Financial AtlasTo the mapУкраїнська

PAYMENTS

Card networks

In a second connects the buyer’s bank with the seller’s bank so a payment goes through.

Open on the interactive map →

This page is the text version of one zone of the interactive map.

Its role in the system

The most common way to pay in a shop and online. A card network is neither a bank nor money, but a set of rules and a switch that in seconds connects the buyer's bank with the seller's bank: it asks whether the money is there, records the purchase, and in the evening works out who owes whom. The money itself then moves between banks through the interbank systems.

Functions

  1. Authorisation — a second after the card is tapped, the issuing bank checks funds, limits and signs of fraud and answers yes or no.
  2. Clearing and settlement — the network gathers all the day's purchases, calculates the banks' mutual obligations net of fees and passes the totals on for final settlement.
  3. Rules and standards — who is responsible for what, how to dispute a purchase (chargeback), technical security standards: the EMV chip, contactless, tokenisation, 3-D Secure for online payments. Chargeback is worth understanding precisely: it is a rule of the card scheme itself, not a law, it exists only inside the card world, and it is time-limited — usually a hundred and twenty days from the transaction.
  4. Issuing — the issuing bank gives cards to clients and sets limits, credit terms and rewards.
  5. Acquiring — the acquiring bank or a payment company signs up merchants, provides terminals and online payment, collects the money for them and answers for the merchants' good faith.

What makes it special

  • The four-party model: buyer — issuing bank — network — acquiring bank — merchant (🌍 Visa, Mastercard). The three-party model: the network is itself the issuer and the acquirer (🇺🇸 American Express). 🇯🇵 Japan's JCB is a hybrid: at home it both issues cards and signs up shops, while abroad, instead of building its own terminal network, it agrees reciprocal acceptance — since 2006 JCB cards have been served by the American Discover network, and Discover cards in Japan are accepted by JCB.
  • Who earns what: on every purchase the merchant pays a fee to the acquirer; the largest part of it is the interchange fee, which the acquirer passes to the issuer, plus the network's own charges. That is also where card cashback comes from — merchants fund it.
  • Regulation of fees: interchange is a permanent subject of competition disputes. 🇪🇺 since 2015 consumer cards have been capped at 0.2% (debit) and 0.3% (credit); 🇺🇸 the cap applies only to the debit cards of large banks (Regulation II, whose validity is currently being contested in court).
  • Who oversees them: central banks as overseers of significant payment systems, competition authorities over fees, and the industry body PCI SSC over the card data security standard (PCI DSS). 🇪🇺 national schemes such as Cartes Bancaires in France and Girocard in Germany operate alongside the global networks. 🇪🇺 Strong customer authentication has applied since 2019: a payment must be confirmed by two of three independent factors — something you know, something you have, something you are — and the code is tied to that exact amount and payee. The effect is measurable: in a joint ECB and EBA report, card fraud was seventeen times higher where the payee sat outside the European Economic Area and the rule does not apply.
  • National schemes and geopolitics: access to the global networks is a question of sovereignty, so countries build schemes of their own. 🇨🇳 UnionPay grew on the rule that terminals in mainland China must accept it, and then expanded outwards: its cards are accepted in roughly 180 countries and territories and issued in several dozen countries outside China. After 2014 🇷🇺 moved domestic processing onto its own system, and 🇮🇳 and 🇧🇷 are building national schemes as a counterweight to Visa and Mastercard. For a shop, accepting a "foreign" card is a question of a deal between networks, not of new hardware.
  • Cards linked to a crypto wallet: from the outside it is an ordinary card. At the moment of authorisation the wallet sells the required amount of crypto at a rate that includes its own mark-up, and ordinary money pays for the purchase — the network sees a normal transaction. The card itself is issued by a licensed institution with scheme membership: 🇺🇸 the Coinbase Card is issued by Pathward, N.A. under a licence from Visa and run on Marqeta's processing, while 🇪🇺 the Crypto.com card is issued by Malta's Foris MT under a financial institution licence. The weak point is that issuer: in June 2020 the UK regulator suspended Wirecard Card Solutions for several days and Crypto.com and TenX cards in Europe stopped working, and Binance's card programme in the European Economic Area closed on 20 December 2023 when its issuer Contis stopped issuing. The networks are moving this way too: Visa lets issuers and acquirers settle with it in stablecoins (April 2026: nine blockchains, an annualised run rate of about 7 billion dollars and more than 130 stablecoin-linked card programmes in over 50 countries).

Why it matters

When cards stop working, shops grind to a halt within minutes — most people have no cash on them. An outage of a network, or its withdrawal from a country, is visible to the whole economy immediately.

🇪🇺 The Visa outage in Europe, June 2018

a rare partial failure of a switch in the main data centre meant the backup centre could not take over automatically; over about 10 hours 5.2 million transactions failed, most of them in the United Kingdom. The episode showed how critical a single network had become for the retail trade of an entire continent.

🌍 Visa and Mastercard leave Russia, March 2022

after the invasion of Ukraine the networks stopped operating in Russia: Russian cards stopped working abroad and foreign cards stopped working in Russia. Inside the country cards kept working, because after 2014 domestic processing had been moved to a national system — a plain lesson in who controls the rails.

🇪🇸 The Iberian blackout, April 2025

on 28 April 2025 Spain and Portugal lost about 31 gigawatts of electricity demand within seconds. Card terminals, ATMs and mobile networks went down together: shops, restaurants and pharmacies could take cash only, and many simply closed until power returned roughly a day later. Cards depend not only on the network's own data centres but on electricity and telecoms — infrastructure the payment industry does not control.

Links to other zones · 10

Regulation and supervision

Supervised by: Anti-Money Laundering

Card issuers, acquiring banks and payment gateways are obliged entities too: they identify both the cardholder and the merchant, watch for transaction laundering and shell storefronts, and block payments to sanctioned countries (🌍 FATF, 🇪🇺 AMLR, 🇺🇸 OFAC and FinCEN).

Standards: FATF Recommendations (10, 15, 20, 22) · EU AMLR 2024/1624 · EU Transfer of Funds Regulation 2023/1113 · US Bank Secrecy Act · Card scheme AML/BRAM rules

Supervised by: Financial Market Infrastructure

A card scheme is infrastructure too, so central banks check its reliability: the 🇪🇺 Eurosystem oversees card, wallet and stablecoin payment schemes under its PISA framework, a separate regulation caps interchange fees, and the 🇺🇸 Fed regulates debit routing and fees.

Standards: Eurosystem PISA oversight framework (2021) · CPMI-IOSCO PFMI (as applied to schemes) · EU Interchange Fee Regulation 2015/751 · EU DORA 2022/2554 · US Federal Reserve Regulation II (debit interchange and routing)

Careers in this zone · 6

Acquiring manager

Signs up and looks after merchants — from a coffee shop to a marketplace: works out the tariff, assesses the risk of the business, sets up terminals and online payment. Watches the share of successful payments and makes sure no sellers of prohibited or fraudulent goods appear among the clients — the acquirer answers for them.

What you need to know

  • The economics of acquiring: interchange, scheme fees, the acquirer's margin
  • Visa and Mastercard rules for merchants, merchant category codes (MCC)
  • Assessment of merchant risk and refund risk
  • Terminal and online solutions, tokenisation

Skills

  • B2B sales and negotiating tariffs
  • Analysis of transaction data
  • Understanding the client's business
  • Coordination with risk and technical support

Certifications: Usually not required; the ETA Certified Payments Professional (🇺🇸) or scheme training is useful

Card product manager (issuing)

Designs the bank's cards — debit, credit, premium, business: limits, cashback, credit terms, the customer journey. Works out the economics: how much the bank will earn from interchange and interest, how much it will give away in rewards, fraud and scheme fees.

What you need to know

  • The unit economics of a card portfolio
  • Loyalty programmes and their cost
  • Scheme rules for issuers and consumer credit requirements
  • Tokenisation and mobile wallets

Skills

  • Product analytics (SQL)
  • Customer research
  • Negotiating with payment schemes and partners
  • Prioritisation

Certifications: Not required

Fraud monitoring analyst (cards)

Watches transactions in real time and tunes the rules and models that stop suspicious purchases: stolen cards, account takeover, bots testing card numbers. Looks for the balance: let a fraudster through and you take a loss; block an honest client and they go to a competitor.

What you need to know

  • Types of card fraud: card-not-present, skimming, social engineering
  • Transaction scoring systems and machine learning
  • 3-D Secure and strong customer authentication (🇪🇺 SCA under PSD2)
  • Liability rules for fraudulent transactions

Skills

  • SQL / Python
  • Fast analysis of anomalies
  • Tuning rules without harming conversion
  • Shift work and working under pressure

Certifications: CFE (ACFE); 🇺🇸 APRP — Accredited Payments Risk Professional (Nacha)

Disputes and chargebacks specialist

Works through disputes over card transactions: the buyer says the goods never came or that they did not make the payment, the merchant says everything was in order. Assembles the evidence, keeps to the scheme's tight deadlines and decides whether it is worth going to the network's arbitration.

What you need to know

  • Visa and Mastercard chargeback rules, reason codes and time limits
  • Consumer rights in distance purchases
  • The documents the scheme accepts as evidence
  • Typical friendly fraud patterns

Skills

  • Argument and writing
  • Deadline discipline
  • Attention to small details
  • Talking to merchants and clients

Certifications: Usually not required — training from the schemes and the processor

Card data security specialist (PCI DSS)

Is responsible for protecting card numbers, PINs and encryption keys across every system, from the terminal to the data centre. Prepares the company for the annual PCI DSS compliance assessment and shrinks the number of systems that ever see a card, through tokenisation.

What you need to know

  • The PCI DSS standard and its neighbours (PIN Security, 3DS)
  • Cryptography and key management (HSM)
  • The architecture of card processing
  • Vulnerability and log management

Skills

  • Audit and collection of evidence
  • Working with developers and administrators
  • Risk assessment
  • Technical writing

Certifications: PCIP (PCI SSC) to start; QSA for assessors; also CISSP, CISA

Payment scheme relationship manager

Is responsible for the bank's or fintech's membership of Visa, Mastercard or a national scheme: licences, reporting, quarterly fees, implementing mandatory rule changes. Makes sure the bank is not fined by the scheme for exceeding fraud levels or breaking the rules.

What you need to know

  • Scheme rules and bulletins, the cycles of mandatory changes
  • The structure of scheme fees and incentives
  • Fraud and chargeback monitoring programmes
  • Regulatory requirements for payment systems (🇪🇺 IFR, 🇺🇸 Regulation II)

Skills

  • Change project management
  • Negotiating with scheme representatives
  • Reporting and deadline control
  • Cross-functional coordination

Certifications: Not required

All zones of the Atlas