What is an issuing bank? A guide for merchants

An issuing bank, or card issuer, is the bank or credit union that gave your customer their credit or debit card. When someone taps a card at your counter, the issuing bank is the one deciding whether the sale goes through. It also bills the cardholder, collects interchange on the sale through the network, and opens the chargeback when a customer disputes a charge. You'll never sign a contract with it and you'll rarely speak to it, but it shapes your approval rates, part of your fees, and every dispute you handle.

This guide covers how the issuer differs from the acquiring bank, what it does in the few seconds of an authorization, how it handles fraud and disputes, and what that means for the way you take cards. Network rules cited are current as of October 2026.

What is an issuing bank?

It's the cardholder's bank. The card says Visa or Mastercard, but the name of the bank or credit union behind it is usually printed on it too, and that institution is the issuer. It opened the account, set the credit limit or holds the deposit balance, and answers to the cardholder for every charge.

In a card sale, the issuer's jobs are:

• Approving or declining each authorization request.
• Setting aside the approved amount, known as the authorization hold. Per Visa, each successful authorization typically reduces the amount available to the cardholder.
• Paying for approved sales at settlement, then billing the cardholder or debiting their account.
• Receiving interchange. Mastercard says its interchange rates are generally paid by acquirers to card issuers on purchase transactions.
• Handling the cardholder's fraud reports and disputes.

Issuing bank vs acquiring bank: what's the difference?

The issuer works for the cardholder. The acquirer works for you. The acquiring bank approves your merchant account, takes in your sales, and pays you, usually through a processor. The card network sits between the two and sets the rules they both follow. Our guide to card networks explains what they do.

You never pay interchange to the issuer directly. Visa's merchant page says merchants pay a "merchant discount" to their own financial institution, typically calculated as a percentage per transaction. The acquirer carries risk too: the OCC's handbook for bank examiners says the acquiring bank relies on the merchant's creditworthiness and calls chargeback credit risk a significant risk to its earnings and capital (OCC).

Our guide to what a payment processor is maps every party in a card sale, including the gateway and the processor that sit on your side.

What does the issuing bank do during an authorization?

It makes the decision. Your terminal, gateway, processor, and the card network all carry messages; the issuer is the only one deciding. Here's a $180 sale at a hardware store in Atlanta:

1. The customer dips a chip card, and the terminal sends an authorization request to the processor.
2. The processor routes it through the card network to the issuing bank.
3. The issuer checks that the account is open and can cover $180, and that the chip's security code is genuine. EMVCo explains that chip technology generates a one-time security code, called a cryptogram, for each transaction, which lets the issuer and the terminal authenticate the card.
4. The issuer runs the sale through its fraud checks and decides.
5. If it approves, it holds $180 of the customer's available credit or balance and sends an approval back the same way.

All of that takes a few seconds. The money moves later, when the store's batch clears and settles; our guide to how long a credit card payment takes to process follows that part.

When the answer is no, the issuer picks a response code. Visa's rules require issuers to send descriptive response codes that identify the reason for a decline, grouped into four categories. Some codes still say very little. Visa lists response code 05 as "Do not honor", which tells you the issuer said no and nothing about why. Our guide to the do not honor decline explains how to handle it at the counter and online.

How does an issuing bank decide on fraud?

With its own models and rules, plus whatever the network gives it. Visa, for example, offers issuers Visa Advanced Authorization and Visa Risk Manager: the first gives each transaction a real-time risk score during authorization, and the second lets issuers combine that score with other transaction details to write their own decline rules. The issuer decides what to do with the score, which is why the same card can be approved at one store and declined at the next.

Fraud is also where the issuer's interests and yours meet. In the Federal Reserve's report on 2023 debit card transactions at issuers with $10 billion or more in assets, merchants absorbed 65.1% of card-not-present fraud losses, and across all fraud types the merchant share reached 49.9% in 2023, up from 38.3% in 2011 (Federal Reserve).

Who pays depends on how the card was taken:

• Counterfeit cards at the counter. Visa has made counterfeit fraud the responsibility of the party, either the merchant or the issuer, that has not implemented chip technology, a rule in place since October 1, 2015. Read the chip, and counterfeit losses stay with the issuer.
• Online and phone sales. When a cardholder says they didn't make the purchase, the issuer can file a fraud dispute and your acquirer takes the money back from you. Our guide to ecommerce fraud prevention covers the checks that help.
• The cardholder. Regulation Z caps a credit cardholder's liability for unauthorized use at the lesser of $50 or the amount charged before the issuer is notified, and Visa's Zero Liability policy covers cardholders for unauthorized charges, with exceptions for certain commercial and anonymous prepaid cards.

Put those together and the issuer's incentives are plain. The cardholder is protected either way, so the real question for the issuer is whether it can pass a loss back to a merchant. When it can't, it eats the loss, and that gives it every reason to decline a sale that looks wrong.

What role does the issuing bank play in chargebacks?

It starts them, and it decides whether to keep pushing after you respond. Visa describes a dispute as the reversal of a transaction's value by the issuer to the acquirer. You'll rarely deal with the issuer directly: your evidence goes to your acquiring bank, which passes it to the issuing bank.

For credit cards, federal law shapes what the issuer owes its customer. A cardholder can send the issuer a written billing-error notice within 60 days after the first statement that shows the error, and the issuer has to investigate. That's the consumer side. The network rules then decide whether the issuer can take the money back from you.

Two rules help you here. Visa reminds issuers that they must not pursue disputes unless the cardholder has suffered a financial loss, and that the onus is on the issuer to check whether the cardholder already got a credit from the merchant. So if you refunded first, say so and attach the proof. And if the issuer still disagrees after your response, Mastercard's documentation describes how it can continue the dispute through pre-arbitration and arbitration. Our guide on how a chargeback works walks through every stage.

Why does the issuing bank matter to a merchant?

Because it controls three things you care about: whether sales get approved, part of what you pay, and how disputes end.

Approval rates

You can't make an issuer say yes, but you can give it better information. Dip or tap instead of keying, so the issuer gets a fresh cryptogram. Online, send the billing address and security code; Visa describes address verification as a way for card-absent merchants to check the cardholder's billing address with the card issuer. Use a business name on customer statements that people recognize. Clearo's POS terminals read chip, tap, and swipe, and our online payments include AVS, CVV checks, and velocity rules.

Debit card costs

The issuer's size changes what a debit sale costs you. The Federal Reserve's Regulation II caps debit interchange for issuers that, with their affiliates, have $10 billion or more in assets, at 21 cents plus 0.05%, plus 1 cent for eligible issuers (Federal Reserve). Smaller banks and credit unions are exempt. Visa's schedule effective April 18, 2026 lists regulated debit at 0.05% + $0.21 and exempt debit, dipped or tapped at a retail sale, at 0.80% + $0.15 (Visa).

Run a $50 sale through both:

• Regulated issuer: $50 × 0.05% = $0.025, plus $0.21, for about 24 cents (25 cents with the fraud-prevention cent).
• Exempt issuer: $50 × 0.80% = $0.40, plus $0.15, for 55 cents.

Same network logo, same $50, more than twice the interchange. The only difference is the size of the bank that issued the card. Our guide to debit card processing fees has the full comparison.

Disputes and declines

Every chargeback starts with an issuer, and so do most declines. When a card is declined, don't force the sale with an offline approval or a code the issuer didn't give you; Visa has a Declined Authorization dispute condition for sales completed after a decline. Ask for another card, or have the customer call the number on the back of theirs.

How should you work with issuers you never talk to?

Through your processor, and through clean data. A few habits that pay off:

1. Read the chip or take a tap on every in-person sale you can.
2. Send complete data on online and phone sales: billing address, security code, and an order number.
3. Refund promptly when a customer has a fair complaint, before it becomes a dispute.
4. Answer chargebacks with evidence that matches the reason code, through your acquirer, on time.
5. Track declines by response code each month, and call your processor when one code starts climbing.
6. Tell your processor before an unusually large sale, so a review on your side doesn't stack on top of the issuer's.

Picture an online furniture store in Minneapolis whose approval rate dips one month. The decline report shows most of the new declines are address mismatches, spread across many banks. The cause turns out to be a checkout change that copied the shipping address into the billing fields. Fixing that form does more than any call to an issuer could.

Your next step

You can't pick your customers' banks, but you can control the data you send them and the price you pay on top of their interchange. Send a recent statement for a free statement review and we'll show what you pay to issuers, what goes to the networks, and what your processor adds. Clearo's payment processing runs on interchange-plus pricing with chargeback management tools and a dedicated rep, and you can contact us if declines or disputes are piling up.