A plain-language guide to moving your business from Stripe, Square, or PayPal to a stable Merchant Account with Authorize.net. Version 5 — April 2, 2026.
"This is a robust discussion. I am your Senior Infrastructure Partner. Ask why or how at any time. If you get stuck, tell me exactly where you are and we will build a workaround together. You are not following steps alone."
When you use PayPal, Stripe, or Square, you do not have your own merchant account. You are sharing one large account with millions of other businesses. These platforms are designed for speed — anyone can sign up in minutes. That ease of entry comes with a trade-off: automated systems flag anything unusual.
What looks "unusual" to an automated system:
What changes with a dedicated merchant account: Authorize.net uses underwriting — a bank reviews your business before you start processing. It takes a few extra days upfront. But once approved, the bank knows who you are. A high-ticket sale or seasonal spike is not a surprise. You own the account.
Note — June 2024 Fraud Detection Update: Authorize.net updated how chargebacks are handled based on four specific data points captured at the point of transaction. Understanding these — and making sure your checkout is configured to capture them — is the single most important thing this guide teaches you. Covered in Step 5.
Do not start the Authorize.net application until you have all five items ready. Applications missing any of them will be declined during underwriting. Getting declined does not disqualify you permanently — you can reapply — but it delays everything.
1. An LLC and EIN
You must apply as a legal business entity. A sole proprietorship using your personal name does not meet the underwriting standard. You need your IRS-issued Employer Identification Number (EIN).
2. A Business Checking Account
The account must be in your legal business name, not your personal name. This is where Authorize.net will deposit your settlements.
3. A Live, Fully Cooked Website
Your website must be live and publicly accessible. "Fully Cooked" means: no password protection, no "Coming Soon" pages, all products visible with clear pricing. A site that is still under construction will cause your application to be declined. No exceptions.
4. Required Website Pages
Your site must have three pages linked in the footer before you apply: a Refund Policy, a Privacy Policy, and Terms of Service. The underwriter checks for them. Free generators exist — search "free privacy policy generator."
5. A Business Address and Phone Number
Your website must display a physical business address and a customer service phone number. A P.O. Box is acceptable. A Google Voice number works for the phone requirement.
The following four disclosures are not optional. Getting any of them wrong is the most common reason merchants get their accounts flagged or frozen after approval — not before.
Disclose your actual peak processing volume — not your average. If you process $1,000 most months but occasionally hit $5,000 during a launch or busy season, disclose the $5,000. Processing above your stated volume triggers a velocity fraud freeze. Overestimating is safe. Understating is not.
Disclose your highest single-ticket item explicitly during the application. A $2,000 sale on an account whose stated average transaction is $200 looks like fraud to the underwriting system. If you sell custom gear, premium packages, or high-value services, list them. One unexpected large transaction can trigger an immediate review.
Tell the underwriter your actual service delivery or shipping window. A 30-day lead time on custom gear, a 2-week service turnaround, or a pre-order model increases chargeback risk in the bank's model if a customer disputes before delivery. Omitting it doesn't make the risk go away.
Do not run a flash sale or major promotional event without notifying your merchant provider first. A sudden, unannounced spike — even legitimate sales — can look like fraudulent activity if it's outside the pattern your underwriter approved.
You do not sign up for Authorize.net the way you sign up for Stripe. Authorize.net is a payment gateway — it handles transaction routing — but you also need a merchant service provider to hold the money and settle it into your business account. Look for the phrase "Authorize.net as the gateway" in their offerings.
Step 1: Choose a Merchant Service Provider
Research providers that offer Authorize.net as their payment gateway. Compare monthly fees, transaction fees, and contract terms. Avoid providers requiring long-term contracts with early termination fees until you know you are happy.
Step 2: Submit Your Business Documents
Upload your Articles of Organization and your most recent 2–3 months of business bank statements. If your LLC is brand new, some providers will accept personal bank statements with an explanation.
Step 3: Complete the Identity Verification
The primary owner must provide their Social Security Number and a photo of a government-issued ID. Required by federal law (Bank Secrecy Act). Standard for every merchant account.
Step 4: Disclose Your Expected Processing Volume
Answer honestly based on your actual peak projection. If you significantly understate your volume and then process much more, the account will be flagged for review. Overestimating is fine — processing less is not a problem.
After you submit your application, the review typically takes 3 to 7 business days. Do not turn off your current payment processor. Keep it running as your bridge.
The bridge method:
Your first task after approval: configure the Advanced Fraud Detection Suite (AFDS). Without it, your checkout is vulnerable to card testing bot attacks — automated scripts trying thousands of stolen card numbers until one works. This is not optional.
1. Address Verification (AVS)
Requires that the billing zip code entered by the customer matches the zip code on file with their card issuer. Set this to decline transactions where there is no match.
Your checkout must actively collect the billing zip code AND pass it through to Authorize.net. If your Ecwid (or other cart) checkout form does not have the billing address field enabled, the AVS filter has nothing to check — it runs blind and provides no protection. Confirm in your cart settings that billing address capture is turned on.
2. Card Code Verification (CVV)
Requires the 3-digit security code on the back of the card. This code is not stored in databases, so its presence is a strong signal that the customer has the physical card.
Your checkout must require the CVV field — not make it optional. If CVV is optional in your cart settings, customers can submit without it and the chargeback protection does not activate. Check your cart's checkout field settings.
3. Daily Velocity Filter
Sets a limit on how many transactions can be attempted per day. This stops bot attacks without blocking legitimate customers.
If you average 5 sales per day but hit 50 during a launch, set the filter to 60 — not 10. A filter set at or near your daily average will flag your own successful launch as a bot attack and freeze the account mid-sale. Think about your busiest possible day and set the ceiling above that.
4. IP Address Filters
If your business primarily serves customers in specific countries, you can block transactions from regions with high fraud rates. Found in your AFDS control panel under Security Filters.
The June 2024 Chargeback Protection Update — The Four Data Points
[VIDEO TRANSCRIPTION PENDING — insert after shoot. This is the primary differentiator of this guide. No other Authorize.net guide contains this explanation at this level of specificity.]
Authorize.net connects to most major e-commerce platforms. The steps below use Ecwid as the example, but the same general process applies to WooCommerce, Shopify (via third-party gateway options), and other platforms that support Authorize.net integration.
1. Find Your API Credentials
In your Authorize.net Merchant Interface, go to Account → Settings → Security Settings → API Credentials and Keys. You will find your API Login ID and a Transaction Key. Copy both.
2. Connect in Ecwid
In your Ecwid admin, go to Payment. Click "Choose Payment Method" and look for Authorize.net. Enter your API Login ID and Transaction Key. Set the mode to "Live" when ready to accept real payments.
3. Enable Subscriptions (if applicable)
If you sell recurring products — lessons, memberships, monthly boxes — enable Automated Recurring Billing (ARB) in Account → Settings → Business Information → Manage Subscriptions before Ecwid can process those transactions.
4. Connect Print on Demand (if applicable)
If you use a print-on-demand service like Printful or Printify, set your Ecwid order payment status to "Captured" (not "Authorized"). Most print-on-demand services will not start production until a payment is fully captured.
Before you announce your new checkout to your customers, run through each item below. Finding a problem during testing is much easier than finding it after a real customer hits an error.
Run a test purchase
Buy a low-cost item from your own store using a real credit card. Confirm the transaction goes through and appears in your Authorize.net Merchant Interface.
Void the test transaction
Find the test transaction and void it so you are not charged. This also confirms you know how to issue a refund when a customer needs one.
Check your payment descriptor
Look at your bank or card statement after the test. The charge description should read like your business name. If it reads as something unrecognizable, contact your merchant provider to update your statement descriptor.
Confirm email receipts
Both you and your test customer should have received a confirmation email. If either is missing, check your Authorize.net email notification settings.
Wind down your old processor
Once the test is clean and your first real Authorize.net deposits have settled into your bank, move your old processor to a secondary or inactive position.
You are set up. If you ran into anything this guide did not cover, your LLM session is the right place to work through it. Describe exactly where you are and what you are seeing. Ask why or how at any time.
If your situation is complex — unusual business type, high-volume processing, or you want a second set of eyes — a consulting session is available at agentbostonstudios.com.