 – Issuing Bank Authorization

After receiving the request, the issuing bank performs several validations.

Checks include:

Card active
Card expired
Credit available
Account status
Fraud detection
Velocity limits
Daily limits
Customer authentication

Decision:

Approve
Decline
Request additional authentication

Authorization Decision

flowchart TD

Request

Request --> CardValidation

CardValidation --> CreditCheck

CreditCheck --> FraudCheck

FraudCheck --> Decision

Decision --> Approved

Decision --> Declined

Authorization Hold

If approved, the issuer places an authorization hold.

Example

Available Credit Before Purchase

$5,000

Purchase Amount

$300

Available Credit After Authorization

$4,700

Money has not yet moved.

Only the available credit has been reserved.

Step 8 – Authorization Response

The issuing bank returns its decision.

flowchart LR

IssuingBank

IssuingBank --> VisaMastercard

VisaMastercard --> AcquiringBank

AcquiringBank --> Processor

Processor --> Gateway

Gateway --> Merchant

The merchant immediately displays:

Payment Approved

Payment Declined

ISO 8583 Overview

Visa and Mastercard exchange authorization messages using standardized formats.

The most widely used standard is ISO 8583.

ISO 8583 defines:

Message structure
Transaction identifiers
Processing codes
Amount fields
Currency codes
Merchant information
Response codes

Because every participating institution follows the same standard, banks and payment processors can exchange payment information consistently.

Simplified Message Flow

flowchart LR

Merchant

Merchant --> Request

Request --> VisaMastercard

VisaMastercard --> Issuer

Issuer --> Response

Response --> Merchant

Network Identifiers

Every authorization request includes identifiers that help the network route and track transactions.

Examples include:

Merchant ID
Terminal ID
Acquirer ID
Issuer ID
Transaction ID
Retrieval Reference Number (RRN)
System Trace Audit Number (STAN)

These identifiers help ensure transactions are uniquely identified throughout the payment lifecycle.

Stand-In Processing (STIP)

Sometimes the issuing bank cannot respond because of:

Network outage
System maintenance
Connectivity failure

Instead of immediately declining every transaction, Visa and Mastercard may perform Stand-In Processing (STIP) based on predefined issuer rules.

flowchart LR

VisaMastercard

VisaMastercard --> IssuerUnavailable

IssuerUnavailable --> STIP

STIP --> Merchant

Typical STIP decisions consider:

Transaction amount
Card status
Previously defined issuer rules
Risk parameters

STIP helps maintain payment continuity during temporary issuer outages.

Retry Mechanisms

Temporary communication failures may require retries.

flowchart LR

Request

Request --> Failure

Failure --> Retry

Retry --> Success

Retry --> Failure

Retries are commonly used for:

Network timeout
Temporary communication issues
Processor unavailability

Retries are generally not appropriate for permanent declines such as expired cards or blocked accounts.

Idempotency

Customers sometimes click the payment button multiple times.

Without duplicate protection:

Click

↓

Click Again

↓

Two Charges

With idempotency:

Click

↓

Duplicate Request

↓

Existing Transaction

↓

Previous Response Returned

Although idempotency is commonly implemented by merchants and payment gateways, it helps ensure that duplicate authorization requests do not result in multiple charges for the same purchase.

Common Decline Reasons

Reason	Description
Insufficient Credit	Available credit too low
Expired Card	Card no longer valid
Incorrect CVV	Security validation failed
Card Blocked	Lost or stolen card
Suspected Fraud	Risk controls triggered
Spending Limit Exceeded	Daily limit reached
Invalid Card Number	Card information incorrect
Issuer Unavailable	Temporary issuer issue

Common Authorization Response Codes

Response Code	Meaning
00	Approved
05	Do Not Honor
14	Invalid Card Number
51	Insufficient Credit or Funds
54	Expired Card
57	Transaction Not Permitted
91	Issuer Unavailable

Response codes help merchants determine the appropriate next action, such as requesting another payment method or retrying later for temporary issues.

Network Performance

Visa and Mastercard are designed for:

High availability
Low latency
Global scalability
Secure communication
Continuous monitoring

Their infrastructure processes very high transaction volumes while maintaining reliable authorization performance.

Real-World Example

Emma purchases a $950 smartphone from an online retailer using her Mastercard.

Emma enters her card information.
The merchant validates the order.
The payment gateway encrypts and tokenizes the payment data.
The processor prepares the authorization request.
The acquiring bank forwards the request to the Mastercard network.
Mastercard identifies Emma's issuing bank using the card's BIN.
The issuing bank verifies the card, available credit, and fraud indicators.
The issuer approves the transaction and places an authorization hold.
The approval response travels back through Mastercard, the acquiring bank, processor, gateway, and merchant.
Emma immediately sees Payment Successful.

The entire authorization process is typically completed within a few seconds.

Key Takeaways

Visa and Mastercard act as global routing networks between acquiring banks and issuing banks.
Authorization determines whether a transaction is approved or declined.
BIN/IIN information helps identify the correct issuing bank.
ISO 8583 provides standardized payment message formats.
Authorization holds reserve available credit without transferring money.
Stand-In Processing helps maintain payment availability during temporary issuer outages.
Response codes communicate authorization outcomes consistently across the payment ecosystem.

Business Interview Questions

What is the primary role of Visa and Mastercard during authorization?
How does a payment network determine the correct issuing bank?
What is a BIN or IIN?
What is ISO 8583, and why is it important?
What is an authorization hold?
What is Stand-In Processing (STIP)?
When should payment requests be retried?
Why is idempotency important in payment processing?
What are common authorization decline reasons?
What information is typically included in an authorization request?

Clearing, Settlement & Fees

Authorization is only the beginning of a payment transaction.

When a customer receives a "Payment Approved" message, no money has actually moved between banks.

The financial movement happens later through a series of processes managed by Visa and Mastercard:

Capture
Batch Processing
Clearing
Settlement
Merchant Funding
Reconciliation

These processes ensure that the issuing bank transfers funds to the acquiring bank, allowing the merchant to receive payment.

Learning Objectives

After completing this chapter, you'll understand:

What happens after authorization
Capture process
Batch processing
Clearing
Settlement
Merchant funding
Net vs Gross settlement
Cross-border settlement
Interchange fees
Assessment fees
Merchant Discount Rate (MDR)
Reconciliation
Real-world settlement example

Financial Transaction Lifecycle

flowchart LR

Authorization

Authorization --> Capture

Capture --> Clearing

Clearing --> Settlement

Settlement --> MerchantFunding

MerchantFunding --> Reconciliation

What Happens After Authorization?

When a payment is approved:

Customer receives confirmation.
Merchant prepares the order.
Goods are shipped or services are delivered.
Merchant requests payment collection.
Financial institutions exchange money.

Authorization only reserves funds.

Settlement transfers funds.

Step 1 – Capture

Capture is the process where the merchant confirms that an authorized transaction should now be collected.

The merchant sends a capture request through the payment ecosystem.

flowchart LR

Merchant

Merchant --> Gateway

Gateway --> Processor

Processor --> AcquiringBank

AcquiringBank --> VisaMastercard

Only captured transactions move to settlement.

Immediate Capture

Many businesses capture payments immediately after authorization.

Examples:

Grocery stores
Restaurants
Fuel stations
Retail stores

Flow

Authorization

↓

Capture

↓

Settlement

Delayed Capture

Some industries delay capture until products or services are delivered.

Examples:

Industry	Reason
Hotels	Final bill unknown
Airlines	Ticket confirmation
Car Rentals	Rental duration may change
E-Commerce	Wait until shipment
Furniture	Backordered inventory

Partial Capture

Sometimes merchants collect less than the authorized amount.

Example

Authorized Amount

$800

Captured Amount

$650

Remaining Authorization

$150

The unused authorization is released back to the customer's available credit.

Multiple Capture

Certain industries may perform multiple captures against a single authorization, subject to network rules and merchant agreements.

Example

Hotel Stay

Authorization

↓

Room Charge

↓

Restaurant Charge

↓

Laundry Charge

↓

Final Settlement

Authorization Expiration

Authorization holds remain valid only for a limited period.

If the merchant does not capture within the permitted timeframe:

Authorization expires
Reserved credit is released
Merchant may need a new authorization

Step 2 – Batch Processing

Merchants usually do not settle each transaction individually.

Instead, approved transactions are grouped into batches.

flowchart LR

Transaction1

Transaction1 --> Batch

Transaction2 --> Batch

Transaction3 --> Batch

Batch --> Settlement

Benefits of Batch Processing

Batch processing provides:

Lower operational costs
Efficient settlement
Simplified reconciliation
Better reporting
Reduced network traffic

Many merchants close one or more settlement batches each business day.

Step 3 – Clearing

Clearing is the process where Visa or Mastercard exchanges financial information between the acquiring bank and the issuing bank.

During clearing:

Transaction details are verified.
Settlement amounts are calculated.
Network fees are determined.
Financial records are exchanged.

Clearing Flow

flowchart LR

Merchant

Merchant --> AcquiringBank

AcquiringBank --> VisaMastercard

VisaMastercard --> IssuingBank

Information Shared During Clearing

Typical clearing information includes:

Merchant ID
Transaction Amount
Currency
Authorization Code
Settlement Date
Transaction Identifier
Network Identifier
Merchant Category Code (MCC)

Role of Visa & Mastercard During Clearing

Visa and Mastercard perform several important functions.

Responsibilities include:

Validate clearing files
Exchange financial records
Apply network rules
Calculate network fees
Calculate interchange
Prepare settlement positions
Support dispute processing

The payment network acts as a trusted intermediary between financial institutions.

Step 4 – Settlement

Settlement is the actual movement of money between banks.

Unlike authorization, settlement transfers real funds.

flowchart LR

IssuingBank

IssuingBank --> VisaMastercard

VisaMastercard --> AcquiringBank

AcquiringBank --> Merchant

Settlement Timeline

Typical payment timeline

Day	Activity
Day 1	Authorization
Day 1	Capture
Day 2	Clearing
Day 2–3	Settlement
Day 2–4	Merchant Funding

Actual timelines vary based on:

Country
Banking holidays
Merchant agreement
Card network rules
Transaction type

Merchant Funding

After settlement, the acquiring bank deposits funds into the merchant's account.

Example

Customer Purchase

$1,000

Processing Fees

$25

Merchant Receives

$975

The deposited amount is commonly referred to as the net settlement amount.

Net Settlement

In a Net Settlement model, fees are deducted before funds reach the merchant.

Example

Sales

$10,000

Fees

$220

Merchant Receives

$9,780

Benefits:

Simpler accounting
Fewer transfers
Lower operational complexity

Gross Settlement

In a Gross Settlement model, the merchant initially receives the full transaction amount.

Fees are billed or deducted separately later.

Example

Merchant Receives

$10,000

Later Fees

$220

Net Revenue

$9,780

This model is less common for everyday card payments but may be used in specific settlement arrangements.

Cross-Border Settlement

International transactions involve additional processing.

Additional activities include:

Currency conversion
Foreign exchange calculation
Regional compliance
Local tax requirements
International settlement rules

Settlement timelines may be longer for cross-border transactions.

Multi-Currency Settlement

Global merchants may accept one currency while receiving settlement in another.

Example

Customer Pays

Euro

↓

Network Converts

↓

Merchant Receives

U.S. Dollar

Visa and Mastercard coordinate settlement using agreed exchange rates and network rules.

Understanding Payment Fees

A merchant does not receive the full purchase amount.

Several fees are deducted during settlement.

The most common are:

Interchange Fee
Assessment Fee
Processor Fee
Gateway Fee

Together, these contribute to the Merchant Discount Rate (MDR).

Interchange Fee

The Interchange Fee is paid to the issuing bank.

Purpose:

Cover credit risk
Support fraud protection
Fund rewards programs
Operate card programs

Interchange varies based on:

Card type
Merchant category
Transaction channel
Country
Network rules

Assessment Fee

Visa and Mastercard charge Assessment Fees for using their payment networks.

These fees support:

Network operations
Global infrastructure
Payment innovation
Compliance programs
Security services

Assessment fees are typically much smaller than interchange fees.

Processor Fee

Payment processors charge merchants for operational services.

Examples include:

Message routing
Transaction processing
Reporting
Settlement support
Customer service

Gateway Fee

Payment gateways may charge fees for:

Secure payment collection
Tokenization
Fraud screening
Merchant dashboards
API services

Merchant Discount Rate (MDR)

The Merchant Discount Rate (MDR) is the total fee paid by a merchant for accepting card payments.

MDR generally consists of:

Interchange Fee
Assessment Fee
Processor Fee
Gateway Fee
Acquirer Margin

Settlement Fee Example

Customer Purchase

$1,000

Interchange Fee

$16

Assessment Fee

Processor Fee

Gateway Fee

Merchant Receives

$975

This example illustrates how multiple fee components contribute to the merchant's final settlement amount.

Reconciliation

After settlement, merchants verify that financial records match across all participating systems.

Typical reconciliation compares:

Merchant Orders
Gateway Reports
Processor Reports
Settlement Reports
Bank Deposits

Reconciliation Flow

flowchart TD

MerchantOrders

MerchantOrders --> Compare

GatewayReports --> Compare

ProcessorReports --> Compare

SettlementReports --> Compare

BankDeposit --> Compare

Compare --> ReconciliationComplete

Common Reconciliation Issues

Issue	Possible Cause
Missing Transaction	Batch not submitted
Duplicate Settlement	Retry processing
Fee Difference	MDR deductions
Currency Difference	Exchange rate conversion
Refund Mismatch	Settlement timing

Visa & Mastercard Settlement Services

Visa and Mastercard provide services that help ensure reliable financial settlement.

These include:

Settlement calculation
Financial message exchange
Cross-border settlement
Currency conversion support
Settlement reporting
Network reconciliation
Exception handling

These services enable issuing and acquiring banks to settle millions of transactions accurately every day.

Business KPIs

Operations teams monitor settlement performance using metrics such as:

KPI	Description
Settlement Time	Time until merchant receives funds
Funding Success Rate	Successful merchant deposits
Batch Success Rate	Successful settlement batches
Average Settlement Amount	Average funds transferred
Settlement Exceptions	Transactions requiring investigation
Processing Cost	Total payment processing fees
Reconciliation Accuracy	Percentage of matched transactions

Real-World Example

An online marketplace processes 75,000 Visa and Mastercard transactions during a weekend promotion.

Customers complete purchases throughout the day.
Each transaction is authorized within seconds.
The merchant captures payments after confirming inventory.
Transactions are grouped into settlement batches.
The acquiring bank submits clearing files to the Visa and Mastercard networks.
The networks exchange financial records with issuing banks and calculate settlement obligations.
Issuing banks transfer settlement funds through the networks.
The acquiring bank credits the merchant with the net settlement amount after deducting applicable fees.
The finance team reconciles merchant orders, settlement reports, and bank deposits before closing the accounting period.

Although customers experience immediate payment confirmation, the financial settlement process occurs later through coordinated clearing and settlement activities.

Key Takeaways

Authorization reserves funds; settlement transfers funds.
Only captured transactions enter clearing and settlement.
Visa and Mastercard coordinate clearing and settlement between issuing and acquiring banks.
Batch processing improves efficiency and reduces operational costs.
Merchant Discount Rate (MDR) is composed of interchange, assessment, processor, gateway, and acquirer fees.
Net settlement deducts fees before merchant funding, while gross settlement handles fees separately.
Daily reconciliation helps ensure financial accuracy and operational integrity.

Business Interview Questions

What is the difference between authorization, capture, clearing, and settlement?
Why is capture separated from authorization?
What is batch processing, and why is it used?
What role do Visa and Mastercard play during clearing?
What is the difference between net settlement and gross settlement?
What is Merchant Discount Rate (MDR)?
What are interchange and assessment fees?
How are cross-border transactions settled?
Why is reconciliation important for merchants?
Which KPIs are commonly monitored during settlement operations?

Security, Fraud & Network Services

Visa and Mastercard process billions of payment transactions every year.

With millions of merchants, thousands of financial institutions, and transactions occurring every second, protecting the payment ecosystem from fraud, cyberattacks, and operational failures is one of their most important responsibilities.

Modern payment networks use multiple layers of security to ensure that transactions are:

Secure
Fast
Reliable
Authenticated
Available worldwide

This chapter explores the technologies and services Visa and Mastercard use to protect cardholders, merchants, and financial institutions.

Learning Objectives

After completing this chapter, you'll understand:

Payment security architecture
Tokenization
Encryption
EMV chip technology
Contactless payments
Digital wallets
Visa Secure
Mastercard Identity Check
3-D Secure
Fraud monitoring
AI-based fraud detection
Chargeback services
Network tokenization
PCI DSS overview
Business continuity
High availability

Multi-Layer Security Model

Modern payment security relies on multiple protection layers.

flowchart TD

Customer

Customer --> Merchant

Merchant --> Gateway

Gateway --> Network

Network --> Issuer

Customer --> Authentication

Merchant --> Encryption

Gateway --> Tokenization

Network --> FraudMonitoring

Issuer --> Authorization

Each layer protects the transaction from different types of threats.

Common Payment Security Threats

Payment networks defend against threats such as:

Stolen card information
Counterfeit cards
Account takeover
Card testing attacks
Data breaches
Phishing
Malware
Merchant compromise
Identity theft
Friendly fraud

Encryption

Encryption protects sensitive payment information while it is transmitted between systems.

Sensitive information includes:

Card Number
Cardholder Name
Expiration Date
Billing Information
Authentication Data

flowchart LR

CardData

CardData --> Encryption

Encryption --> SecureTransmission

SecureTransmission --> Merchant

Encryption ensures intercepted data cannot be easily understood without the appropriate cryptographic keys.

Tokenization

Instead of transmitting the real card number, payment systems often replace it with a token.

Example

Card Number

4111 1111 1111 1234

↓

Payment Token

TK_9A82HFG734

The token has no value outside the payment ecosystem.

Benefits of Tokenization

Benefits include:

Reduced fraud exposure
Better protection of card data
Lower PCI DSS scope
Safer recurring payments
Improved customer confidence

Network Tokenization

Visa and Mastercard provide Network Tokenization services.

Instead of merchants storing the actual Primary Account Number (PAN), a network-issued payment token is used.

Benefits include:

Better protection against stolen card data
Support for digital wallets
Improved authorization rates in many recurring payment scenarios
Simplified card lifecycle management

Tokenization Flow

flowchart LR

CardNumber

CardNumber --> NetworkToken

NetworkToken --> Merchant

Merchant --> PaymentNetwork

EMV Chip Technology

Modern payment cards contain an EMV chip.

EMV stands for:

Europay
Mastercard
Visa

Unlike magnetic stripe cards, EMV chips generate dynamic transaction data for each payment.

Benefits:

Reduced counterfeit fraud
Stronger authentication
Better security
Dynamic transaction protection

EMV Transaction Flow

flowchart LR

Customer

Customer --> EMVChip

EMVChip --> Merchant

Merchant --> VisaMastercard

Magnetic Stripe vs EMV Chip

Magnetic Stripe	EMV Chip
Static data	Dynamic transaction data
Easier to copy	Difficult to clone
Higher fraud risk	Lower counterfeit fraud risk
Older technology	Modern standard

Contactless Payments

Contactless cards use Near Field Communication (NFC) technology.

Customers simply:

Tap the card
Wait for confirmation
Payment completes

Benefits include:

Faster checkout
Reduced physical contact
Improved customer experience

Contactless Payment Flow

flowchart LR

Customer

Customer --> ContactlessCard

ContactlessCard --> POS

POS --> PaymentNetwork

Digital Wallets

Digital wallets securely store payment credentials on mobile devices.

Examples include:

Apple Pay
Google Wallet
Samsung Wallet

Digital wallets often use:

Network tokens
Device authentication
Biometric verification

instead of exposing the actual card number.

Benefits of Digital Wallets

For customers:

Faster checkout
Reduced need to carry physical cards
Strong authentication
Convenient mobile payments

For merchants:

Improved customer experience
Reduced fraud risk
Support for contactless payments

Visa Secure

Visa Secure is Visa's implementation of 3-D Secure.

It provides additional authentication during online purchases.

Possible authentication methods include:

One-Time Password (OTP)
Biometric verification
Banking application approval
Risk-based authentication

The goal is to verify that the legitimate cardholder is completing the transaction.

Mastercard Identity Check

Mastercard Identity Check provides similar protection for Mastercard transactions.

Authentication may include:

Fingerprint recognition
Face recognition
Mobile banking approval
One-Time Password

Both Visa Secure and Mastercard Identity Check aim to reduce fraud while minimizing unnecessary customer friction.

Simplified 3-D Secure Flow

flowchart LR

Customer

Customer --> Merchant

Merchant --> Authentication

Authentication --> Issuer

Issuer --> Approval

Fraud Monitoring

Visa and Mastercard continuously monitor payment activity for suspicious behavior.

Examples include:

Unusual spending
High transaction frequency
Geographic anomalies
Multiple declined transactions
Suspicious merchant activity

Monitoring occurs continuously across the network.

Risk Scoring

Each transaction may be evaluated using a risk score.

Factors considered include:

Purchase amount
Merchant category
Transaction location
Customer spending history
Device information
Time of day

Higher-risk transactions may require additional authentication or review.

AI-Based Fraud Detection

Modern payment networks use artificial intelligence and machine learning to identify fraud patterns.

Examples include:

Transaction behavior analysis
Pattern recognition
Velocity analysis
Device intelligence
Behavioral analytics

AI systems continuously improve by learning from historical fraud trends and emerging attack patterns.

Velocity Checks

Fraud systems monitor how quickly transactions occur.

Example

10 Purchases

↓

3 Minutes

↓

High Risk Alert

Velocity checks help identify stolen card activity.

Device Intelligence

Payment systems may analyze device-related signals such as:

Device reputation
Browser characteristics
Operating system
Device consistency
Previous transaction history

These signals help identify suspicious activity without relying on a single indicator.

Geolocation Analysis

Networks may compare transaction locations.

Example

Purchase

Texas

↓

5 Minutes Later

Japan

↓

Fraud Review

Geographic inconsistencies may indicate potential fraud, though legitimate travel and other factors are also considered.

Card Lifecycle Management

Visa and Mastercard support card lifecycle services.

Examples include:

New card issuance
Card replacement
Card renewal
Lost card replacement
Stolen card replacement
Expired card updates

These services help maintain uninterrupted payment capability.

Chargeback Services

Payment networks provide standardized dispute management processes.

Services include:

Dispute routing
Reason codes
Evidence exchange
Arbitration support
Resolution procedures

These standardized processes help issuers and acquirers resolve payment disputes consistently.

PCI DSS Overview

The Payment Card Industry Data Security Standard (PCI DSS) is a global security standard for organizations that store, process, or transmit payment card data.

Its objectives include:

Protect cardholder data
Secure payment systems
Reduce data breaches
Strengthen access controls
Improve security monitoring

PCI DSS is maintained by the Payment Card Industry Security Standards Council, while Visa and Mastercard require participating organizations to comply with applicable network rules.

High Availability

Visa and Mastercard are designed for continuous operation.

Key characteristics include:

Multiple data centers
Redundant infrastructure
Continuous monitoring
Automatic failover
Disaster recovery planning

This minimizes service interruptions.

Business Continuity

Payment networks prepare for unexpected events.

Examples include:

Data center outages
Network failures
Natural disasters
Cybersecurity incidents
Hardware failures

Business continuity planning helps maintain payment processing during disruptions.

Global Network Resilience

To support worldwide commerce, payment networks emphasize:

Geographic redundancy
Fault tolerance
Load balancing
Capacity planning
Continuous health monitoring

These capabilities enable consistent payment processing during periods of high demand.

Merchant Best Practices

Merchants can improve payment security by:

Using tokenization
Encrypting payment data
Supporting EMV transactions
Enabling 3-D Secure where appropriate
Monitoring suspicious transactions
Limiting access to payment systems
Keeping systems updated
Following PCI DSS requirements

Common Fraud Scenarios

Fraud Type	Description
Lost Card Fraud	Unauthorized use of a misplaced card
Stolen Card Fraud	Criminal uses stolen payment information
Counterfeit Card	Duplicate physical card created
Account Takeover	Attacker gains access to customer account
Card Testing	Small transactions used to validate stolen cards
Friendly Fraud	Legitimate customer disputes a valid purchase
Phishing	Customer tricked into revealing payment credentials

Security Services Comparison

Service	Primary Purpose
Encryption	Protect data during transmission and storage
Tokenization	Replace sensitive card information
EMV	Prevent counterfeit card fraud
Visa Secure	Additional online authentication
Mastercard Identity Check	Cardholder verification
Fraud Monitoring	Detect suspicious transactions
AI Risk Scoring	Evaluate transaction risk
PCI DSS	Security compliance framework

Real-World Example

A customer purchases a $950 laptop using a Visa card through an online retailer.

The customer enters payment details.
The payment gateway encrypts the information.
A network payment token is used instead of storing the actual card number.
Visa Secure requests additional authentication because the transaction risk is elevated.
The customer successfully completes biometric authentication through the issuing bank.
Visa performs network-level fraud monitoring while routing the authorization request.
The issuing bank evaluates the transaction and approves it.
The merchant completes the sale without ever storing the customer's actual card number.

Multiple security controls work together to reduce fraud while maintaining a smooth customer experience.

Key Takeaways

Visa and Mastercard use multiple security layers to protect payment transactions.
Encryption protects sensitive payment information during transmission.
Network tokenization reduces exposure of actual card numbers.
EMV chips generate dynamic transaction data that helps reduce counterfeit fraud.
Visa Secure and Mastercard Identity Check strengthen online authentication.
AI-driven fraud detection and risk scoring help identify suspicious activity.
PCI DSS establishes industry security requirements for handling payment card data.
High availability and business continuity enable reliable global payment processing.

Business Interview Questions

What is the difference between encryption and tokenization?
How does network tokenization improve payment security?
What advantages does EMV provide over magnetic stripe cards?
How do Visa Secure and Mastercard Identity Check support online payments?
What is 3-D Secure?
How do payment networks perform fraud monitoring?
What factors are considered during risk scoring?
What is PCI DSS, and why is it important?
How do Visa and Mastercard achieve high availability?
What are the most common types of payment fraud?

Reference Guide & Interview Preparation

Congratulations! You have completed the Visa & Mastercard Networks series.

This final chapter serves as a quick reference guide covering the complete payment network lifecycle, comparison tables, glossary, operational metrics, and interview preparation.

Whether you're preparing for Banking, FinTech, Payment Gateway, or Card Processing interviews, this chapter summarizes the most important concepts in one place.

Complete Payment Network Lifecycle

flowchart LR

Customer

Customer --> Merchant

Merchant --> Gateway

Gateway --> Processor

Processor --> AcquiringBank

AcquiringBank --> VisaMastercard

VisaMastercard --> IssuingBank

IssuingBank --> Authorization

Authorization --> Merchant

Merchant --> Capture

Capture --> Clearing

Clearing --> Settlement

Settlement --> MerchantFunding

Visa & Mastercard End-to-End Responsibilities

Stage	Visa & Mastercard Responsibility
Card Acceptance	Enable global payment acceptance
Authorization	Route requests to issuing banks
Authentication	Support 3-D Secure services
Risk Management	Monitor fraud and suspicious activity
Clearing	Exchange financial transaction records
Settlement	Coordinate movement of funds
Disputes	Define chargeback rules and arbitration
Standards	Maintain global payment specifications

End-to-End Payment Timeline

Step	Activity
1	Customer initiates payment
2	Merchant creates authorization request
3	Gateway validates request
4	Processor prepares network message
5	Acquiring bank submits request
6	Visa or Mastercard routes request
7	Issuing bank authorizes transaction
8	Authorization response returned
9	Merchant captures payment
10	Clearing begins
11	Settlement completed
12	Merchant receives funding
13	Reconciliation performed

Complete Payment Flow

flowchart TD

Purchase

Purchase --> Authorization

Authorization --> Capture

Capture --> Clearing

Clearing --> Settlement

Settlement --> Funding

Funding --> Reconciliation

Settlement --> Refund

Settlement --> Chargeback

Visa vs Mastercard

Feature	Visa	Mastercard
Business Model	Open-loop payment network	Open-loop payment network
Issues Cards Directly	No (primarily through issuers)	No (primarily through issuers)
Merchant Accounts	No	No
Routes Transactions	Yes	Yes
Settlement Services	Yes	Yes
Fraud Monitoring	Yes	Yes
Global Acceptance	Very High	Very High
Digital Wallet Support	Yes	Yes

Visa & Mastercard Similarities

Both networks:

Connect issuing and acquiring banks
Route payment transactions
Support authorization
Coordinate clearing
Coordinate settlement
Define network operating rules
Support dispute management
Enable tokenization
Support digital wallets
Invest heavily in fraud prevention

Visa & Mastercard Differences

Although their business models are very similar, differences may include:

Proprietary network services
Fraud prevention products
Authentication branding
Commercial programs
Reporting tools
Network pricing structures
Value-added services

From a merchant or customer perspective, the payment experience is generally similar.

Network vs Payment Processor

Visa/Mastercard	Payment Processor
Operate payment network	Process merchant transactions
Connect financial institutions	Connect merchants to acquiring banks
Route authorization requests	Format payment messages
Coordinate settlement	Exchange operational messages
Define network standards	Provide merchant processing services

Issuing Bank vs Acquiring Bank

Issuing Bank	Acquiring Bank
Issues payment card	Supports merchant
Verifies cardholder	Verifies merchant
Approves or declines payment	Receives merchant transactions
Bills customer	Credits merchant account
Manages customer relationship	Manages merchant relationship

Authorization vs Clearing vs Settlement

Authorization	Clearing	Settlement
Decision to approve	Exchange transaction records	Transfer funds
Seconds	Hours	1–3 business days
No money movement	Financial record exchange	Money transferred
Issuer decision	Network coordination	Bank-to-bank settlement

Open Loop vs Closed Loop

Open Loop	Closed Loop
Multiple issuers	Same organization often acts as issuer and network
Multiple acquirers	Direct merchant relationship
Large ecosystem	Integrated ecosystem
Visa, Mastercard	American Express, Discover (selected markets)

Tokenization vs Encryption

Tokenization	Encryption
Replaces sensitive data	Scrambles sensitive data
Original data stored securely	Original data recovered using keys
Protects stored card data	Protects transmitted and stored data
Supports recurring payments	Supports secure communication

EMV vs Magnetic Stripe

EMV Chip	Magnetic Stripe
Dynamic transaction data	Static card data
Strong counterfeit protection	Easier to clone
Modern payment standard	Legacy technology
Preferred worldwide	Being phased out in many markets

Visa Secure vs Mastercard Identity Check

Visa Secure	Mastercard Identity Check
Visa authentication service	Mastercard authentication service
Based on EMV® 3-D Secure standards	Based on EMV® 3-D Secure standards
Supports risk-based authentication	Supports risk-based authentication
Helps reduce online fraud	Helps reduce online fraud

Common Network Services

Visa and Mastercard provide many value-added services.

Examples include:

Authorization routing
Clearing
Settlement
Tokenization
Fraud monitoring
Card lifecycle management
Chargeback processing
Currency conversion support
Cross-border payments
Reporting services

Common Payment Terminology

Term	Meaning
PAN	Primary Account Number
BIN	Bank Identification Number
IIN	Issuer Identification Number
EMV	Europay, Mastercard, Visa chip standard
STIP	Stand-In Processing
PCI DSS	Payment Card Industry Data Security Standard
MCC	Merchant Category Code
MDR	Merchant Discount Rate
RRN	Retrieval Reference Number
STAN	System Trace Audit Number

Common Response Codes

Code	Meaning
00	Approved
05	Do Not Honor
14	Invalid Card Number
41	Lost Card
43	Stolen Card
51	Insufficient Funds or Credit
54	Expired Card
57	Transaction Not Permitted
91	Issuer Unavailable

Operational KPIs

Payment operations teams monitor metrics such as:

KPI	Description
Authorization Rate	Percentage of approved authorizations
Transaction Success Rate	Successfully completed payments
Average Authorization Time	Time to receive authorization
Settlement Time	Time until merchant funding
Fraud Rate	Percentage of fraudulent transactions
Chargeback Rate	Percentage of disputed transactions
Network Availability	Payment network uptime
Reconciliation Accuracy	Matching financial records
Cross-Border Success Rate	Successful international payments

Operational Challenges

Global payment networks continuously manage:

Network latency
Fraud attacks
Processor outages
High transaction volumes
Cross-border regulations
Currency conversion
Cybersecurity threats
Compliance requirements
Disaster recovery
Capacity planning

Future Trends

The payment industry continues to evolve rapidly.

Key trends include:

Network Token Expansion

More tokenized transactions
Better recurring payment support
Increased payment security

Digital Wallet Growth

Mobile-first payments
Contactless experiences
Biometric authentication

AI-Powered Fraud Prevention

Real-time behavioral analysis
Predictive fraud detection
Adaptive risk scoring

Real-Time Payment Integration

Faster payment experiences
Improved merchant cash flow
Better customer experience

Embedded Finance

Payments integrated into business applications
Buy Now, Pay Later (BNPL)
Invisible payments

Cross-Border Innovation

Faster international settlements
Multi-currency optimization
Improved foreign exchange services

Best Practices for Merchants

Merchants should:

Support EMV and contactless payments
Enable tokenization
Use 3-D Secure where appropriate
Monitor fraud continuously
Reconcile transactions daily
Respond quickly to chargebacks
Keep payment systems updated
Maintain PCI DSS compliance
Train staff on payment security
Review authorization and settlement reports regularly

End-to-End Business Scenario

A customer purchases a $850 laptop from an online electronics retailer using a Mastercard.

The customer enters card details at checkout.
The merchant submits the transaction through its payment gateway.
The payment processor formats the authorization request.
The acquiring bank sends the request to the Mastercard network.
Mastercard identifies the issuing bank using the card's BIN/IIN and routes the request.
The issuing bank verifies the card, available credit, and fraud indicators before approving the transaction.
The approval response returns through the Mastercard network to the merchant.
The merchant captures the transaction after preparing the shipment.
Mastercard coordinates clearing and settlement between the issuing and acquiring banks.
The acquiring bank deposits the net settlement amount into the merchant's account.
The merchant reconciles settlement reports with internal sales records.
If the customer later returns the product, a refund is processed. If the customer disputes the payment, the standardized chargeback process is followed.

Learning Checklist

After completing this series, you should be able to explain:

✅ What Visa and Mastercard do
✅ Open-loop payment architecture
✅ Roles of issuers and acquirers
✅ Authorization routing
✅ BIN and IIN identification
✅ ISO 8583 message flow
✅ Stand-In Processing (STIP)
✅ Clearing and settlement
✅ Merchant funding
✅ Interchange and assessment fees
✅ Merchant Discount Rate (MDR)
✅ Tokenization and encryption
✅ EMV technology
✅ Digital wallets
✅ Visa Secure and Mastercard Identity Check
✅ Fraud monitoring and AI risk scoring
✅ Chargeback and dispute management
✅ Operational KPIs and payment network best practices

Business Interview Questions

Fundamentals

What is the primary role of Visa and Mastercard?
Why are payment networks necessary?
What is an open-loop payment model?
How do Visa and Mastercard connect issuing and acquiring banks?
What responsibilities belong to the issuing bank versus the payment network?

Authorization

How does Visa or Mastercard determine the correct issuing bank?
What is a BIN or IIN?
What is ISO 8583?
What is Stand-In Processing (STIP)?
What is an authorization hold?

Clearing & Settlement

What happens after authorization?
What is the difference between clearing and settlement?
What is Merchant Discount Rate (MDR)?
What are interchange and assessment fees?
How do merchants receive settlement funds?

Security

What is tokenization?
How does encryption differ from tokenization?
How does EMV improve payment security?
What is Visa Secure?
What is Mastercard Identity Check?

Operations

How do payment networks detect fraud?
What KPIs are important in payment operations?
Why is reconciliation necessary?
How are cross-border payments processed?
What challenges do global payment networks face?

Advanced

What are network tokens?
How do digital wallets use Visa and Mastercard?
How does AI improve fraud prevention?
What services do Visa and Mastercard provide beyond transaction routing?
How do payment networks maintain high availability and resilience?

Series Summary

Congratulations! You have completed Visa & Mastercard Networks, one of the core topics in the Payment Domain Knowledge series.

You now understand:

The purpose and architecture of global payment networks
How Visa and Mastercard connect issuing and acquiring banks
End-to-end authorization routing
Clearing, settlement, and merchant funding
Payment network fee structures
Tokenization, EMV, digital wallets, and authentication
Fraud detection and dispute management
Operational KPIs and business best practices
Real-world payment network workflows
Common interview topics for Banking, FinTech, and Payment Gateway roles

This knowledge forms the foundation for understanding enterprise payment platforms and large-scale card processing systems used across the global financial industry.