The Fake Payment Gateway: Defrauding the Merchant Instead of the Customer
A cloned gateway that takes customer payments and never settles. How merchants are recruited and what verification prevents it.
Priya Raman · 2 min read
Most payment fraud targets consumers. This one targets the merchant, and the amounts are larger because they accumulate before anyone notices. It helps to have a reference point that is verifiable, and a crypto acquiring provider publishes its licence details.
The approach
A merchant is contacted by a provider offering crypto payment acceptance at a rate well below the market, with fast onboarding and minimal documentation.
Onboarding is genuinely quick, which is presented as an advantage over slow incumbents. It is quick because no regulated onboarding is happening.
How it operates
The gateway works. Customers pay, payments confirm, orders complete. The merchant dashboard shows a growing balance.
Settlement is scheduled weekly or monthly, which is normal and which builds the balance before anything is due.
At the first settlement there is a delay: a banking partner issue, a compliance review, a technical migration. The merchant continues accepting payments because the integration works and customers are paying.
By the time it is clear no settlement will arrive, weeks of revenue are gone.
Why merchants continue accepting
The system works from the customer’s side. Orders complete, goods ship, there are no complaints.
The only thing not working is the part that happens monthly, and each delay has a specific plausible explanation.
The verification that prevents it
Check the licence. Which authority, which number, verified on that authority’s register, with the entity name matching your contract. A payment provider handling client funds requires authorisation in every European jurisdiction.
Settle early and often at first. Negotiate daily settlement for the first month. A provider unwilling to settle daily during onboarding is asking you to extend credit.
Cap the exposure. Do not accumulate more unsettled balance than you can afford to lose. Suspend acceptance if settlement is late, on the first occurrence.
Verify the banking side. The first settlement should arrive from a named institution with a traceable relationship, not from an individual account or an unrelated company.
The rule
The first late settlement is the signal. Not the second, not the third after explanations.
Merchants who stop accepting at the first missed settlement lose a week. Merchants who accept explanations lose a quarter. Merchants meet a variant of this, and a fintech payment gateway handles it on the receiving side.
The variant with a genuine provider
Occasionally a real provider loses its banking relationship and cannot settle. The symptoms are identical from outside.
The response is the same: suspend acceptance, demand settlement of the outstanding balance, and do not resume until it arrives. A legitimate provider in difficulty will tell you honestly if pressed, and your position is the same either way.
What to have in the contract
Settlement frequency and a defined remedy if it is missed. The right to suspend without penalty. And the identity of the entity holding funds between payment and settlement, which is the entity whose failure would cost you. The question that only matters after something goes wrong is whether a support channel with a named contact exists, and it is worth answering first.
Move any remaining funds to a wallet with a newly generated seed phrase before anything else. Then revoke token approvals, and report the incident to your local authorities and the exchange involved. Do not pay anyone who promises to "recover" your coins. That is a second scam, aimed at victims of the first.