Key takeaways
- Card-not-present sales put fraud liability on the merchant, so pre-authorization screening is the first thing to get right.
- Tokenized, hosted checkout shrinks PCI scope and CCPA/CPRA exposure at the same time.
- Subscriptions and pre-orders bring California's Automatic Renewal Law and network future-delivery rules into play.
E-commerce brands payment processing in San Francisco is a subject the city has an outsized relationship with, because so many of the tools were built here and so many of the brands using them are down the street in SoMa, the Mission, Dogpatch, Potrero Hill and the Presidio. Apparel, home goods, specialty food, hardware accessories, pet products, beauty and wellness all ship out of the city or from third-party warehouses in Oakland and Tracy. This guide covers what a DTC brand should set up in its payment stack, what an underwriter looks for in the file, and where California's rules touch the checkout page.
Card-not-present means the fraud is yours
In a storefront, a chip or tap transaction shifts fraud liability to the card issuer. Online, it stays with you. A stolen card used on your site becomes a chargeback you lose, plus a fee, plus a point on your dispute ratio. That makes fraud screening the first thing to configure, not a later upgrade. Fraud detection that runs before authorization, using address verification, CVV checks, velocity rules, device signals and order-pattern analysis, stops card testing and reshipping attempts before they cost you anything. 3-D Secure authentication on higher-risk orders can shift liability back to the issuer, at the cost of some checkout friction; use it selectively.
Tokenization and the checkout page
If card numbers pass through your servers, you are in scope for the heavy parts of PCI, and under CCPA and CPRA you are responsible for card data as personal information. The fix is architectural: use hosted fields so card data is captured by the processor inside your checkout design and replaced with a token before it reaches your system. Tokenization also makes stored cards work for repeat purchases and subscriptions, with automatic updates when a customer's card is reissued, which cuts involuntary churn.
Subscriptions, pre-orders and California law
Many SF brands sell subscriptions, memberships or pre-orders. California's Automatic Renewal Law requires clear disclosure of renewal terms before consent, affirmative consent to the recurring charge, an acknowledgment, and cancellation that is as easy as sign-up, online for online customers. SB 478, effective July 2024, requires mandatory fees to appear in the advertised price, which affects shipping and handling presentation. Pre-orders raise the network's future-delivery question: acquirers treat money collected before shipment as exposure and may reserve against it. Shorten the pre-order window or charge at shipment where possible. Our guide on recurring billing best practices covers the reminder cadence that keeps cancelled-recurring disputes down.
What underwriting looks like for a DTC brand
The file needs a live site with terms, privacy, shipping and refund policies; a clear description of what you sell and where it ships from; fulfillment timelines; three months of bank statements; prior processing statements if you are moving from an aggregator; and ownership documentation. Underwriters pay attention to average delivery time, refund policy, and any product categories that need separate placement, such as supplements, hemp products under AB 45, vape hardware, or age-restricted goods. A brand that has been frozen by an aggregator should bring that history; the reasons an aggregator's model flagged you are usually explainable with a human underwriter.
International customers and payment mix
SF brands ship globally, and international cards carry higher interchange plus cross-border fees. Options: accept the cost on card, offer local payment methods through your checkout platform, or offer stablecoin payments for larger international orders, which settle instantly to the merchant wallet on Solana or the XRP Ledger, carry no chargeback mechanism, and avoid the cross-border fee stack. Stablecoin acceptance has its own compliance considerations under California's Digital Financial Assets Law; review them with counsel. For wholesale and retailer orders, ACH settles in 1-3 business days at a flat cost.
Chargebacks and the ratio
Networks monitor dispute ratios starting around 0.9 percent to 1 percent. E-commerce disputes concentrate in fraud, not received, and cancelled recurring. Prevention: a descriptor that matches the brand on the box, delivery confirmation with tracking, pre-dispute alerts so you can refund before a chargeback posts, and a refund policy that is faster than the dispute button. When a dispute arrives, the evidence file is the AVS and CVV results, device data, tracking, the product page as shown at purchase, and any customer communications.
Reconciliation and settlement
Card funds settle in 1-2 business days, ACH in 1-3, stablecoins instantly to the wallet. Flux pushes settlement and fee data one way into QuickBooks, so a brand's finance lead reconciles payouts against orders without a monthly spreadsheet exercise. Interchange-plus pricing shows the actual card cost per order, which is what a DTC brand needs to model contribution margin by channel.
San Francisco e-commerce brands have more payment tooling within a mile than almost anyone. The advantage goes to the ones who configure fraud screening, tokenization and subscription compliance before the first campaign rather than after the first freeze. Confirm the California-specific requirements with your processor and counsel.
Ready to get set up with Flux?
Cards, ACH, and stablecoins in one platform, with volume-based pricing. No setup fees or contracts.
Get Started