What Mastercard actually is
Mastercard is a network, not a processor and not a bank. It issues no cards, extends no credit, underwrites no merchants and holds no merchant funds. What it operates is Banknet — the switching system that carries authorization messages — plus the clearing and settlement layer that moves money between the bank that issued the card and the bank that signed up the merchant. Structurally it is the same four-party model Visa uses, and for most merchant purposes the two are interchangeable.
Two documents give Mastercard its commercial power. The Mastercard Rules bind issuers and acquirers, and reach merchants indirectly through the acquirer's merchant agreement. The default interchange schedules determine how much of every sale the acquirer must hand to the issuer. Mastercard amends both unilaterally through its own bulletin and rule-manual cycle. Nobody on the merchant side votes on either.
Where Mastercard genuinely diverges from Visa is in what it owns beyond cards. Through Vocalink it operates the technology behind core United Kingdom payment systems, and it acquired an account-to-account clearing business from Nets. It has also built a large services line — fraud, identity, cyber, consulting, data analytics and loyalty — that it sells to financial institutions and reports as value-added services and solutions. Founded in 1966 as the Interbank Card Association, branded Master Charge in 1969 and MasterCard in 1979, it converted from a bank-owned association to a listed company in its May 2006 NYSE IPO.
How a Mastercard transaction works and who carries the risk
The sequence is short, and the allocation of risk inside it is what most merchants never see. A card is presented; the merchant's processor routes an authorization request through its acquiring bank to Banknet, which passes it to the issuer; the issuer approves or declines against the cardholder's credit line or balance and the response returns. Money has not moved.
Settlement follows on the next clearing cycle. Mastercard nets positions between member institutions, the acquirer pays the issuer interchange, and the merchant is credited the sale amount less interchange, less Mastercard's assessments, less whatever margin the acquirer or processor charges.
Risk sits with the banks. The issuer carries the cardholder's credit risk. The acquirer carries merchant risk, including the exposure that arises when a business takes payment, fails to deliver and disappears before the chargebacks arrive. Mastercard carries neither. It carries settlement risk between members and it enforces compliance.
Disputes run entirely on Mastercard's terms. Chargeback rights, reason codes, filing deadlines and the representment process by which a merchant contests a chargeback are all defined in the Mastercard Rules. A merchant that believes a dispute outcome is wrong can escalate through its acquirer and no further. This is the practical meaning of having no relationship with the network: the rules that decide whether you keep a disputed sale are written by an organization you cannot negotiate with.
How Mastercard prices, and what a merchant can actually change
Mastercard bills issuers and acquirers, not merchants. There is no Mastercard merchant agreement, no monthly minimum and no early-termination clause, because merchants buy acceptance from acquirers. The costs that originate at the network and arrive on a merchant statement are:
- Interchange, set by Mastercard as a default and paid by the acquirer to the issuer.
- Domestic and cross-border assessment fees charged on volume.
- Transaction switching fees charged to acquirers per authorization.
- Cross-border and currency conversion assessments when card and merchant sit in different countries or currencies.
- Registration fees for payment facilitators, marketplaces and high-risk programs.
- Business Risk Assessment and Mitigation compliance fines and other assessments, levied on acquirers and commonly passed down.
Mastercard publishes US and European interchange rate tables and its rule manuals on its own website. It does not publish the assessment and switching fees it charges acquirers, and it does not publish the rebate and incentive agreements it signs with large issuers, acquirers and merchants. Fee transparency is therefore rated limited rather than good: the component a merchant cannot change is disclosed, and the components negotiated in private are not.
Where Mastercard is genuinely strong
Acceptance reach. Mastercard states it serves more than 210 countries and territories. As with Visa, this is not a feature a merchant evaluates but a precondition of trading — which is exactly why the antitrust litigation over interchange has run for two decades.
Bank-rail infrastructure that Visa does not own. This is the substantive difference between the two networks. Mastercard acquired a majority stake in Vocalink in 2017, which operates the technology behind United Kingdom Bacs direct debit, Faster Payments and the LINK ATM network, and it later bought the account-to-account clearing business from Nets, giving it instant-payment and direct-debit infrastructure in several European markets. These are sold to banks and payment schemes, not to merchants, but they mean Mastercard's exposure is not limited to cards.
Tokenization and mobile. The Mastercard Digital Enablement Service issues the network tokens that let Apple Pay, Google Pay and Samsung Pay represent a Mastercard on a device, and Automatic Billing Updater keeps stored-credential subscriptions alive when a card is reissued.
Fraud, identity and cyber services. Mastercard has assembled a genuine product business rather than a network side-effect, partly by acquisition — Ekata for identity verification, Recorded Future for threat intelligence, agreed in 2024 for a reported $2.65 billion. This value-added services line is one of its fastest-growing revenue streams and it is sold to institutions, not merchants.
Cross-border settlement. Mastercard performs multi-currency settlement, sets the conversion rate applied to cross-border card transactions, and runs Mastercard Cross-Border Services for bank-account and wallet payouts across a large number of currencies.
What Mastercard does not do, and why that is the right answer
A number of merchant-facing capabilities are rated none for Mastercard. That is not a criticism, because performing them would be inconsistent with what a network is. Mastercard does not act as a payment facilitator — it defines the payment facilitator and marketplace model in its rules and requires acquirers to register PayFacs, which is the supervising role rather than the operating one. It does not sell payment orchestration; it is one of the networks an orchestration layer routes to. It does not sell payment links or invoicing, which belong to acquirers, gateways and software platforms above the network.
The high-risk rating of none needs unpacking, because it is the one that has bitten real businesses. Mastercard boards no merchants, so it has no underwriting appetite to assess. What it has is the Business Risk Assessment and Mitigation program, which imposes registration, monitoring and fines on acquirers that sign merchants in categories Mastercard treats as high brand risk. Mastercard can drive an acquirer to terminate a merchant, and the merchant has no appeal to the party that made the decision.
That mechanism has been used as content policy. Since 2020 Mastercard has repeatedly tightened its requirements on adult-content platforms, including age and consent verification obligations, and platforms including Pornhub and parts of Steam's catalog lost Mastercard acceptance as a result. Whatever view a reader takes of the underlying content, the structural point is worth stating plainly: a private rulebook, enforced through acquirers, can end a lawful business's ability to take payment, and no regulator made that call. Any business in an age-restricted or reputationally contested category should treat network rule risk as a first-order commercial risk rather than a compliance footnote.
Litigation, regulators and the limits of network power
MDL 1720. Mastercard is a co-defendant with Visa in the interchange antitrust multidistrict litigation, filed in 2005 in the Eastern District of New York, alleging that the networks and their member banks fixed interchange and imposed anti-steering rules on merchants. The damages track is largely settled: about $7.25 billion approved in 2013, vacated by the Second Circuit in June 2016 for inadequate class representation, then a revised damages-class settlement of roughly $5.54 billion approved in February 2019 and affirmed in March 2023, with the merchant claim deadline extended to 4 February 2025.
The injunctive-relief track is the one that would change how merchants operate, and it is unresolved. The March 2024 proposal from Visa and Mastercard included a five-year interchange reduction estimated to save retailers around $30 billion; on 25 June 2024 Judge Margo Brodie refused it preliminary approval and sent the parties back to negotiate. Oversight moved to Judge Brian Cogan in September 2025, with an opinion expected in 2026. Separately, in October 2025 the networks settled counterfeit, lost and stolen card fraud cost claims for $231.7 million, Mastercard's share reported at $79.8 million.
DOJ v. Visa. The Department of Justice's 24 September 2024 monopolization complaint over US debit was filed against Visa, not Mastercard. It matters here anyway: the case attacks the volume commitments and routing incentives that shape which network a US debit transaction travels over, and its outcome will set the conditions under which every debit network competes.
Regulators have already constrained Mastercard directly. The European Commission fined it €570.5 million in 2019 for rules obstructing merchants' access to cheaper cross-border acquiring within the European Union. The Reserve Bank of India barred it from onboarding new domestic customers from July 2021 to June 2022 over data-localization non-compliance. It admitted liability in a 2021 United Kingdom Payment Systems Regulator case on prepaid card competition rules. In the UK, Merricks v Mastercard, a collective action for tens of millions of consumers over interchange, ran in the Competition Appeal Tribunal from 2016 and reached a proposed settlement whose value and distribution drew significant criticism.
How to evaluate what Mastercard costs you
Mastercard is not a vendor you can shop, so the useful exercise is isolating the network-originated portion of your costs and understanding the rule risk attached to your category.
- Insist on itemized or interchange-plus pricing. Bundled and tiered pricing merges interchange, assessments and processor margin into a single figure, which means you cannot tell whose fee increased when your effective cost rises.
- Ask how your debit transactions are routed. Under the Durbin Amendment and Regulation II, a US debit card from a large issuer must carry at least two unaffiliated networks and covered-issuer debit interchange is capped. Ask whether least-cost routing is switched on, and whether the saving reaches your account or stops at your processor.
- Read the rules-incorporation clause in your merchant agreement. It binds you to the Mastercard Rules as amended from time to time. You are agreeing in advance to changes you will not be consulted on.
- Establish who absorbs a network fine. Excessive-chargeback programs, BRAM assessments and registration fees are charged to the acquirer and passed through under most agreements.
- If your category is anywhere near the network's brand-risk line, ask before you build. Confirm whether registration is required, what it costs, who pays it, and what notice you would receive if the network required your acquirer to terminate you. The businesses that were cut off since 2020 mostly learned these answers afterward.
- For European operations, check cross-border acquiring options. The conduct the European Commission fined in 2019 concerned exactly this — merchants being prevented from seeking better acquiring terms elsewhere in the EU — and it is worth confirming your acquirer is not constraining that choice contractually.
Capability assessment
Every company profiled on this site is assessed against the same eighteen dimensions, so the profiles can be read against one another. Each rating carries one sentence of evidence. There is no score out of ten, because a score is not defensible and a sentence is.
Core strength means a primary, differentiating capability. Supported means genuinely offered and documented, but not a differentiator. Limited means partial, geographically restricted, gated behind an enterprise tier, or delivered through a third party. Not offered means what it says. Unclear means the company markets the capability but does not document it well enough to judge — which is itself a finding.
Who Mastercard suits
- Banks, credit unions and fintech programme managers that want a globally accepted card brand without building acceptance.
- Merchants for whom broad consumer card acceptance is a requirement rather than a choice — Mastercard acceptance is table stakes alongside Visa in most retail categories.
- Banks and schemes in markets where Mastercard's Vocalink and Nets-derived infrastructure can run domestic instant-payment or direct-debit clearing.
- Financial institutions buying fraud, identity and cyber services, where Mastercard's value-added services portfolio is a genuine product line rather than a network side-effect.
Who Mastercard is a poor fit for
- Merchants who want to negotiate card costs directly: Mastercard sets default interchange centrally, merchants have no contract with Mastercard, and the only negotiable component for most merchants is their acquirer's margin.
- Merchants who need stable rules: the Mastercard Rules and interchange tables are amended unilaterally through Mastercard's bulletin cycle and bind merchants indirectly through their acquirer's agreement.
- Merchants in categories Mastercard treats as high brand risk: its BRAM programme requires acquirer registration and can result in fines or a network-driven demand that the acquirer terminate the merchant, with no direct appeal to Mastercard.
- Merchants selling adult or age-restricted content: Mastercard has repeatedly tightened its rules on adult-content platforms since 2020, and platforms including Pornhub and parts of Steam's catalogue lost Mastercard acceptance as a result — a demonstration that network rules, not merchant conduct alone, can end acceptance.
- Businesses in markets where a domestic scheme is mandated or dominant: India's Reserve Bank barred Mastercard from onboarding new domestic customers from July 2021 to June 2022 over data localisation, a reminder that network access is a regulatory variable, not a constant.
Competitors and alternatives
| Company | Why a business would choose it instead |
|---|---|
| Visa | The closest structural equivalent — the larger four-party network with the same interchange-setting role and co-defendant in most of the same litigation. |
| American Express | A three-party model where Amex issues, acquires and sets the merchant discount rate itself, so a merchant negotiates with one counterparty. |
| Discover / Capital One | A smaller US network competing on acceptance cost and debit routing. |
| US domestic debit networks (Star, NYCE, Pulse, Accel) | Regulation II requires a second unaffiliated network on US debit cards, and merchants can route to these for lower cost. |
| ACH, RTP and FedNow | Bank rails carry no interchange and are cheaper for large-ticket, low-dispute payments. |
| Domestic schemes such as UPI, Pix and UnionPay | Domestic instant and card schemes carry volume in India, Brazil and China that Mastercard does not. |
Mastercard — frequently asked questions
Is Mastercard a payment processor?
No. Mastercard operates a card network — Banknet — that authorizes, clears and settles transactions between issuing and acquiring banks. Merchants buy processing from acquirers and processors, which in turn connect to Mastercard. Mastercard does not issue cards, underwrite merchants or hold merchant funds. Its one genuinely processing-adjacent asset is Vocalink, which runs bank payment infrastructure for schemes rather than for merchants.
Does Mastercard keep the interchange fee?
No. Mastercard sets the default interchange rate, but interchange is paid by the acquiring bank to the issuing bank and is revenue for the card issuer. Mastercard's own income comes from domestic and cross-border assessment fees, transaction switching fees charged to acquirers, and its value-added services and solutions business covering fraud, identity, cyber, data and loyalty products sold to financial institutions.
What is the difference between Visa and Mastercard for a merchant?
Structurally, almost none. Both are four-party networks, both set default interchange centrally, both bind merchants indirectly through the acquirer's agreement, and both are co-defendants in the MDL 1720 interchange litigation. The differences are in specific interchange categories, rule detail, and the adjacent infrastructure each owns: Mastercard owns Vocalink and the Nets account-to-account clearing business, while Visa owns Currencycloud, Tink and Pismo.
Who owns Mastercard?
Mastercard Incorporated has been a publicly traded company since its 25 May 2006 initial public offering on the New York Stock Exchange under the ticker MA. Before that it was owned by its member banks as an association, having been founded in 1966 as the Interbank Card Association. Ordinary institutional and retail shareholders own it today, and it is headquartered in Purchase, New York.
Is Mastercard part of the swipe fee lawsuit?
Yes. Mastercard is a co-defendant with Visa in MDL 1720 in the Eastern District of New York. The damages class settled for about $5.54 billion, approved in February 2019, affirmed in March 2023, with a claim deadline of 4 February 2025. The injunctive-relief track remains unresolved: the proposed March 2024 deal containing a five-year interchange reduction was refused preliminary approval on 25 June 2024, and Judge Brian Cogan took over oversight in September 2025 with an opinion expected in 2026.
Why did Mastercard cut off adult sites?
Mastercard applies its own rules to categories it treats as high brand risk through the Business Risk Assessment and Mitigation program, and it has tightened requirements on adult-content platforms since 2020, including age and consent verification obligations. Platforms including Pornhub and parts of Steam's catalog lost Mastercard acceptance as a result. The decision sits with the network and its acquirers rather than with any regulator, which is why it has been criticized as private content regulation.
Has Mastercard been fined by regulators?
Yes, several times. The European Commission fined Mastercard €570.5 million in 2019 over rules that obstructed merchants from accessing cheaper cross-border acquiring elsewhere in the European Union. The Reserve Bank of India barred Mastercard from onboarding new domestic customers from July 2021 until the restriction was lifted in June 2022, citing data-localization non-compliance. Mastercard also admitted liability in a 2021 United Kingdom Payment Systems Regulator case concerning prepaid card competition rules.
Sources
This profile was built from the following primary and secondary sources. Where sources disagreed, the disagreement is stated in the text rather than resolved silently.
- https://www.mastercard.com
- https://www.mastercard.com/global/en/vision/who-we-are.html
- https://en.wikipedia.org/wiki/Mastercard
- https://en.wikipedia.org/wiki/Payment_card_interchange_fee_and_merchant_discount_antitrust_litigation
- https://www.justice.gov/opa/pr/justice-department-sues-visa-monopolizing-debit-markets
- Mastercard employee count and current-year revenue could not be confirmed in this session and are recorded as null rather than estimated.
- The reported acquisition of stablecoin infrastructure firm BVNK (cited on Wikipedia at around $1.8 billion) could not be confirmed from a primary source and is described only generically in the crypto capability note.
- The final settlement figure and Competition Appeal Tribunal approval status of Merricks v Mastercard could not be confirmed; no amount is recorded.
- The MDL 1720 timeline is sourced from Wikipedia's litigation article rather than court records; the outcome of the injunctive-relief track after Judge Brian Cogan took over in September 2025 was still pending as of the last information available and no post-2025 ruling is recorded.
- Mastercard's agentic-commerce programme is rated 'unclear' because availability and terms could not be confirmed from Mastercard's own documentation.
- Maestro wind-down details in Europe are stated generally and were not confirmed against a Mastercard bulletin in this session.