Technical Definition

Merchant of Record

A Merchant of Record, often shortened to MoR, is a third-party company that legally processes customer payments and orders on behalf of another business. The Merchant of Record usually appears as the seller or payment recipient in the transaction and may handle payment processing, taxes, refunds, chargebacks, fraud checks, billing records, and customer order data.

By Crypto University Editorial
Third-Party BreachData Retention Policy

✦ Key Insight

For crypto companies, exchanges, trading platforms, subscription services, and fintech businesses, the company you interact with may not be the same company that technically processes your payment. A Merchant of Record can therefore hold sensitive information such as: Customer names Email addresses Billing addresses Order history Payment metadata Subscription information Refund records This matters for privacy and security because a breach at the Merchant of Record can expose customer information even if the main brand's systems were not directly compromised. It also helps explain why a customer may see an unfamiliar company name on a card statement.

✕ Common Misconceptions

Assuming the main brand processes every payment itself

Ignoring third-party privacy policies

Confusing a Merchant of Record with a payment gateway

Assuming deleting an account automatically deletes MoR records

Believing a breach at a vendor means the main company's database was hacked

Ignoring unfamiliar merchant names on payment statements

Detailed Explanation

How It Works

A business integrates a Merchant of Record into its checkout system.

When a customer makes a purchase:

  1. The Merchant of Record processes the payment.

  2. It records the customer and order information needed to complete the transaction.

  3. It may calculate and collect applicable taxes.

  4. It handles chargebacks or refunds.

  5. It later transfers the appropriate revenue to the original business.

Because the MoR participates directly in the transaction, it may retain customer data according to its own legal and data-retention requirements.

FAQs

Is a Merchant of Record the same as a payment processor?
Not exactly. A payment processor primarily processes transactions, while a Merchant of Record usually assumes broader legal responsibility for the sale.

Why does a Merchant of Record need my data?
It may need customer and transaction information to process payments, manage taxes, issue refunds, prevent fraud, and maintain legally required records.

Can a Merchant of Record keep my information after I cancel a service?
Possibly. Legal, tax, fraud-prevention, and accounting requirements may require certain records to be retained for a defined period.

In Practice

“A crypto education platform sells a yearly subscription for $200. At checkout, a third-party Merchant of Record processes the customer's card payment. The customer's payment statement may show the MoR rather than the education platform. If the MoR later suffers a data breach, the customer's name, email address, and purchase history could potentially be exposed even though the education platform itself was not breached.”