What you need before you launch a payment processor

Starting a payment processing company requires a Money Transmitter License in most U.S. states, a bank sponsorship agreement, compliance infrastructure, and capital reserves. You cannot legally move money between customers and merchants without these pieces in place. The licensing path depends on whether you want to process card payments, ACH transfers, wire transfers, or all three—each has different regulatory bodies and timelines.

The federal regulator is the Financial Crimes Enforcement Network (FinCEN), which requires registration if you transmit money. Most states also require their own license before you operate within their borders. Some states have reciprocal agreements; others require separate applications. The entire process typically takes 6 to 18 months from application to first transaction, depending on your state and the complexity of your business model.

You will also need a sponsoring bank—a financial institution that holds customer funds, settles transactions, and assumes some liability on your behalf. Banks are selective about which processors they sponsor, and they will audit your compliance program, fraud controls, and capital reserves before signing an agreement.

Key Takeaways

  • You must obtain a Money Transmitter License from your state and register with FinCEN before processing any payments, and this process takes months, not weeks.
  • A sponsoring bank is required to hold customer funds and settle transactions; banks will not sponsor a processor without proof of compliance infrastructure and fraud controls.
  • Capital reserves, anti-money-laundering (AML) policies, and know-your-customer (KYC) procedures are mandatory, not optional, and regulators will inspect them during licensing.
  • Card processing requires a separate agreement with a card network (Visa, Mastercard, American Express) or an ISO (Independent Sales Organization) that already has one.
  • Chargebacks, fraud, and settlement disputes will consume 5 to 15 percent of your revenue in the first years, so your pricing model must account for these losses.

Money Transmitter Licensing and FinCEN registration

A Money Transmitter License is required in most states if you accept money from one party and send it to another—whether by card, ACH, wire, or digital wallet. The license proves you have the infrastructure to prevent money laundering, terrorism financing, and fraud. You apply to your state's financial regulator, usually the Department of Financial Services or Banking Commissioner. The application requires detailed information about your ownership, management, compliance officer, and business model.

FinCEN registration is separate and federal. You register as a Money Services Business (MSB) on the FinCEN website. This registration is free but mandatory if you transmit money across state lines or handle more than a threshold amount (which varies by state and transaction type). FinCEN does not issue a license; it maintains a registry so law enforcement can identify money transmitters.

State licensing timelines vary widely. New York's BitLicense (for digital asset processors) can take 12 to 24 months. Most traditional money transmitter licenses take 6 to 12 months. During this time, regulators will request updated compliance policies, proof of capital reserves, and details about your customer base and transaction volume. Expect multiple rounds of questions and requests for clarification.

Building compliance and anti-fraud infrastructure

Regulators will not issue a license without proof that you can detect and prevent fraud, money laundering, and sanctions violations. This means hiring or contracting a Compliance Officer (often a lawyer or former regulator) and building systems to monitor transactions in real time. You need software that flags unusual patterns—large transfers to high-risk countries, multiple transactions from the same customer in rapid succession, or transfers to known sanctions lists.

Your Know Your Customer (KYC) process must verify the identity of every customer before they can send money. This typically involves collecting a government ID, proof of address, and sometimes a video call. For business customers, you need to verify the business registration, beneficial owners, and the purpose of the account. The more thorough your KYC, the lower your regulatory risk—but the slower your onboarding, which affects customer acquisition.

You also need an Anti-Money Laundering (AML) policy that documents how you monitor for suspicious activity, how you report it to FinCEN (via a Suspicious Activity Report, or SAR), and how you train your staff. Regulators expect this policy in writing and expect you to follow it. Violations can result in fines, license revocation, or criminal charges against you personally.

Capital reserves and sponsoring bank requirements

States require you to hold capital reserves—money set aside to cover customer losses, chargebacks, and operational expenses. The amount varies by state and transaction volume. Some states require a flat amount (often $25,000 to $500,000); others require a percentage of your monthly transaction volume. You must prove these reserves exist in a dedicated bank account and cannot be used for operating expenses.

A sponsoring bank is a federally insured bank that holds customer funds on your behalf and processes settlements. The bank assumes liability for some fraud and compliance failures, so they are highly selective. They will audit your compliance program, review your customer base, and stress-test your fraud controls. Many banks will not sponsor a new processor without 12 to 24 months of transaction history or a personal may provide from you.

The sponsoring bank agreement specifies how much you can process monthly, what types of transactions are allowed, and what happens if you breach compliance. Banks can terminate the agreement with 30 to 90 days' notice if they discover violations or if your fraud rate exceeds their threshold. Losing your sponsoring bank is often fatal to a payment processor because you cannot legally operate without one.

Card network agreements and ISO relationships

If you want to process credit or debit card payments, you need an agreement with at least one card network—Visa, Mastercard, American Express, or Discover. These networks set the rules for how cards are processed, what fees you can charge, and what fraud liability you bear. You cannot sign directly with the networks as a new processor; instead, you work through an ISO (Independent Sales Organization) or a larger processor that already has a network agreement.

An ISO acts as a middleman. They have the network agreement and sponsor you as a sub-processor. You pay the ISO a percentage of card transaction volume (typically 0.5 to 2 percent), and they handle the relationship with the network. This is faster than getting your own network agreement, which can take 12 to 24 months and requires proof of significant transaction volume and compliance history.

Card networks also require you to be PCI DSS compliant—Payment Card Industry Data Security Standard. This means your systems must encrypt card data, limit who can access it, and undergo annual audits. PCI compliance is expensive (audits cost $5,000 to $50,000 per year) and mandatory. If you are not compliant and a breach occurs, you are liable for all customer losses and fines from the networks.

Pricing, revenue models, and profitability timelines

Payment processors typically charge merchants a percentage of transaction volume (interchange) plus a flat fee per transaction. For card payments, interchange is set by the networks and ranges from 1.5 to 3.5 percent depending on card type and merchant category. For ACH, you might charge 0.5 to 1 percent. For wire transfers, you might charge a flat fee of $15 to $50 per transaction.

Your actual revenue is lower because you must pay your sponsoring bank, your ISO (if you use one), and the networks themselves. After these costs, a typical processor keeps 0.3 to 1 percent of transaction volume. If you process $1 million per month, you might earn $3,000 to $10,000 before operating expenses. This means you need significant transaction volume to be profitable.

Chargebacks and fraud will reduce your revenue further. A chargeback occurs when a customer disputes a transaction and the card network reverses it. You lose the transaction amount plus a chargeback fee (typically $15 to $100). Fraud—where a stolen card is used to process a transaction—results in a loss you cannot recover. Most new processors experience chargeback and fraud rates of 5 to 15 percent in their first years. Established processors typically see 0.5 to 2 percent.

Staffing, technology, and ongoing compliance

You need at least a Compliance Officer, a Chief Technology Officer or software engineer, and a Customer Support team to launch. The Compliance Officer ensures you follow regulations and respond to audits. The CTO builds and maintains the systems that process transactions, detect fraud, and report to regulators. Customer Support handles merchant and customer disputes, chargebacks, and account issues.

Your technology stack must include transaction processing software, fraud detection tools, KYC verification services, and reporting systems. You can build some of this yourself, but most new processors use third-party vendors for fraud detection (companies like Kount or Sift) and KYC verification (companies like Socure or Jumio). These vendors charge per transaction or per verification, which adds to your operating costs.

Ongoing compliance requires annual audits, staff training, and policy updates. Regulators change rules frequently, and you must update your systems and policies to stay compliant. Budget $50,000 to $200,000 per year for compliance, depending on your transaction volume and the complexity of your business model.

Frequently Asked Questions

How much money do I need to start a payment processing company?

Most new processors need $500,000 to $2 million in capital to cover licensing fees, compliance infrastructure, capital reserves, technology development, and operating expenses for the first 12 to 24 months. The exact amount depends on your state, your transaction volume, and whether you build technology in-house or use vendors. Expect to spend 18 to 36 months before reaching profitability.

Can I start a payment processor without a sponsoring bank?

No. A sponsoring bank is legally required to hold customer funds and settle transactions. You cannot operate without one. If you cannot find a bank willing to sponsor you, you cannot launch. This is the most common reason new processors fail—banks are reluctant to sponsor unproven companies.

What happens if I process payments without a Money Transmitter License?

You face criminal charges, civil fines, and civil liability for customer losses. Fines can reach $10,000 to $100,000 per violation, and violations are counted per transaction or per day. You may also face personal liability if you are the owner or officer. Regulators actively pursue unlicensed processors, especially those handling large transaction volumes.

How long does it take to get a Money Transmitter License?

Most states take 6 to 12 months from application to approval. New York's BitLicense can take 12 to 24 months. During this time, you cannot legally process payments. Some processors operate in states with faster licensing while waiting for approval in slower states, but this limits your market and requires separate compliance infrastructure for each state.

Do I need to be a bank to process payments?

No. You need a Money Transmitter License, not a bank charter. A bank charter is more expensive and takes longer to obtain. Most payment processors are licensed as money transmitters, not banks. However, you must work with a sponsoring bank that holds customer funds on your behalf.