How to Audit Your Merchant Statement (and Find What You're Overpaying)
A 6-step playbook to read your statement the way a payments operator does. Pull 90 days, compute your effective rate, classify the line items, find the four fees that are almost always hiding, then decide whether to renegotiate or switch.
By Barak Bachar, Global Payments Manager · LinkedIn
Most merchants have never read their processing statement line by line. The processor knows that. Many contracts allow fee changes with written notice, so a small rate increase here and a new flat fee there can lift your effective rate well above the rate you signed for. An audit is how you find it and get it back.
This playbook walks through the exact 6 steps an operator runs on a new account. No software, no consultant. A spreadsheet and three statements.
What a statement audit actually is
An audit is not a sales pitch from another processor. It is a forensic read of three months of statements with one goal: separate what you cannot control (interchange and assessments) from what you can (the markup, the fees, the contract terms).
Interchange and network fees are set by Visa, Mastercard, Amex, and Discover. They are the same regardless of who processes for you. What sits on top, the processor markup plus fixed fees, is the entire negotiation surface. How big that layer is depends on your pricing model and card mix.
The audit makes that layer legible. Once you can see it, you can shrink it.
Step 1: Pull 90 days of statements
Three months is the minimum. If your business is seasonal or your card mix shifts, pull six. You want PDFs, not screenshots, because the line-item detail at the back of the statement is what matters and screenshots usually crop it off.
Most processor portals bury statement downloads two clicks deep. Look for "Statements," "Reports," or "Documents." If you cannot find them, email your account rep and ask for the last 6 months as PDFs. Do not accept a summary. You need the full statement, including the interchange detail pages at the back.
What a complete statement contains: a summary page, a fee schedule page, a deposit page, and pages of interchange line items grouped by card type. On a tiered or interchange-plus contract, if yours stops at the summary, ask in writing for the interchange detail; a missing detail page is itself a finding. A flat-rate statement will not show interchange at all.
Step 2: Compute the effective rate
Open a spreadsheet. Three rows, one per month. Three columns: total processing volume, total fees paid (every fee on the statement, not just the discount line), and effective rate.
Effective rate equals total fees divided by total volume, expressed as a percentage. If you processed $200,000 and paid $5,800 in fees, your effective rate is 2.90%.
Now you have a real number. Not a marketing rate. Not the "qualified rate" on the contract. The actual rate.
Reference points from published prices (our cost tables, prices checked Oct 2026):
In person at $50K a month: 2.04% (Helcim) to 2.90% (Square) across the providers we track.
Online at $50K a month: 2.40% (Stax) to 3.70% (Clover keyed cards).
B2B with a high commercial-card mix: Visa's corporate and purchasing card interchange is 2.70% + 10¢ card-not-present, against 1.75% + 10¢ for its Commercial Product 3 rate with Level 3 data (Visa schedule effective Oct 24, 2026). If you sell to businesses and send no Level 3 data, that is the next move.
Restaurants with tip adjustment: check how tipped sales are billed. Visa's tip tolerance is 30% for restaurants (MCC 5811, 5812, 5814) and 20% for bars.
Step 3: Classify every line item
Every fee on the statement falls into one of three buckets:
Pass-through (non-negotiable): Visa interchange, Mastercard interchange, Amex OptBlue interchange, Discover interchange, network assessments, NABU, APF, dues. These are set by the networks, and the processor should pass them through at cost. Ask for the network's published rate behind each network line; a padded network fee is markup.
Markup (fully negotiable): the basis-point spread above interchange, the per-transaction authorization fee, monthly account fees, statement fees, batch fees, IRS reporting fees.
Junk (often waivable):PCI non-compliance fees, monthly minimums, annual fees, gateway fees that duplicate processor fees, "regulatory product" fees that are just renamed markup.
Add a column to your spreadsheet and tag every line. The total of the "markup" and "junk" columns is your real bill from the processor. That is the number to attack.
Step 4: Spot the four hidden fees
Four fees are worth checking first. None of them are interchange. The processor sets every one of them.
1. PCI non-compliance fee. Charged when the annual self-assessment questionnaire (SAQ) is not on file. The amount is set by your processor and varies, so check your statement. Checkout.com, for example, publishes $150 a month for Level 4 merchants after a 60-day grace period, while Helcim lists no PCI fee (checked Oct 2026). Filing the SAQ usually ends the fee; at $40 a month, that would be $480 a year recovered.
2. Monthly minimum shortfall. Some contracts set a minimum on monthly processing fees, and slow months trigger the shortfall. Amounts vary by contract. It is often negotiable at renewal, and some providers, such as Helcim, publish no monthly fee or minimum.
3. Batch and IRS reporting fees. Batch fees apply to each settlement close where your contract has them; Authorize.net's gateway-only plan, for example, charges 10 cents per daily batch (checked Oct 2026). Some processors also add a monthly IRS or 1099-K reporting fee. Filing Form 1099-K is the processor's own reporting duty. Charging extra for it is processor revenue, not a government fee.
4. "Regulatory" or "network access" fees. Sometimes a percentage of volume, sometimes a flat amount, named to look like a pass-through. No regulation requires a regulatory product fee. A line named after a real network fee should match the network's published rate; anything above it is markup.
Quick math (hypothetical): on $250K monthly volume, a 0.15% "regulatory product fee" would be $375 per month, or $4,500 per year, for a fee nobody asked about.
Step 5: Build the negotiation case
Do not call the processor with feelings. Call with three numbers: your 90-day effective rate, the markup-only rate (interchange stripped out), and the dollar total of the four hidden fees.
Then write a one-page request. It says: "Move me to interchange-plus pricing at IC + 0.25% + $0.10. Waive PCI non-compliance because we have completed the SAQ. Drop the monthly minimum. Cap chargeback fees at $15. The alternative is I move the account."
That is the negotiation. The processor will counter. The full lever-by-lever breakdown is in the Payment Processor Negotiation Playbook.
Step 6: Pick the next move
Three options after the audit. Renegotiate, switch, or stay.
Renegotiate if your current processor can match the best written quote and the relationship is otherwise clean. Some processors will cut markup to keep the account.
Switch if competing written quotes beat your effective rate by a clear margin and the processor will not match, you are on tiered or blended pricing, or the processor has held funds in a reserve you never agreed to. Before you switch, compare any early-exit charges with the savings for the months left on the term; if the exit charges are bigger, give notice on time and wait for the end date. On reserves specifically, see Capped vs Rolling Reserves.
Stay if the processor matches the best quote, or if the cost of switching (integration, hardware, exit charges) is bigger than the savings.
What audits typically uncover
There is no published data on what a typical audit finds, so treat any average-savings figure with caution, including ones from processors offering free audits. What you can measure is the spread in published prices. Here is the gap between the cheapest and the most expensive in-person option in our cost tables (prices checked Oct 2026). A tiered contract can sit above all of them.
Under $50K monthly volume: at $10K a month, $211 (Helcim) to $290 (Square), a gap of $79 a month or $948 a year.
$50K to $250K monthly: at $50K a month, $1,020 (Helcim) to $1,450 (Square), $430 a month; at $250K, $4,475 (Stax) to $7,000 (Stripe Terminal), $2,525 a month.
$250K to $1M monthly: at $1M a month, $17,300 (Stax) to $28,000 (Stripe Terminal), $10,700 a month. Reserve and funding terms start to matter as much as the rate.
Above $1M monthly: negotiated terms matter more than list prices, so the audit becomes the basis for an RFP to several acquirers, sometimes paired with multi-acquirer routing, covered in Approval Rate Recovery.
Two things to check at every volume. First, how long the contract has run without a rate review: many contracts allow fee changes with notice, so older contracts are the ones to audit first. The audit is the forcing function that resets the clock.
Second, on tiered contracts, the share of volume billed at mid- and non-qualified rates. The operator was sold on the "qualified" rate. If $60,000 of a $200,000 month moved from a 1.69% qualified rate to 2.45% mid-qualified, that alone would cost $456 a month.
Free DIY vs paid audit
Three flavors of audit exist. They are not the same product.
DIY (free, this playbook): works at any volume. The math is not hard. The work is reading carefully.
Free audit from a competing processor: this is a sales tool. The competing processor will find real savings, but those savings come bundled with their own contract. The numbers are usually accurate. The recommendation is biased. Treat it as a second opinion, not as truth.
Paid third-party audit: fees and fee structures vary (some charge a share of the savings), so get the price in writing. It can be worth it on a large tiered or blended legacy contract. Ask whether the auditor earns anything from the processor you end up with.
Frequently asked questions
How long does a merchant statement audit take?
It depends on how many statements and line items you have. Pulling three months of full PDF statements is usually the slowest step. The math itself fits in one spreadsheet.
How much do merchants typically save after an audit?
There is no published average, because savings depend on your pricing model, card mix and fees. Size it on your own account: on $100K a month, every 0.10 percentage point off your effective rate is $100 a month, or $1,200 a year. For reference, our cost tables put in-person processing at $50K a month between 2.04 percent (Helcim) and 2.90 percent (Square) at published prices (checked Oct 2026).
What is the most common hidden fee on a merchant statement?
There is no published count, but four are worth checking first: the PCI non-compliance fee, charged when the annual self-assessment questionnaire is not on file, a monthly minimum shortfall, batch fees, and statement fees. Amounts vary by processor, so check your statement. Checkout.com, for example, publishes a $150 monthly PCI non-compliance fee for Level 4 merchants after a 60-day grace period, while Helcim lists no PCI fee (checked Oct 2026). None of these are interchange. The processor sets each one.
Should I do the audit myself or pay someone to do it?
This playbook works at any volume, because the math is the same. A paid third-party audit can make sense on a large tiered or blended contract if its fee is small next to the markup you can already see; get the fee in writing and ask whether the auditor earns anything from the processor you end up with. Free audits offered by other processors are sales tools, not audits.
Can I negotiate using only one month of statements?
You can, but you lose leverage. A processor will argue your card mix was unusual that month. Three months is the minimum to make the negotiation airtight. Six months is better if your volume swings seasonally.
Worked example: a 90-day audit on a $180K monthly account
A hypothetical specialty retail operator, three locations, about $180K monthly volume across the chain, average ticket $58, on the same processor for 5 years on tiered pricing.
Step 1: pulled three monthly statements as PDFs. Step 2: total volume across the three months was $542,000. Total fees across the three months was $17,710. Effective rate: 3.27%.
Step 3: classified line items. Interchange and assessments came in at $12,180 (2.25% of volume). Markup, fees, and junk: $5,530 (1.02% of volume). The 1.02% markup line is the tell. For comparison, Helcim's published in-person margin at this volume is interchange + 0.25% + 7¢ (checked Oct 2026).
Step 4: hidden fees. PCI non-compliance at $30/month per location, $90/month total, $1,080 per year. Monthly minimum shortfall on the slowest location: $25/month, $300 per year. "Regulatory product fee" at 0.18% across all locations: $324/month, $3,888 per year. Combined junk: $5,268 per year recoverable before any rate negotiation.
Step 5: built the case. Effective rate 3.27%. Suppose two competing interchange-plus quotes work out to 2.55% and 2.70% on this card mix. Gap: 0.57% to 0.72%. On $2.16M annual volume, that is about $12,300 to $15,550 per year. The gap already includes the $5,268 in junk, because the 3.27% effective rate counts every fee.
Step 6: outcome. If the existing processor matched IC + 0.25% + $0.10, struck PCI non-compliance, dropped the regulatory product fee and removed monthly minimums, the new effective rate would be about 2.67%: 2.25% interchange and network fees, 0.25% markup, and about 0.17% in 10-cent transaction fees on roughly 3,100 sales a month. Annual savings versus the prior contract: about $13,000 ($70,840 down to about $57,880).
Want a second set of eyes?
Take the quiz for a matched shortlist by email. If you leave a phone number, Barak may call and can read your current statement or pricing offer with you.
Get my matched shortlist →