A junk fee on a merchant statement is a line item that is not interchange, not a card-network assessment, and not payment for work you actually used. The audit is a work test: name the line, classify it, and ask whether anyone did something you asked for this month. If the processor cannot point to a published network schedule, an enrollment you signed, or a service you consumed, the line is markup wearing another name. Typical processing fees are often described as 1.5 percent to 3.5 percent of the transaction plus a per-item fee (U.S. Chamber of Commerce, 4 Jun 2026). The monthly extras sit outside that headline. They still go into the only number that compares two processors: effective rate, total fees divided by card volume.
The work test
Start with one statement. Walk the fee section the way you would read the rest of the statement: every named line, including the ones in small type.
- 1List every non-volume line. Statement, PCI, regulatory, annual, voice, funding, batch, gateway, minimum.
- 2Classify it. Pass-through, used service, unused service, penalty, or rent.
- 3Run the work test. Who invoices it, did you enroll, did work happen this month?
- 4Get the answer in writing. A line nobody can define is markup.
- 5Recompute effective rate. Total fees, including the survivors, divided by card volume.
Five outcomes, not two. A line is one of these:
- Pass-through. Interchange or a published network assessment. You cannot negotiate it. You can verify it.
- Used service. Voice auth you placed, a gateway you run, next-day funding you enrolled in, a scan someone actually ran.
- Unused service. The same products, billed, with zero usage.
- Penalty. Usually PCI non-compliance after a Self-Assessment Questionnaire lapsed.
- Rent. Statement, "regulatory," annual, miscellaneous. The processor is charging to exist on the file.
Pass-throughs and used services survive without a conversation. Unused products you cancel. Penalties you cure. Rent you ask to waive.
Six classes that show up as junk
The names rotate. The classes do not.
PCI program vs PCI obligation vs PCI penalty
PCI DSS is a card-brand security standard. PCI DSS 4.0 future-dated requirements became mandatory on 31 Mar 2025 (PCI Security Standards Council). That obligation is real. The line item is often not.
The PCI Security Standards Council does not send merchants a monthly invoice called "PCI compliance." What you see is usually a processor program (a portal, an SAQ workflow, sometimes a scan) or a non-compliance penalty for not completing that workflow. Paying the program fee does not mean you are compliant. Skipping the SAQ and paying the penalty does not mean the brands have excused you.
Work test: Did you complete this year's SAQ, and any required scan? If yes, a non-compliance penalty is a billing error. If the program fee continues after you already validated, ask what work it still buys. If nobody can name the work, it is rent.
Statement, paper, and admin
A statement fee is a charge to produce the bill. Many portals already give you the same PDF. Paper statements, "account administration," and untitled "customer service" fees live here too. A monthly minimum is a different animal: a floor on processor revenue that you either signed or inherited. It is contractual, not a mystery tax, and it still belongs in effective rate.
Work test: Can you download the statement without this line? If yes, ask it waived. A support desk with a real SLA is a used service. A support line with no defined work is rent.
Voice authorization
Voice auth is a live or phone-channel authorization when a terminal or gateway is down, or when an operator has to key a card. It is real work when you use it, billed per call or as a small monthly access line.
Work test: How many voice auths this month? If the count is zero and a monthly voice-auth or VRU line is still there, cancel the product. If you do use it, keep it, and stop calling it junk.
Next-day funding
Faster funding is a credit product, not a law of settlement. Standard funding already moves money after batch. Next-day (often next business day, not 24 hours) is something you enroll in, and it often carries its own monthly fee.
Work test: Did you ask for next-day? Do deposits actually match the product? If money already lands on the standard clock and the line is still there, you are renting speed you do not have.
Annual and membership
Annual PCI, annual "membership," "account on file," a December "compliance" hit. Amortize them. In the illustrative month below, a $96 annual fee is $8 a month, 10 basis points on $8,000 of volume. Dump the whole $96 into one low-volume month and it is 1.2 percent of that month's effective rate.
Work test: What does the anniversary charge buy that the monthly program fee did not already buy? Two PCI lines for one SAQ is double billing.
Regulatory, compliance, and IRS
"Regulatory," "government compliance," "IRS reporting," "1099." These names borrow authority. There is no standard federal invoice titled "regulatory fee" that your processor is required to collect from you as a tax. Form 1099-K is a real information return a payment settlement entity may file. Charging you a monthly "IRS" line to do that filing is a processor product, not an IRS assessment.
Work test: Ask for the statute, the card-brand rule, or the third-party invoice. If the answer is a shrug or a brochure, treat the line as markup.
Pass-throughs that look mysterious and are not junk
Interchange and assessments are not junk. They are the first two layers of cost, set by the brands. Opacity is not the same as padding. If a line traces to a published network schedule, your job is to verify the pass-through, not to "waive" a brand fee the processor does not set.
The tell for true junk is the opposite: a plain-English name with no schedule behind it.
A worked month (illustrative)
Numbers below are illustrative. Confirm against your own statement.
Merchant card volume: $80,000.
| Line | Amount | Work test |
|---|---|---|
| Statement fee | $12 | PDF already in the portal |
| PCI program | $20 | SAQ already filed this year |
| Regulatory | $10 | No network invoice, no statute |
| Voice auth access | $10 | Zero voice auths |
| Next-day funding | $20 | Not enrolled; standard funding |
| Annual fee (1/12 of $96) | $8 | No extra service |
| Lines that fail the test | $80 |
$80 ÷ $80,000 = 0.10%, or 10 basis points.
If interchange, assessments, and stated markup already total $2,000, the costume lines take total fees to $2,080. Effective rate moves from 2.50% to 2.60% with no change in card mix. That is why nine signs you are overpaying treats a statement full of monthly extras as a diagnostic, not a rounding error.
What to do with the list
Write one row per line: name, amount, class, work-test answer. Ask in writing for a definition of every unused service, penalty, and rent line. Unused products get cancelled, not discounted. Complete the SAQ so a non-compliance penalty has nothing to attach to. Then recompute effective rate on the next statement. The only proof a cut worked is the number moving.
You do not need a new processor to finish this audit. You need one clean month and a provider who can explain their own bill. If you would rather not hunt the lines by hand, upload last month's PDF. We itemize as-billed so the work test has a complete list.
FAQ
What is a junk fee on a merchant processing statement? A line that is not interchange, not a card-network assessment, and not payment for a service you used. Run a work test: who invoices it, did you enroll, and did work happen this month.
Is a PCI compliance fee the same as being PCI compliant? No. PCI DSS is a card-brand security obligation. A PCI line on your statement is usually a processor program or a non-compliance penalty, not an invoice from the PCI Security Standards Council.
What is a regulatory fee on a credit card processing statement? Usually a processor add-on with a government-sounding name. There is no standard federal invoice by that title. Ask for the statute, the network rule, or the third-party invoice. If none exists, treat it as markup.
Do statement fees and voice auth fees count as junk? Only if they fail the work test. Voice auth you actually placed is a used service. A monthly voice-auth access line with zero calls, or a statement fee for a PDF already in your portal, is a candidate to cancel or waive.
How do I get junk fees taken off my merchant account? List every non-volume line, ask for a written definition, cancel unused products, complete your SAQ so a non-compliance penalty has nothing to attach to, and recompute effective rate on the next statement. The number moving is the proof.
Sources
Questions about how this applies to your business?
Talk it through