Merchant Payment Processor Scam via Phone Calls
Cold callers posing as payment processing representatives pressure small business owners into switching processors or paying fees based on fabricated rate comparisons.
Part of: Merchant Payment Processor Scam
Last reviewed: 5 July 2026
Payment processors do call merchants, and rate reviews are normal in the card industry, so a cold caller claiming to be 'your current processor' does not sound wrong. The scam hinges on the owner reading a real statement aloud, then using those details to invent a rate increase or compliance problem and extract a 'PCI compliance' or equipment fee, or enough banking information for an unauthorized processor switch. Genuine jargon like interchange rates and PCI DSS does the persuading. The distinction that matters most: your real processor already has your statement and never needs it read back to an inbound caller.
How this scam works on Phone Calls
A caller claims to represent the merchant's 'current payment processor' or a competing one offering a lower rate, and asks the owner to pull up a recent statement to 'review fees' live on the call. Using the real statement details the owner reads aloud, the scammer builds false urgency around a supposed rate increase or compliance issue, then pushes the owner to authorize a switch or pay an immediate 'PCI compliance fee' or 'equipment upgrade fee' over the phone using a debit card or bank details.
Some versions of the call result in the scammer gaining enough banking and business information to submit an unauthorized processor switch, which can disrupt real payment processing for days, or to directly withdraw funds via ACH using the account details provided. Callers often use a real terminology and templates (like referencing genuine industry terms like 'interchange rates' or 'PCI DSS') to sound credible to owners unfamiliar with the industry's jargon.
Common red flags
- Unsolicited call asking you to read details from your merchant statement
- Urgent claims about a rate increase, compliance fine, or equipment recall
- Pressure to authorize a processor switch or payment during the call itself
- Request for your business bank account and routing numbers over the phone
- Caller cannot provide a verifiable company name, address, or callback number
- Refusal to send terms in writing before requesting payment or authorization
How to protect yourself
- Never read your merchant statement details to an unsolicited caller
- Ask for everything in writing and verify the company independently before any decision
- Call your actual payment processor directly using the number on your statement to confirm any claim
- Never provide bank account or routing numbers to an unsolicited caller
- Designate one trusted employee to handle all vendor and processor calls to reduce social engineering risk
- Review your merchant account activity regularly for unauthorized changes or withdrawals
How to report it
- Report the call to the FTC at reportfraud.ftc.gov
- Contact your actual payment processor to alert them of the impersonation attempt
- Report to the Better Business Bureau if a company name was used
- File a police report if funds were withdrawn without authorization
Frequently asked questions
Why do these callers ask me to pull up my actual merchant statement during the call?
Reading real details back to you makes the caller sound informed and legitimate, and it lets them tailor a fabricated 'savings' pitch using your genuine rates. A real processor representative reaching out for account changes doesn't need you to read your statement aloud to verify who you are.
Is it normal for a payment processor to call unprompted about lowering my rates?
Unsolicited cold calls promising better processing rates are a common scam pattern, though legitimate sales calls do exist in this industry. The safest approach is to never make a decision on the call itself — ask for written terms and independently verify the company before agreeing to anything.
What should I do if I think I've already given my banking details to a fake processor caller?
Contact your bank immediately to flag the account, watch for unauthorized ACH debits over the following days, and ask your bank about ACH debit blocks. Also report the call to the FTC and your actual payment processor so they're aware of the impersonation.
How do I know if a call about my payment processing is legitimate?
Hang up and call your processor directly using the number on your official statement or website, rather than any number the caller provides, to verify the claim independently.
Should I ever give my bank routing number to a caller offering better processing rates?
No. Legitimate rate changes or processor switches are handled through written contracts and your existing account portal, not by providing banking details over an unsolicited call.