Authorize.net

What Authorize.net actually is

Authorize.net is a gateway, not a processor, and the distinction is the single most useful thing to understand about it.

In its Gateway Only configuration, that is exactly what Authorize.net does. The merchant keeps an existing merchant account with a separate acquirer; Authorize.net routes to it and hands back the authorization. It does not underwrite, does not settle and never touches the merchant's funds. If a payout is late or a reserve appears, that is the acquirer's doing.

Authorize.net also sells an All-in-One plan that bundles a merchant account with the gateway. In that configuration a partner acquirer still does the underwriting and settlement, but Authorize.net is the merchant-facing brand and the single point of contact. Two merchants can therefore both say they use Authorize.net and be in structurally different relationships.

A third complication: Authorize.net has a very large reseller and ISO channel. Many merchants did not buy the gateway from Authorize.net at all — they got it from their processor, at the processor's price, under the processor's contract. Authorize.net's published terms describe the direct subscription only.

Who does what on an Authorize.net transaction

The chain depends on which configuration the merchant is in, and merchants regularly misattribute problems because they do not know which one they bought.

• Gateway Only. The merchant's own acquirer holds the relationship, underwrites the business, sponsors it into the card networks, settles the funds and carries the acquirer-side chargeback exposure. Authorize.net supplies authorization routing, tokenization, the vault and the fraud filters. A decline may be the gateway's fraud rules or the issuer's decision; a missing deposit is almost never the gateway.
• All-in-One. Authorize.net is the brand and the bill, and a partner acquirer underwrites and settles behind it. The merchant has one company to call, which is the point of the plan.
• Reseller-sold. An ISO sits between the merchant and both of the above, setting its own gateway markup, its own merchant-account pricing and its own contract terms.

Authorize.net is a PCI DSS Level 1 service provider operating under Visa's compliance regime, and its eCheck.Net ACH product runs under NACHA rules. Card, ACH, digital wallets including Apple Pay, PayPal and Visa Click to Pay, and card-present acceptance through supported readers and Tap to Phone all run through the same gateway. It is published as available in the US, Canada, the UK, Europe and Australia; multi-currency handling depends on the acquirer, not the gateway.

What it cannot do is onboard sub-merchants. There is no payment-facilitator infrastructure here — a software platform that wants to board its own customers as sub-merchants is looking at the wrong product, and Visa points those needs at Cybersource.

How Authorize.net prices

Pricing is published on Authorize.net's own sign-up page, which is unusual in the gateway market. The structure is straightforward.

Every plan carries a flat monthly gateway fee, charged regardless of volume. Gateway Only adds a per-transaction gateway fee and a daily batch fee, on top of whatever the merchant's acquirer charges separately. All-in-One replaces that with a published flat merchant-account price covering both processing and the gateway. An eCheck.Net variant adds percentage-based ACH pricing. Other fee components include eCheck chargeback fees and a per-update charge for Account Updater, the service that refreshes stored card credentials when a card is reissued.

Authorize.net states the gateway subscription has no contract and can be cancelled at any time, with no early-termination fee. Take that at face value only for the direct subscription. Where a reseller sold the gateway alongside a merchant account, the reseller's paperwork governs, and reseller merchant agreements routinely carry multi-year terms and early-termination fees that Authorize.net's published no-contract language does not touch.

Where Authorize.net is genuinely strong

Integration breadth. Nearly thirty years in the market bought Authorize.net a place in hundreds of shopping carts, billing systems, ERP packages and industry-specific applications. For a merchant on older or niche commerce software, it is frequently one of only two or three gateways already built in — and an integration that exists beats one that has to be commissioned.

Recurring billing and the card vault. Automated Recurring Billing and the Customer Information Manager vault are long-established and heavily used for subscription, membership and donation programs. Combined with Account Updater, they solve the problem that quietly kills recurring revenue: cards expiring or being reissued and payments failing silently.

Bring-your-own-acquirer. Gateway Only lets a merchant keep an acquiring relationship it has already negotiated. A business with real volume and a sharp interchange-plus deal does not have to abandon that deal to modernize its checkout, which is precisely what an all-in-one flat-rate processor would require.

Published pricing. Fee components are on the website. In a market where most gateways answer pricing questions with a sales call, that is a meaningful advantage for anyone trying to build a cost model before committing.

Supporting strengths include the Advanced Fraud Detection Suite, a rules-based filter set covering velocity, AVS and CVV mismatches and IP screening; a virtual terminal, hosted payment forms and invoicing for taking payment without a website; and eCheck.Net for US ACH acceptance.

Where it falls short

The developer experience is dated. Authorize.net publishes a documented API with SDKs, Accept.js, Accept Hosted forms and webhooks, and it works — but the design is a legacy XML and JSON hybrid that predates modern REST conventions. A team building a new integration from scratch will find Stripe, Adyen and Checkout.com materially faster to work with. Choosing Authorize.net for a greenfield build is usually the wrong call unless a required downstream integration forces it.

Low-volume economics are poor. The flat monthly fee applies whether the merchant processes a thousand transactions or none, and in Gateway Only it sits on top of the acquirer's own monthly charges. Small merchants often pay more in fixed costs than they would pay in total to a flat-rate processor with no monthly fee.

Three companies, one problem. In Gateway Only sold through a reseller, the gateway, the merchant account and the reseller are three separate businesses. When a transaction declines or a settlement goes missing, establishing which one owns the issue is the merchant's job, and each has an incentive to point at the others.

No payfac, no real orchestration. Visa says the reimagined platform supports multiple acquirer connections, but Authorize.net is not built as an orchestration layer with smart routing or failover, and offers no sub-merchant onboarding.

No real-time rails, no crypto. RTP and FedNow are not merchant acceptance methods here, and stablecoin or crypto acceptance is not offered.

The outage record is old but instructive. A denial-of-service extortion campaign in September 2004 disrupted the gateway intermittently for over a week. On 2 and 3 July 2009 a complete infrastructure failure attributed to an electrical fire at the hosting facility took the gateway down for more than 200,000 merchants and drew sustained criticism of its redundancy and its communications. Both are historical, but they are why redundancy questions belong in any gateway evaluation.

Visa ownership and what the 2025 reimagining actually means

Authorize.Net was founded in 1996 by Jeff Knowles as one of the first internet payment gateways, then passed through an unusually long chain of owners: Go2Net in 1999 for a reported $90.5 million; InfoSpace, which acquired Go2Net in 2000; Lightbridge in 2004 for a reported $82 million; CyberSource in 2007; and Visa, which acquired CyberSource in 2010 for a reported $2 billion. Authorize.net has been a Visa subsidiary ever since, operated alongside Cybersource.

Being owned by a card network is an unusual position for a gateway and it produces a specific dynamic. Visa's strategic attention goes to Cybersource for enterprise and cross-border merchants; Authorize.net is the tier underneath. For most of the 2010s the product was maintained rather than developed, and the trade press called it dated well before Visa did anything about it.

On 3 April 2025 Visa announced a reimagined Authorize.net with a new dashboard, AI features, built-in fraud protection, chargeback tooling, card readers, Tap to Phone and multiple acquirer connections, citing over 445,000 merchants and approximately $200 billion in annual payment volume. Read that announcement carefully. Visa framing its own product as reimagined is an admission that the previous version had fallen behind, and most of what was added — modern fraud tooling, chargeback workflow, tap-to-phone acceptance — is functionality competitors shipped years earlier. The release is a catch-up, not a leap.

For a merchant already on Authorize.net, the honest position is that the platform is being invested in again after a long neglect, and that Visa has not publicly confirmed whether the reimagined experience has reached every existing merchant. For a merchant choosing a gateway today, the case rests on existing integrations, recurring billing, and keeping an acquirer it already likes — not on being modern.

How to evaluate Authorize.net

The questions worth asking are different depending on how you are buying it.

• Establish which plan you are actually on. Gateway Only and All-in-One are different products with different support paths. If you do not know which acquirer settles your funds, find out before you need to know.
• Find out whether you are buying direct or through a reseller. The published no-contract, no-early-termination terms apply to the direct gateway subscription. A reseller's merchant agreement is a separate document with its own term, renewal and exit provisions.
• Add up the fixed monthly cost across both vendors. In Gateway Only, the gateway's monthly fee and the acquirer's monthly fees are separate lines. Model the total against your realistic transaction count, not your best month.
• Test the integration before you commit. If your cart, billing system or ERP already lists Authorize.net, confirm which features it exposes — recurring billing and the vault are worth little if your platform's integration only supports one-off charges.
• If recurring revenue matters, price Account Updater in. It is charged per update and it is the difference between silent involuntary churn and renewals that keep working.
• Ask about redundancy and status communications — what the failover architecture is now, and how merchants are notified during an incident.
• If you are building new, benchmark the API first. Give a developer the Authorize.net documentation and one competitor's for a day. The comparison will be decisive.

Capability assessment

Every company profiled on this site is assessed against the same eighteen dimensions, so the profiles can be read against one another. Each rating carries one sentence of evidence. There is no score out of ten, because a score is not defensible and a sentence is.

Core strength means a primary, differentiating capability. Supported means genuinely offered and documented, but not a differentiator. Limited means partial, geographically restricted, gated behind an enterprise tier, or delivered through a third party. Not offered means what it says. Unclear means the company markets the capability but does not document it well enough to judge — which is itself a finding.

Competitors and alternatives

Authorize.net — frequently asked questions

Sources

This profile was built from the following primary and secondary sources. Where sources disagreed, the disagreement is stated in the text rather than resolved silently.

• https://en.wikipedia.org/wiki/Authorize.Net
• https://www.authorize.net
• https://www.authorize.net/en-us/sign-up.html
• https://developer.authorize.net/api/reference/features/acceptjs.html
• https://www.digitaltransactions.net/visa-rethinks-authorize-net-and-adds-unified-checkout-fraud-protection-ser
• https://en.wikipedia.org/wiki/CyberSource
• https://www.cybersource.com/en-us/about.html