Merchant-services impersonation calls often rely on urgency and partial information. Someone may claim to represent a processor, say that a rate is wrong, offer a refund, or insist that a terminal must be replaced. The safest response is to pause, verify the caller independently, and review the proposed change before providing account information or signing paperwork.
Custom Payments owner Robert Staschak has heard from business owners who received unexpected calls about their payment accounts. In the situations described to him, a quick independent check helped the owners determine what they actually needed before making an account or equipment change. That kind of experience is a reason to verify a claim—not proof that every unsolicited contact is fraudulent.
The Federal Trade Commission explains that imposters may pretend to represent a business people recognize, use caller-ID spoofing, or provide official-looking information. Its guidance recommends contacting the organization through a phone number, website, or email address known to be genuine rather than using contact details supplied in an unexpected message. FTC guidance on imposter scams
Six ways to protect your merchant-services account
1. Know your processor and account information
Keep a secure record of your processor or acquiring bank, merchant account contact, equipment model, gateway or POS provider, and the usual billing or support channels. This does not mean sharing sensitive credentials broadly. It means knowing which organizations and people you can verify independently when a question arises.
2. Save the contact information for your established representative
If you work with a dedicated representative, save that person’s name, phone number, and business email address. A known contact can help you distinguish a routine account question from an unexpected sales or impersonation call. If the representative changes, confirm the new contact through a channel you already trust.
3. Do not disclose sensitive information to an unexpected caller
Do not assume a caller is legitimate because they know your business name, processor, terminal model, or an approximate processing volume. Avoid giving unsolicited callers passwords, authentication codes, full bank-account credentials, or other sensitive account information. If the caller says the matter is urgent, treat that urgency as a reason to verify—not as a reason to skip verification.
4. Do not sign or authorize changes before independent verification
A new rate, equipment offer, terminal replacement, lease, gateway, POS integration, or processing agreement can affect your costs and workflow. Ask for the proposal in writing. Review all recurring fees, equipment terms, cancellation language, implementation responsibilities, and support contacts before authorizing a change.
5. Contact the processor using information you already trust
End the unexpected call and contact your processor, acquiring bank, or established representative through a saved phone number, a verified website, or a prior statement. Do not rely solely on caller ID, a number in an unsolicited email, or a link in an unexpected message. If you believe someone attempted impersonation or obtained account information, ask the actual provider what protective steps apply and document the contact.
6. Review processing statements and equipment charges regularly
A current statement can help you understand transaction charges, monthly or annual fees, equipment costs, gateway or software charges, PCI-related items, and other account terms. Knowing what normally appears on your statement makes it easier to identify a charge or sales claim that needs explanation. A merchant statement review can help organize questions, but no review should be presented as a guaranteed savings result.
Common warning signs to slow down and verify
A contact deserves independent verification when it relies on a short deadline, refuses to provide written terms, asks for sensitive information before explaining the issue, says equipment must be replaced immediately, promises a refund without documentation, or will not identify the processor, acquiring bank, or agreement involved. These signs do not by themselves establish fraud, but they are good reasons not to authorize a change during the initial contact.
The U.S. Chamber of Commerce also describes payment-processing scams involving high-pressure sales, unexplained fees, equipment leases, and requests for confidential information. Its examples reinforce the value of reviewing the complete written terms rather than focusing on a single advertised rate. Credit card processing scams and fraud
Review the whole payment workflow, not only the sales claim
A payment account is connected to more than a percentage. Before making a change, consider the business’s payment-processing services, POS and equipment needs, online or keyed transactions, invoicing, recurring payments, ACH, refunds, chargebacks, reporting, and settlement workflow. A replacement terminal or processor may also affect an existing POS, gateway, booking system, accounting connection, or customer-payment process.
If the proposal involves a cash-discount or dual-pricing arrangement, review the EDGE program information and ask how customer disclosures, debit transactions, receipts, refunds, online payments, and POS configuration would work. Do not treat a program label or a quoted rate as a substitute for reviewing the implementation details and current applicable requirements.
What to do if you already shared information
If you provided account information, credentials, authentication codes, remote-access permission, or payment details to an unexpected contact, contact the actual processor, bank, POS provider, or other affected organization using independently verified contact information. Ask what account-protection, credential-reset, equipment, transaction, and dispute steps apply. Preserve emails, phone numbers, documents, and timestamps. If money or personal information was involved, consider reporting the incident through the appropriate government or law-enforcement channel.
Continue your payment-processing research
For broader cost questions, read Understanding Processing Fees. For processor-specific comparisons, see the Square comparison, Clover comparison, Toast comparison, and Stripe versus merchant account guide. Each comparison should be read as decision support, not as a universal claim that one provider is best for every business.
Request an informational account review
If you received an unexpected call, letter, equipment offer, or proposed rate change, Robert Staschak can review the statement or written proposal with you before you make a decision. Custom Payments LLC is a family-run merchant-services company based in Devon, Pennsylvania, serving businesses in the Philadelphia region, the Main Line, Chester County, Delaware County, Montgomery County, and surrounding Southeastern Pennsylvania. An informational review can organize questions and terms; it does not promise savings, approval, a particular rate, equipment, or outcome.
Frequently asked questions
What are merchant services scams? Merchant-services scams are deceptive calls, messages, proposals, or account activities that may impersonate a processor or pressure a business into providing information, authorizing changes, buying equipment, or signing payment-processing terms without adequate verification.
How can I tell whether a merchant-services call is legitimate? Do not rely only on caller ID or information the caller knows about your business. End the unexpected contact and call your processor or established representative through a phone number, website, or email address you already trust.
Should I give my merchant account number to an unexpected caller? Avoid providing sensitive merchant-account information to an unsolicited caller until you have independently verified the caller and confirmed why the information is needed. Never share passwords or authentication codes with an unexpected contact.
What should I do if someone says I am being overcharged? Review the current statement and contact the processor or representative you already know. If you want a second opinion, provide the actual statement or written proposal to a reputable professional and ask for an itemized explanation rather than accepting an unverified savings claim.
What if someone says my credit-card terminal is outdated? Do not replace equipment solely because an unexpected caller says it is necessary. Confirm the terminal model, software, security status, compatibility, and replacement terms with the current processor or another independently verified source.
Can a statement review prove that a caller is a scammer? No. A statement review can help identify what charges, equipment, and account terms are actually present. Determining whether a contact is fraudulent may require the processor, bank, law enforcement, or another appropriate authority to investigate.