How a single transaction becomes bankable data

Why split them? Speed and reliability. The merchant needs an instant yes to hand you the coffee. Moving real money instantly across banks is slower and riskier, so it happens later in bulk.

For data teams, this matters enormously. The authorization record and the settlement record are two separate data events describing the same purchase. Reconciling them (matching auth to settlement) is a core banking data problem, because they can differ. A $50 authorization at a gas pump might settle at $47.32.

Who touches the data: the four-party model

A typical card transaction involves four players, each generating and storing their own copy of the data.

• Cardholder's bank (issuer): the bank that gave you the card.
• Merchant's bank (acquirer): the bank that processes payments for the coffee shop.
• Card network (scheme): Visa, Mastercard, and similar. They route messages between issuer and acquirer.
• Merchant: the coffee shop and its point-of-sale system.

The card network defines the data format everyone must speak. For decades that format has been based on the ISO 8583 message standard, a compact, field-based structure for financial transaction messages. The industry is migrating toward the richer ISO 20022 standard, which carries far more structured detail (see the ISO 20022 resource centre).

What data the swipe actually creates

An authorization message is not just "amount and card number." It is a packed set of fields. A simplified view of the core data captured at tap:

A few of these fields do heavy lifting downstream:

• PAN token: The real card number (Primary Account Number) is almost never stored raw. It is replaced by a tokentokenA token is the basic unit of text that language models process, often a word fragment, whole word, or punctuation mark rather than a single character.View full definition →, a stand-in value, to reduce risk. This is a requirement under the PCI DSS (Payment Card Industry Data Security Standard), the security rulebook for handling card data.
• MCC (Merchant Category Code): A four-digit code classifying the merchant type. MCC 5814 means fast food. This one field powers spending categorization, rewards ("3% on dining"), and risk rules.
• Entry mode: Contactless, chip, or online. Feeds fraud scoring, because card-not-present transactions carry different risk.

The transaction is born structured. That is the key insight. Unlike a customer email or a call transcript, a card swipe arrives as clean, typed fields ready for a database.

Enrichment: turning a code into meaning

Raw fields are terse. A merchant name might arrive as "SQ *BLUE BOTTLE 4471" with no location. Enrichment is the step where the bank adds context.

Common enrichment steps:

• Merchant clean-up: Turning "SQ *BLUE BOTTLE 4471" into "Blue Bottle Coffee, San Francisco." Banks either build this themselves or buy it from data vendors.
• Geolocation: Attaching coordinates or a city from the terminal ID.
• Category mapping: Translating the MCC into a human label and a bank-specific category ("Dining out").
• Currency conversion: Recording both original and account currency for cross-border spend.

Enriched data is what you see in a mobile banking app, with a logo, a clean name, and a category. That polish is the product of a pipelinepipelineAll active sales opportunities across the stages of the sales process, together with their combined potential value and probability of closing.View full definition →, not the raw swipe.

🎬 [VIDEO: "How Credit Card Processing Works" — youtube.com — a clear walkthrough of the authorization and settlement flow between issuer, acquirer, and network]

Where the data lands: from live systems to the warehouse

The transaction now lives in several places, each tuned for a different job.

The core banking system

The core banking system is the bank's system of record for accounts and balances. It holds the authoritative version: your balance changed, this posting is final. Core systems prioritize accuracy and durability over analytics. You do not run marketing queries against the core.

The operational data store

A near-real-time copy feeds fraud detection and the mobile app. Fraud models need transactions within seconds, so this layer is optimized for fast lookups and streaming.

The data warehousedata warehouseA central repository that consolidates data from many source systems into a structured, query-optimized store designed for analytics, reporting, and business intelligence.View full definition → and lakehouselakehouseA hybrid architecture combining the flexibility of a data lake with the analytical capabilities of a data warehouse, on a single storage layer.View full definition →

For analytics, transactions are copied (usually in nightly or streaming batches) into a data warehousedata warehouseA central repository that consolidates data from many source systems into a structured, query-optimized store designed for analytics, reporting, and business intelligence.View full definition →, a system built for large-scale querying and reporting. Increasingly banks use a lakehouselakehouseA hybrid architecture combining the flexibility of a data lake with the analytical capabilities of a data warehouse, on a single storage layer.View full definition →, which combines a low-cost data lakedata lakeA data lake is a centralized repository that stores large volumes of raw data in its native format, from structured tables to unstructured files, until needed.View full definition → (raw storage for any format) with warehouse-style query power.

Here the transaction joins years of history. It becomes one row among billions, feeding:

• Fraud and financial crime models (is this pattern unusual for this customer?).
• Credit risk scoring (spending behaviour as a repayment signal).
• Regulatory reports (aggregated transaction data for capital and liquidity reporting).
• Customer analytics (segmentationsegmentationDividing a market into distinct groups of customers who share similar needs, characteristics or behaviours, so each group can be served with a tailored approach.View full definition →, product recommendations).

Lineage and governance

Regulators expect banks to explain where a number came from. Data lineageData lineageData lineage maps how data moves and transforms across systems, from origin to consumption, showing where it came from, what changed it, and where it goes.View full definition → is the documented trail showing how a figure in a report traces back to source transactions. After the financial crisis, the Basel Committee issued principles known as BCBS 239 on risk data aggregation, pushing banks to prove their data is accurate and traceable. That is why a single swipe carries metadata about its origin all the way through the pipelinepipelineAll active sales opportunities across the stages of the sales process, together with their combined potential value and probability of closing.View full definition →.

Why the same swipe produces different numbers

A recurring headache: two reports show different totals for "yesterday's spend." Usually neither is wrong. They are measuring different versions of the same transaction.

• The authorization total includes holds that may never settle.
• The settlement total reflects final amounts, which can be lower or reversed.
• A posted total is what actually hit the account after adjustments.

Add timing. A transaction authorized at 11:58pm might settle the next day, so it lands in a different reporting period. Cross-border transactions add currency conversion timing.

This is why banking data teams obsess over definitions. "Number of transactions" is meaningless until you specify: authorized or settled? Approved only or including declines? Gross or net of reversals? A good data model captures every state a transaction passes through, so any question can be answered consistently.

The lifecycle in one line

Tap, authorize, enrich, settle, post, reconcile, warehouse, model. Each step writes or updates data, and each downstream system reads a version suited to its purpose. The coffee you bought is now a permanent, queryable, governed record that will help score the next transaction for fraud and feed a report a regulator reads next quarter.

Key Takeaways

• A transaction happens twice. Authorization is the instant check with no money movement; settlement is the actual, later transfer. They are separate data events that must be reconciled and can differ in amount.
• The swipe is born structured. Card data arrives as clean, typed fields (amount, MCC, entry mode, tokenized card number), which is why banking transaction data is unusually analysis-ready compared with most business data.
• Enrichment creates the product. The clean merchant name, logo, and category you see in an app are added in a pipelinepipelineAll active sales opportunities across the stages of the sales process, together with their combined potential value and probability of closing.View full definition →, not present in the raw message.
• The same transaction lives in many systems. Core banking (system of record), operational stores (real-time fraud and app), and the warehouse or lakehouselakehouseA hybrid architecture combining the flexibility of a data lake with the analytical capabilities of a data warehouse, on a single storage layer.View full definition → (analytics) each hold a version tuned for its job.
• Definitions decide the number. Authorized, settled, and posted totals differ legitimately. Regulatory expectations like BCBS 239 mean banks must trace every reported figure back to its source transactions.