CardConnect Review

A Fiserv-owned merchant services brand built around the CardPointe platform, sold almost entirely through independent sales agents and ISOs. The technology is capable — CardPointe covers in-store, online, mobile and virtual terminal, CardSecure handles tokenisation and point-to-point encryption, and Clover hardware comes with it. The commercial record is the problem. CardConnect paid $7.65 million in 2021 to settle a class action covering 110,875 merchants who said it charged fees their agreements never named, and in July 2024 a Pennsylvania medical practice filed a fresh proposed class action alleging the same conduct had resumed, citing a $199.99 annual compliance fee, a $215 security bundle fee and a $200 annual membership fee introduced in February 2024. Nothing about pricing is published, terms vary by whichever agent sells to you, and the recurring complaint on every public channel is how hard it is to leave.

Estimated annual cost at three realistic processing volumes, using CardConnect’s published online rate plus monthly fees. Real costs vary with average transaction size, chargeback rate, and any negotiated terms.

Who CardConnect actually is

The company was founded in 2006 as Financial Transaction Services by Brian P. Shanahan, operating out of Cleveland. It rebranded to CardConnect in 2013 and moved its headquarters to King of Prussia, Pennsylvania, went public through a SPAC merger in 2016, and was bought by First Data for $750 million in 2017. When Fiserv completed its $22 billion acquisition of First Data in July 2019, CardConnect came with it. If you see 2013 given as the founding date — BBB records the business as started 11/1/2013 — that is the rebrand, not the beginning.

Structurally, CardConnect is a registered ISO of Citizens Bank, KeyBank, Pathward, PNC and Wells Fargo, selling processing on Fiserv's rails through a network of independent sales agents and sub-ISOs. That distribution model explains most of what follows in this review. There is no single CardConnect price or CardConnect contract, because the agent writing your deal decides both.

The technology is not the problem

CardPointe is a competent merchant platform: card acceptance in-store, online, on mobile and through a browser-based virtual terminal, with transaction management and reporting in one place. CardSecure, the tokenisation and point-to-point encryption layer, is patented and well regarded, and it is the main reason software vendors chose to build on the platform. The gateway has proper developer documentation and a library CardConnect markets as 300-plus integrations. Clover hardware is available because Clover is also Fiserv.

This matters because a lot of merchants arrive here by way of their software rather than by shopping. If your ERP or practice-management system offers integrated card payments, CardConnect is a plausible thing to find underneath. That is a legitimate reason to be on it. It is not a reason to accept the pricing that arrives with it.

The fee history, in order

In February 2021 the Eastern District of Pennsylvania gave final approval to a $7.65 million settlement in Teh Shou Kao et al. v. CardConnect Corp. The class was 110,875 merchants, 43,837 of them still customers, who had paid at least one of three specific charges between November 2012 and July 2020: a $9.00 annual Pulse Fee, a $15.00 monthly CardPointe Fee and a $19.95 monthly PCI Non Comp Fee. The merchants' case was that their agreements never identified those fees. As part of the settlement CardConnect agreed to amend its practices for at least three years so existing customers had more opportunity to cancel without an early termination fee when CardConnect itself raised fees.

Separately, the fee-audit firm Merchant Cost Consulting documents two across-the-board increases: September 2023, discount rates up 0.10% on all card types with authorization fees up $0.05; and April 2024, a further 0.10% + $0.05 per transaction on Visa, Mastercard, Discover, Amex full acquiring and PIN debit. It notes the increases were not applied uniformly. It also reports a $259.99 annual PCI compliance fee and a $19.95 monthly CardPointe tokenisation fee introduced in July 2024.

Then, on 11 July 2024, a Pennsylvania professional corporation — Richard E. Obringer PAC, doing business as Advanced Surgical Associates — filed a proposed class action in the same court, No. 2:24-cv-03034. It alleges CardConnect charged a $199.99 "Annual Compliance SVC Fee", a $215 "Annual Fee Security Bundle" and, from February 2024, a $200 "Annual Membership Fee", none named in the merchant agreement. The complaint's mechanism is the Program Guide: a separate document it describes as nearly fifty pages of small print, allegedly never supplied, which the plaintiff says gives CardConnect unilateral discretion over charges.

None of the 2024 allegations have been proven, and a filed complaint is one side of a dispute. But the sequence — a settled case naming specific undisclosed fees, an undertaking to make cancellation easier that ran for three years, and a fresh complaint alleging new undisclosed fees appearing in February 2024 — is the sequence a prospective merchant has to price in.

What merchants say

The public review record is small but unusually consistent. CardConnect's Trustpilot profile stands at 1.8 out of 5 from 15 reviews, all one star, unclaimed and unanswered. BBB gives an A+ on an unaccredited profile while listing roughly 71 complaints closed in three years and 17 in the last twelve. Merchant Maverick rates it 2.5 out of 5.

Fifteen Trustpilot reviews is not a rating. What makes it worth reading is that the themes are identical across all three channels and identical to the litigation: annual compliance or PCI fees appearing without warning at $150, $269 or $299 depending on the merchant; cancellations requested by phone that never took effect; a written-notice requirement to a specific email address; billing continuing about thirty days past the request; early termination fees charged to merchants who believed they had none. When independent channels converge on the same complaint, the complaint is the finding even when the sample is thin.

If you are going to use CardConnect anyway

• Ask for the Program Guide before signing, not after. If the agent cannot produce it, that answers the question.
• Get every fee — monthly platform, gateway, tokenisation, PCI, annual compliance, statement, batch — named with its amount inside the agreement itself, not by reference to another document.
• Get the term, the auto-renewal clause, the notice window and the early termination fee in writing. Reported outcomes range from month-to-month with no ETF to multi-year with a $750 charge.
• Try to negotiate a notice requirement or a cap on unilateral fee increases. Two documented across-the-board rises in eight months is the pattern you are protecting against.
• Insist on interchange-plus if you have any volume at all. It is available through some channels and it is the only structure where you can see what the increase actually was.
• Audit your statement quarterly against the agreed schedule. Every fee in both class actions would have been visible on a statement to somebody who was looking.
• When you leave, cancel in writing to the address the contract specifies, keep the acknowledgement, and check the following two statements.

The verdict

The C+ is not a judgement on CardPointe, which is a good platform, or on CardSecure, which is a genuinely strong piece of security engineering. It is a judgement on how the product is sold. A merchant choosing a processor is choosing a multi-year billing relationship, and the two things that relationship most needs — a price you can see and a contract you can exit — are the two things CardConnect has repeatedly been accused of withholding.

If your software already runs on CardPointe and the deal in front of you is interchange-plus with the fees named in the agreement, take it and audit it. If you are choosing from a blank sheet, there are providers in this market who will tell you what they charge before you talk to anyone, and that is worth more than a slightly better headline rate you cannot verify.