#payments
Manage payment processing, tracking, and reconciliation efficiently
Federal Regulation E (12 CFR § 1005.18) and more than 20 state paycard statutes require employers to offer unbanked employees a fee-free payment alternative, obtain genuinely voluntary consent, and guarantee at least one no-fee full-balance withdrawal per pay period.
PCI DSS 4.0's transition period ended March 31, 2025, so every merchant assessment from 2026 onward now enforces mandatory payment-page script monitoring, MFA for all cardholder-data access, and authenticated internal vulnerability scans — noncompliance risks $5,000-$100,000 monthly fines from acquiring banks plus an average $173,692 added breach cost per IBM's research.
How small businesses can reconcile AI agent-initiated purchases under ACP and AP2, tag agent-channel sales, track transaction fees, and defend against the chargeback risk of non-human checkouts.
Visa and Mastercard's 2026 interchange settlement caps credit card surcharges at 3% of the transaction or the merchant's actual cost of acceptance, whichever is lower, and requires 30 days' written notice to your processor before you can start charging it.
Capital One's $5.15 billion acquisition of Brex, which closed in April 2026, adds integration and roadmap uncertainty to a corporate card market that also includes Ramp, BILL Spend & Expense, and Aspire, so small businesses now need to weigh vendor stability alongside features and pricing.
Credit card processing is three stacked fees — interchange, network assessments, and processor markup — but only the markup is negotiable, and on $30,000 in monthly volume the gap between flat-rate and a well-negotiated interchange-plus deal can run $200-$400 a month.
Involuntary churn accounts for 20-40% of total subscription churn and drains roughly 9% of MRR industry-wide, but smart retries, dunning emails, and card account updaters can recover 60-80% of it if failed charges are booked as AR, not lost revenue.
Business email compromise cost U.S. victims over $3 billion in reported losses in 2025, and 86% of it moves by wire or ACH. Six accounts payable controls — callback verification, dual approval, vendor master file locks — stop fraudulent transfers before the money leaves.
Surcharging, cash discounts, and dual pricing are the three legal ways to pass card fees to customers in 2026—surcharges cap at 3% (Visa) and are banned in CT, ME, and MA, while cash discounts and dual pricing are legal in all 50 states and skip the 30-day network notice.
BNPL providers pay merchants the full sale price minus a fee, then report gross volume on a 1099-K — so recording only the net deposit understates revenue and triggers IRS underreporter notices. Record gross sales through per-provider clearing accounts to keep fees, reserves, and 1099-K totals reconciled.
A payment processor payout bundles gross sales, fees, refunds, chargebacks, sales tax, and rolling reserves into one net deposit. Route every piece through a clearing account so your books tie out to the penny and match the gross volume on your 1099-K.
OFAC enforcement now targets fintech, crypto, real estate, and small e-commerce firms with civil penalties up to $377,700 per violation. A practical guide to SDN list screening, the 50 percent ownership rule, voluntary self-disclosure under the 2026 portal, and the five-pillar compliance program Treasury expects from any company touching cross-border money.
