ishchenko.co
← All writing

2026-08-27 · source: Professional experience in payment orchestration and high-risk processing. No client names, volumes, or figures included.

Payment Orchestration Is Not a Fancy Payment Gateway

The most expensive sentence in payments is “we already have a gateway.”

A founder said it to me recently, and he wasn’t being lazy about it. His checkout worked. One processor, one integration, a year of clean history. Orchestration, as he understood it, was that same setup with a rules engine bolted on top — a nicer dashboard, a routing feature he had no use for, because he had exactly one place to route to.

That’s a fair reading of how the category gets marketed. It’s also the reading that ends businesses.

Some quick translations first, because payments hides simple ideas behind ugly words. A merchant is anyone taking money for goods or services — a shop, a subscription app, a betting platform, a supplements brand. A PSP or acquirer is the company that actually moves the money: it takes the card details, talks to the banks, and eventually puts funds in the merchant’s account. A gateway is the pipe between the checkout and that company. Orchestration is the layer sitting above all of it.

Describe that layer by what it does and you get routing, cascading, rules. Accurate, and it misses the point entirely — the way calling a fire exit “a door” is accurate.

Let’s imagine a Tuesday

Take an ordinary online business. Nothing exotic. Steady volume, one processor, one integration, everything paid on time.

Month one: the approval rate slips — that’s the share of attempted payments that actually go through. Not dramatically. A few points. Nobody notices, because nothing broke; the site is up, the checkout loads, the money still arrives. It just arrives a little less often.

Month two: disputes tick up in one market, and the processor’s risk team responds by raising the rolling reserve — the slice of each payment they hold back for months in case refunds come later. Cash flow tightens. The relationship gets a bit formal.

Month three: a Friday email. Account under review. Settlements paused pending a decision.

The thing that decides whether this business survives the next two weeks is not in that email. It was decided months earlier, by whether anyone had integrated a second processor before there was a reason to.

That’s what orchestration is for. Routing is the feature. Optionality is the product.

Stated positively, and without the vocabulary: an orchestration layer is one integration on the merchant’s side, many providers behind it, and one place where the rules, the reporting and the customer records live independently of any of them. The important word in that sentence is independently. Everything else is plumbing.

The ability to move

Businesses stay on one processor out of inertia, not loyalty. The second integration costs roughly what the first one did, and nobody budgets engineering time for a problem that hasn’t happened yet.

The switching cost sits there quietly, compounding. And by the time you need to move, “we’ll take our volume elsewhere” is not a sentence you can say with a straight face, because both sides know it would take you a quarter to make good on it.

The real work of an orchestration layer is making the second, third and fourth connection cheap enough that you build them before you need them. Moving volume then becomes a configuration change rather than a roadmap item — a decision someone can make on a Tuesday afternoon, not a project someone has to fund.

Notice the mismatch that makes this urgent. Degradation happens on the timescale of days — a route worsens over a weekend, a risk team changes a threshold on a Wednesday. Migration, done from scratch under pressure, happens on the timescale of months. A business that can only respond in months to something that moves in days is not managing the risk. It’s waiting to find out.

There’s a pleasant side effect too. The month you can move in a day is the month your account manager becomes noticeably more responsive. Leverage in payments isn’t rhetorical — it’s a live connection you haven’t used yet.

The ability to compare

Every processor grades its own homework.

Its dashboard shows its own numbers, computed its own way, over its own traffic. Two providers can both report an “approval rate” and mean genuinely different things: one counts technical failures, the other excludes them; one counts each retry as a fresh attempt, the other collapses them. Nobody is lying. There’s just no referee.

The only honest comparison is the same traffic, on the same days, split across two routes, measured by the one party in the room who isn’t being graded — you.

And a single blended number is close to useless anyway. Performance isn’t one figure; it moves by country, card type, issuing bank, ticket size, time of day, one-off versus recurring. A provider that looks unremarkable overall can quietly be the best route you have for one particular slice of your customers — and the worst for another.

You cannot discover that by reading two dashboards side by side. You discover it by owning the measurement. That’s a structural advantage, not a feature: the merchant becomes the only entity with a complete, comparable view of its own money.

The same applies to cost, which is where negotiations usually go sideways. Pricing arrives as a headline rate, and the headline rate is the part everyone argues about. The parts that determine what a payment actually costs — how much gets held back and for how long, what a dispute costs to fight, what a retry costs when it fails, what the currency conversion quietly took — arrive later, spread across statements in different shapes. If you can only see one provider’s version of those statements, you’re not comparing prices. You’re comparing marketing.

The ability to optimize

Cascading is the part everybody demos. It means that when a payment is declined, the system automatically retries it through a different route.

Put like that it sounds like free money. It isn’t, and the difference between a cascade that earns and a cascade that burns is worth understanding.

Declines come in two flavors. Some mean “not now” — not enough in the account this morning, a fraud model that was twitchy, a temporary limit. Others mean “never” — the card is closed, the account is gone, the issuing bank has made a decision it isn’t going to revisit before lunch.

Retrying the first kind is how you recover a real sale. Retrying the second kind is paying a second fee to be told no a second time, and doing it at volume is precisely the behavior that gets a merchant noticed by card networks for the wrong reasons.

Optimization is knowing which is which, and stopping. It’s also timing — a decline shaped like “insufficient funds” wants a retry tomorrow morning, not four seconds later.

I find this the most satisfying part of the whole business, and not for a sophisticated reason. Every recovered payment is a customer who already decided to buy and was told no by a machine. Nobody had to be persuaded of anything. The revenue was already there; it just needed a second road.

The ability to survive

For a high-risk business, payment acceptance isn’t a function of the business. It is the business.

“High risk” rarely means the merchant did something wrong. It means longer delivery or refund windows, more disputes, regulatory attention, or simply an industry a bank’s compliance committee would rather not explain in a quarterly report. Gambling, adult, nutraceuticals, forex, crypto — very different companies with one structural thing in common: the institutions that move their money can change their mind about the entire category, and that decision may have nothing to do with any individual merchant’s conduct.

A bank refreshes its risk appetite. A sponsoring relationship ends. Somebody else in your vertical has a scandal, a portfolio gets reviewed, and the reviewer has never heard of you.

A single-processor high-risk merchant isn’t carrying a payments risk. It’s carrying an existential one — and it’s the strangest kind of failure to watch, because everything else keeps working perfectly. The product is fine. The ads are converting. Support is answering. The company has simply, quietly, stopped being able to take money.

There’s a duller version of the same risk that hits everyone, high-risk or not: providers have outages. Yours will have one, probably during your best hour of your best week, and the difference between an inconvenience and a bad day is whether the checkout has somewhere else to send the traffic while somebody else’s engineers work the incident.

That’s the whole argument, and it’s why I get impatient with the “fancy gateway” framing. A gateway makes a payment work. Optionality makes a company survive a month it didn’t choose.

The honest objection

“We could just integrate two processors ourselves.”

Yes. You could. Some teams do it well, and if yours has the appetite, that’s a legitimate path.

What usually gets underestimated isn’t the integration — it’s everything downstream of it. Two reporting formats. Two webhook schemes. Two definitions of “settled.” One finance person quietly building a spreadsheet every month to reconcile the two into a single truth, and becoming the only human who understands it.

And then there’s the trap that catches subscription businesses specifically. When a customer saves a card, the processor stores the number and hands you a reference that stands in for it — a token. That token belongs to the processor. If your saved cards and recurring billing live inside one provider’s vault, your checkout can move and your recurring revenue can’t.

Optionality that stops at the checkout page isn’t optionality. It’s a fire exit with your best customers locked on the wrong side of it.

The question was never “can we build this.” It’s “will we still be maintaining it in three years, while also running the business we actually wanted to run.”

When you genuinely don’t need it

One market, one currency, low disputes, modest volume, a healthy relationship with a processor that has no reason to reconsider you. In that situation an orchestration layer is another abstraction to debug and another thing to monitor, bought against a risk you aren’t running.

Optionality has a price. You buy it when the cost of having no options gets larger than the cost of the layer.

The awkward part is that the moment you can most clearly see that trade is usually the moment it’s already too late to act on it. Nobody builds a second route during the Friday email.

Which is why the test I’d use takes ten seconds and no data at all.

If your processor wrote to you tomorrow with thirty days’ notice, how many of those days would you spend building, and how many would you spend selling?

If you can’t answer with a number, you already have your answer.

I spend most of my weeks talking with businesses in exactly the categories that mainstream processors decline politely and slowly. What interests me isn’t which provider anyone happens to be using — I don’t rank them and I don’t place anyone. It’s the answer to that thirty-day question, which usually falls somewhere between “a few weeks” and a long, thoughtful silence.

If you have a number, or a story about the month you found out the hard way, write to me. I read everything and I’ll tell you what I’d look at first. That’s a real invitation, not a funnel.