Payment fundamentals. 7 chapters and a final quiz.
From the Lydian coin to instant payments. The course covers the five main payment methods, the ecosystem and its players, and the four-corner model. It then walks through the life of a card transaction end to end, the key figures for France and Europe, and the basics of regulation (SEPA, PSD2, SCA).
Place the key milestones in the history of payment methods, from the first minted coins to instant payments
Compare the five main payment methods (cash, check, card, credit transfer, direct debit): uses, market shares, timing, and risks
Identify the players in the card ecosystem and understand who pays whom
Explain the four-corner model and walk through the life of a card payment, from authorization to settlement
Chapter 1. A short history of payments.
To pay is to settle a debt in a way that is final and accepted by all. The money that makes this possible serves three functions: a unit of account (measuring value), a medium of exchange (circulating), and a store of value (holding its worth). The history of payments is the gradual dematerialization of this threefold contract of trust: from precious metal to banknotes, from banknotes to bank accounts, and from accounts to electronic signals.
~650 BC
First minted coins
The kingdom of Lydia (Asia Minor) mints the first electrum coins. Value is now guaranteed by the issuing authority rather than by weighing.
11th century
First banknotes: the jiaozi
Song dynasty China issues the first paper money. Europe would wait until the 17th century (the Bank of Stockholm, 1661).
1865
Checks enter French law
The law of June 14, 1865, brings this English instrument to France: a written order to pay from a bank account.
1950
Diners Club, the first general-purpose card
One card accepted by many different merchants: the modern payment card model is born.
1967
Carte Bleue and the first ATM
Six French banks launch Carte Bleue; the same year, Barclays installs the first ATM, in Enfield.
1974-1984
The smart card, a French invention
Roland Moreno files the smart card patent (1974). In 1984, French banks create GIE Cartes Bancaires, the interbank card consortium: one card, every merchant, every bank.
1992
Chip rolled out on all CB cards
France becomes the first major country to roll out chip and PIN nationwide, and card-present fraud plummets. The global EMV standard would later build on it.
2002
Euro cash
Euro banknotes and coins replace national currencies in 12 countries.
2014
SEPA migration complete
Credit transfers (SCT) and direct debits (SDD) move to harmonized European formats, creating a single euro payments area.
2017-2018
Instant payments and PSD2
The SCT Inst instant credit transfer launches (November 2017); PSD2 takes effect (January 2018), bringing open banking and strong customer authentication.
2020
Contactless limit raised to €50
In France, on May 11, 2020, the limit rises from €30 to €50. Contactless becomes the default way to pay in store.
2024-2026
Mandatory instant payments, Wero, digital euro
Regulation (EU) 2024/886 makes instant payments mandatory for all euro area banks; EPI launches Wero; the ECB prepares the digital euro.
🔑
How to read this course
Every payment innovation removes a friction, whether of trust, distance, time, or cost. In return, it creates a new risk, such as counterfeiting, non-payment, or remote fraud, which regulation almost always addresses after the fact. Keep this friction → innovation → regulation pattern in mind: it shapes the entire card payments industry.
France holds a unique position. It pioneered the smart card and has a powerful domestic scheme (CB), yet it is also the last major check-writing country in Europe. That mix of technological lead and legacy habits explains many of the quirks you will encounter in this course.
Chapter 2. Payment methods at a glance.
Three forms of money coexist. Cash consists of the banknotes and coins issued by the central bank. Commercial bank money exists as entries in bank accounts and moves by card, credit transfer, direct debit, or check. Electronic money is stored value held on a device or in a payment account, governed by the second E-Money Directive (EMD2). In France, commercial bank money accounts for the vast majority of the amounts exchanged.
💶
Cash
Immediate, anonymous settlement with no infrastructure. Cash is legal tender, so merchants cannot refuse it (with some exceptions). Hidden costs: cash-in-transit, cash handling, and theft risk.
🖋️
Check
A written order to pay. Declining about 8% a year, not guaranteed, and the most fraud-prone relative to value according to the OSMP, the Banque de France’s payment security observatory. France alone writes the vast majority of checks in the euro area.
💳
Card
In France, the leading cashless method by number of transactions (~60%). Immediate or deferred debit, credit, prepaid. The underlying instrument for wallets (Apple Pay, Google Pay) through tokenization.
🔁
Credit transfer
Initiated by the payer. In France, it dominates by value (~90% of cashless amounts: payroll, suppliers, treasury). In its instant version, funds arrive in under 10 seconds, 24/7.
📥
Direct debit
Initiated by the creditor, backed by a mandate. The go-to method for subscriptions and recurring bills. Can be disputed for 8 weeks with no reason given, or for 13 months if unauthorized.
Method
Share by number
Share by value
Funds availability
Main risk
Card
≈ 60 %
≈ 2 %
D+1 for the merchant (typical)
Card-not-present fraud
Direct debit
≈ 16 %
≈ 6 %
On the due date
Disputes: 8 weeks / 13 months
Credit transfer
≈ 13 %
≈ 90 %
D+1, or < 10 s for instant
Fake IBAN fraud, social engineering
Check
≈ 3 %
≈ 2 %
D+1 to D+2 after deposit
Forgery, theft, return for insufficient funds
E-money and other
≈ 8 %
< 1 %
Varies
Depends on the medium
Cashless payment methods in France, orders of magnitude (Banque de France payment methods map, 2023 data)
≈ 60 %
card share of cashless payments by number
Banque de France, payment methods map
≈ 90 %
credit transfer share of cashless value
Banque de France
≈ 1B
checks written per year in France, down about 8% a year
Banque de France
52 %
of point-of-sale transactions in the euro area are paid in cash
ECB, SPACE 2024 study
⚠️
The check paradox
Checks combine every drawback: high processing costs, no guarantee, and the highest fraud rate of any payment method relative to value (OSMP). They survive only out of habit, in healthcare, nonprofits, and security deposits. Every payments professional should know how to steer customers toward alternatives such as instant credit transfers, direct debit, or pay-by-link.
Contrary to a stubborn misconception, Apple Pay, Google Pay, and other x-Pays are not payment methods. They are initiation channels that wrap a tokenized card, or in the future a credit transfer; Wero, launched by EPI in 2024, runs on SEPA instant credit transfers. The analysis stays the same: look at the underlying legal instrument, the network it travels over, and the guarantee attached to it.
Chapter 3. The ecosystem and its players.
A card payment involves half a dozen players whose roles are precisely defined by scheme rules and EU law. Understanding who does what, and above all who gets paid by whom, underpins any discussion of costs, fraud, or compliance.
🧑
Cardholder
The customer who holds the card. Bound to the issuing bank by a cardholder agreement (annual fee, limits, immediate or deferred debit).
🏪
Merchant
Accepts the card under a merchant acquiring agreement. Pays the merchant service charge (MSC) and bears part of the non-payment risk on card-not-present transactions.
🏦
Issuing bank
Issues the card, guarantees payment to the system, approves or declines each transaction, and handles lost/stolen card blocks and fraud. Earns interchange and cardholder fees.
🏛️
Acquiring bank
Signs up and equips merchants, collects their batches, credits their accounts, and carries merchant risk (insolvency, merchant fraud). Earns the MSC.
🌐
Scheme (network)
CB, Visa, Mastercard. The scheme sets the rules (acceptance, disputes, security), routes transactions, and arbitrates chargebacks. It earns scheme fees charged to the banks.
⚙️
PSP / gateway / processor
Technical and regulated providers (Worldline, Adyen, Stripe, Payplug, etc.): payment page, POS terminals, acquirer connectivity, fraud prevention, and sometimes acquiring in their own right.
Company
Key role
Main revenue source
Examples
Issuer
Authorizes, guarantees, manages the cardholder
Interchange + card fees
BNP Paribas, Crédit Agricole, BoursoBank
Acquirer
Contracts with the merchant, collects funds
Merchant service charge (MSC)
Crédit Mutuel, Worldline, Adyen
Scheme
Rules, routing, arbitration
Scheme fees (per-transaction and flat)
CB, Visa, Mastercard
PSP / gateway
Technology, checkout, fraud prevention
Per-transaction or subscription fees
Stripe, Payplug, Lyra
Regulators
Licensing, supervision, enforcement
–
ECB, Banque de France, ACPR, EBA
Who earns what in the card value chain
PSD2 added two types of regulated players: account information service providers (AISPs, aggregators such as Bankin’ and Linxo) and payment initiation service providers (PISPs), which trigger a credit transfer from the payer’s account without using a card. All must be licensed or registered (in France, with the ACPR) and access accounts through dedicated bank APIs.
🔑
Where the money comes from: the MSC
The entire chain is funded by the merchant service charge (MSC), which the merchant pays to its acquirer. The acquirer passes part of it on to the issuer (interchange) and part to the scheme (scheme fees), and keeps the rest as margin; the cardholder pays their card fee separately. We break down the numbers in the course “A CB card transaction end to end.”
Chapter 4. The four-party model.
The four-corner model (or four-party model) dominates card payment architecture. The cardholder and the merchant are customers of two different banks, the issuer and the acquirer, connected by a scheme. That separation is what makes cards universal. Any CB, Visa, or Mastercard card works at any merchant, without the two banks ever signing a contract with each other.
Two flows run in opposite directions. The information flow carries the authorization request from the merchant to the issuer, and the response back. The funds flow moves money from the issuer to the acquirer at settlement, net of interchange. Interchange is the fee the acquirer pays the issuer on every transaction, to compensate for the payment guarantee, the fraud risk, and the debit delay the issuer bears. Capped in Europe since 2015, it remains at the center of every economic battle in the industry.
Criterion
Four-party (CB, Visa, Mastercard)
Three-party (Amex historically, PayPal)
Issuing / acquiring
Separate, competing banks
The scheme issues AND acquires itself
Contractual relationship
Cardholder↔issuer, merchant↔acquirer
Cardholder and merchant contract with the same entity
Interchange
Yes: acquirer → issuer
No: a single internal fee
IFR caps (0.2% / 0.3%)
Apply
Do not apply (except to three-party schemes that license issuers)
Universality
Maximum: thousands of banks
Limited to the scheme’s own network
Four-party vs. three-party
Interoperability: each bank builds a single connection (to the scheme) to reach all the others.
Competition at every corner: issuers compete for cardholders, and acquirers compete for merchants.
Shared rules: security, disputes, and guarantees are the same for everyone, which is the basis of trust.
The trade-off: complex governance and multi-layered fees, which regulators watch closely.
ℹ️
The boundaries are blurry
American Express, historically a three-party scheme, now licenses third-party banks to issue its cards, making the model a hybrid. Conversely, PayPal operates as a three-party “wallet” but is funded by four-party cards or by direct debit. Analyze chain by chain who issues, who acquires, and who sets the rules.
Chapter 5. The life of a card payment, end to end.
A card payment unfolds in three stages of very different kinds. Authorization happens in real time, in anywhere from a few hundred milliseconds to two seconds; clearing is batch processing, overnight; settlement actually moves the funds between banks, on D+1. The cardholder sees only the first stage; the merchant’s treasurer deals mostly with the other two.
Stage 1: authorization in under 2 seconds
Cardholder
presents the card: chip, contactless, or card details entered online
The EMV chip generates a unique, one-time cryptogram (ARQC) that cannot be forged
➜
POS terminal / payment page
builds the authorization request
Amount, currency, merchant IDs, EMV data, 3-D Secure result if any
➜
Acquirer
checks the request and routes it to the network
In France: CB2A protocol on the acceptance side, then the CB network (e-rsb)
➜
Scheme
routes the request to the issuing bank
Routing based on the BIN, the first digits of the card number
➜
Issuer
runs its checks and responds: code 00 (approval) or a decline code
displays “PAYMENT APPROVED” and prints the receipt
The funds are reserved on the cardholder’s account, but nothing has been debited yet
Stages 2 and 3 follow from the evening onward, when the terminal (or the PSP in e-commerce) sends the day’s batch of transactions to the acquirer. This step is the end-of-day batch upload, and it produces the batch deposit. The batches are then submitted for clearing, where CORE(FR), the French retail payment system operated by STET, calculates the net positions between banks. It processes around 30 billion transactions a year across all instruments. Finally, the net balances are settled in central bank money in T2, the ECB’s system, where settlement is final and irrevocable. The merchant is typically credited on D+1, net of fees.
Timing
Event
Lead party
D, 14:32:05
Authorization approved in 1.4 s (code 00)
Issuer
D, 22:00
End-of-day batch upload from the terminal: the day’s batch goes to the acquirer
Merchant / POS terminal
D+1, overnight
Submission for clearing, net balance calculation
STET’s CORE(FR)
D+1, morning
Interbank settlement in central bank money
Banque de France / T2
D+1 to D+2
Merchant’s account credited, net of fees; cardholder debited (immediately or deferred)
Acquirer / issuer
Typical timeline of a €42.50 CB card payment in store
⚠️
Authorization ≠ payment
An approved authorization reserves funds; it does not transfer them. It may never be followed by a debit (an uncaptured hotel deposit), it may be canceled (a reversal), or it may be debited and then disputed weeks later (a chargeback). Confusing authorization with collection is the number one beginner mistake, and the source of many accounting disputes.
Chapter 6. Key figures for France and Europe.
16B+
CB card payments and withdrawals per year in France
GIE CB, 2024 key figures
≈ 77M
CB cards in circulation
GIE CB, 2024
€175.3B
French e-commerce revenue in 2024 (+9.6%)
FEVAD, 2024 review
0,053 %
card fraud rate, an all-time low
OSMP, 2023 annual report
> 60 %
contactless share of in-store CB card payments
GIE CB, 2024
Indicator
France
Euro area
Cash at the point of sale (by number of transactions)
≈ 43 %
52% (ECB, SPACE 2024)
Card share of cashless payments (by number)
≈ 60 %
≈ 54 %
Checks written
≈ 80% of the euro area total
dying out elsewhere
Domestic scheme
CB (co-badged with Visa/Mastercard)
girocard (DE), Bancontact (BE), Dankort (DK)…
France vs. euro area: key benchmarks
France is a card-heavy, cash-light country compared with the euro area average. Its domestic scheme is among the strongest in Europe. Yet it still clings to the check. Online, cards remain the leading payment method at French checkouts, alongside wallets, installment payments, and, from 2026, the first e-commerce rollouts of Wero.
ℹ️
Three trends to watch
1) Structural decline of cash and checks. 2) The rise of instant payments, boosted by the 2024 EU regulation, which has required euro area banks to receive them since January 2025 and to send them since October 2025. 3) A reshaping of sovereignty: Wero/EPI, a debate over capping international scheme fees, and the digital euro in preparation at the ECB.
Chapter 7. Regulation in 15 minutes: SEPA, PSD2, SCA.
Payments are so heavily regulated because they are infrastructure. Failures and fraud have systemic consequences, and network effects create dominant positions. The European framework has three goals: to harmonize (SEPA), to open up competition (PSD1/PSD2, interchange caps), and to secure (SCA, supervision).
SEPA: a single area for euro payments
The Single Euro Payments Area (SEPA) harmonizes credit transfers and direct debits: the same formats (ISO 20022), the same account identifier (IBAN), and the same timelines. It covers 41 countries: the EU and EEA member states, the UK, Switzerland, a few microstates, and, since 2024–2025, four Balkan countries and Moldova. Its scope keeps widening, with Moldova joining the SEPA schemes in 2025. France completed its migration on August 1, 2014, and Regulation (EU) 2024/886 marks a further step. All euro area banks have had to receive instant credit transfers since January 9, 2025, and to send them since October 9, 2025, at no extra cost compared with a standard credit transfer. On top of that comes a check of the payee’s name (Verification of Payee).
Anatomy of a French IBAN
IBAN FR76 3000 4000 0312 3456 7890 143
FR country code (France) -- 27 characters in total for a French IBAN
76 European check digits (modulo 97)
30004 bank code
00003 branch code
12345678901 account number
43 national RIB key (French account check digits)
PSD2: opening up payments and making them secure
Regulated licenses: payment institutions (PIs) and e-money institutions (EMIs) compete with banks in payments, under a license from the competent authority in their member state (the ACPR in France).
Open banking: banks must open APIs to licensed account aggregators (AISPs) and payment initiators (PISPs). Customers regain ownership of their account data.
Payer protection: refunds for unauthorized transactions, with the payer’s residual liability before reporting the card lost or stolen cut from €150 to €50 (€0 if strong authentication was not required).
Ban on surcharging consumer card payments in the EU.
SCA: strong customer authentication
Since September 14, 2019 (the PSD2 regulatory technical standards, or RTS), every electronic payment initiated by the payer requires, in principle, strong customer authentication. It takes two independent factors from three categories: knowledge (a code or password), possession (an enrolled phone, a card), and inherence (biometrics). In practice, for cards, SCA runs through 3-D Secure 2 and approval in the banking app. Exemptions avoid adding friction where risk is low:
Exemption
Conditions
Limit
Low value (e-commerce)
Counters: 5 consecutive transactions or €100 cumulative without SCA
< 30 €
Contactless (in store)
Counters: 5 transactions or €150 cumulative since the last SCA
≤ 50 €
Transaction risk analysis (TRA)
PSP fraud rate ≤ 0.13% / 0.06% / 0.01%
100 € / 250 € / 500 €
Trusted beneficiaries
Trusted beneficiary list held by the issuer
No cap
Subscriptions and MITs
SCA at setup, not on subsequent payments
No cap
Out of scope
MOTO (mail and telephone orders), one-leg-out, anonymous cards
–
Main SCA exemptions (PSD2 RTS)
🔑
Key takeaway
SCA = 2 factors from 2 different categories, independent of each other. A code received by SMS is not enough on its own, because it counts only as a possession factor and must be combined with another factor. Successful 3-D Secure authentication generally shifts fraud liability from the merchant to the issuer (the liability shift).
ℹ️
Next up: PSD3, PSR, and the digital euro
The PSD3 + PSR legislative package (a new directive plus a Payment Services Regulation) was provisionally agreed on November 27, 2025, and is awaiting formal adoption, with application expected in the second half of 2028 at the earliest. It covers scams in which the payer is manipulated, fraud data sharing, and direct access for payment institutions to payment systems. Meanwhile, the ECB closed the preparation phase of the digital euro in October 2025 and is aiming for a first issuance in 2029, which depends on the adoption of its legislative framework, still under negotiation.