#payments
Manage payment processing, tracking, and reconciliation efficiently
Toast charges roughly 2.99% + 15¢ per transaction, Clover about 2.3% + 10¢, and Square 2.4–2.6% + 15¢ — a side-by-side breakdown of POS pricing, hardware costs, and contract terms to help restaurant and retail owners pick the right system in 2026.
Visa lowered its VAMP excessive-merchant threshold from 2.2% to 1.5% on April 1, 2026, with fines of $8 per flagged transaction, and Mastercard's Excessive Chargeback Program still triggers at 100+ monthly chargebacks — here's how the ratio math catches small merchants off guard and how to bring it back under the line.
The x402 protocol has processed more than 150 million AI agent micropayments worth roughly $600 million a year in stablecoins, and Mastercard, Visa, Stripe, and Google have all shipped competing versions since — here's what small businesses need to know about the bookkeeping and tax implications before the volume arrives.
The GENIUS Act, signed into law in July 2025, creates the first federal framework for payment stablecoins, and small businesses accepting them must record fair market value at receipt, track cost basis per transaction, and prepare for Form 1099-DA reporting starting with 2026 transactions.
Federal Regulation E (12 CFR § 1005.18) and more than 20 state paycard statutes require employers to offer unbanked employees a fee-free payment alternative, obtain genuinely voluntary consent, and guarantee at least one no-fee full-balance withdrawal per pay period.
PCI DSS 4.0's transition period ended March 31, 2025, so every merchant assessment from 2026 onward now enforces mandatory payment-page script monitoring, MFA for all cardholder-data access, and authenticated internal vulnerability scans — noncompliance risks $5,000-$100,000 monthly fines from acquiring banks plus an average $173,692 added breach cost per IBM's research.
How small businesses can reconcile AI agent-initiated purchases under ACP and AP2, tag agent-channel sales, track transaction fees, and defend against the chargeback risk of non-human checkouts.
Visa and Mastercard's 2026 interchange settlement caps credit card surcharges at 3% of the transaction or the merchant's actual cost of acceptance, whichever is lower, and requires 30 days' written notice to your processor before you can start charging it.
Capital One's $5.15 billion acquisition of Brex, which closed in April 2026, adds integration and roadmap uncertainty to a corporate card market that also includes Ramp, BILL Spend & Expense, and Aspire, so small businesses now need to weigh vendor stability alongside features and pricing.
Credit card processing is three stacked fees — interchange, network assessments, and processor markup — but only the markup is negotiable, and on $30,000 in monthly volume the gap between flat-rate and a well-negotiated interchange-plus deal can run $200-$400 a month.
Involuntary churn accounts for 20-40% of total subscription churn and drains roughly 9% of MRR industry-wide, but smart retries, dunning emails, and card account updaters can recover 60-80% of it if failed charges are booked as AR, not lost revenue.
Business email compromise cost U.S. victims over $3 billion in reported losses in 2025, and 86% of it moves by wire or ACH. Six accounts payable controls — callback verification, dual approval, vendor master file locks — stop fraudulent transfers before the money leaves.
