BLOGJun 18, 2026

Understanding Payment Gateway Fees in Pakistan: MDR, Setup & Hidden Costs

Understanding Payment Gateway Fees in Pakistan: MDR, Setup & Hidden Costs

TL;DR

  • MDR (Merchant Discount Rate) is the percentage fee tied to every digital transaction. It's a composite charge covering multiple parties, not a single line item.
  • The real cost of a payment gateway in Pakistan extends beyond MDR setup fees, annual maintenance, chargeback penalties, FX markups, and settlement delays, all of which sit underneath the headline rate.
  • Pakistan's e-commerce sector loses an estimated $1.61 billion annually to checkout inefficiencies, much of it tied directly to payment friction and failed transactions, according to Pakistan Today.
  • A low MDR means nothing if your payment success rate is poor; failed transactions are a silent cost most merchants never measure.
  • SBP licensing and PCI DSS certification are non-negotiable markers of a trustworthy payment gateway in Pakistan, not optional extras.

Pakistani businesses processed 9.1 billion digital transactions worth PKR 612 trillion in FY2024-25, yet most merchants still cannot tell you exactly what they pay per transaction, or why. If you are evaluating a payment gateway in Pakistan and the fee structure feels opaque, you are not imagining it. This blog breaks down every cost layer so you can make a fully informed decision.

What Is MDR and How Does It Actually Work?

Every digital payment you accept through Visa or Mastercard, JazzCash, Easypaisa, Alfa, HBL Konnect, or bank transfer incurs a processing Cost. That cost is the Merchant Discount Rate, or MDR: a percentage of the transaction value that funds the work of moving money from your customer to your account, securely and at scale.

MDR is not a single fee going to one entity. It is a composite charge shared across the parties involved in processing the transaction:

  • The acquiring bank is the bank that holds your merchant account and processes the transaction on your behalf.
  • The card networks (Visa, Mastercard, UnionPay) charge an assessment fee for using their rails.
  • The issuing bank, the bank that issued the customer's card, collects an interchange fee to cover credit and fraud risk.
  • The payment facilitator is the platform connecting all of this, adding their service margin.

MDR is the price of every authorized transaction, every fraud check, every intelligent routing decision, every settlement, and every reconciliation entry. A business processing PKR 5 million per month is paying for that full infrastructure stack. The right question isn't "how do I minimise that price?" It's "is the infrastructure I'm paying for delivering the success rates, security posture, and acceptance breadth my business actually needs?

For mobile wallets like JazzCash, Easypaisa, Alfa, and HBL Konnect, the MDR structure is similar, but the cost composition differs. Wallet rails don't carry card-network interchange, so the underlying cost layers shift. Actual rates vary by facilitator, transaction volume, and the commercial agreement in place.

The Real Cost Structure Behind a Payment Gateway in Pakistan

MDR is the most visible line item, but it is rarely the only one. The full cost of accepting digital payments in Pakistan often includes several layers that only surface after you have signed an agreement.

Pakistan's digital payments landscape continues to expand, with retail payment transactions surging to 9.1 billion worth Rs612 trillion, a 38% increase in volume, yet the SBP warns that structural and operational challenges could slow the country's transition to a fully digital economy. One of those structural challenges is cost transparency. The Express Tribune

Here is the full cost picture merchants should map before choosing any digital payment platform in Pakistan:

MDR by payment method industry ranges in Pakistan vary meaningfully by channel. Card transactions (Visa/Mastercard debit/credit) typically carry a higher MDR than mobile wallet transactions. International card transactions carry additional cross-border fees on top of the base MDR. Flat-rate processors typically charge between 2.9% and 3.5% per transaction for international card processing, with international transactions often carrying additional fees of 1.0% to 1.5%. Justt

Setup fees: Some payment gateway providers in Pakistan charge a one-time integration or onboarding fee. This varies widely: some platforms waive it entirely, others charge a fixed amount ranging from PKR 10,000 to PKR 100,000+, depending on the integration scope.

Annual maintenance fees are a recurring cost that many merchants do not factor into their unit economics at the point of signup.

Chargeback fees, when a customer disputes a transaction and the card network rules in their favour, the merchant pays a chargeback penalty. These can range from PKR 2,000 to PKR 8,000 per incident, independent of the original transaction value.

FX markup on international settlements for businesses receiving payments in USD or other foreign currencies; the conversion to PKR involves a spread. FX and payment-related friction costs Pakistani e-commerce merchants around $180 million annually, and a merchant may see 3% to 5% of transaction value disappear just converting currencies and moving money between financial institutions. PhoneWorld

Settlement timing costs a delayed settlement, which means your working capital is tied up in the payment system. Pakistani businesses face around $460 million in losses due to settlement delays, which slow cash flow and limit liquidity needed for order fulfillment and expansion. TechJuice

Cost Component

Visibility

What to Look For

MDR (cards)

High

The rate quoted by card type, transaction volume, and what's bundled (fraud screening, routing, success rate)

MDR (mobile wallets)

Medium

The rate quoted per wallet rail and how it scales with your volume

Setup fee

Medium

Whether it's charged, and what the integration includes

Annual maintenance

Low

Whether there's a recurring charge regardless of transaction volume

Chargeback penalty

Low

The fee per disputed transaction is card-network-driven, not facilitator-set

FX markup

Very Low

The spread applied when converting to PKR can quietly add several percent

Settlement delay cost

Hidden

How long funds are tied up, and the working-capital impact at scale

The merchant who only compares MDR rates is missing more than half the picture.

Why Your Payment Success Rate Is a Hidden Cost Nobody Talks About

Here is a cost that does not appear on any fee schedule: failed transactions.

Over 10% of online transactions processed by the average e-commerce firm fail, and over 80% of merchants cite difficulty in pinpointing the causes of failed payments as a major challenge. PYMNTS

In the Pakistani context, this problem is amplified. Mobile wallet OTP flows, bank redirect failures, and inconsistent authorization rates across different card-issuing banks all contribute to transaction drop-off. A customer who reaches the checkout screen and encounters a failed payment does not always retry. In most cases, they leave.

Cart abandonment driven by payment failures, unexpected charges, and lack of pricing transparency accounts for approximately $970 million in lost revenue annually for Pakistani merchants, representing more than 60% of total checkout losses. Daily The Azb

Now consider the MDR math in reverse. If your payment success rate is 75%, you are effectively losing 25% of checkout-ready revenue from buyers who were willing to pay. A gateway with a 2% MDR and a 75% success rate is far more expensive in real terms than a gateway with a 2.3% MDR and a 95% success rate.

Expert Insight: Why Most Businesses Get This Wrong. 

Most Pakistani merchants negotiate MDR as though it is the only lever that determines payment cost. It is not even the most important one. A payment infrastructure that routes transactions intelligently, dynamically switching between acquiring banks, wallets, and payment rails based on real-time authorization data, can recover 10% to 20% of transactions that would otherwise fail. At PKR 5 million monthly volume, a 15% improvement in success rate at a slightly higher MDR still puts more money in your account. The conversation with your payment provider should start with "What is your documented success rate on my transaction types?" before it ever gets to "What is your MDR?"

SBP Licensing and PCI DSS: Why Compliance Is Not Optional in Pakistan

When a payment gateway handles your customers' card data and your settlement funds, two compliance markers tell you whether that gateway is legally and technically qualified to do so in Pakistan.

SBP PSO Licensing

The State Bank of Pakistan requires that Payment System Operators provide an electronic platform for clearing, processing, routing, and switching of electronic transactions, and PSOs must operate under SBP's regulatory supervision and oversight under the PS&EFT Act 2007. SBP

What this means for merchants: an unlicensed payment gateway has no regulatory standing in Pakistan. If funds go missing, if a settlement is delayed without cause, or if the provider disappears, you have no formal recourse. SBP licensing is your protection, not theirs.

PSOs and PSPs must maintain a minimum capital of PKR 200 million, with an additional 25% for each additional line of business, ensuring financial stability and credibility. This capital requirement exists specifically to protect merchants and end users. Joshandmakinternational

PCI DSS Certification

PCI DSS is a globally recognized set of security requirements created to help organizations that handle credit or debit card information protect that data throughout its lifecycle, and non-compliance can lead to heavy penalties, higher transaction fees, legal risks, reputational damage, and even loss of card payment processing rights. Razorpay

For Pakistani businesses integrating a payment gateway via API, PCI DSS compliance on the provider side means your customers' card data is encrypted, stored securely, and handled according to international standards. The alternative, integrating with a non-compliant gateway, exposes your business to liability in the event of a data breach, even if the breach originates on the gateway's infrastructure.

Payment processors and gateways are required to achieve and maintain PCI DSS compliance as their security operations have a direct impact on customer cardholder data security. Bridewell

Enterprise clients in Pakistan increasingly treat PCI DSS and ISO 27001 as baseline requirements before signing any payment integration agreement. If your gateway cannot demonstrate both, deals with banks, telcos, and large corporates simply do not close.

What Transparent Payment Pricing Should Actually Look Like

Given the full cost picture above, here is what a merchant in Pakistan should demand from any payment gateway before signing:

Itemised MDR disclosure is not a single headline rate, but a breakdown by payment method. Card MDR, wallet MDR, IBFT rate, and international card rate should all be stated separately.

Zero hidden setup or maintenance fees, or a clear, written disclosure of any fees that apply. Any provider unwilling to put their full fee structure in writing before the contract is signed should be treated with caution.

Clear settlement timeline, T+1 or T+2 settlement is the standard for a mature payment infrastructure. Anything beyond T+3 for domestic transactions requires a clear explanation. International settlements usually take longer, around two to five business days, so confirm that timeline upfront if you collect from overseas customers. 

Documented success rates ask for historical authorization rate data on transaction types similar to your business. A provider that cannot or will not share this data is not a partner built for your growth.

SBP regulatory standing, verifiable PSO/PSP licensing, or documented banking partnership arrangements with a licensed entity. 

PCI DSS certification asks for the current certificate, not just a claim. Valid PCI DSS certification is renewed annually and tied to a specific audit scope.

No-redirect API architecture redirect-based payment flows push your customer to a third-party page to complete payment. Every redirect is a drop-off risk. A clean API integration keeps the entire payment experience within your platform, which directly protects your conversion rate.

The strongest payment gateways in Pakistan support the full range of methods merchants' customers actually use, including JazzCash, Easypaisa, Alfa, HBL Konnect, IBFT, and major card networks (Visa, Mastercard, UnionPay). Gaps in coverage translate directly into lost transactions.

Simpaisa, payment acquiring infrastructure is built around precisely these principles. A single API connects merchants to the full spectrum of Pakistani payment methods, JazzCash, Easypaisa, Alfa, HBL Konnect, Visa, Mastercard, and IBFT, with no redirect flows and with fraud monitoring powered by Eastnets Safewatch, the same engine used across Tier-1 global banks. We operate under regulated banking partnerships in line with SBP guidelines, with a PSO licence application currently filed with the State Bank, and are certified to PCI DSS v4.0.1 and ISO 27001:2022, both verifiable and current.  Pricing is transparent and discussed directly with merchants based on their transaction profile, rather than published as a one-size-fits-all rate that rarely reflects actual commercial terms.  If you want to understand what payment processing will realistically cost your business, that conversation starts with a direct discussion about your volume, transaction mix, and settlement requirements.

How to Evaluate a Payment Gateway in Pakistan Before You Commit

Use this checklist before signing any payment gateway agreement in Pakistan:

Coverage: Does the gateway support JazzCash, Easypaisa, HBL Konnect, Alfa, IBFT, and major card networks (Visa, Mastercard, UnionPay)? Gaps in coverage mean you are immediately excluding segments of your customer base.

API quality: Is the integration redirect-based or a clean embedded API? Redirect flows cause a measurable drop-off at checkout. Ask for developer documentation before committing.

Success rate data: Request documented authorization rates on domestic card transactions, wallet transactions, and IBFT. Compare across providers.

Full cost disclosure: MDR by channel, setup fees, maintenance fees, chargeback fees, FX markup, and settlement timeline: all in writing, before the contract.

Compliance credentials: SBP PSO license (verifiable at sbp.org.pk), PCI DSS certificate (current, not expired), ISO 27001 (for enterprise clients).

Support quality: What is the SLA for transaction failure resolution? Who do you call at 2 am when a payment rail goes down during a high-traffic sale event?

Settlement speed: Domestic PKR settlement timeline. International settlement timeline. Are these contractually guaranteed or indicative?

For businesses that also need to pay out to vendors, freelancers, or partners, evaluating bulk disbursement and settlement capabilities alongside acquiring is important; fragmented acquiring and payout infrastructure creates operational complexity and additional cost. =

Pakistan's e-commerce market reached $7.7 billion in 2024, with a projected 17% CAGR through 2027. At that growth rate, the payment infrastructure you choose today will be processing multiples of your current volume within three years. The right gateway is not the cheapest one today; it is the one built to handle your scale tomorrow without requiring you to re-integrate. PCMI

Conclusion

MDR is the entry point for understanding payment gateway costs in Pakistan, but it is not the whole story. The full picture includes setup fees, chargeback penalties, FX markups, settlement delays, and the silent cost of failed transactions. A business that only optimizes for the lowest MDR headline rate often ends up paying more in total, while leaving conversion on the table through poor success rates and clunky checkout flows.

The three things that should anchor every payment gateway evaluation in Pakistan are: full cost transparency across all fee components, documented payment success rates that reflect your actual transaction mix, and verifiable compliance credentials PCI DSS v4.0.1, ISO 27001, and clear SBP regulatory standing, whether through direct PSO licensing or regulated partnership arrangements. 

If you are currently evaluating payment infrastructure for your business in Pakistan and want a transparent breakdown of what processing will actually cost at your volume and transaction mix, talk to a Simpaisa payment specialist. The conversation starts with your numbers, not a rate card.

Talk to a Simpaisa payment specialist 

Frequently Asked Questions

What is MDR in the context of a payment gateway in Pakistan? 

MDR (Merchant Discount Rate) is the percentage fee deducted from each digital transaction before the merchant receives the settlement amount. It is a composite charge covering the acquiring bank, card network, issuing bank, and payment facilitator. In Pakistan, MDR on card transactions typically ranges from 1.5% to 3.5%, depending on card type, transaction volume, and the payment method used.

What is the difference between MDR and a payment gateway fee in Pakistan? 

MDR is the per-transaction percentage fee. A payment gateway fee can refer to additional charges beyond MDR, including setup fees, annual maintenance charges, and API access fees. Some providers bundle these into the MDR; others charge them separately. Always ask for a full fee disclosure before signing.

Does SBP regulate payment gateways in Pakistan? 

Yes. The State Bank of Pakistan licenses Payment System Operators (PSOs) and Payment Service Providers (PSPs) under the PS&EFT Act 2007. Operating as a payment gateway in Pakistan without SBP authorization is illegal. Merchants should verify their gateway's PSO license directly on the SBP website before integration.

What is PCI DSS, and why does it matter for online payments in Pakistan? 

PCI DSS (Payment Card Industry Data Security Standard) is an international security framework that governs how card data is stored, processed, and transmitted. Any payment gateway handling card transactions in Pakistan should be PCI DSS certified. Non-compliant gateways expose merchants to data breach liability, potential fines from card networks, and loss of card processing rights.

How do I know if my payment gateway has good transaction success rates in Pakistan? 

Ask your payment provider for historical authorization rate data segmented by payment method: domestic cards, international cards, JazzCash, Easypaisa, and IBFT. A reputable provider should be able to share this data. As a benchmark, anything below 85% on domestic card transactions warrants a direct conversation about routing quality and infrastructure reliability.

 

Share on social media