FinWiki Public-source finance field guide
日EN

Japan card acquiring stack

Confidence Likely
Updated 2026-05-20
Review by 2026-11-15
Sources 3 Machine-translated Original (JA)
#payments#card-acquiring#installment-sales-act#PSP#PCI-DSS
On this page

TL;DR

Japan card acquiring should be read as a merchant-contracting and card-data-control stack, not only as a payment-processing feature. METI’s Installment Sales Act materials define the registered merchant-contracting role as the business of concluding contracts that allow merchants to handle credit card numbers, and they make registration depend on who has the final authority to approve merchant acceptance.

This page routes questions about acquirers, PSPs, merchant onboarding, PCI DSS, fraud controls, and the legal difference between a registered merchant-contracting party and a service provider working under another acquirer.

Core Stack

LayerFunctionMain question
Cardholder / issuerIssues the card and manages cardholder credit / payment relationship.Who owns the consumer credit and repayment relationship?
Network / brandProvides card network rules, brand acceptance, clearing conventions, and security requirements.Which network rules apply to the transaction?
Acquirer / merchant-contracting partyConcludes merchant contracts and takes responsibility for merchant management.Who has final authority to let the merchant accept cards?
PSP / payment gatewayIntegrates merchant checkout, tokenization, fraud tools, routing, and settlement reporting.Is it only processing / first screening, or does it hold merchant-approval authority?
MerchantSells goods / services and receives card acceptance capability.Does the merchant comply with card-data and fraud-prevention requirements?

Registration Boundary

The key Japanese legal boundary is the “credit card number handling contract concluding business” under the Installment Sales Act.

SituationLikely reading
The acquirer signs the merchant contract and keeps final approval authority.The acquirer is the registered merchant-contracting party; PSP work may be delegated support.
The PSP receives comprehensive authority from the acquirer, makes the practical final merchant-approval decision, and manages merchants.The PSP itself can need registration as the merchant-contracting party.
The PSP only performs first screening, technical connection, or operational support while the registered acquirer retains final authority.Registration may not be required for the PSP role itself, but contract facts matter.
A foreign company conducts the business in Japan.METI says a domestic business office registration is required for the relevant business.

Operating Duties

METI’s FAQ emphasizes three operating duties that matter for FinWiki analysis:

  • Merchant investigation: initial and ongoing merchant review to correct or exclude problematic merchants.
  • Card-number management: controls against leakage of credit card numbers and related customer / transaction information.
  • Fraud prevention: layered controls such as PCI DSS, card-data non-retention, EMV / 3-D Secure, authorization monitoring, and risk-based merchant controls.

For company analysis, this means a PSP’s moat is not only API convenience. The more valuable part is its compliance and risk engine: underwriting merchants, monitoring fraud, reducing chargebacks, and satisfying acquirer / network / regulatory expectations.

Business Model Lens

Revenue / risk itemWhy it matters
Merchant discount / processing feesCore payment take-rate pool, but often compressed by competition and large-merchant negotiation.
Gateway and value-added servicesTokenization, recurring billing, fraud tools, subscriptions, multi-payment orchestration, and data services.
Settlement timingCreates working-capital, credit, reserve, and operational-risk questions.
Chargeback / fraud exposureDetermines underwriting standards, reserve policy, and merchant monitoring cost.
Registration and security burdenRaises fixed cost and favors scaled providers with compliance infrastructure.

JapanFG Relevance

  • GMO Payment Gateway is the clearest listed PSP / merchant acquiring infrastructure route.
  • JCB connects card network, issuing, acquiring, and Japanese domestic card rails.
  • PayPay FG, Rakuten FG, and AEON-related card businesses use card acquiring and issuing economics as part of broader retail-finance ecosystems.
  • Japan cashless payment landscape should use this page when card acceptance, PSP registration, PCI DSS, or merchant-contracting responsibility becomes the decisive issue.

Sources

  • METI: Installment Sales Act post-payment field overview and FAQ.
  • METI: application materials for credit-card-number handling contract concluding business.
  • METI: registered business operator lists.

Discovery

Keep reading

Related

Read next

Links here