Payment Processing in California: A Statewide Guide for Business Owners

Payment processing in California works on the same card-network rails as everywhere else in the country, but the state adds its own layer of consumer-protection and industry rules that change what you can advertise, how you can bill, and which businesses can accept cards at all. This guide covers the mechanics first, then the California-specific rules, then what varies by region and industry.

The basic mechanics, briefly

Every card transaction passes through your processor to the card network (Visa, Mastercard, Discover, American Express) and on to the customer's issuing bank. The issuer charges interchange, the network charges assessments, and your processor adds a markup. Interchange is set by the networks and depends on the card type (debit, rewards credit, corporate), how the card was presented (chip, tap, keyed, online), and your merchant category code.

Pricing models differ in how they show you those costs. Interchange-plus passes the network costs through at cost with a separate markup. Flat-rate blends everything into one percentage. Tiered pricing sorts sales into buckets the processor defines. For most established California businesses, interchange-plus is the most transparent option; Flux's pass-through pricing is built on that model.

Settlement timing you can plan around

• Card payments: funds typically arrive in 1-2 business days after the batch closes.
• ACH payments: 1-3 business days, and returns can arrive after settlement.
• Stablecoin payments: settle instantly to the merchant's wallet, on Solana or the XRP Ledger.

Bank holidays and weekend batches push card and ACH timing out, so a Friday evening batch in Fresno lands the same way it does in San Diego: early the following week.

California rules that touch checkout

A few state laws come up repeatedly. SB 478, effective July 2024, requires advertised prices to include mandatory fees, which affects restaurants adding service charges, event sellers, and any merchant thinking about a card surcharge. The Automatic Renewal Law requires clear consent and an easy cancellation path for subscriptions, which matters for gyms, software, and box-of-the-month sellers using recurring billing. CCPA and CPRA govern consumer data, including how you store and share payment-related information, so tokenizing card data rather than holding it yourself reduces both PCI and privacy exposure.

Industry-specific rules stack on top. CSLB limits the deposit a home-improvement contractor can collect before work begins. The Digital Financial Assets Law sets a licensing framework for digital-asset businesses operating in the state. AB 45 governs hemp-derived CBD products. Firearms dealers run every transfer through DROS. Flavored-vape and flavored-tobacco restrictions limit what tobacco retailers can sell. None of this is legal advice: confirm the current version of each rule with your processor and counsel.

Cannabis is the exception everyone asks about

Cannabis is legal under California law and remains restricted federally, and the card networks do not permit cannabis transactions on their rails. Dispensaries and delivery services therefore cannot run Visa or Mastercard, and any "workaround" that codes cannabis as something else is a violation that ends in termination and a MATCH listing. Options are limited to cash, certain ACH and account-to-account arrangements, and other non-card rails. Flux does not process cannabis; hemp and CBD businesses operating under AB 45 are a separate category with their own underwriting.

Which California businesses are treated as high-risk

High-risk is a category label, not an accusation. Processors apply it when chargebacks, delayed delivery, regulatory attention, or large tickets are common in an industry. In California that includes nutraceuticals, adult content, tobacco and vape, firearms and ammunition, travel, ticket resale, debt settlement, telemedicine, subscription products, and much of the coaching and online education market. Terms for these accounts usually include a rolling reserve, a volume cap, and closer monitoring of the chargeback ratio, which the networks watch around the 0.9%-1% mark. The industries Flux serves page lists the categories with dedicated underwriting.

How the regions differ

The Bay Area and Silicon Valley skew toward software, subscriptions, and B2B invoicing, where ACH and level 2 and 3 card data matter. Los Angeles carries apparel, entertainment vendors, and a huge card-not-present ecommerce base, which means fraud screening and dispute management. San Diego and the border cities see international card volume from Mexico. The Central Valley runs on agriculture, trucking, and seasonal cash flow, where settlement speed and ACH for large invoices count. The Inland Empire is logistics and home-based ecommerce. The desert and the coast add tourism and seasonal peaks.

A checklist before you sign anywhere in the state

1. Get interchange-plus pricing with the markup shown as its own line.
2. Confirm settlement timing for each payment type in writing.
3. Ask whether your category has a reserve, and when it will be reviewed.
4. Check for equipment leases, early termination fees, and auto-renewal terms.
5. Make sure your advertised pricing, subscription flow, and privacy notices match California's rules.

California is a large enough market that most processors will say yes to most businesses. The useful work is in reading the terms, matching them to your region and category, and making sure the rules that apply to your storefront or checkout page are the ones you have actually built for.