A $38 billion settlement gives merchants a right they have never had: the ability to decline specific premium card categories. The rate cut is small, but the end of honor all cards is a fundamentally different lever.

40% of merchants worldwide are actively considering leaving their bank, and it is not about trust, it is about speed. Bank onboarding takes 7 days and $496; PayTechs get merchants live in under 60 minutes.

The FTC Click-to-Cancel rule was vacated in 2025, but ROSCA, the underlying law it was built on, was never touched. Recent enforcement against Uber, Amazon, JustAnswer, and a $60 million Instacart settlement prove obligations remain fully enforceable.

Visa, Mastercard, American Express, and Stripe just backed x402, a protocol that lets AI agents pay for things automatically, no card, no login, no checkout page, by reviving a dormant HTTP status code from 1991.

PCI DSS 4.0.1 is now fully enforceable, every future-dated requirement became mandatory as of March 2025. Checkout page script monitoring, broader MFA requirements, and ongoing compliance documentation are no longer optional.

Payment processors are quietly piloting stablecoins for real merchant settlement, completing in minutes versus one to three days on SWIFT. The value is corridor-specific, and on/off-ramp friction is still the real bottleneck.

Mastercard's new SMMP program can flag merchants at 5 percent combined refunds and chargebacks, and Visa's VAMP threshold dropped from 2.2 to 1.5 percent. Winning a dispute does not remove it from your ratio under either program.

The planned drop to a $600 1099-K reporting threshold is dead. New legislation restored the original $20,000-and-200-transaction threshold, retroactive to 2022, though several states still set their own threshold as low as $600.

The threshold forcing merchants off OptBlue and into a direct Amex agreement just tripled, from $1 million to $3 million, effective April 2026. Merchants scaling their Amex volume now have three times the runway before facing that relationship.