Merchant Payment Processor Scam via Phone Calls
Cold callers posing as payment processing representatives pressure small business owners into switching processors or paying fees based on fabricated rate comparisons.
Part of: Merchant Payment Processor Scam
Last reviewed: 5 July 2026
Small business owners juggling many vendors are a natural target for cold callers claiming to represent a payment processor, since few merchants closely track their actual processing rates or contract terms.
How this scam works on Phone Calls
A caller claims to represent the merchant's 'current payment processor' or a competing one offering a lower rate, and asks the owner to pull up a recent statement to 'review fees' live on the call. Using the real statement details the owner reads aloud, the scammer builds false urgency around a supposed rate increase or compliance issue, then pushes the owner to authorize a switch or pay an immediate 'PCI compliance fee' or 'equipment upgrade fee' over the phone using a debit card or bank details.
Some versions of the call result in the scammer gaining enough banking and business information to submit an unauthorized processor switch, which can disrupt real payment processing for days, or to directly withdraw funds via ACH using the account details provided. Callers often use a real terminology and templates (like referencing genuine industry terms like 'interchange rates' or 'PCI DSS') to sound credible to owners unfamiliar with the industry's jargon.
Common red flags
- Unsolicited call asking you to read details from your merchant statement
- Urgent claims about a rate increase, compliance fine, or equipment recall
- Pressure to authorize a processor switch or payment during the call itself
- Request for your business bank account and routing numbers over the phone
- Caller cannot provide a verifiable company name, address, or callback number
- Refusal to send terms in writing before requesting payment or authorization
How to protect yourself
- Never read your merchant statement details to an unsolicited caller
- Ask for everything in writing and verify the company independently before any decision
- Call your actual payment processor directly using the number on your statement to confirm any claim
- Never provide bank account or routing numbers to an unsolicited caller
- Designate one trusted employee to handle all vendor and processor calls to reduce social engineering risk
- Review your merchant account activity regularly for unauthorized changes or withdrawals
How to report it
- Report the call to the FTC at reportfraud.ftc.gov
- Contact your actual payment processor to alert them of the impersonation attempt
- Report to the Better Business Bureau if a company name was used
- File a police report if funds were withdrawn without authorization
Frequently asked questions
How do I know if a call about my payment processing is legitimate?
Hang up and call your processor directly using the number on your official statement or website, rather than any number the caller provides, to verify the claim independently.
Should I ever give my bank routing number to a caller offering better processing rates?
No. Legitimate rate changes or processor switches are handled through written contracts and your existing account portal, not by providing banking details over an unsolicited call.