PCI-inherited compliance
Cards never touch your origin. Your business inherits a Level 1 service-provider posture as soon as the first transaction posts — pci merchant services controls roll up to the platform, not your roadmap.
Merchant services
topropay delivers merchant services for business operators of every size — a single business merchant account, multi-acquirer connectivity, online card processing, vault and reconciliation. Mainstream and complex merchants run through the same orchestration layer with one unified API, hundreds of methods and a normalised reporting feed.
The short version
The phrase "merchant services" used to fit on a single business card: a card-acquiring contract, a terminal, maybe a basic reporting CD-ROM at the end of the month. Online commerce stretched that envelope past breaking point. A modern business merchant services contract has to cover card-not-present authorisations, alternative payment methods, recurring billing, refunds, chargebacks, PCI obligations, dispute defence and finance-ready reconciliation. Usually it does so across more than one acquirer, and more than one country.
topropay collapses that surface into one platform. A single business merchant account opens a portfolio of connected acquirers and methods; the routing engine picks the right one per authorisation; the vault and the ledger keep card data and reporting in the same place. The merchant signs one contract, integrates one API and trains one dashboard — but reaches the whole catalogue of providers a multi-region operator actually needs.
The sections below cover the core benefits, how onboarding and operations work in practice, where merchants typically use the platform, the compliance posture sitting behind it, and the questions buyers usually ask before they commit.
Key benefits
Four shifts show up regardless of merchant size — the same ones whether you're routing a few thousand authorisations a month or a few hundred a second.
Cards never touch your origin. Your business inherits a Level 1 service-provider posture as soon as the first transaction posts — pci merchant services controls roll up to the platform, not your roadmap.
One contract opens a portfolio of card networks and local rails. You stop choosing between an acquirer for Europe and a separate one for LATAM — both run through the same merchant services payment processing layer.
Per-transaction routing finds the route most likely to clear at the lowest landed cost. The merchant services acquirer mix you signed up with becomes a competitive matrix instead of a sticker price.
Settlements, refunds, fees and chargebacks across every provider land in a single normalised ledger. Month-end closes from one export rather than a stack of provider files.
How it works
Five stages — apply, provision, integrate, operate, tune — sit on a single rail from day one to optimisation. Most mainstream merchants complete the first four inside a week.
Submit one application covering KYC, KYB, beneficial-ownership and business model. topropay's onboarding team takes it through underwriting at the connected acquirers that match your geographies and method mix — no copy-paste across separate forms per provider.
Approved merchants get a working MID, sandbox credentials and a dashboard login the same week. Connected acquirers are wired up behind the unified API; the routing engine starts with safe defaults you can tune later.
A single unified payments API and SDK cover web, mobile and server-to-server flows. Existing checkouts hit one endpoint; embedded surfaces use hosted fields. There is no per-provider plumbing to maintain.
Every authorisation runs the routing decision in under 200 ms, cascades soft declines and posts to the normalised event stream. Reconciliation rolls into one ledger so finance, ops and engineering all read from the same source of truth.
Routing weights, methods, risk rules and reporting schedules update from the dashboard. Quarterly reviews adjust the policy mix against your actual approval, cost and dispute data — not against a vendor pitch deck.
Platform features
The capabilities that actually move the numbers — for engineering, product, finance, risk and operations alike.
A single REST surface plus SDKs replaces a folder of provider-specific integrations. Cards, wallets and account-to-account move through the same endpoints with normalised events.
A drop-in hosted checkout for fast launch, hosted fields where you need a tighter visual, and a low-level SDK when you control the surface end-to-end.
Per-transaction scoring across BIN, scheme, currency, geography and risk picks the best route on every authorisation. Cascading retries fail soft declines over inside the same request.
Card data lives in our PCI-audited vault. Refunds, retries and recurring billing all run on network-aware tokens — your origin only ever handles a token reference.
Settlements, fees, refunds and chargebacks from every provider normalise into one ledger. CSV, Parquet and signed event feeds export on schedule into your ERP.
Centralised dispute workspace with timeline view per case, evidence templates per scheme and SLA reminders. Win rates feed back into the risk and routing policies.
Industry relevance
Verticals where multi-acquirer routing, a unified vault and one ledger turn the merchant-services question into a configuration choice instead of a procurement project.
topropay onboards licensed and regulated operators only. Regulated verticals are accepted where current licensing is in place in a permitted jurisdiction; grey and black-market niches are out of scope regardless of integration shape.
Trust & compliance
A single audited environment carries the controls so each merchant doesn't have to re-build them from scratch. What follows is what the platform actually keeps current.
Service-provider posture, validated annually on-site and inherited by every connected merchant; quarterly ASV scans run on the platform's cycle.
Selective 3D Secure on the authorisation path. PSD2-compliant across Europe without forcing every shopper through a step-up challenge.
Sanctions screening, transaction monitoring and dispute analytics, with named risk owners and named SLAs. No black-box automation on margin calls.
Redundant acquiring zones, regional data residency options and automatic failover keep authorisations online through outages and seasonal peaks.
Interchange and scheme fees pass through; the platform fee is a single visible line. No hidden mark-ups buried in the reconciliation file.
Regional data-residency options for merchants who need them; signed event logs are available from the dashboard for audit and regulator requests.
Ready to start
A 30-minute review covers the geographies and methods your business needs, the routing policies that fit your traffic profile, the underwriting timeline for your vertical and sandbox access for engineering — before any commercial commitment.
Frequently asked
The questions buyers actually ask before signing — setup, online flows, acquirer model, risk, commercials and geography.
To start merchant services with topropay you submit one application — KYC, KYB, beneficial-ownership and business-model information — through the merchant portal. Our onboarding team maps that file onto the connected acquirers that fit your geographies and method mix, runs underwriting in parallel, and provisions a working MID the same week for most mainstream businesses. There is no per-provider re-application to manage.
A business merchant account on the platform includes a live MID with one or more connected acquirers, a dashboard login, sandbox credentials, vault access for tokenised card data, the unified API for authorisations and a normalised reporting feed for finance. The MID is operated under topropay's sub-merchant model so you inherit our regulatory and PCI standing instead of carrying it directly.
Both. The merchant services small business shape — single-MID, single-region, a handful of methods — onboards faster because there is less to configure, and the platform scales up from there to merchants running tens of millions of authorisations a month. Same API, same dashboard, same reconciliation feed regardless of size.
Online merchant services authorise card-not-present transactions — web checkouts, in-app, recurring billing and subscriptions — through hosted pages or APIs, and require additional controls such as 3DS2, vault tokenisation and fraud screening that in-person POS does not. topropay is a pure online merchant services and merchant card services platform: there is no countertop terminal, but the unified API supports every card-not-present flow merchants actually need.
Yes. 'e merchant services' and 'merchant services online' are alternate phrasings for the same category — accepting payments over the internet rather than in person — and that is what topropay delivers end-to-end: authorisations, vault, routing, settlement and reporting all happen through the orchestration layer, with no in-person terminal stack.
Strictly speaking, topropay is not a single acquirer; it is the orchestration layer that connects you to many of them at once. When merchants ask about a merchant services acquirer relationship, what they usually want is the operational shape of one — one MID story, one settlement, one ledger — and that is exactly what the platform delivers, while the underlying acquirer mix is chosen per transaction by the routing engine.
Merchant services payment processing on topropay starts with an authorisation request hitting the unified API. The routing engine scores the available acquirers and methods against the transaction context, picks the best route, sends the auth, captures the response (cascading on soft declines if needed), tokenises the card into the vault and emits normalised events to your systems. Settlement and reconciliation happen automatically as the connected providers report back.
topropay supports merchant services for high risk verticals where the underlying business is legitimate, well-documented and operating with the relevant licences — sectors such as travel, ticketing, supplements, regulated gaming and certain digital goods often qualify. We do not work with grey or black-market niches regardless of integration shape. Underwriting and the routing policy mix are tailored per merchant; there is no marketing claim of universal approval.
pci merchant services on the platform run under topropay's PCI DSS Level 1 service-provider posture. Card data is captured directly into the vault and never touches your origin. Merchants integrating via the hosted checkout or hosted fields fall into the lowest-effort SAQ scope; merchants on direct API integrations get clear guidance on the residual obligations they keep. The annual on-site assessment and quarterly ASV scans run on our cycle.
topropay focuses on payments orchestration rather than direct lending, but merchant financing introductions are available through partner programmes for merchants with steady transaction volume on the platform. Eligibility is driven by your authorisation history visible in the dashboard, which makes underwriting straightforward for the partners we work with. We do not bundle financing into the core merchant services for business contract — it stays an opt-in commercial conversation.
The business merchant services contract is one master agreement with a transparent fee schedule — interchange and scheme fees pass through on the underlying providers, the platform fee is a separate, visible line. The agreement covers data processing, PCI obligations on both sides, dispute and chargeback procedures, and termination terms. We make a point of avoiding multi-year minimums on standard mainstream packages.
Merchant services online from topropay cover Europe, the UK, APAC and LATAM as primary regions, with merchant services for business operators in other markets onboarded through partner relationships. The dashboard exposes the connected acquirers and methods available per region so you can match the platform's footprint to your expansion plan before signing.