Stripe's 22-Year-Old Irish-Born Founder Is Just Getting Started

It doesn't do a disservice to them at all. It's just that there are a few inherent risks to this model and I can't see how 'no merchant account' is a plus for any serious business.

A merchant account is expensive and integration can be a pain but there are also distinct advantages to having your own. That does not mean that I underestimate the smarts of the people running Stripe, anything but.

Sure. Fraud is one of the bigger risks when you deal with non-segregated merchant accounts. This basically means that when it comes to fraud there is an overall chargeback limit that you share with all the other merchants in the same cluster, as well as the risk that one or more of the merchants are processing so-called high risk transaction on a non-high-risk merchant account (or maybe even downright illegal transactions). If one of those merchants is substantially larger than the rest or if you are in a group that has a higher risk profile than you yourself have chances are that at some point VISA/MC/Whichever will fine the holder of the merchant account or will shut down the merchant account altogether. These fines can be substantial (sometimes in the millions) and this can cause the whole thing to collapse. If you're even more unlucky the money that was still pending deposit on the merchant account will be used to pay off part of the fine. If you have your own merchant account then if the payment service provider (Stripe in this case) makes a bad decision with acceptance of a particular merchant then that will only affect one merchant.

Exactly what the fall-out of such a problem is is highly dependent on the acceptance policy and the level of fraud prevention in place to make sure that bad apples are detected before it becomes a problem for a larger group of merchants as well as the size and composition of the clusters (sometimes there is only one such as was the case with IBill). This is - obviously - not under the control of the individual merchants so you have absolutely no guarantee that there is no risk from this angle and it is not in the interest of an IPSP using this model to disclose who their customers are and what the exact setup is (since this would give bad merchants a leg up on how to game the system).

The IPSP game is complex, there are lots of gotchas and there are a ton of things that have been tried in an arms race that is now roughly 18 years old. A late entrant to this arms race will find a lot of opposition armed to the teeth and battle hardened.

This is the reason why it is very hard to displace paypal, for all the flak they're getting they have the fraud angle under control. Stripe is still young and they are probably learning valuable lessons at a very fast rate. I have all the faith in them coming through this in one piece but that still does not detract from the fact that this particular model carries an extra risk.

If stripe were to offer an option (which likely would have to have better rates than their current plan) where higher volume merchants would be able to bring their own merchant account to the party then I think that would be positive for everybody. I'm not sure if they are thinking in this direction or if that option is even on the table for them. But it would make me feel a lot better about putting my apples in the stripe basket. And I really like the founders.

After having been bitten twice by the shared merchant account model I hope you'll forgive me my reservations, IBill and DMR cost me a very large amount of money and I'm not about to risk that once more. If you have $50 in sales every month then I can understand that a merchant account is not worth it but as soon as a business is more serious then your merchant account becomes your lifeline. IBill used some pretty dumb strategies for risk mitigation (such as adding low dollar amount charity charges into the mix to offset the high chargeback risk because the chargebacks were taken as a fraction of the total number of charges rather than of total charge volume which helped to mask a problem). Regardless of the rest of the setup, a merchant account you share with others translates into a (substantial) extra risk.

Another aspect here is that if your IPSP goes under that you lose access to your renewals, for a subscription based service that is lethal. And IPSPs are not usually allowed to give you a copy of the subscriber data because of card company regulations (PCI).

I hope that's detail enough for you.

I work at Stripe, and I can assure you that the situation you described would not apply to any of our users. All Stripe accounts are independent of each other, and the actions of one user do not affect anyone else. We've worked closely with our banking partners to ensure that this is the case in the US and Canada, and we're working to make sure we can provide the same level of service and ease of use in other countries as well.

Separately, Stripe is allowed to transfer customer data to other PCI-compliant providers. So if you ever want to move to another provider, we'll happily move your customer information to your new payment provider (or your own systems, if you are PCI-certified): https://stripe.com/us/help/faq#export-card-data

I wouldn't quite think about it in terms of a merchant accounts -- it's an old term in a changing industry, and it doesn't apply to Stripe users. They get the same benefits that they'd get with a merchant account (independent reputation, fund segregation, your own name on card statements) and none of the associated hassle.

In fact, thinking about merchant accounts for your Stripe account is like thinking about the physical address of one of your AWS instances - it doesn't really matter.

I'm a 15 year veteran of the internet payment industry, I have yet to see a single cc transaction without a merchant account, as far as I know this is not some 'antiquated term', but simply how business is done.

> it doesn't apply to Stripe users.

But it does presumably apply to stripe.

I like stripe - a lot - but I really wished that you would separate marketing from fact here and make it plain whether or not transactions for multiple stripe account holders are passed through the same merchant account or not. If no merchant accounts are involved at all then that is also a valid answer but again, I fail to see how this is possible.

My direct experience is limited to:

  - DMR (gone out of business)
  - CCBill (barely survived after a buy-out but left 
    1000's of merchants stranded with their funds
    confiscated by the card companies)
  - Virtual Access
  - PaySquare
  - paypal
  - and quite a few others besides on behalf of customers
  - PayBuyNet (since gone out of business)

For most of those I have a pretty good idea of what happened behind the scenes. Either stripe has a new model or I am still not understanding you.

Thinking about merchant accounts matters because payments are the lifeblood of a company and not understanding how service provider implements such details can be the difference between surviving and getting caught up in something beyond your control.

Your AWS suggestion implies 'merchant account hopping' where transactions are processed through a variety of merchant accounts, is that what you are getting at?