Visa, Mastercard draw new government scrutiny over debit-card routing

The Federal Trade Commission is examining whether the companies’ security tokens prevent online debit-card payments from going over other networks

The Federal Trade Commission is investigating whether Visa Inc. and Mastercard Inc.’s security tokens restrict debit-card routing competition on online payments, according to people familiar with the matter. 

The FTC for the past few years has already been probing whether Visa and Mastercard block merchants from routing payments over other debit-card networks. The networks acknowledged an FTC probe in regulatory filings in recent years. 

In recent months, the FTC expanded its focus to routing challenges that stem from the networks’ security tokens, the people familiar with the matter said. It couldn’t be determined if the investigation is a new probe or part of the previous one. 

Apple card: image from Apple (Apple)

TENNESSEE, MONTANA AGS LEAD EFFORT QUESTIONING CREDIT CARD CEOS ABOUT TRACKING GUN PURCHASES

Visa and Mastercard are by far the two biggest card networks in the U.S., building and maintaining the plumbing that allows Americans to use credit and debit cards at stores and online. Their lion’s share of that market has drawn increasing scrutiny from regulators and fueled tension with merchants, which pay fees set by the networks when a customer pays via card.

A Justice Department investigation on whether Visa has unlawfully maintained a dominant market share in debit cards is ongoing, according to people familiar with the matter. 

Federal law requires that merchants have the ability to choose from at least two unaffiliated debit-card networks to route transactions. That is supposed to give merchants the option to send debit-card payments over the network that sets lower fees. 

In most cases, when a person stores a card in a digital wallet such as Apple Pay, the 16-digit card number gets replaced by a "security token" — essentially a line of random numbers. The token is typically provided by the network listed on the card—often Visa or Mastercard. 

Ticker Security Last Change Change %
V VISA INC. 314.64 +2.83 +0.91%
MA MASTERCARD INC. 532.17 +3.74 +0.71%

GET FOX BUSINESS ON THE GO BY CLICKING HERE

The token is what’s sent along to payment networks when the person makes a purchase.

When a debit-card number is tokenized by Visa for example, only Visa can understand the token so that it can be reassociated with an actual card. That makes it easy for the payment to go over Visa’s network. 

Alternatively, Visa can unscramble its token so a transaction can be handled by another debit network.

Close-up of unrecognizable customer choosing contactless payment using credit card while waitress accepting payment over nfc technology (iStock / iStock)

This setup reinforces Visa and Mastercard’s position at the center of huge volumes of payments—even the payments that merchants might want to send over other networks.

Visa and Mastercard have pushed for widespread tokenization in recent years, noting that the tokens help protect the cards from fraud.

The FTC is looking into whether Visa and Mastercard have been limiting the information they send when they enable an online payment to go over a different network, the people said. That alleged practice, according to merchants, increases the chances that the card’s issuing bank will reject the transaction when it is handled by a different network.

Lina Khan speaking

Lina Khan, commissioner of the Federal Trade Commission (FTC), speaks during a Senate Commerce, Science and Transportation Committee confirmation hearing in Washington, D.C., U.S., on Wednesday, April 21, 2021. Khan's selection for the FTC indicated (Saul Loeb/AFP/Bloomberg via Getty Images / Getty Images)

BUSINESSES BATTLING OUT-OF-CONTROL FTC AND WRATH OF COMMISSION HEAD KHAN

The FTC is also looking into whether Visa and Mastercard are restricting routing choice after shoppers store their debit-card information on merchants’ websites or apps, or on pay tab buttons, the people familiar with the matter said. Tokens are often used in these cases.

This month, the Federal Reserve issued an update to banks, clarifying that they must enable at least two networks on all debit-card transactions, including online payments. The Fed has the authority to enforce these rules with respect to Fed-supervised banks, and the FTC has the power to enforce these rules with card networks. 

CLICK HERE TO GET THE FOX BUSINESS APP

The FTC’s current probe is linked to the Fed’s update, according to people familiar with the matter.