Key takeaways
- Aggregator-style onboarding is fine early; at scale a dedicated merchant account with interchange-plus usually costs less.
- Rapid growth triggers risk reviews and sometimes reserves; give your processor projections before the spike.
- PCI scope, tokenization and multi-rail settlement become architecture decisions, not checkboxes.
Payment processing for Bay Area startups tends to be an afterthought until it becomes a problem, usually right around the time a company in SoMa, the Peninsula or the East Bay crosses a volume threshold that its original aggregator-style setup was never designed for. The pattern is familiar: a founder integrates the easiest checkout in an afternoon, growth arrives, and then a deposit is held, a rate looks wrong, or a risk team asks for documents the company does not have. This guide walks through what changes at scale and what to prepare for.
Aggregator versus dedicated merchant account
Early on, most startups process under an aggregator: the provider holds the master merchant account and you are a sub-merchant. Onboarding is instant, pricing is flat, and risk decisions are automated. That is a good trade at $20,000 a month. At $2 million a month, the flat rate is expensive relative to interchange-plus, the automated risk engine is more likely to freeze funds on a growth spike, and you have no direct relationship with the underwriter.
A dedicated merchant account means real underwriting, pass-through pricing where interchange and markup appear separately, and a human who can adjust limits. It also means providing financials, projections, and a clear description of the business model.
Growth spikes look like fraud to a risk engine
A consumer app in the Mission that goes from 500 to 15,000 daily transactions after a press cycle looks, to an automated system, like a merchant account that was compromised. The result is a hold. The fix is boring: give your processor volume projections ahead of launches, agree on approved ceilings, and have a contact who can lift them. Startups with card-not-present volume, subscriptions, marketplaces or anything in a regulated vertical should expect the conversation to include a rolling reserve at first. That is normal and negotiable as history builds.
Interchange optimization is real money at scale
At volume, the difference between well-qualified and downgraded interchange is a line item worth an engineer's time:
- Submit full AVS and CVV on every card-not-present transaction.
- Use network tokens and account updater for stored credentials so subscription rebills do not fail or downgrade.
- Pass Level 2/3 data on B2B transactions.
- Route debit intelligently where regulated debit applies.
- Settle batches within the network's timing windows.
A processor that shows interchange separately lets you measure this. One that blends it does not.
PCI scope becomes an architecture decision
Storing cards for subscriptions or marketplaces puts your systems in PCI scope unless you design them out of it. Tokenization and hosted fields keep the full card number off your servers, shrink your annual assessment, and reduce your exposure under CCPA/CPRA. They also make switching processors later possible without re-collecting every card, which is a strategic point many founders miss until they are locked in.
Subscriptions and the Automatic Renewal Law
SaaS and consumer subscription companies in California live under the Automatic Renewal Law: clear disclosure, affirmative consent, and cancellation that is as easy as signup, including online cancellation for online signups. Beyond compliance, following it lowers disputes, and disputes are what matters to the networks. Cross the roughly 0.9-1% chargeback ratio and you enter monitoring programs with fines. At 50,000 transactions a month, that is 450-500 disputes; it happens faster than teams expect when a free trial converts to a charge customers forgot about.
Multi-rail settlement
As B2B and international volume grows, cards stop being the only rail worth using. ACH settles in 1-3 business days at a flat cost and suits invoices. Cards settle in 1-2 business days. Stablecoin settlement on Solana and the XRP Ledger lands instantly in the merchant wallet and removes chargeback exposure entirely, which some B2B and cross-border customers now prefer. If your startup custodies digital assets for users, California's Digital Financial Assets Law is in scope; accepting stablecoins as payment for your own services is a different situation, but confirm with counsel.
Marketplaces and money transmission
If you hold funds for sellers before paying them out, you are potentially in money-transmission territory in California and federally. Payment facilitation models, managed payouts through a licensed partner, and split settlement exist for this reason. Get this question answered by counsel before you design the payout flow, not after.
Preparing for the underwriting conversation
- Financials and a 12-month volume projection.
- A clear product description, refund policy and terms on a live site.
- Prior processing statements and chargeback history.
- Your fraud tooling and dispute process.
- An honest description of any regulated component.
Bay Area startups are used to moving fast, and payments is one of the few areas where a little preparation before the growth curve saves weeks of frozen funds after it.
Ready to get set up with Flux?
Cards, ACH, and stablecoins in one platform, with volume-based pricing. No setup fees or contracts.
Get Started