How Card Payments Work

Inside the Systems Behind Issuing, Authorization, Clearing, and Settlement

Introduction: What Happens When You Swipe a Card

1. Why This Book Exists
2. How This Book Is Organized
3. What This Book Does Not Cover
4. How to Read This Book

Chapter 1: The Landscape of Card Issuing

1. The Anatomy of a Payment Transaction
2. Issuers, Acquirers, Networks, and Processors
3. The Four-Party Model Explained
4. What Card Issuing Actually Means
5. Physical vs Virtual Cards
6. Credit vs Debit vs Prepaid

Chapter 2: Card Networks: Visa, Mastercard, and Beyond

1. What Card Networks Actually Own and Operate
2. Network Rules and Compliance Requirements
3. Transaction Message Flow Through the Network
4. BIN Ranges and Issuer Identification
5. Network Fee Structure and Interchange
6. Regional and Alternative Networks

Chapter 3: Issuing Processors and the Processor Model

1. The Role of the Issuing Processor
2. Major Issuing Processor Models
3. What the Processor Provides vs What You Build
4. SPI and Network Direct Integration Paths
5. Sponsor Banks and Program Managers
6. Cost Structures and Contract Considerations

Chapter 4: Core Banking and Cardholder Account Management

1. Core Banking System Responsibilities
2. Account Structures: Primary, Sub, and Virtual Accounts
3. Ledger Design for Card Accounts
4. Balances, Available vs Posted Amounts
5. Integration Between Core Banking and Card Systems
6. Customer Onboarding and KYC Integration

Chapter 5: Card Product Design and Configuration

1. Card Product Definition and Parameters
2. Currency, Region, and Network Configuration
3. Card Controls: Spending Limits, Blocks, and Rules
4. Fee Structures: Interchange Pass-Through, Monthly Fees, FX
5. Rewards, Cashback, and Points Program Architecture
6. Launching a New Card Product

Chapter 6: Identity Verification, KYC, and AML

1. Regulatory Requirements for Issuers
2. KYC Flows: Document Verification and Identity Proofing
3. AML Screening and Watchlists
4. PEP Screening and Risk Categorization
5. Integration with Identity Providers

Chapter 7: Card Number Generation and PAN Management

1. How PANs Are Structured: IIN, Account, Check Digit
2. The Luhn Algorithm and PAN Validation
3. BIN Allocation and Management
4. PAN Assignment and Account Mapping
5. Virtual Card Number Generation Strategies
6. PAN Tokenization at the Issuer Level

Chapter 8: Physical Card Production and Personalization

1. The Card Manufacturing Supply Chain
2. Personalization Bureaus and HSM Integration
3. EMV Chip Personalization
4. PIN Generation and Secure Delivery
5. Card Packaging, Shipping, and Tracking
6. Production Failures and Rework

Chapter 9: Digital Card Provisioning and Tokenization

1. Virtual Card Issuance and Instant Activation
2. Apple Pay, Google Pay, and Samsung Pay Tokenization
3. Token Service Providers and Network Tokenization
4. Device Binding and Provisioning Flows
5. Ephemeral and Single-Use Virtual Cards
6. Tokenization Technical Deep Dive: How Network Tokens Work
7. Push Provisioning and Remote Token Enrollment
8. Tokenization and Authorization Rate Improvement

Chapter 10: The Authorization System

1. The Authorization Request: From Terminal to Issuer
2. ISO 8583 and Modern API Protocols
3. The Authorization Decision Engine
4. Real-Time Balance and Limit Checking
5. Velocity Checks and Pattern Analysis
6. Response Codes and Decline Reasons
7. Decision Engine Architecture
8. Pre-Checks and Post-Checks in Authorization
9. Handling Edge Cases and Partial Failures
10. Authorization Analytics and Continuous Optimization

Chapter 11: Fraud Detection and Risk Systems

1. Rule-Based Fraud Detection
2. Machine Learning Models in Fraud Scoring
3. Device Fingerprinting and Behavioral Biometrics
4. Real-Time Decisioning and Latency Constraints
5. Advanced Fraud Patterns and Detection Strategies
6. Feature Engineering for Fraud Detection
7. Fraud Feedback Loops and Model Retraining
8. Managing False Positives and Cardholder Experience

Chapter 12: 3-D Secure and Authentication Flows

1. What 3-D Secure Is and Why It Exists
2. 3DS 1.0 vs 2.0 Architecture
3. The Authentication Flow: DS, ACS, and Interoperability Server
4. Liability Shift and Exemption Criteria
5. Frictionless vs Challenge Flows
6. 3DS and Digital Wallets
7. Technical Deep Dive: 3DS 2.0 Protocol Messages and Cryptography
8. Operational Considerations for Issuers

Chapter 13: Holds, Authorizations, and Pre-Authorizations

1. Authorization Holds and Pending Balances
2. Capture and Settlement Timing
3. Partial Authorizations and Partial Captures
4. Authorization Reversals and Voids
5. Extended Holds: Hotels, Rental Cars, Gas Stations
6. Hold Expiration and Balance Recovery

Chapter 14: Clearing: The Batch That Moves Transaction Details

1. Authorization vs Clearing: Why Two Steps
2. Clearing File Formats and Schedules
3. The Clearing Cycle: Cut-off Times and Deadlines
4. Merchant Clearing and Acquirer Roles
5. Network Clearing Rules and Validation
6. Clearing Exceptions and Rejections
7. Clearing File Formats and Standards
8. The Clearing Pipeline: Step-by-Step Processing
9. Clearing Reconciliation and Discrepancy Resolution

Chapter 15: Settlement: When Money Actually Moves

1. Settlement vs Clearing: The Critical Distinction
2. Net Settlement and Offset Calculations
3. Reserve Accounts and Liquidity Management
4. Settlement Timing: T+1, T+2, and Beyond
5. FX Settlement and Multi-Currency Clearing
6. Settlement Failures and Reconciliation
7. Float Management and Settlement Economics
8. Settlement Banks and Fund Transfer Mechanisms
9. Settlement Accounting and Ledger Updates

Chapter 16: Fees, Interchange, and Revenue

1. Interchange Fee Structure and Rate Tables
2. Assessments and Network Fees
3. Scheme vs Member Fees
4. Processor Pricing Models
5. Revenue Attribution and Allocation
6. Fee Pass-Through and Merchant Incentives

Chapter 17: Reconciliation and Operations

1. What Reconciliation Means in Card Issuing
2. Three-Way Reconciliation: Authorization, Clearing, Settlement
3. Exception Handling and Unreconciled Items
4. Batch Reconciliation Jobs and Scheduling
5. Operational Controls and Auditing
6. Common Reconciliation Pain Points

Chapter 18: Refunds, Reversals, and Returns

1. Refunds vs Voids vs Reversals vs Credits
2. The Refund Transaction Flow
3. Partial Refunds and Timing
4. Refunds After Expiration
5. Network Recall and Recall-For-Payment
6. Accounting Treatment of Reversals

Chapter 19: Disputes and Chargebacks

1. What a Chargeback Is and When It Happens
2. Chargeback Reasons and Representment
3. The Dispute Lifecycle: Filing, Response, Arbitration
4. Evidence Gathering and Compelling Evidence Standards
5. Chargeback Fees and Financial Impact
6. Representment Automation and Strategy
7. The Chargeback Lifecycle: End-to-End Workflow
8. Evidence Gathering and Compelling Evidence Standards
9. Backend Dispute Management Systems
10. Chargeback Fees and Financial Impact
11. Representment Automation and Strategy
12. Liability Shift Scenarios and 3-D Secure Impact on Disputes

Chapter 20: Card Lifecycle Management

1. Card Expiration and Renewal Cycles
2. Lost and Stolen Card Blocking
3. Card Replacement Workflows
4. Card Controls: Freezing, Unfreezing, Temporary Limits
5. Account Closure and Fund Return
6. Card Status Transitions and State Machine

Chapter 21: ATM and Cash Transactions

1. ATM Network Processing vs POS Networks
2. PIN Verification and PIN Blocks
3. Cash Advance Authorization and Fees
4. ATM Settlement and Cash Loading
5. International ATM Fees and Networks
6. Cashback at POS

Chapter 22: Cross-Border and Multi-Currency Processing

1. Currency Identification and FX Rates
2. Dynamic Currency Conversion
3. Issuer FX Markup and Conversion Logic
4. Cross-Border Interchange and Regulations
5. Multi-Currency Cards and Accounts
6. Sanctions and Geopolitical Constraints

Chapter 23: System Architecture for Modern Card Issuing

1. Event-Driven Architecture for Card Issuing
2. Microservices: Which Services Split, Which Stay Monolithic
3. Real-Time Data Stores and Ledger Design
4. Idempotency, Consistency, and Transaction Safety
5. API Design: Internal vs External
6. Observability: Logging, Tracing, and Monitoring
7. Infrastructure Patterns for Card Issuing
8. Scalability Patterns and Throughput Management
9. Development Practices and Release Management
10. Processor Architecture: Monolith vs Microservices
11. Edge Services and Global Authorization Routing

Chapter 24: Security, Compliance, and Resilience

1. PCI-DSS for Issuers and Processors
2. HSMs and Cryptographic Key Management
3. Data Privacy: GDPR, CCPA, and Beyond
4. Network Security and Threat Protection
5. Disaster Recovery and High Availability
6. Regulatory Auditing and Examination

Chapter 25: Failure Modes and Edge Cases

1. Network Outages and Fallback Processing
2. Duplicate Transaction Handling
3. Race Conditions in Authorization and Balance Updates
4. Reconciliation Discrepancies and Recovery
5. Mass Failure Scenarios and Incident Response
6. Operational Runbooks and Escalation

Conclusion: The Future of Card Issuing

1. Real-Time Issuing and Instant Card Activation
2. Embedded Finance and B2B2C Issuing
3. Account-Based Payments and Card Competition
4. Tokenization and the Death of the PAN
5. Regulatory Trajectory
6. What This Means for Practitioners

References