What Is a Merchant? A Plain Definition for Cards
A merchant is the business that accepts a card payment. Here is how Visa and Mastercard define the word, the parties around it, and the rules that come with it.
A merchant is the business that takes a card as payment. In plain words, it is the business that accepts card payments from a buyer. A coffee shop, a web store, a plumber with a card reader on a phone. Each one is a merchant the moment it lets a customer pay by card. This page gives the definition in plain words, using what Visa and Mastercard say themselves.
What is a merchant?
The core idea is simple. A merchant sells something and agrees to be paid through cards instead of only cash. The card networks treat that agreement as a formal role, not just a habit of the shop. Once a business signs up to take cards, it steps into a system with named parties, fixed steps and written rules.
The parties around a merchant
Visa's guidelines name the other seats at the table. Visa's guidelines define a cardholder as an individual who is issued a card. That is the person standing at your counter or typing digits into your checkout page.
On the merchant's side sits the acquirer. Visa's guidelines define an acquirer as a client that signs a merchant or payment facilitator and directly or indirectly enters a transaction into Interchange. In plain words, the acquirer is the bank-side business that brings the merchant into the card system and passes the sale along.
So a sale has at least three named parties. The cardholder pays. The merchant accepts. The acquirer connects the merchant to the card network.
What a merchant does in a transaction
The merchant starts the payment. A buyer hands over a card, or types its details online. What the buyer supplies is a payment credential. Visa's guidelines define a payment credential as a number or other credential that identifies a cardholder's account for use in a transaction.
The merchant passes that credential, with the sale details, to its acquirer. The merchant's part is to accept the credential, send it on, and deliver what was sold.
Merchant IDs: how a merchant is identified
A merchant in the system is not just a name on a sign. It is identified by a code. To see how that code is built and what each part means, read what is a merchant id. For a deeper look at what the code tells banks and networks, see merchant id meaning.
Rules merchants follow
Taking cards comes with duties. The big one is protecting the card details a merchant receives. Visa's guidelines define the Payment Card Industry Data Security Standard as a set of requirements for protecting sensitive cardholder information. Merchants handle that information on every sale, so the standard applies to them.
Mastercard sorts merchants into levels, and the level sets what a merchant must do. Mastercard's manual says compliance with the PCI DSS is required for a Level 4 Merchant, although validation of compliance to Mastercard is not required. Mastercard's manual says a Level 4 Merchant may validate compliance with the PCI DSS by successfully completing an annual SAQ. Mastercard's manual says Level 4 Merchants may engage a PCI SSC-approved QSA to complete a ROC instead of performing an SAQ.
So even a Level 4 Merchant must meet the security standard. A Level 4 Merchant can prove it with an annual SAQ or a ROC from a QSA. For the full set of network duties, read the mastercard merchant rules.
Examples of merchants
Merchants come in more shapes than the corner shop. For a walk through the kinds of businesses that count, see merchant examples.
Where to read the network rules in full
The definitions on this page come from Visa's guidelines and Mastercard's manual. Visa's dispute management guidelines cover the roles from the merchant's side of a claim. Both are on the networks' own sites.