Mastercard Incorporated
MA · NYSE Arca · United States
Routes card payments between banks across 210 countries and earns a small fee on every transaction.
Mastercard sits in the middle of every card transaction, routing the payment in real time between the bank that issued the card and the bank connected to the merchant, earning a small fee on the dollar volume that flows across its switch without ever lending money itself. That switch is live in 210 countries, and getting into each one required a separate regulatory licence plus bilateral agreements with local acquiring banks whose terminals are physically certified to Mastercard's own specifications — a web that took decades to build and that any new entrant would have to replicate country by country, in the same sequence, with no shortcut. Because switching to a rival network would force issuing banks to mail entirely new cards to every customer at once while merchants simultaneously rebuilt their terminal integrations and country-level agreements, both sides of the network are effectively locked in by the other side's switching cost. The main threat is not a competing card network but governments: if central banks issue digital currencies that route over public rails, or if open-banking rules like Europe's PSD2 expand to cross-border payments, the bilateral agreement web stays intact but transactions stop flowing through it, and the fee engine stops with them.
How does this company make money?
The main source of income is interchange fees — a small number of basis points collected on every dollar that flows across the switch, paid by acquiring banks and usually passed along to merchants. On top of that, the company sells fraud prevention tools, data analytics, and cybersecurity services directly to banks and other financial institution clients.
What makes this company hard to replace?
Issuing banks cannot move to a different network without reissuing entire card portfolios — new physical cards — to every one of their customers. Merchants cannot switch either, because their point-of-sale terminals are EMV-certified and integrated specifically for each network. Any merchant wanting cross-border acceptance would also need to rebuild bilateral acquiring-bank agreements in each country, a process that takes years.
What limits this company?
On the busiest days of the year — like Black Friday — enormous numbers of payments hit the switch at the same moment. Unlike most software systems, this one cannot borrow spare computing power from elsewhere to handle the surge, because real-time payment authorization needs its own dedicated hardware. That hardware capacity is the ceiling, and it cannot simply be expanded with software.
What does this company depend on?
The company cannot run without issuing bank partnerships that put the network's logo on cards, acquiring bank relationships that connect merchants to the payment system, telecommunications infrastructure that carries real-time transaction data, regulatory payment-network licences granted country by country, and EMVCo certification standards that define how chip cards communicate with terminals.
Who depends on this company?
E-commerce platforms like Amazon and Shopify depend on real-time payment authorization — without it, purchases would fail at checkout and cart abandonment would spike. Issuing banks depend on the interchange revenue and the economics of their card programs. Cross-border merchants depend on the network for international card acceptance; without it, they would have no equivalent alternative routing network to fall back on.
How does this company scale?
Once the network infrastructure is in place, processing one more transaction costs almost nothing — software handles additional volume cheaply and the fee comes in automatically. What does not scale easily is the physical data-center hardware required for real-time authorization, which cannot be shared or virtualized during peak loads. As transaction volume grows, that dedicated infrastructure remains the hard constraint.
What external forces can significantly affect this company?
Central bank digital currency initiatives could route government-backed payments around card networks entirely. European PSD2 regulation already requires banks to open their systems to direct account-to-account transfers, reducing the need for card rails. Chinese payment apps have built alternative rails in large markets that traditional card infrastructure does not touch.
Where is this company structurally vulnerable?
If a major central bank digital currency framework — or an open-banking rule like PSD2 applied to cross-border payments — were adopted by large issuing banks, those banks could send payments directly over government or account-to-account rails. The network's switch would be bypassed entirely, its bilateral agreement web would become irrelevant in those corridors, and the interchange fees flowing across them would disappear.