💼 Commercial cards and business expense payments

Five instruments behind one term

A commercial card is a card-based payment instrument issued to businesses, public sector entities, or self-employed individuals. Its use is limited to business expenses, and payments are charged directly to the entity’s account. That definition comes from Article 2(6) of Regulation (EU) 2015/751. It rests on three criteria: who holds the card, what it may be used for, and which account is debited. None of the three requires a credit card: a business debit card qualifies just as well. None requires plastic either, since a virtual card with no physical form falls under the same definition.

The term “commercial card” covers five distinct instruments. They differ in how they are configured, what data they produce, and what pricing applies to them. A buyer paying a $40,000 supplier invoice and a salesperson paying for a taxi both present a card bearing the same network logo. Yet the two transactions involve two different products. The limit, category block, and data format chosen for one do not suit the others. How a program is configured therefore depends on which family the instrument belongs to, and confusing the five families is the first flaw of a poorly designed program.

Large companies and government bodies are among the biggest commercial card users. American Express’s Commercial Services segment generated $16,926 million in revenue net of interest expense and $3,668 million in pretax income in 2025 (2025 10-K). The public sector is one of the largest holders. GSA SmartPay provides cards to US federal agencies through four separate business lines: purchase, travel, fleet, and integrated. Suppliers to these agencies therefore accept commercial cards in the ordinary course of their contracts.

Outside the scope of interchange caps almost everywhere

The EU interchange cap is set out in Chapter II of Regulation (EU) 2015/751: 0.2% for debit cards and 0.3% for credit cards. That chapter does not apply to transactions made with commercial cards. The regulation states this exclusion expressly, so it is not a loophole in the text (Article 1(3)(a)). EU lawmakers justified it by an imbalance in bargaining power between the two customer groups. A company chooses its issuer, compares offers, and plays providers against each other, while a consumer takes whatever card the bank offers. The merchant is in the same position with both categories, since it does not choose the card its customer presents.

The US regime prices a single business debit product two different ways. Visa’s April 18, 2026, schedule lists Visa Business Debit in two columns: Exempt, at 1.70% + $0.10 for card-present transactions, and Regulated, at 0.05% + $0.21. The first rate is more than ten times the second. Which column applies depends on the issuer’s size under Regulation II, regardless of the card presented or the merchant’s line of business. Business debit is therefore regulated in the US, while no law caps business credit.

In the US, acceptance rules change through antitrust litigation rather than regulation. The settlement announced on November 10, 2025, in MDL 1720 carries a headline value of about $38 billion. It includes a rate reduction and changes to when a merchant may decline a card. Merchants would be able to accept or decline by category: commercial cards, premium rewards cards, and standard cards. The current honor-all-cards rule, which requires a merchant that accepts one card on a network to accept all of them, would no longer apply across those categories. Judge Brian Cogan granted preliminary approval on June 9, 2026, but final approval, to be considered at a November 16, 2026, hearing, is not assured, and an earlier settlement was rejected in 2024. If it is approved, accepting a commercial card becomes a trade-off for US suppliers between the cost of acceptance and the commercial value of the customer.

What the accepting supplier pays

For a supplier, the cost of accepting a commercial card is a fee deducted from each payment it receives, driven mostly by the network’s interchange schedule. A buyer that moves its payments onto a commercial card gains extra time to pay, control before the money is spent, and often a rebate from its issuer. The supplier receives the invoice amount minus the fee. The networks’ published schedules show how much cost shifts from one party to the other. Below is the schedule Visa applies in the US to Purchasing and Corporate T&E cards, including fleet cards.

• The Straight Through Processing program steps the rate down by ticket size: 2.00% + $0.10 below $7,000; 1.30% + $35 from $7,000 to $14,999.99; 1.10% + $35 up to $49,999.99; 0.95% + $35 up to $99,999.99; and 0.80% + $35 above $100,000.
• The Large Purchase Advantage program targets very large card-not-present purchases: 0.70% + $49.50 from $10,000.01 to $25,000, then 0.60%, 0.50%, and 0.40% in successive tiers, with the fixed component rising to $58.50 above $500,000.
• Below $10,000 in card-not-present sales, both programs fall back to the standard Purchasing rates: the flat fee protects only large tickets.
• All these rates come from Visa’s public Visa USA Interchange Reimbursement Fees schedule of April 18, 2026, and apply only in the 50 states and the District of Columbia.

• Measure before negotiating: ask your acquirer for a breakdown of volume by interchange program, transaction by transaction, not a blended average rate.
• Set a cutover threshold: above a contractual amount, offer a bank transfer instead of the card, and write it into your terms of sale.
• Price the implicit discount: accepting a commercial card at 2.7% to get paid 30 days earlier works out to an annualized rate above 30%. Compare that with your actual cost of short-term financing.
• Check where the card was issued: a commercial card issued outside the region almost always costs more than the same card issued domestically, and the arrangement never shows on screen.
• Track surcharging where it is legal: the rules vary widely from market to market, and Australia bans it on designated networks from October 1, 2026.

Level 2 and level 3 data

An ordinary card transaction carries an amount, a date, a merchant ID, and a merchant category code. This baseline is level 1. Level 2 adds the tax amount, an order reference, and the supplier’s tax ID. Level 3 goes down to the line item: description, quantity, unit price, standardized product code, freight, and ship-to postal code. Each additional level makes the payment message look more like an invoice. The buyer gets what it needs for accounting reconciliation, and the networks reserve their lowest-cost rate programs for transactions that carry this data.

Enhanced data originates upstream of the payment terminal, in the buyer’s procurement system and the supplier’s payment acceptance platform. It then passes through five links. Any of them can drop it without raising an error. A supplier convinced it is sending level 3 data often discovers, when it reads its interchange statements, that none of it ever left its gateway. No message in the authorization chain reports the loss. It shows up only in the rate program applied at clearing.

PURCHASE HEADER
  purchase_order .......... PO-2026-04817     buyer's order reference
  customer_code ........... CC-LOGISTICS-07   cost center, returned on the statement
  tax_amount .............. 240.00            tax SEPARATE from the total amount
  tax_rate ................ 0.20              required by several programs
  currency ................ EUR
  ship_from_postal ........ 20099             shipment origin
  ship_to_postal .......... 10115             destination
  freight_amount .......... 0.00              EXPLICIT zero, not a missing field
  duty_amount ............. 0.00

LINE ITEMS (level 3)
  1  description ......... 14-inch laptop
     product_code ........ LT-14-PRO
     commodity_code ...... 43211503           standardized classification
     quantity / unit ..... 4 / EA
     unit_price .......... 950.00
     line_total .......... 3800.00
  2  description ......... USB-C docking station
     commodity_code ...... 43211708
     quantity / unit ..... 4 / EA
     unit_price .......... 120.00
     line_total .......... 480.00

CHECK: sum of lines + freight + tax = captured amount
       4280.00 + 0.00 + 240.00 = 4520.00
       a one-cent difference is enough to lose qualification

• Zero tax on a taxed invoice: the field is there, the value is wrong, and the transaction loses the program.
• Missing or made-up commodity code: an internal classification is no substitute for a standard one.
• Rounding difference between the sum of the line items and the captured amount: the check is arithmetic and allows no tolerance.
• Late capture: past the network’s window, the transaction is downgraded to the highest rate, with or without data.
• Unexpected currency or country of issue: a foreign commercial card does not fall under the same schedule as a domestic one.

Virtual cards: one number, one invoice

A virtual card is a card number, or PAN, that the issuer generates for a specific expense, with no physical card. Companies use virtual cards to pay supplier invoices, online purchases, and ad platform spend. The limits are set at issuance: the exact amount, the required currency, the validity window, the permitted merchant category, and the number of uses allowed. An authorization request outside those limits is declined before any debit. Control therefore happens when the card is issued, whereas an ordinary card can only be checked after the spend. The number itself carries the reference of the invoice it pays, which ties the transaction to that document without any later matching.

Automated expense reconciliation

Reconciling an expense means linking a card transaction to its supporting document: an invoice, purchase order, or receipt. The information needed arrives in three separate events. Authorization happens within seconds and carries an estimated amount. Clearing follows one to three days later, with the final amount, the merchant ID, and any level 3 addendum. The statement comes at the end of the cycle, aggregated by cardholder and cost center. A tool that uses only the statement therefore reconciles after the close, while a tool that uses only the authorization matches amounts that clearing will later change.

On the network side, automation relies on documented issuing and reporting services. Visa Payables Automation provides an API for creating virtual accounts and produces a reconciliation file that identifies the bank, the buyer, and the payment data for each transaction (Visa developer documentation). Bank issuers also deliver enhanced commercial data files meant to feed expense management software. These files nearly always exist, and the buyers who receive them very often leave them unused.

• Unadjusted pre-authorization: hotels and car rental companies hold an estimated amount, then capture a different one, so matching on the authorization creates a systematic discrepancy.
• Foreign currency transaction: the clearing amount depends on the rate the network applies, and never matches the amount shown to the cardholder.
• Unreadable merchant descriptor: the clearing data often carries a legal entity name unrelated to the storefront brand, which makes name matching useless.
• Later refund: a credit arrives weeks after the original purchase, in an accounting period that is already closed.
• Commercial data file not integrated: the issuer produces it, accounting ignores it, and reconciliation falls back on the aggregated statement.

Rebate programs

A rebate is the share of interchange that an issuer periodically pays back to the corporate client, calculated on spend on the program’s cards. In most jurisdictions, no law caps the interchange the issuer earns on these cards. For the buyer’s finance department, the rebate is income proportional to spend, which explains why it promotes card payment internally. The supplier, meanwhile, bears the acceptance fee that funds this income. The rebate therefore shifts a cost from one party to the other without eliminating it.

A yield of about 1.2% does not carry over as is to other programs. The US federal program pools dozens of agencies, negotiates from strength, and pays its statements quickly, which the schedule rewards with a productivity refund. A midsize company gets considerably less. On a mature program, the rebate is measured in tenths of a percentage point of spend, not in whole points.

• Require a written definition of the rebate base: what is included, what is excluded, and how credits are treated.
• Pin down the payment frequency and the calculation date, two terms that can shift the rebate from one fiscal year to the next.
• Include a review clause triggered by any regulatory change to interchange: a new cap wipes out the economics of the rebate.
• Ask for a transaction-level rebate reconciliation statement, the only way to verify the issuer’s calculation.
• Never tie a spend target to the rebate: the card then stops being a payment method and becomes an incentive to spend.

Issuers and specialist platforms

The commercial card market is split among four types of players whose business models have almost nothing in common. Open networks set acceptance rules and interchange schedules and earn network fees from both sides, while bank issuers carry the credit risk and the large-account relationship. Industry specialists in travel, fuel, and lodging make their money from a closed network and from industry data that general-purpose networks don’t produce. Expense software vendors started with expense report processing, then expanded into card issuing.

Internal fraud and controls

Internal fraud on a commercial card is the use of a company card, by the employee it was issued to, for non-business spending. This is not a third party using a stolen number: the cardholder is legitimate and acts within the permissions granted. Network fraud tools look for deviations from a cardholder’s usual behavior, and spending of this kind does not deviate. Only the company’s own internal controls catch it, by checking spend against the expense policy and supporting documents.

These figures describe a low-intensity, long-duration risk. Each transaction is small, and losses accumulate over months without ever tripping an alert threshold. Sample-based testing examines a handful of transactions drawn from a population, which makes detection unlikely when the fraud consists of small, repeated amounts. The study covers more than $3.4 billion in reported losses, with a median loss of $104,000 per case across all categories.

• Merchant category blocks: block categories with no plausible business use at issuance, rather than flagging them after the fact.
• A per-transaction limit separate from the monthly limit: a monthly limit alone lets a single outsized purchase through.
• Split-transaction detection: several transactions in quick succession at the same merchant, each just under the approval threshold, are the most common pattern.
• Short validity window on virtual numbers: a dormant number reactivated later is an open door, including for a former employee.
• Mandatory matching before reimbursement: no expense is reimbursed without a matched receipt, with no exceptions for seniority.
• Immediate cancellation when a cardholder leaves: the lag between an employee’s departure and card deactivation is the most mundane gap in a program.

A commercial card puts the control before the spend, at authorization, whereas a supplier bank transfer can only be checked after the fact, during bank reconciliation. A transfer sent to the wrong beneficiary has already left the company’s account, while an authorization request outside the limits set at issuance is declined before any money moves. A well-configured program thus turns the written expense policy into rules the issuer enforces: limits, category blocks, and validity windows. That gain in control is the only argument that, on its own, justifies paying a fee where a bank transfer would have cost a few cents.