Payment processing businesses face a regulatory gauntlet that makes or breaks success—get licensing and compliance right from day one, or face fines, account freezes, and worse. The barriers to entry are real, but they're navigable with the correct roadmap. Here's what you need to know to launch legally and position your business for growth.
Federal Money Transmitter License
Operating as a payment processor almost certainly requires a federal money transmitter license (MTL). The Financial Crimes Enforcement Network (FinCEN) requires registration if you move money on behalf of customers, even if a third-party processor does the heavy lifting.
Registration costs nothing and takes about 15 minutes online, but non-compliance carries civil penalties up to $25,000 per violation. You'll need your EIN, business address, ownership structure, and officers' information. Update FinCEN every two years or face delisting.
The catch: FinCEN registration is baseline. Individual state licenses are where real friction lives.
State Money Transmitter Licenses
Each state sets its own rules. New York's BitLicense is notoriously strict ($5,000+ application fees, months-long approval). Texas is friendlier. Some states exempt certain transaction types; others don't.
Expect to budget $2,000–$15,000 per state license and 2–6 months for approval. You'll need:
- Proof of net worth (often $100,000–$500,000 minimum depending on state)
- Surety bonds (typically $25,000–$500,000 depending on transaction volume and state)
- Detailed business plans showing anti-money-laundering (AML) controls
- Background checks on all principals and significant shareholders
- Proof of office location and compliance infrastructure
Start with your home state, then expand to high-volume markets. Delaware and Wyoming are business-friendly for incorporation, but licensing still happens where you operate.
Anti-Money Laundering (AML) and Know Your Customer (KYC) Programs
Regulators won't issue a license without a documented AML/KYC program. This isn't optional window dressing—it's operational backbone.
Your program must include customer identification procedures, suspicious activity monitoring, and reporting. You need a designated AML compliance officer (can be you initially, but must be a named individual). Document everything.
Budget for AML software: $500–$5,000+ monthly depending on transaction volume and vendor. Solutions like Activ or Complyadvantage integrate customer screening, transaction monitoring, and reporting into a single dashboard.
Bank Relationships and Settlement Accounts
Don't assume any bank will take you. Payment processors are high-risk by default.
Work with banks that specialize in fintech or payment services (Customers Bank, Comerica, Synovus). Expect higher fees, reserve requirements (5–10% of monthly processing volume held for 6 months), and scrutiny. Banks will request your AML program, compliance certifications, and transaction projections.
You'll need multiple accounts—one for settlement, possibly one for customer funds held in trust. Some states require segregated accounts; confirm yours.
PCI-DSS Compliance
If you touch cardholder data, PCI-DSS Level compliance is mandatory. Most payment processors outsource this to Level 1 processors (Stripe, Square, PayPal); if you're building proprietary infrastructure, you're liable for Level 1 compliance, which means annual audits ($10,000–$50,000+) and continuous monitoring.
Even if you're reselling third-party processing, document that in writing and maintain proof of your processor's certifications.
Contracts and Disclosure
Document your relationship with customers in writing. Include:
- Fees and pricing (transaction rates, setup charges, reserve holds)
- Data security and privacy policies
- Termination clauses and wind-down procedures
- Dispute resolution processes
State laws increasingly require clear, upfront disclosure of all fees. Vague language invites regulatory attention and customer complaints.
Building Visibility and Finding Customers
Launching compliant is expensive and slow. Once you're licensed and operational, you need customers. Listing your payment processing services on Mercoly connects you with business owners actively seeking reliable processors, helping you win qualified leads and scale faster.
Frequently Asked Questions
Q: Can I start a payment processor without state licenses, just using FinCEN registration? No. FinCEN registration is federal baseline, but you must obtain state licenses in every state where you operate or serve customers. Operating unlicensed is a felony.
Q: How long does it really take to get licensed? Plan for 4–8 months for your first state if you're prepared. Each additional state typically adds 2–4 months. New York and California move slower; Texas and Florida faster.
Q: Do I need a dedicated compliance officer from day one? Not legally, but you must designate one (can be yourself). Once you're processing significant volume, hire a dedicated person—compliance failures cost more than salaries.
Start your licensing process today and list your services on Mercoly to accelerate customer acquisition while you build compliance infrastructure.