Skip to content

Acquiring and Sponsor Banks, Payfacs, and ISOs All Share Similar Challenges

Acquiring and Sponsor Banks, Payfacs, and ISOs All Share Similar Challenges

45% of merchants stated in a recent survey that reducing fraud and chargebacks was top of mind. Another 45% said they were most concerned with improving the customer experience while 10% said minimizing fraud-related operational costs is a top priority.

In this article, we delve into the defining characteristics of the parties responsible for the various types of fraud and/or merchant risk. And, we clarify how third-party merchant risk solutions like LegitScript’s Merchant Onboarding and Merchant Monitoring address the challenges banks, payfacs, and ISOs face.


Defining Differences Between Acquiring or Sponsor Banks, PayFacs, and ISOs

Banks, payfacs, and ISOs all share different levels of responsibility for merchant risk within the overarching payments ecosystem. Each entity ultimately holds some responsibility for their merchants, but the specific shape of their risk is determined by where they are positioned in the payments value chain, and it can change based on how their upstream and downstream relationships are structured.

While acquiring or sponsor banks may pass down card network fines, they often hold the bulk of the responsibility for regulatory scrutiny, brand damage, and increased operational costs in the event of a merchant violation.

  • Acquiring or sponsor banks maintain the merchant accounts that payfacs and ISOs help service, and are responsible for transaction authorization and settlement. As members of the card networks, they must ensure their downstream is compliant. Although acquirers and sponsoring banks are directly responsible, they commonly pass down card network fines for violations to ISOs or payfacs or the merchants themselves.
  • Payment facilitators (also known as payfacs) own the risk within their merchant portfolios by providing processing, merchant account services, risk management, and fraud detection. As intermediaries, they must navigate both regulatory demands and the evolving threat of fraud, making effective risk management solutions indispensable.
  • Independent sales organizations or ISOs rely on their relationships with acquiring or sponsor banks, payment processors, and other financial institutions to provide merchant services. Depending on how those relationships are set up, an ISO may play more of a purely account-sales role and pass the merchant accounts to their acquirer, or they may be more involved in managing merchant risk directly, ensuring the merchants adhere to all applicable legal, card network, and other regulatory requirements.
  • Retail ISOs rely heavily on partnerships with acquiring banks, payment processors, and other financial institutions. They have limited ownership over merchant risk due to the smaller size of the organization. They rely heavily on partnerships with acquiring banks, payment processors, and financial institutions, having limited ownership over merchant risk.
  • Wholesale ISOs tend to be larger organizations that take on more responsibility over merchant risk. With their own underwriting systems, onboarding platforms, and in-house credit, risk, and compliance teams, they are more involved in managing merchant risk directly.

Acquiring or Sponsor Banks, Payfacs, and ISOs All Face Similar Challenges

Minimizing friction points during the merchant onboarding process can support a smoother merchant experience and more rapid business growth. However, it commonly means that internal teams collect less merchant information up front and have reduced visibility into the true risk profile of the merchants entering their ecosystem.

Internal teams often lack the bandwidth to effectively monitor merchant activity on their own, particularly when relying on manual approaches or outdated monitoring solutions that create noise with false positives and fail to detect important violations. Ongoing merchant monitoring is critical for ensuring merchants are adhering to regulatory and card network requirements. Violating these requirements can result in hefty fines, penalties, or fees for violations.

Unidentified Risk Impacts Your Merchant Portfolio and Brand Reputation

Unidentified and violative risk, such as transaction laundering networks, can have serious consequences such as hefty card network fines, increased operational costs, and litigation and penalties.

Let’s explore the various types of unidentified risk that may be lurking in your downstream and/or portfolio of merchants.

  • Unexpected card network fines. Card networks issue violation notifications and associated fines to acquiring and sponsor banks when they identify a merchant that is operating in violation of their network policies. If the merchant account in question is under a payment facilitator or ISO with which the bank shares the merchant risk, the bank may pass the violation fine down to that entity.
  • Brand and reputational damage. Reputational risk or harm refers to the damage a company’s brand could experience as a result of negative publicity from customers, employees, stakeholders, or the public.
  • Regulatory scrutiny and resulting litigation and penalties. Major cases of fraud, such as transaction laundering, can attract regulatory scrutiny and result in litigation and/or penalties.
  • Increased operating costs. Responding to a card network violation notice and communicating with upstream/downstream acquirers increases operating costs.
  • Stressed relationships with acquirers. When your business depends on relationships, ensuring your partners are happy with your brand's reputation and risk management is critical.

A combined merchant onboarding and monitoring solution can help prevent unidentified risks from impacting your brand reputation and help you avoid card network fines.

LegitScript Merchant Risk Solutions Address the Unique Challenges Faced by Banks, Payfacs, and ISOs

LegitScript Merchant Onboarding and Merchant Monitoring combine into one powerful Merchant Risk Solution. Banks, payfacs, and ISOs may be responsible for different levels of merchant risk, but they all share similar challenges when navigating complex jurisdictional issues and regulatory requirements. Third-party merchant risk solutions like LegitScript’s can reduce the stressors from those challenges by helping you rapidly and confidently action existing merchants with accurate and detailed analysis of website content and transaction laundering risk.

LegitScript's blend of big data, advanced technology, and human expertise makes our Merchant Monitoring solution one of the most accurate on the market.

Talk to an expert and discover how LegitScript can help you.

Smelting words into a specialty since 2020, Thea Le Fevre specializes in B2B SaaS Content Marketing. Take a deep dive into her work for up-to-date industry news surrounding issues in payments risk & compliance, trust & safety, regulatory compliance, and more.

Recent Blog Articles

merchant risk solution

How a Third-party Merchant Risk Monitoring Solution Can Help

According to LegitScript's latest Benchmarking Report, 81% of survey participants use a merchant monitoring service provider (MMSP) to mitigate risk. And that number is growing year over year. Third-party merchant risk monitoring solutions vary but LegitScript Merchant Risk Solutions leverage regula...
National Recovery Month spotlight

The National Recovery Month Spotlight: Key Healthcare

LegitScript is joining with our partners and community in celebration of National Recovery Month. Our Addiction Treatment Certification program is shining a spotlight on one of our certified organizations - Key Healthcare - and waiving application costs for all new addiction treatment certification...
CBD

How to Determine If a CBD Product Is Compliant

  In 2018, the Farm Bill changed the landscape for CBD and a new industry was born. CBD products and seller websites flooded the market and new policies and practices were established. Identifying compliant products amid the flurry was a challenge - until LegitScript introduced its CBD Certific...
internet pharmacy guide overview

Banks, Payfacs, and ISOs Need to Know These Three Principles for Online Pharmacies

Illicit online pharmacies selling counterfeit, unapproved, or otherwise unsafe drugs pose some of the greatest threats to consumer safety in e-commerce. Acquirers, payment facilitators, and ISOs can mitigate this risk by learning more about card network rules for high-integrity risk merchants sellin...