The United States is the world's largest card market, but also its most fragmented payment regulatory environment. Visa and Mastercard dominate card network rails; no comparable concentration exists in licensing — money transmission requires a separate licence in each of the 50 states, DC, and US territories, creating a 54-jurisdiction compliance burden that has no equivalent anywhere else. FedNow launched in July 2023 and RTP has been live since 2017, but real-time payment share remains under 5% of transaction volume. Operators entering the US should plan for significant card infrastructure dependence, complex acquiring economics, and a licensing process that is slow and expensive relative to any other major market.
Card Market — The Dominant Rail
Credit card penetration at 85% is among the world's highest. The four-network landscape — Visa, Mastercard, American Express, Discover — means card acceptance requires routing flexibility. Credit card interchange is uncapped in the US — unlike the EU's regulated caps, issuers and networks set credit rates freely, which is the main reason credit MDR runs materially higher than debit. Debit is different: Regulation II (implementing the Durbin Amendment) caps interchange for debit cards issued by banks with $10B+ in assets at $0.21 + 0.05% + a 1¢ fraud-prevention adjustment, and separately requires every debit issuer to enable at least two unaffiliated networks per transaction so the merchant — not the issuer — controls routing (extended to card-not-present transactions in July 2023). Smaller issuers are exempt and can charge 0.5–2.0%. Credit card MDR ranges from 1.5% for basic debit-branded products to 3.5%+ for premium rewards cards — the spread is wider than most markets.
The debit cap is contested, not settled. A North Dakota court vacated Regulation II in August 2025 for exceeding the Fed's statutory cost authority, but stayed the vacatur pending appeal — so the $0.21+0.05%+1¢ cap is unchanged today. A Kentucky court reached the opposite conclusion and upheld it. Both are now on appeal (8th and 6th Circuits), and the Fed's 2023 proposal to cut the cap to roughly $0.144+0.04%+1.3¢ was never finalized. Model both the current rate and a materially lower one.
No-surcharge rules have been legally challenged but remain contractually standard in most merchant agreements. Contactless NFC became mainstream post-COVID — tap-to-pay is now the default at most physical merchants. 3DS2 adoption is growing for card-not-present, though not federally mandated. The EMV liability shift (2015 for POS, 2020 for fuel pumps) has driven chip card deployment to near-universal for physical acceptance.
FedNow and RTP — The Real-Time Rails
The Clearing House launched RTP in November 2017; the Federal Reserve launched FedNow in July 2023. Both operate 24/7 with sub-10 second settlement, and both raised their per-transaction limit to $10M (RTP in February 2025, FedNow in November 2025). FedNow passed 1,800 participating banks and credit unions at its third anniversary in July 2026, including 7 of the 10 largest US banks and reaching over half of US checking/savings accounts; RTP has over 1,000 banks and credit unions live and processed $1.3T in total payment value in 2025 (up from $246B in 2024). Neither has achieved meaningful consumer-facing traction as a standalone payment method.
Zelle — operated by Early Warning Services, owned by a consortium of major US banks — processed over $1.2T across 4.2B transactions in 2025, its second consecutive trillion-dollar year. Zelle is not exclusively an RTP product: it settles over multiple rails depending on the participating institution, historically ACH and the Visa Direct/Mastercard Send push-to-card networks, with RTP added as an available settlement option for some banks (including Bank of America and PNC) since 2021. It functions as a bank-to-bank P2P product rather than an open merchant payment rail. ACH remains the workhorse for B2B, payroll, and recurring billing: $93T+ annually on 35.2B payments in 2025 (Nacha), with same-day ACH available but not instant. For operators, real-time rail access is primarily relevant for disbursement (instant pay-outs to gig workers, insurance claims, earned wage access) rather than consumer checkout.
Digital Wallets and BNPL
Apple Pay and Google Pay dominate tap-to-pay in physical retail — both are pass-through wallets with no stored float, adding a tokenisation layer on top of the underlying card. PayPal and Venmo (PayPal-owned) are stored-value wallets with significant consumer bases; PayPal One Touch is a meaningful checkout conversion driver for e-commerce. Cash App (Block) has strong penetration in underbanked and younger demographics.
BNPL — Affirm, Klarna, Afterpay (Block-owned), and Zip — is embedded at major retail and e-commerce checkouts. The model is merchant-funded: 2–6% merchant fee, 0% consumer interest for on-time payments. BNPL regulation remains unsettled at the US federal level: the CFPB's 2024 interpretive rule classifying BNPL as credit cards under TILA was withdrawn in May 2025, and the Bureau confirmed in June 2025 that it would not issue a revised one. Operators offering BNPL should engage compliance counsel on the current status.
Crypto and Digital Assets
The GENIUS Act, signed July 18, 2025, established the first federal framework for payment stablecoins in the US, requiring reserve holdings in safe assets including US Treasuries, and takes full effect January 18, 2027. Implementation is running behind schedule: the OCC missed the Act's July 18, 2026 statutory deadline for finalizing federally-chartered issuer rules and now targets a final rule by November 2026 (Comptroller Jonathan Gould, Aug 19, 2026), with issuer applications processed from 2027; the FDIC approved its own proposed rule for FDIC-supervised issuers on April 7, 2026. The SEC stated in April 2025 that dollar-backed stablecoins designed for 1:1 parity are not securities, and the CFTC in December 2025 authorized BTC, ETH, and USDC as derivatives margin collateral.
For operators, the immediate commercial opportunity is in B2B settlement and treasury flows. Stripe, Coinbase Commerce, Visa, Mastercard, PayPal, Fiserv, and Western Union have all integrated or announced stablecoin rails in 2025 — USDC-settled merchant payments are a live product category. Consumer crypto checkout remains a niche option; the structural opportunity is cross-border settlement and treasury operations where stablecoin rails reduce correspondent banking friction. Given the OCC's delayed rulemaking, do not assume federally-licensed stablecoin issuance is operational before early 2027.
Regulatory Environment
There is no federal payment institution licence for non-bank operators. The primary requirement is state-by-state Money Transmitter Licences (MTLs) — 54 jurisdictions, each with different capital minimums ($25K–$7M+), application fees, bonding requirements, and processing timelines of 3–18 months per state. Full 50-state coverage takes 12–24 months and costs $2–5M in licensing fees, legal, and capital. FinCEN MSB (Money Services Business) registration is required federally but is not a licence — it does not substitute for state MTLs.
Payment facilitators operating under a licensed acquirer's umbrella avoid MTL requirements but have limited product control and face acquirer-set restrictions. Banking-as-a-Service (BaaS) — fintech operating via a partner bank's charter — is under regulatory pressure following enforcement actions against Evolve Bank & Trust, Blue Ridge Bank, and others in 2023–2024. Note: the CFPB's 2024 rule that would have given it direct supervisory authority over large nonbank digital payment apps was repealed by Congress under the Congressional Review Act, signed into law on May 9, 2025 (P.L. 119-11) — the CFPB does not currently hold this specific authority, though other enforcement tools (UDAAP, EFTA/Regulation E) still apply.
A2A and open banking. The US has no PSD2-equivalent mandate in force. The CFPB finalized a Section 1033 data-access rule in October 2024 that would have required banks to share consumer data with authorized third parties, enabling pay-by-bank flows — but a federal court enjoined it, and the CFPB itself now argues the rule exceeds its authority and is rewriting it (revised proposal received by OIRA on 4 August 2026), including whether banks may charge for access. Treat any US "open banking" claim as unsettled; A2A initiation today runs on bilateral aggregator agreements (Plaid, MX, Finicity), not a regulatory mandate.
Fraud Landscape
Card-not-present (CNP) fraud is the largest fraud category by value — the US has notably higher CNP fraud rates than Europe, partly due to slower 3DS2 mandation. Account takeover via credential stuffing is volume-scalable and industrialised. Zelle-related authorised push payment fraud has become a political issue — Congressional pressure has led to expanded bank reimbursement commitments for scam victims, creating new liability exposure for banks and PSPs on the sending side.
First-party fraud (friendly fraud, chargeback abuse) is estimated at 40–50% of total dispute volume — particularly acute in digital goods, gaming, and subscription categories. Check fraud has resurged despite declining check usage: cheque washing and cheque alteration increased 80%+ in 2022–2023 per FinCEN data. Synthetic identity fraud — constructing fake identities using real SSN components — is sophisticated and growing, particularly for credit products.
Practical Notes for Operators
PSPs. Stripe (developer-first, comprehensive API, best-in-class documentation), Braintree/PayPal (enterprise, strong PayPal wallet conversion), Square (SME and POS-focused), Adyen (enterprise global), Checkout.com (enterprise, strong fraud tooling), Worldpay (legacy enterprise acquirer — now a Global Payments subsidiary since the GTCR/FIS three-way deal completed January 9, 2026, not "Worldpay/FIS"), Fiserv (legacy enterprise acquirer, Clover/Carat). Nium and Payoneer cover cross-border collection and payout — not domestic checkout — for operators paying international sellers or freelancers. For ACH and bank account access: Plaid for account verification, Dwolla for ACH execution — a common fintech stack.
MTL. Do not underestimate the timeline. Budget 12–24 months and $2–5M for full 50-state coverage. Use a licensing agent (Ncontracts, ComplianceSystems, or a specialist law firm) to run parallel applications. Consider launching under a payment facilitator structure first and pursuing MTLs in parallel to reach market faster.
Entity. Delaware C-Corporation is standard for venture-backed and foreign-owned operators. Foreign companies need a US entity for domestic acquiring, banking, and FinCEN MSB registration.
Tax. Sales tax on digital goods varies by state — 45 states plus DC have sales tax; rates and definitions of taxable digital goods differ. No federal digital services tax. Use Stripe Tax, Avalara, or TaxJar for automated compliance.
Currency. USD is fully convertible. No repatriation restrictions. FX risk only applies to cross-border flows.
Language. English primary. Spanish localisation is commercially meaningful — Hispanic consumers represent 18% of the US population and approximately $2.8T in purchasing power. Fully bilingual product is a competitive advantage in markets like California, Texas, and Florida.
