PAYMENTS M&A ADVISORY
In brief
Payments M&A advisory is sell-side investment banking for companies that move money, from merchant acquiring and payment facilitation to cross-border, B2B, billing and fraud platforms. Windsor Drake represents founder-led payments companies with $5 million to $300 million in enterprise value in the US and Canada, sell side only. Buyers price net revenue and merchant retention. On the firm's payments valuation benchmarks, PayFac and merchant acquiring businesses sell for 3x to 6x retained net revenue.
By Jeff Barrington, Founder and Managing Director. Summary added October 1, 2026.
Payments M&A advisory is sell-side representation for companies that power the movement of money, merchant acquiring, payment processing, payment facilitation, cross-border settlement, B2B payment automation, billing infrastructure, and fraud and risk management platforms. It requires fluency in two domains simultaneously: fintech transaction execution, where valuation hinges on transaction volume economics, net revenue per transaction, and merchant retention, and the payments industry itself, where take-rate composition, interchange economics, residual portfolio structures, money transmitter licensing, PCI DSS compliance, and the structural difference between processing revenue, gateway fees, and platform monetization create transaction dynamics that generalist technology M&A processes do not address.
The buyer universe for payments companies is distinct and multi-layered. Acquirers include global payment processors building integrated commerce platforms, PE firms executing payments infrastructure roll-up strategies, vertical SaaS companies seeking embedded payment capabilities, banking institutions expanding digital payment services, enterprise software companies adding payment rails, and cross-border platforms consolidating regional processing networks. A generalist fintech advisor does not understand how these buyers evaluate merchant portfolio attrition, net revenue retention by cohort, residual income durability, or the strategic premium a vertical SaaS acquirer assigns to an embedded PayFac capability with 95%+ merchant retention.
Windsor Drake combines institutional sell-side process discipline with direct knowledge of payments buyer behavior, transaction volume economics, regulatory licensing requirements, and the interchange and take-rate dynamics that shape how acquirers model payments businesses across merchant acquiring, payment facilitation, cross-border processing, B2B payments, billing and subscription infrastructure, and fraud prevention platforms.
Windsor Drake advises founder-led companies across seven payments domains:
The firm's payments practice is built for companies that meet the following profile:
Payments companies generate revenue through transaction processing, a model where revenue scales with merchant activity rather than contract renewals. Embedded payment relationships with high switching costs create retention economics that acquirers model as structurally recurring. Once a merchant integrates a payment processor into their point-of-sale system, e-commerce platform, or ERP, the cost and operational disruption of migration creates retention rates that frequently exceed 90%. Buyers evaluate this embedded processing relationship as a durable revenue asset with predictable volume growth.
Founders 12 to 18 months from a potential transaction benefit from early assessment through Windsor Drake's exit readiness practice. Pre-transaction engagement allows for merchant portfolio analysis, take-rate optimization, net revenue segmentation, money transmitter license documentation, PCI compliance review, residual portfolio structuring, and buyer universe mapping before a formal process launches.
Windsor Drake runs a milestone-based process calibrated to the specific dynamics of payments transactions, including transaction volume economics, net revenue segmentation, take-rate composition analysis, regulatory licensing, and the merchant portfolio retention metrics that determine how acquirers model payments company value.
Deep analysis of gross processing volume, net revenue composition by merchant segment, take-rate structure (interchange markup, gateway fees, platform fees, value-added service revenue), merchant retention by cohort, net revenue retention, EBITDA margins, residual portfolio economics, embedded payment penetration rates, PCI DSS compliance posture, money transmitter licensing coverage, and merchant concentration by vertical and geography. Development of the positioning thesis calibrated to how payments acquirers evaluate targets, framing net revenue durability, embedded processing relationships, and transaction volume growth as acquisition premiums distinct from standard SaaS metrics.
Identification and qualification of global payment processors seeking merchant vertical expansion, PE firms executing payments infrastructure roll-up strategies, vertical SaaS platforms adding embedded payment capabilities to increase platform monetization, banking institutions expanding digital payment and merchant services, enterprise software companies building integrated commerce solutions, and cross-border platforms consolidating regional processing networks. Each buyer evaluated on merchant vertical overlap, processing volume fit, regulatory licensing compatibility, and strategic rationale for the acquisition.
Direct, confidential outreach to the buyers best placed to pay, many of whom the firm already knows. All conversations gated behind non-disclosure agreements with merchant data and processing relationship protections. Payments transactions carry heightened confidentiality requirements, merchant portfolios, processing volumes, pricing structures, and ISO/agent relationships represent commercially sensitive information that directly affects competitive positioning. Information released in stages with payments-data-specific safeguards protecting merchant identity and processing terms.
Receipt and evaluation of indications of interest. Structured negotiation of valuation, deal structure, earnout provisions, and founder role. Payments transactions carry structure-specific considerations, residual portfolio ownership and transfer mechanics, merchant contract assignment requirements, ISO agreement portability, processing relationship continuity, and money transmitter license transfer or re-application timelines that directly affect closing mechanics. Earnout structures in payments are frequently tied to processing volume retention, merchant attrition thresholds, and net revenue growth rather than standard revenue targets.
Coordination across financial, legal, regulatory, and technical workstreams. Payments diligence includes money transmitter license review and transferability analysis across applicable states and provinces, PCI DSS compliance validation, card network registration and BIN sponsorship documentation, merchant underwriting and risk management practices, chargeback ratio analysis and reserve requirements, anti-money-laundering and KYC program evaluation, data security and cardholder data environment assessment, and processor and acquiring bank relationship portability. The advisor manages the data room and resolves regulatory findings before they become deal impediments. The payments due diligence request list sets out what buyers ask for, and change-of-control approvals covers the licenses and consents a sale triggers.
Negotiation of the purchase agreement, including merchant contract assignment and portability provisions, residual portfolio transfer mechanics, money transmitter license transfer or re-application requirements, card network re-registration and BIN migration timelines, PCI compliance continuity obligations, ISO and agent agreement assumption, merchant reserve and holdback treatment, chargeback liability allocation, processing platform migration commitments, and indemnification terms specific to payments regulatory compliance and merchant data handling. Coordination with legal counsel through signing and closing, including post-closing merchant migration timelines and processing platform integration milestones.
Gross processing volume alone does not determine value, net revenue per transaction does. Buyers decompose take rate into interchange markup, gateway fees, platform fees, value-added service revenue, and ancillary charges to model the true economics of each merchant relationship. Companies with diversified net revenue streams, combining processing margin with gateway fees, risk management charges, and platform monetization, command higher multiples than those reliant on interchange spread alone. The composition and trajectory of net revenue, not gross volume, drives payments company valuation. Current pricing evidence is published in the firm’s payments valuation benchmarks and the quarterly fintech M&A multiples series.
Merchant attrition rate is the single most scrutinized metric in payments M&A diligence. Buyers model retention by merchant cohort, vertical, volume tier, and contract structure to assess the durability of the processing relationship. A portfolio with 95% net revenue retention across diversified merchant verticals presents a fundamentally different risk profile than one with 88% retention concentrated in a single industry. Geographic diversification, merchant size distribution, and the presence of long-term processing agreements versus month-to-month relationships directly affect the acquirer's confidence in forward revenue projections.
The depth of payment integration into merchant operations determines switching cost and retention durability. Payments embedded into a merchant's point-of-sale system, e-commerce platform, invoicing workflow, or enterprise resource planning system create operational dependencies that make migration costly and disruptive. Buyers evaluate integration depth as a measure of structural retention, distinguishing between payments companies that function as replaceable commodity processors and those embedded as infrastructure within the merchant's daily operations. PayFac models and integrated software-payment platforms command the highest premiums because the payment relationship is inseparable from the software workflow.
Money transmitter licenses, validated PCI DSS compliance, card network registrations, and state-by-state regulatory coverage represent both market access barriers and acquirer confidence signals. A payments company licensed in 48 states with current Level 1 PCI DSS validation and direct card network registrations presents a fundamentally lower regulatory risk than one operating through a sponsor bank relationship. Buyers model licensing coverage as an acquisition asset, the time and cost to replicate a multi-state licensing portfolio from scratch ranges from 18 to 36 months and significant legal expense. Regulatory infrastructure is a competitive moat that acquirers pay premiums to acquire rather than build.
The technology stack determines integration complexity, scalability, and post-acquisition migration cost. Buyers evaluate API architecture, gateway infrastructure, processing redundancy, uptime SLA performance, PCI cardholder data environment segmentation, and the platform's ability to support new payment methods (real-time payments, digital wallets, stablecoin settlement). Companies built on modern, API-first architectures with clean data environments command premiums over those running legacy systems requiring post-acquisition re-platforming. The cost and timeline of merchant migration to the acquirer's processing infrastructure is a core due diligence variable that directly affects deal structure.
For companies with ISO or agent distribution models, the residual portfolio structure directly affects valuation. Buyers evaluate residual payment obligations to agents and ISOs, the portability of agent agreements upon change of control, exclusive versus non-exclusive distribution arrangements, and the percentage of merchant relationships sourced through owned sales versus third-party agents. A company with 80% of merchants acquired through owned sales channels presents cleaner economics than one reliant on third-party ISOs with residual buyback provisions. Agent agreement portability and residual obligation structures are frequently the most negotiated deal points in payments M&A. How buyers price a residual book against a payment facilitator or a gateway is set out in ISO residuals vs payfac vs gateway valuation.
Gross processing volume is a throughput metric, not a value metric. Two companies processing $500M annually can have radically different economics, one capturing 25 basis points of net revenue, the other capturing 80 basis points through gateway fees, platform charges, and value-added services. Buyers model enterprise value on net revenue, net revenue per transaction, and net revenue retention, not gross volume. Leading with GPV without presenting the net revenue waterfall and take-rate decomposition allows buyers to anchor on the commodity processing metric and suppress the premium that embedded payment economics deserve.
Not all payment revenue carries the same retention profile. Interchange markup on commodity processing is the most vulnerable to competitive displacement. Platform fees charged to merchants using proprietary software features carry higher switching costs. Gateway and orchestration fees tied to deep API integrations are the most durable. Presenting all net revenue as a single line item without segmenting by durability tier, processing margin, gateway fees, platform monetization, and value-added services, prevents buyers from assigning differential multiples to each revenue layer, suppressing the blended valuation the company deserves.
Payments companies operating across multiple states without complete money transmitter licensing coverage face regulatory risk that buyers price into the deal through holdbacks, escrows, or valuation reductions. Discovering licensing gaps during diligence, particularly in states with active enforcement like New York, California, and Texas, creates closing uncertainty that shifts negotiating power to the buyer. A complete regulatory licensing audit documenting state-by-state coverage, pending applications, exemption analysis, and remediation timelines should be completed before the process begins.
An embedded payment relationship, where the processing is integrated into the merchant's point-of-sale system, e-commerce workflow, or business management software, is not commodity processing. The switching cost, integration depth, and merchant dependency create retention economics that acquirers value at materially higher multiples than standalone processing. Companies that present their embedded PayFac or integrated payment capabilities as generic payment processing rather than positioning the integration depth, merchant dependency, and switching cost economics as distinct value drivers leave the most defensible component of their business underpriced.
The relevant buyer pool for a payments company extends well beyond other processors. Vertical SaaS platforms seeking embedded payment monetization, banking institutions expanding digital merchant services, enterprise software companies adding payment rails to their platform, and cross-border platforms consolidating regional processing capabilities all participate in payments M&A. Vertical SaaS acquirers in particular frequently pay premiums for payments companies whose merchant vertical aligns with their software platform, because embedded payment revenue transforms a SaaS company's unit economics. Excluding non-payments buyers narrows the competitive field and eliminates acquirers whose strategic rationale creates the highest valuation urgency.
Merchant processing agreements, ISO contracts, agent agreements, and acquiring bank relationships frequently contain change-of-control provisions, assignment restrictions, or portability limitations. An acquirer discovering that 30% of processing volume flows through non-assignable ISO agreements or that the acquiring bank relationship requires re-underwriting upon ownership change will discount the deal or restructure terms to account for merchant migration risk. Pre-process documentation of every material merchant contract, ISO agreement, and bank relationship, including assignment provisions, termination triggers, and portability mechanics, eliminates the diligence findings that create late-stage deal impediments.
Illustrative example, not a specific transaction.
An integrated payment facilitation platform serving approximately 2,800 merchants across healthcare and professional services verticals with $12M in net revenue, $4.1M in EBITDA, net revenue retention of 106%, and an embedded processing platform handling approximately $680M in annual gross processing volume engaged an M&A advisor to explore strategic alternatives. The merchant portfolio carried 94% merchant retention by count, measured on a trailing twelve-month cohort basis, with 78% of merchants integrated through the company's proprietary practice management software connector. The company held money transmitter licenses in 42 states and maintained Level 1 PCI DSS validation with a clean compliance history.
The advisor positioned the company on three value layers: the embedded processing relationship as a structural retention asset, where the payment integration into practice management software created switching costs that commodity processors cannot replicate, the net revenue composition showing 45% of revenue from platform and gateway fees (high durability) versus 55% from processing margin (moderate durability), each modeled at differentiated multiples, and the 42-state licensing portfolio as a regulatory moat representing 24+ months and significant capital to replicate. The buyer universe included a healthcare vertical SaaS company seeking embedded payment monetization to transform its unit economics, PE firms with payments infrastructure portfolios, a global processor expanding into healthcare verticals, a banking institution adding digital merchant services capabilities, and a cross-border platform seeking US healthcare payment processing access.
Competitive tension between the healthcare SaaS platform, which valued the 2,800-merchant footprint and the embedded software-payment integration as a monetization accelerator, and a PE-backed payments consolidator building a multi-vertical integrated processing platform drove the final multiple above initial indications. The clean regulatory documentation (42-state licensing with no enforcement actions), Level 1 PCI DSS validation history, and pre-audited merchant contract portability analysis eliminated the regulatory and migration risks that derail payments transactions. The deal included a cash-at-close component, a processing volume retention earnout tied to merchant attrition thresholds, and retention packages for the merchant services and compliance teams. Process from engagement to signing: about six months.
This example is provided for illustration. Specific transaction details, parties, and outcomes have been omitted or generalized. It does not represent a specific Windsor Drake engagement.
Payments companies are not SaaS companies. They are not valued like SaaS companies. That distinction is one of the first things to test when choosing a sell-side M&A advisor, and founders still weighing the timing can start with should you sell your fintech company. And the buyers who acquire them do not evaluate them using SaaS frameworks. A payments company's value is determined by net revenue per transaction, take-rate composition, merchant portfolio retention by cohort, residual portfolio economics, regulatory licensing coverage, and integration depth into merchant operations. A generalist SaaS advisor who values a payments company on ARR multiples without decomposing the net revenue waterfall into processing margin, gateway fees, platform monetization, and value-added services will misprice the business and attract the wrong buyers.
The deal mechanics are different from technology M&A. Money transmitter license portability, card network re-registration, BIN migration timelines, merchant contract assignment provisions, ISO agreement change-of-control triggers, acquiring bank relationship continuity, and PCI compliance transfer create closing workstreams that do not exist in software transactions. An advisor who discovers that 35% of processing volume flows through non-portable ISO agreements after the LOI has already cost the founder negotiating power and deal certainty.
The buyer universe is different from other fintech verticals. A vertical SaaS company attracts PE roll-up buyers and platform acquirers. A regtech company attracts compliance platform builders. Payments companies attract global processors, PE-backed payments consolidators, vertical SaaS platforms seeking embedded monetization, banking institutions, and cross-border platforms, buyers whose thesis is built on transaction volume economics, regulatory licensing portfolios, and merchant integration depth that years of payments infrastructure building have created. Windsor Drake maintains distinct buyer relationship maps for each fintech vertical to ensure outreach reaches the parties whose thesis creates the highest valuation urgency.
Six buyer categories: global payment processors and acquirers expanding merchant vertical coverage and geographic reach through strategic acquisitions (the most active buyers, seeking integrated processing capabilities, merchant portfolios, and regulatory licensing assets), PE firms executing payments infrastructure roll-up strategies across complementary processing verticals, vertical SaaS platforms adding embedded payment capabilities to transform unit economics and increase platform monetization, banking institutions expanding digital merchant services and payment processing to compete with fintech disruptors, enterprise software companies building integrated commerce solutions with native payment rails, and cross-border platforms consolidating regional processing networks to offer global merchant coverage.
Windsor Drake advises on payments transactions between the United States and Canada. Cross-border execution requires navigation of fundamentally different regulatory frameworks, US state-by-state money transmitter licensing, federal MSB registration, and FinCEN compliance versus Bank of Canada supervision of registered payment service providers under the Retail Payment Activities Act, FINTRAC money services business registration, and Payments Canada membership and system access requirements. Card network registration frameworks, PCI compliance standards, and interchange economics differ as well. The firm maintains relationships with payments acquirers operating across both markets and understands the cross-border merchant migration and regulatory re-registration requirements that affect transaction structure.
Payments is one of the fintech verticals in which Windsor Drake maintains a dedicated buyer relationship map:
Windsor Drake advises a limited number of payments companies each year. If you are a founder considering a sale or recapitalization in the next 12 to 18 months, a confidential discussion is the appropriate first step. No obligation. No information is disclosed without your written consent.
All inquiries are held in strict confidence. Windsor Drake has offices in New York and Toronto.
FAQ
Payments M&A advisory is a specialized form of sell-side investment banking for companies that power the movement of money: merchant acquiring, payment processing, payment facilitation, cross-border settlement, B2B payment automation, billing infrastructure, and fraud management platforms. The advisor represents the founder in a structured sale process, building a buyer universe that spans global processors, PE-backed payments consolidators, vertical SaaS platforms seeking embedded payment capabilities, banking institutions, and enterprise software companies, while managing regulatory licensing transfer, card network re-registration, merchant contract portability, and PCI compliance workstreams unique to payments transactions.
Payments companies are valued on net revenue and EBITDA rather than ARR multiples. The key metrics are net revenue per transaction, take-rate composition (interchange markup vs. gateway fees vs. platform monetization vs. value-added services), merchant portfolio retention by cohort, processing volume growth, and EBITDA margins. Companies with embedded payment relationships, diversified net revenue streams, and complete regulatory licensing command premiums. Current pricing evidence is published in the firm’s payments valuation benchmarks. A specialized advisor decomposes the net revenue waterfall and positions each revenue layer at the appropriate multiple.
Payments M&A involves separate regulatory workstreams on each side of the border. In the United States: money transmitter license transferability state by state, MSB registration with FinCEN, state-specific requirements such as the New York BitLicense for crypto-adjacent payments and California DFPI licensing, and anti-money-laundering and KYC program compliance. In Canada: registration with the Bank of Canada under the Retail Payment Activities Act, which since September 2025 requires registered payment service providers to maintain risk-management and funds-safeguarding frameworks and to file annual reports; registration with FINTRAC as a money services business or foreign money services business where the activity requires it; and Payments Canada membership eligibility, open to payment service providers registered with the Bank of Canada that meet its technical, operational and security requirements. Common to both jurisdictions: validated PCI DSS compliance continuity, card network registration and BIN sponsorship documentation, acquiring bank relationship portability, and the change-of-control notification or re-approval that each license and registration triggers on a sale. Each regulatory asset has transfer mechanics that directly affect deal timing and structure. Pre-process regulatory audits identify transfer requirements and remediation items before they become deal impediments.
Windsor Drake advises across seven payments domains: merchant acquiring and processing, payment facilitation and PayFac platforms, cross-border payments and FX, B2B payments and AP/AR automation, billing and subscription infrastructure, fraud detection and risk management, and payment gateways and orchestration.
Six buyer categories: global payment processors and acquirers expanding merchant vertical coverage, PE firms executing payments infrastructure roll-up strategies, vertical SaaS platforms adding embedded payment capabilities to increase platform monetization, banking institutions expanding digital merchant services, enterprise software companies building integrated commerce solutions with native payment rails, and cross-border platforms consolidating regional processing networks for global merchant coverage.
Net revenue retention measures the percentage of net revenue retained from the same merchant cohort year-over-year, accounting for both attrition and expansion (volume growth, additional services, price increases). A payments company with 106% NRR is growing net revenue from existing merchants by 6% annually before new merchant acquisition. Buyers model NRR as the primary indicator of merchant relationship durability; it combines attrition risk and expansion potential into a single metric that directly affects the forward revenue projection used in valuation. NRR above 100% signals that the embedded processing relationship is deepening, not eroding.
Windsor Drake advises payments companies with enterprise values between $5 million and $300 million, typically of meaningful scale and profitability. This range spans companies with established merchant portfolios, documented processing volume history, diversified net revenue streams across processing margin, gateway fees, and platform monetization, and regulatory licensing coverage sufficient for institutional-grade acquirers.
The optimal engagement window is 12 to 18 months before a target transaction date. Payments transactions require extensive pre-transaction preparation: net revenue decomposition and take-rate analysis, merchant portfolio retention documentation by cohort, money transmitter license audit and gap remediation, PCI DSS compliance documentation, card network registration review, ISO and agent agreement portability analysis, acquiring bank relationship documentation, and buyer universe mapping. Companies with licensing gaps or compliance remediation requirements need the longer end of this window to resolve regulatory issues before launching the process.
Yes. Merchant acquiring and processing, and payment facilitation and PayFac platforms, are two of the seven payments domains the firm advises on. For ISO and agent models, buyers examine residual obligations to agents, whether agent agreements survive a change of control, and the share of merchants sourced through owned sales. A company with 80% of merchants acquired through owned channels presents cleaner economics than one reliant on third-party ISOs with residual buyback provisions. See selling an ISO or merchant portfolio.
On Windsor Drake's payments benchmark (version 2026.09.22-1), PayFac and merchant acquiring businesses price at 3x to 6x retained net revenue, payment orchestration at 10x to 15x and infrastructure and rails at 12x to 20x. Public comparables use reported revenue and EBITDA. Houlihan Lokey's Q2 2026 FinTech Market Update put the median public payments company at 2.2x EV/2026E revenue and 7.3x EV/2026E EBITDA on June 30, 2026, with merchant acceptance and processing at 2.2x and 6.4x. See fintech valuation multiples.
They earn on the payments their software customers process, through processing margin, gateway fees, platform fees and value-added services, on top of subscription revenue. Payments built into point-of-sale, e-commerce, invoicing or practice management software are costly to switch, and merchant retention frequently exceeds 90%. That is why vertical SaaS acquirers often pay premiums for payments companies whose merchant vertical matches their software. In public markets, Houlihan Lokey's vertical software and integrated payments median was 2.1x EV/2026E revenue and 11.8x EV/2026E EBITDA on June 30, 2026.
Capital One completed its $5.15 billion acquisition of Brex in April 2026. On June 15, Montreal-based Nuvei agreed to buy New York-based Payoneer for $7.40 a share in cash, an equity value of about $2.75 billion, with closing expected in mid-2027 subject to Payoneer shareholder and regulatory approval. The fintech M&A deal tracker logs other 2026 transactions.
Windsor Drake runs sell-side processes for founder-led companies. Conversations are confidential, and you will get a plain answer on whether a process makes sense now.
Windsor Drake is not a registered broker-dealer and does not offer, sell or place securities. When a transaction requires a registered broker-dealer, that work is handled by a registered broker-dealer partner.
