Choosing a payment service provider: 9 key questions to ask

For merchants in specialist categories—CBD, online trading, dating services, adult physical goods—choosing a payment service provider (PSP) is rarely as simple as comparing rate cards. Mainstream acquirers routinely decline or underserve these categories, so the selection process needs to start with provider appetite, not provider price.

This guide addresses established merchants operating in the UK and EEA who need a PSP that understands their category and supports their transaction volume. The 9 questions below cover the areas where specialist-category merchants most often hit problems after onboarding: market specialisation, payment method coverage, risk controls, fees, and regulatory alignment.

Before choosing a payment service provider, define your own needs

People tend to think more information is better when choosing a PSP. That's wrong. Too much information delays decisions and obscures what actually matters. Start with a short internal checklist:

• Transaction volume and growth: Current monthly volume, 12-month projection, and expansion plans into new markets or product categories.
• Target markets: Where your customers live and which currencies you process.
• Payment methods: Which methods your customers actually use, not which methods sound impressive.
• Category-specific requirements: For specialist categories, map your MCC against acquirer appetite before approaching any provider.
• Current pain points: Approval rates, chargeback exposure, settlement delays, or anything your existing setup gets wrong.

This exercise separates the critical requirements from the nice-to-haves. Decision-makers regularly choose a PSP that ticks every nice-to-have box and fails on the critical ones.

Key questions for choosing a payment service provider

1. What markets does the provider specialise in?

For specialist-category merchants, market specialisation matters more than any other selection criterion. CBD, online trading, dating, and adult physical goods all have specific MCC requirements, scheme rules, and chargeback profiles that generalist acquirers either don't understand or actively avoid. A provider that processes high-volume retail card payments at scale won't automatically perform on a CBD or dating merchant account.

Ask the provider to share:

• Approval ratios by country: For each of your top processing geographies.
• MCC-specific approval rates: For your merchant category code, not category-blended averages.
• Chargeback rates in your category: Average dispute and fraud rates across the provider's portfolio in the same category.
• Length of time serving your category: How long the provider has actively underwritten your category, and the size of their current portfolio.

For UK and EEA merchants, also confirm the provider holds the correct regulatory authorisation to acquire in the UK and operate in your target EEA markets, not just vague "global coverage" claims.

Providers that can't share category-specific metrics aren't worth the time.

2. What payment methods and solutions are supported?

Payment method coverage sounds like a quantity question. It's not. The right answer is the methods your customers actually use to pay, not the longest possible menu.

For UK and EEA merchants, expect a provider to support:

• Major card schemes: Visa and Mastercard at minimum and any regionally relevant schemes depending on your markets.
• SEPA payments: Direct debit and credit transfer for EEA-domiciled customers.
• Open banking: Account-to-account payments via PSD2-regulated open banking flows, increasingly used for high-value transactions and recurring billing.
• Wallets: Apple Pay and Google Pay for mobile conversion; PayPal where your category supports it.

Beyond the method list, confirm scheme acceptance for your category specifically. Visa and Mastercard maintain category-level rules that determine whether a provider can register your business on the scheme. Without that registration, the method list is irrelevant.

Ignore the "300+ payment methods" sales pitch. The right provider supports the methods your customers actually use in your actual markets, and registers you correctly with the schemes that govern them.

3. What checkout customisation is available?

Checkout flexibility determines how closely your payment experience can match the rest of your customer journey. Generic, off-the-shelf checkout pages introduce friction that costs conversion, particularly for established merchants where brand consistency is part of the value proposition.

Three questions matter:

• Hosted vs integrated: Hosted checkout is faster and shifts most PCI DSS scope to the provider but limits design control. API integration gives full control but needs development resource. Ask whether the provider offers a hybrid (e.g., hosted fields embedded in your page).
• Mobile optimisation: A checkout that breaks on mobile loses the sale. Confirm responsive checkout out of the box, and Apple Pay and Google Pay as first-class options.
• Strong Customer Authentication (SCA): UK and EEA checkout flows must support SCA under PSD2 and current 3DS2 protocols. Confirm the provider handles exemption logic for low-value, trusted beneficiary, and transaction risk analysis flows, and ask them to demonstrate authentication conversion rates against your category benchmarks.

Whatever customisation level you choose, understand the development resource required to maintain it. A highly customisable platform that demands specialist developers you don't have is more expensive than a hosted solution that ships in a week.

4. What is the onboarding process like?

Onboarding is where the gap between sales-stage promises and operational reality shows up. For specialist categories, expect longer timelines than mainstream merchant onboarding because enhanced due diligence, scheme registration, and category-specific underwriting all add time. Ask each provider for category-specific timelines, not generic ones.

Get a written onboarding roadmap covering:

• Timelines: Time from signed contract to first live transaction, broken into underwriting, integration, and scheme registration phases. Generalist providers commonly quote 1–2 weeks; specialist-category onboarding more typically runs 4–8 weeks due to enhanced due diligence and scheme registration. These are typical ranges, not fixed industry standards.
• Documentation requirements: UK and EEA onboarding requires company incorporation papers, beneficial ownership disclosure, processing history, and director ID with proof of address. Specialist categories add category-specific evidence (e.g., lab test reports for CBD). Get the full list upfront; partial documentation extends onboarding by weeks.
• Integration, training, and handover: Which integration resource the provider assigns, whether you get developer documentation and sandbox access before signing, and whether you get a named onboarding manager through go-live who then hands over to ongoing account management.

The first 90 days post go-live are where most setup problems surface: settlement issues, declined transactions, dispute handling gaps. Confirm what level of support you get during this stabilisation period, not just during integration.

5. What level of support can you expect?

Support quality only matters when something breaks. When it does, it's the only thing that matters. A great payment system without responsive support is worse than a mediocre system with strong support.

Get specifics on the following:

• Availability: Confirm the provider covers UK and EEA business hours through phone, email, and ticketing, not just headquarters time zone with email-only contact. Phone access matters most when transactions stop processing.
• Dedicated account management: Whether the provider assigns you a named account manager who knows your business or rotates you through a shared support pool.
• Response and escalation: Guaranteed response times by issue severity (critical outages should commit to minutes, not hours), clear escalation paths when first-line support can't resolve, and visibility into open issues through a portal or dashboard.

Treat support quality as a hard requirement, not a soft preference. Switching providers later because support fails is expensive, disruptive, and damages customer trust.

6. What risk management tools does the provider offer?

Specialist-category merchants typically face higher chargeback exposure than mainstream retailers. Crossing scheme thresholds means fines, enrolment in remediation programmes, and in worst cases loss of your merchant account.

Ask each provider to walk through:

• Pre-authorisation fraud screening: Rules engines, device fingerprinting, velocity checks, and machine-learning models that screen before the transaction reaches the issuer. Ask about false-positive rates, since overly aggressive controls reject good customers and cost more than the fraud they prevent.
• Scheme monitoring: Whether the provider monitors your performance against Visa Acquirer Monitoring Programme (VAMP) and Mastercard Excessive Chargeback Programme thresholds in real time.
• Chargeback management workflow: Whether the provider offers pre-dispute alerts (e.g., Ethoca, Verifi), representment support with evidence templates by reason code, and consolidated chargeback reporting. For specialist categories, integrated alert services often pay for themselves through avoided chargebacks and fees.

Ask for case studies of specialist-category merchants the provider has kept inside scheme thresholds. Walk away from providers who can't name examples in your category.

» Need stronger chargeback controls? Get payment risk management for UK and EEA specialist merchants

7. What reporting will you receive for your transactions?

Transaction data drives every decision about your payments performance. Without granular reporting, you're flying blind on approval rates, decline reasons, fraud patterns, and acquirer routing. Demand a live demo before signing. Screenshots in a deck don't count.

When assessing reporting, check the following:

• Decline reason granularity: Whether the provider exposes full ISO 8583 response codes and issuer-specific decline messages, or just bucketed categories like "do not honour." Detailed decline reasons let you diagnose approval rate problems and re-route or retry intelligently.
• Real-time vs batch reporting and integration: Whether the provider exposes transaction data in real time through dashboards and API endpoints, or only as end-of-day batch exports. Ask about API rate limits, webhook reliability, and historical data retention.
• Reconciliation exports: File formats supported (CSV, XLSX, MT940, XML), settlement-level vs transaction-level granularity, and export frequency. Your finance team needs formats that map into your accounting system without manual transformation.
• Segmentation and alerting: Filtering and aggregation by acquirer, BIN, MCC, country, currency, card type, 3DS status, and cohort, plus saved custom reports and threshold alerts.

A provider that shows you a polished summary dashboard but can't expose raw transaction-level data with full decline reasoning is selling you a marketing surface. That isn't an operations tool.

8. What are the fees and commercial terms?

Specialist-category merchants typically pay higher MDR than mainstream retailers, reflecting higher underwriting risk and chargeback exposure. A generic rate card is meaningless. Request a quote specific to your MCC, processing volume, and target markets.

Get clarity on every line item before signing:

• Setup and recurring fees: One-off setup and integration fees, plus monthly minimums or floor charges below contracted volume.
• Transactional fees (MDR): The percentage and per-transaction fee taken from each authorised transaction, plus per-attempt authorisation fees. Confirm whether the rate is blended or interchange-plus (interchange + scheme fee + acquirer markup).
• Chargeback and dispute fees: Per-chargeback fees for both successful and unsuccessful disputes, plus charges for representment and pre-dispute alert services.
• Settlement terms: Currencies the provider settles in, FX markup on cross-currency settlement (typically 1–3% above mid-market rate, which adds up fast), and reserves (specialist categories typically face upfront or rolling reserves, e.g., 5–10% held for 90–180 days). Clarify structure, calculation basis, and release terms in writing.
• Contract terms: Length, early termination charges, and volume-band ceilings. Specialist-category contracts often run 12–36 months with substantial exit penalties.

Settlement timing matters as much as fee level. Confirm frequency (daily, T+1, T+3, weekly) and currency. Some providers hold funds for a month; others settle in 1–3 days.

9. What data protection and security policies are in place?

Data protection is a legal requirement under UK GDPR and the EU GDPR. Confirm the provider meets the regulatory baseline and can demonstrate in writing how they handle your data.

Cover the following:

• PCI DSS compliance and encryption: Confirm the provider is compliant with PCI DSS v4.0.1, the current standard, and ask for their Attestation of Compliance (AoC). Verify how they protect card data in transit and at rest, and whether they tokenise card details so your systems never touch raw primary account number (PAN) data.
• UK and EU GDPR compliance: The provider must comply with UK GDPR for UK-domiciled merchants and the EU GDPR for EEA-domiciled merchants. Ask how they handle data subject access requests, the legal basis for processing, and the 72-hour breach notification timeline both regulations require.
• Data residency: Where the provider stores and processes customer payment data. Some regulated sectors require residency in the UK or EEA specifically; international transfers require additional safeguards (Standard Contractual Clauses or adequacy decisions).
• Sub-processor disclosure: A full list of sub-processors handling your data, the services they provide, and where they're located. Changes should require advance notice.

Generic "we take security seriously" claims are meaningless. Ask for documentation, certifications, and named contacts who can answer detailed questions.

How Fibonatix answers these questions

If you're a specialist-category merchant operating in the UK or EEA, Fibonatix answers these questions with evidence, not claims:

• Market specialisation: A UK and European payments service provider with active underwriting across CBD, online trading, dating services, and adult physical goods, with Visa scheme registration.
• Risk management: A team of underwriters, risk managers, and dispute managers who work with you from onboarding through ongoing monitoring. Their focus: increase your approval ratio and decrease your chargeback-to-sales and fraud-to-sales ratios.
• Compliance and regulatory alignment: Active support across card schemes compliance, global payments rules, and category-specific business risks for UK and EEA merchants.

Disclaimer: Fibonatix is a UK-based, FCA-regulated payment service provider (FRN 768776) specialising in merchant accounts for B2C businesses globally, but B2B exclusively to the UK and EEA. Verify our regulatory status on the  FCA Financial Services Register .