Guides
What is a PayFac? Payment facilitators and embedded payments explained
A payment facilitator (PayFac) is a company registered with Visa and Mastercard through a sponsoring acquirer that signs up other businesses as sub-merchants under its own master merchant account. The PayFac onboards and underwrites those sub-merchants, collects their card payments and pays them out, and carries liability for their chargebacks and fraud. Software platforms use the model to embed payments directly into their product.
At a glance
| Sub-merchant volume limit (Visa Core Rules, April 2026) | A sub-merchant above USD 1 million in annual Visa volume generally needs a direct agreement with the acquirer |
|---|---|
| Scheme registration | Through a sponsoring acquirer with Visa and Mastercard; registration fees typically $5,000 to $15,000 (industry estimates) |
| Time to become a PayFac | Typically 12 to 18 months from planning to the first live transaction |
| Upfront investment | Typically $500,000 to $2 million in technology plus $1 million or more in reserves (industry estimates) |
| PCI DSS | Required when card data is handled; Level 1 for service providers above 300,000 card transactions a year |
| EU funds handling | Holding sub-merchant funds generally needs a payment or e-money licence under PSD2 |
What is a payment facilitator (PayFac)?
A payment facilitator is a merchant of a special kind: it holds one master merchant account with an acquirer and lets many smaller businesses, called sub-merchants or sponsored merchants, accept cards under it. Visa and Mastercard both define the role in their rules, and the PayFac must be registered with each scheme by its sponsoring acquirer.
The model exists because opening a traditional merchant account for a small business takes days or weeks of underwriting. A PayFac takes over that work, so a hairdresser signing up to a booking app can accept card payments within minutes. In exchange the PayFac carries the risk: if a sub-merchant disappears after a wave of chargebacks, the PayFac pays.
How does the PayFac model work?
The acquirer underwrites the PayFac once and lets it underwrite its own sub-merchants within agreed limits. Every payment runs through the PayFac's master account, the acquirer settles to the PayFac or directly to the sub-merchant, and the PayFac keeps the difference between what it charges and what it pays the acquirer.
Scheme rules set limits on the model. Under the Visa Core Rules, a sub-merchant that exceeds USD 1 million in annual Visa volume generally needs its own direct merchant agreement with the acquirer, although the PayFac may continue to provide services and settlement to it.
- Sub-merchant signs up The business registers inside the software platform and passes identity and business verification.
- PayFac underwrites The PayFac screens the sub-merchant against its risk policy and the acquirer's rules and sets limits.
- Payments run on the master account Card payments are authorised and cleared under the PayFac's merchant account with the sponsoring acquirer.
- Funds are settled The acquirer settles to the PayFac or to the sub-merchant, minus fees and any reserve.
PayFac vs ISO vs PayFac-as-a-service vs marketplace vs orchestrator: what is the difference?
These models are often confused because all of them help a business accept payments without dealing with an acquirer directly. The difference lies in who signs the merchant contract, who underwrites, who carries chargeback liability and who touches the funds.
| Model | Who signs the merchant | Liability for sub-merchant losses | Touches funds | Time to launch | Examples |
|---|---|---|---|---|---|
| Registered PayFac | The PayFac, under its master account | The PayFac | Yes, unless the acquirer settles directly | 12 to 18 months | Large SaaS and POS platforms |
| ISO (independent sales organisation) | The acquirer; the ISO resells | Mostly the acquirer, sometimes shared | No | Weeks | Merchant-account resellers |
| PayFac-as-a-service | A licensed provider, branded as the platform | Mostly the provider; often shared | No; the provider holds funds | Weeks to a few months | Stripe Connect, Adyen for Platforms, Finix |
| Marketplace | A licensed provider or the marketplace itself | The marketplace and its provider | Through a licensed provider | Weeks to months | Multi-seller retail and service platforms |
| Payment orchestrator | The merchant contracts each PSP directly | The merchant and its PSPs | No | Weeks | Technical layers above several PSPs |
What are embedded payments?
Embedded payments means a software platform offers payment acceptance inside its own product, so its customers do not have to sign up with a separate payment provider. Booking tools, practice management software, e-commerce builders and invoicing apps all use it: the customer activates payments in settings and the platform earns a share of every transaction.
Becoming a registered PayFac is only one way to embed payments. Most platforms start with PayFac-as-a-service, where a licensed provider handles registration, underwriting, fund holding and payouts while the platform controls the onboarding flow and pricing. The trade-off is margin: the provider keeps part of the spread that a registered PayFac would keep itself.
What does it take to become a PayFac?
Registration starts with a sponsoring acquirer willing to take on the platform's risk. The acquirer reviews the business plan, financials, risk policies and technology, then registers the PayFac with Visa and Mastercard. The PayFac must prove it can monitor sub-merchants continuously, not only at onboarding.
In the European Economic Area there is an extra layer. Receiving and passing on sub-merchant funds is a payment service under PSD2, so a European PayFac either holds a payment or e-money licence or uses a structure where the acquirer settles directly to sub-merchants.
- A sponsoring acquirer and registration with each card scheme
- Sub-merchant onboarding with KYC, KYB and beneficial owner checks
- Underwriting policy, transaction monitoring and prohibited-business screening
- Chargeback and fraud liability, backed by reserves the acquirer sets
- PCI DSS compliance, at Level 1 above 300,000 card transactions a year
- Reconciliation, split settlement and sub-merchant reporting
- A payment or e-money licence in the EEA if the PayFac holds funds
How much does it cost to become a PayFac and how long does it take?
Industry estimates put the path from planning to the first live transaction at 12 to 18 months. Most of the cost is people and systems for risk, compliance and reconciliation, plus capital the acquirer asks you to hold against losses. Scheme registration itself is a small part of the bill.
The figures below are typical ranges cited by PayFac consultants and providers; your acquirer's requirements and your risk profile decide the actual numbers.
| Item | Typical cost | Timing |
|---|---|---|
| Scheme registration fees | $5,000 to $15,000 | At registration |
| Legal and compliance advisory | $50,000 to $150,000 | First 3 to 6 months |
| Technology build | $500,000 to $2,000,000 or more | 6 to 12 months |
| Reserves held with the acquirer | $1,000,000 or more | Before going live |
| Ongoing compliance programme | $100,000 to $300,000 a year | Every year |
When should a SaaS platform embed payments, and which route fits?
Embedding payments pays off when your customers already process money through your product and the payment margin is meaningful. A platform processing €50 million a year that keeps 0.5% earns €250,000; at that size PayFac-as-a-service is usually the better start, because a registered PayFac costs more than that before the first payment.
A full PayFac registration starts to make sense from several hundred million in annual volume, with an in-house risk team and a sub-merchant base whose risk you understand. Below that, choose PayFac-as-a-service for speed, or an orchestration layer if your customers want to bring their own payment provider contracts.
How to add embedded payments through OrsunPay
OrsunPay is not a PayFac and does not hold funds. It is a technical layer that connects a platform or its customers to their own accounts at PSPs, including PayFac-as-a-service providers, through one API, with routing, payouts through the provider's API, webhooks and reporting. The registered PSP remains the merchant-facing licensed party.
Frequently asked questions
What is a PayFac in simple terms?
A PayFac is a company that lets other businesses accept card payments under its own merchant account. It handles signing them up, checking them and paying them out, and it is liable if they cause losses.
What is the difference between a PayFac and an ISO?
An ISO resells an acquirer's merchant accounts; each merchant signs with the acquirer, and the ISO does not handle funds. A PayFac signs the sub-merchants itself under its master account and takes on underwriting and liability.
What is PayFac-as-a-service?
It is a model where a licensed provider such as Stripe Connect, Adyen for Platforms or Finix acts as the registered facilitator behind your brand. You control onboarding and pricing, while the provider handles registration, risk, funds and payouts.
What are embedded payments?
Embedded payments are payment features built into a software product, so its users accept payments without signing up separately with a payment provider. The platform earns a share of each transaction, either as a registered PayFac or through PayFac-as-a-service.
Does a PayFac need a licence in Europe?
If the PayFac receives and holds sub-merchant funds, it generally needs a payment institution or e-money licence under PSD2. Some structures avoid this by having the acquirer settle directly to sub-merchants.
Which companies are payment facilitators?
Well-known examples include Square, PayPal for small merchants and Stripe, plus many vertical SaaS platforms that registered themselves. Providers such as Stripe Connect, Adyen for Platforms and Finix also let other platforms operate under their facilitator registration.