A practical guide to fintech due diligence, payments & paytech diligence, and merchant-services quality — how PE and M&A teams underwrite TPV durability, take-rate stacks, licenses, sponsor banks, and risk-adjusted cash generation.
Many CIMs sell “TPV growth,” “embedded finance,” or “software take rates” without proving net revenue after interchange and fraud, license portability, or sponsor-bank concentration. Fintech and payments due diligence underwrites the rails business: transaction volume quality and concentration, take-rate and net revenue stack, scheme and network access, money-transmitter / e-money / banking licenses, sponsor-bank and BIN relationships, fraud and chargeback economics, credit and float risk, settlement timing and reserves, and whether growth still funds the hold-period plan under regulatory and network rules. It is not the same as SaaS diligence (ARR/NRR software metrics), technology diligence (product stack and architecture), AI diligence (models and data moats), financial diligence (accounting quality alone), or generic compliance diligence (policy inventory without payments-specific licenses and settlement obligations). Payments work underwrites whether the transaction engine produces durable, risk-adjusted cash.
| Workstream | Primary question | Typical output |
|---|---|---|
| Fintech / payments / paytech DD | Is risk-adjusted take-rate cash durable? | TPV quality, take-rate bridge, licenses, risk P&L |
| SaaS / ARR DD | Are software subscriptions healthy? | ARR, NRR, churn, CAC payback |
| Technology / product DD | Can the stack deliver and scale? | Architecture, IP, eng capacity |
| Compliance program DD | Do AML/controls programs work? | Policies, monitoring, training |
| Financial / QoE DD | Is earnings quality real? | Normalized EBITDA, revenue integrity |
Map total payment volume by vertical, geography, merchant cohort, and channel (online, in-person, marketplace, embedded). Test concentration in high-risk MCCs, single large merchants, or seasonal verticals. Separate processing volume from revenue-generating volume and from vanity GPV that never clears. Connect to commercial diligence, customer quality, and customer concentration.
Bridge gross merchant discount rate through interchange, scheme fees, network assessments, residual splits, rebates, and processor costs to net revenue per $ of TPV. Split transaction fees vs SaaS/subscription vs value-added services. Stress mix shift to lower-rate verticals and competitive compression. Align with pricing diligence, quality of earnings, and financial diligence.
Money transmitter licenses (state-by-state), e-money / PI / AISP / PISP where relevant, banking charter or industrial bank exposure, MSB registration, PCI scope, and open enforcement or consent orders. Map which activities sit inside the regulated entity vs a tech affiliate. Capital, bond, and permissible investment rules can absorb free cash flow. Hand off program design to compliance diligence, regulatory diligence, and sanctions diligence.
BIN sponsorship, acquiring bank relationships, network membership (Visa/Mastercard/local rails), ISO/agent agreements, and switching cost if a sponsor exits. Single-sponsor concentration is a classic PE failure mode. Connectivity, uptime SLAs, and dual-homing matter as much as price. Align with channel diligence, infrastructure diligence, and contract diligence.
Chargeback ratios by cohort, reserve policies, fraud tooling efficacy, credit/BNPL loss curves if product includes lending, settlement timing and float economics, and whether reserves are adequate under stress. Risk-adjusted contribution is the real unit of analysis — not gross TPV. Connect to forensic diligence when revenue integrity is suspect, and to debt diligence when warehouse facilities fund receivables.
Feature differentiation vs pure price, ISV/embedded distribution, cross-border capability, data products, and Day-1/100-day regulatory and risk moves. Post-close value creation must separate real product expansion from take-rate extraction that accelerates merchant churn. Align with product diligence, competitive diligence, GTM diligence, cyber diligence, synergy diligence, PMI diligence, and LBO diligence.
DI20-WELCOME) — useful for TPV questions, license hotspots, open-question lists, and risk prioritization, not a substitute for full license condition letters, bank agreements, chargeback datasets, or credit loss models.
| Stage | Payments focus | Deal-team action |
|---|---|---|
| Teaser / CIM | TPV growth, take-rate, embedded narrative | Flag thesis dependence on net revenue & licenses |
| Desk diligence | License map, sponsor concentration, public enforcement | Red/amber/green; license hotspot list |
| Deep rails / risk | Cohort TPV, chargebacks, bank paper, float | Take-rate bridge; risk-adjusted P&L |
| IC / model | Mix, compression, sponsor exit, loss cases | Base / upside / downside with rails shocks |
| Post-close | License ownership, dual-sponsor plan, reserves | 100-day payments plan with ownership |
| Signal | Severity | Why it matters |
|---|---|---|
| Take-rate compression masked by TPV growth | Deal-Killer | Cash generation weakens while headline volume looks strong |
| Single sponsor bank / BIN without backup path | Deal-Killer | Business can stop if sponsor exits or caps risk |
| Missing MTL / e-money / banking authority in core markets | Deal-Killer | Regulatory shutdown or remediation absorbs value |
| Rising chargebacks with lagging reserves | Deal-Killer | Losses hit equity after close; network fines |
| Credit/BNPL book not marked to economic loss | High | QoE overstated; warehouse covenants at risk |
| Float used to fund operating expenses | High | Settlement timing shock becomes liquidity event |
| GPV treated as ARR in the model | High | Multiple and return math mis-specified |
| No dual-homing plan or residual contract clarity | Watch | Integration and exit optionality limited |
| Approach | Typical cost | Timeline | Best use |
|---|---|---|---|
| Full payments / fintech + risk module | $35K–$120K+ | 4–10 weeks | Multi-license PSP, credit products, multi-country rails |
| Targeted license counsel + sponsor review | $15K–$50K | 2–5 weeks | Clean single-market acquirer, limited credit |
| Public first-pass fintech/payments pack | $49 | Minutes to hours | Triage before specialist spend / IC framing |
Before specialist payments counsel and full risk modules, teams use structured public research to test whether the CIM’s TPV and take-rate story is plausible: license registries and enforcement signals, sponsor and network announcements, residual-market chatter, merchant reviews, job postings in risk and compliance, product pricing pages, and whether “software multiples” are being applied to risk-bearing net revenue. The pack frames data-room asks (cohort TPV files, chargeback history, bank and residual agreements, license condition letters, credit loss models) and visit priorities so expensive work lands on rails economics and regulatory perimeter — not generic fintech slides. It is screening research, not a substitute for regulatory counsel opinions, full bank diligence, or credit committee-grade loss analysis.
⇧ Already delivered: Tesla (TSLA) · Alphabet (GOOGL) · Palantir (PLTR) — real orders, real SEC data, every claim source-cited.
Get a structured first-pass diligence pack — useful input for fintech and payments thesis tests, license hotspots, open questions, and IC prep, not a full specialist payments study.
Order report $39.20 → Free brief Sample PDF