How a company like Stripe could leverage brick-and-mortar transaction data, partner with ads management vendors, and build a first-party advertising platform in a post-cookie world.
The core thesis in three paragraphs
Core Thesis: Payment processors sit on the most valuable untapped data asset in advertising: deterministic, transaction-level purchase data spanning millions of merchants and billions of consumer interactions. In a market where digital ad spend has reached $972 billion and the $175+ billion retail media sector is growing at 12-14% annually, the company that closes the gap between ad impression and actual purchase will capture outsized value. A payment processor with brick-and-mortar transaction data is uniquely positioned to do exactly that.
The advertising industry's fundamental problem is attribution. Brands spend $740+ billion on digital ads annually but struggle to measure whether those ads drive real-world purchases. Third-party cookies, once the backbone of digital attribution, are deprecated or restricted. Mobile identifiers (IDFA, GAID) are increasingly opt-in. Walled gardens like Meta and Google offer modeled conversions, but advertisers want deterministic proof. A payment processor that captures point-of-sale transaction data across millions of merchants can provide exactly this: a closed-loop system that matches ad exposure to verified purchase, with no modeling required.
The strategy unfolds in four layers. First, offer attribution-as-a-service through privacy-safe clean rooms, proving return on ad spend with transaction-level certainty. Second, build purchase-based audience segments and license them into existing ad platforms through ads management vendors as the distribution channel. Third, launch a proprietary merchant-to-merchant ad network that operates entirely on first-party data, free from cookie dependencies or platform intermediaries. Fourth, become the infrastructure layer that enables mid-market retailers to build their own retail media networks, creating a platform play that scales with the market.
This is not speculative. Cardlytics built a $200M+ annual revenue business on a less powerful version of this model using bank transaction data. Shopify launched Shop Campaigns to monetize merchant data through targeted offers. Amazon's advertising business generates $56+ billion annually, largely because it owns the purchase funnel. A payment processor with $1.9 trillion in annual payment volume, 5 million merchant relationships, and growing physical-world presence through point-of-sale hardware has the raw materials to build something more comprehensive than any of these players, provided it moves decisively on privacy architecture, partnership development, and product execution.
The structural forces creating the opportunity window
Despite nearly a trillion dollars in annual digital ad spend, measuring the connection between an online ad impression and an offline purchase remains one of advertising's hardest problems. This "attribution gap" is the central market failure that creates the opportunity.
The Structural Tailwind: Payment processors do not need to model purchase behavior. They observe it directly. Every card tap, chip insert, and digital wallet transaction is a verified purchase event with merchant category, amount, timestamp, and location. This is the ground truth that the entire advertising ecosystem is trying to reconstruct through inference.
The advertising industry's reliance on third-party tracking is collapsing under regulatory and technical pressure. Apple's App Tracking Transparency (ATT) reduced opted-in mobile tracking to roughly 25% of iOS users. Chrome's Privacy Sandbox is restructuring how audience targeting works on the open web. GDPR enforcement in Europe and a patchwork of U.S. state privacy laws (CCPA/CPRA, Virginia CDPA, Colorado CPA, Connecticut CTDPA, and a dozen others enacted through 2025) have made consent-based data collection the legal baseline.
This privacy shift is not a headwind for a payment processor's ad ambitions. It is the tailwind. First-party transaction data, collected through a direct merchant relationship with proper consent, is the most privacy-durable signal in the advertising ecosystem. It does not depend on browser state, device identifiers, or cross-site tracking. As every other targeting signal degrades, purchase data becomes relatively more valuable.
Retail media has become the fastest-growing segment in advertising, projected to reach $197 billion globally in 2026 (WARC), overtaking television ad spend for the first time. The market is expected to exceed $200 billion by 2027.
The critical pattern: every major retailer is building an ad business. Amazon, Walmart, Target, Kroger, Best Buy, Albertsons, DoorDash, Uber, and Instacart all operate retail media networks generating $1B+ annually. The economic logic is compelling: advertising margins (60-80%) dramatically exceed retail margins (2-5%). But mid-market and smaller retailers lack the technology, data infrastructure, and sales teams to build their own. This is the infrastructure gap that a payment processor can fill.
Who is already playing in transaction-powered advertising, and where the gaps remain
| Player | Data Asset | Revenue / Scale | Strengths | Vulnerabilities |
|---|---|---|---|---|
| Cardlytics | Bank card transaction data via FI partnerships | $58M billings Q1 2026; ~$200M annual run rate. Market cap ~$39M (NASDAQ: CDLX) | Visibility into ~50% of U.S. card transactions. Deterministic attribution. Direct bank channel for offer delivery. | Collapsing market cap. Lost Bank of America as partner. Revenue declined 39% YoY Q1 2026. No direct merchant relationship. Data is aggregated, not merchant-level. |
| LiveRamp | Identity resolution graph, data clean rooms | $615M revenue FY2025. Market cap ~$3B. | Industry-standard identity spine. Clean room infrastructure. Integrations with all major platforms. | Does not own purchase data. Purely infrastructure layer. Dependent on partners for signal quality. Limited brick-and-mortar footprint. |
| Epsilon (Publicis) | 250M+ consumer profiles, transaction data from retail and CPG partners | Part of Publicis Groupe ($15.5B revenue). Acquired for $4.4B in 2019. | Deep identity graph. Strong in CPG/retail verticals. End-to-end from data to media activation. | Owned by holding company with potential conflicts. Data freshness varies. Complex enterprise sales cycle. |
| Shopify | Merchant transaction data across 4.6M+ stores | $150B market cap. Shop Campaigns launched 2023. | Direct merchant relationships. Shop Pay checkout data. Shopify Audiences for platform targeting. | Primarily e-commerce, minimal brick-and-mortar signal. Shop Campaigns still small scale. Merchant opt-in creates coverage gaps. |
| Block / Square | Square POS transaction data from SMB merchants | $38B market cap. Has not launched formal ad product. | Strong SMB POS footprint. Cash App consumer identity. Owns both sides of the transaction. | SMB skew limits enterprise advertiser appeal. No ad sales infrastructure. Afterpay acquisition consumed focus. |
| Amazon Ads | First-party purchase data + browsing behavior on Amazon.com | $56.2B ad revenue 2025 (est). Growing 15%+ YoY. | Closed-loop attribution within Amazon. Full-funnel offering. Massive DSP with off-Amazon reach. | Data confined to Amazon ecosystem. No visibility into offline retail. Competing with merchants on its own platform. |
| Retail Media Networks (Walmart, Target, Kroger, Best Buy) |
First-party shopper data from loyalty programs and e-commerce | Combined $10B+ annually and growing fast. | Deep category-specific purchase data. In-store and online touchpoints. High-intent shopper audiences. | Fragmented. Each operates its own walled garden. Limited off-site capabilities. Measurement standards vary. Advertisers must manage multiple platforms. |
The White Space: No single player combines (a) direct merchant-level transaction data, (b) cross-merchant visibility spanning multiple retail categories, (c) a physical POS hardware footprint, and (d) an existing infrastructure relationship with 5M+ businesses. A payment processor occupies this exact position. Cardlytics has the data but not the merchant relationships. Shopify has the merchants but not the offline signal. Amazon has the closed loop but only within its own ecosystem. The payment processor advantage is structural: it sits beneath all of these, touching every transaction regardless of platform.
A phased approach from attribution to full ad platform
What it is: A privacy-safe clean room service where merchants opt in to match hashed transaction data against ad platform audience identifiers. An advertiser runs a campaign on Facebook or Google, and the payment processor tells them exactly how many people who saw the ad subsequently made a verified purchase at a participating merchant. Deterministic ROAS measurement, not modeled estimates.
This layer is the lowest-risk entry point. It requires no changes to how advertisers buy media. It does not compete with Facebook, Google, or Amazon. It makes their platforms more valuable by proving that ad spend drives real purchases. The payment processor positions itself as a neutral measurement layer, which is the strategic foothold for everything that follows.
Precedent: Cardlytics built a $200M+ annual billings business on a weaker version of this model. Its data comes from bank partners (one step removed from the merchant), covers card transactions but not cash or digital wallets, and is delivered through bank app channels with limited reach. A payment processor's data is more granular (merchant-level, not just category-level), more timely (near-real-time vs. batch), and comes with a direct merchant relationship that enables richer attribution reporting.
What it is: The payment processor builds targetable audience segments derived from real transaction data and licenses them into existing ad platforms. Example segments: "Bought running shoes at brick-and-mortar retail in the last 30 days," "Average restaurant spend $150+ weekly," "Frequent home improvement purchaser, $5K+ in last 90 days." These segments are activated through Facebook Custom Audiences, Google Customer Match, Amazon DSP, or retail media network APIs.
The critical insight is distribution. Tens of thousands of agencies, SaaS ad platforms, and ads management service vendors already spend client budgets on Facebook, Google, Amazon, Best Buy, Target, and other platforms. These vendors are the natural channel for purchase-based audiences because:
Segments based on merchant category codes (MCC): dining, electronics, fitness, home improvement, luxury goods, grocery, automotive, travel. Each with recency and frequency modifiers.
Income-proxy segments based on aggregate spending patterns. High-value consumer cohorts ("premium dining 3x/week"), budget-conscious segments ("discount grocery primary"), category-specific spenders.
Transaction-derived geographic segments: commuter patterns (work/home zip inference), travel behavior (hotel and airline spend), neighborhood affinity (shops frequently in SoHo vs. Brooklyn).
Life-event detection from transaction patterns: new parent (baby store purchases), new mover (furniture + home services spike), new pet owner, recent retiree (travel + leisure shift).
All segments are built at cohort level (minimum 1,000 users per segment) and delivered as hashed audience lists through platform APIs. No individual transaction histories are shared. The payment processor controls segment definitions, refresh cadence, and pricing.
What it is: A self-serve advertising platform where merchants on the payment processor can target customers of other merchants within the ecosystem. Merchant A (a coffee shop) targets people who shop at the gym next door. A new restaurant targets people who dine frequently in its neighborhood. A DTC brand targets people who buy from its competitors at brick-and-mortar retail.
Post-purchase moments: digital receipts, payment confirmation screens, and merchant-branded notifications. High-intent surfaces with 60%+ open rates, delivering targeted offers seconds after a related purchase.
Targeted audiences exported to programmatic display, social, email, and CTV channels. The payment processor defines the audience; partner ad networks deliver the impression.
If the processor operates a consumer-facing app (like Cash App or Shop), in-app offer placement becomes a high-value ad surface with direct purchase attribution.
Precedent: Shopify launched Shop Campaigns in 2023, enabling merchants to pay for customer acquisition through the Shop app. The concept works but is constrained by Shopify's e-commerce-only footprint and limited consumer app adoption (~100M installs). A payment processor with POS hardware in physical stores has access to a much larger and more diverse transaction graph.
What it is: A white-label platform that enables mid-market and enterprise retailers to launch, operate, and scale their own retail media networks using the payment processor's data infrastructure, ad serving technology, and measurement capabilities. The payment processor becomes the Shopify of retail media: the infrastructure layer that makes it possible for any retailer to become an ad platform.
The retail media market is projected to exceed $200 billion by 2027. But only a handful of retailers (Amazon, Walmart, Target, Kroger) have the engineering talent, data infrastructure, and sales organizations to build media networks independently. Thousands of mid-market retailers with valuable first-party shopper data have no viable path to monetize it through advertising.
The infrastructure gap is massive:
White-label ad serving infrastructure: sponsored product listings, display ads, video placements, and in-store digital signage. Self-serve advertiser portal branded to the retailer.
Closed-loop attribution powered by the payment processor's transaction data. Campaign performance tied to actual sales lift, not proxy metrics. Real-time reporting dashboard.
Retailer's own first-party data (loyalty, e-commerce, POS) combined with the payment processor's cross-merchant signals to create enriched audience segments for advertiser targeting.
Programmatic demand integration (The Trade Desk, DV360, Amazon DSP) plus managed service support. Retailers sell inventory; the platform handles fulfillment.
The platform play creates a flywheel: more retailers on the platform means more transaction data, which improves audience quality and attribution accuracy, which attracts more advertisers, which generates more revenue for retailers, which attracts more retailers. The payment processor takes a platform fee (15-25% of ad revenue) while accumulating the most comprehensive cross-retailer transaction dataset in the market.
How agencies and SaaS ad platforms become the distribution channel
The payment processor does not need to build a direct sales force to reach every advertiser. Tens of thousands of ads management vendors already run campaigns on Facebook, Google, Amazon, and retail media networks on behalf of brands. These vendors are the natural distribution channel for transaction-powered advertising products.
WPP, Publicis, Omnicom, IPG, Dentsu, Havas. Manage $100B+ in annual media spend. Need differentiated data products for client retention. Integration happens at the holding-company level, cascading to hundreds of subsidiary agencies.
Thousands of boutique and mid-size agencies managing $1M-$100M in annual spend. Compete on performance and innovation. Purchase-based audiences offer an immediate, tangible edge over agencies without access.
Marin Software, Kenshoo/Skai, Smartly.io, AdRoll, Criteo, Pacvue, Perpetua. Software platforms that automate campaign management across channels. API-first integration with audience segments and attribution data.
Pacvue, Skai, CommerceIQ, Perpetua, Flywheel Digital. Manage retail media campaigns on Amazon, Walmart, Target, Instacart. Natural partners for the retail media infrastructure play (Layer 4).
| Product | Vendor Benefit | Revenue Model | Integration Effort |
|---|---|---|---|
| Attribution Reports | Proven offline ROAS justifies higher client budgets | Per-campaign fee ($500-$5K) or % of attributed spend | Low: API integration, ~2 weeks |
| Audience Segments | Superior targeting improves campaign CPA by 20-40% | CPM premium ($2-8 per 1,000 users) or monthly license | Medium: Platform API setup, ~4 weeks |
| Ad Network Inventory | New, exclusive inventory with deterministic measurement | Revenue share (70/30 merchant/platform) | Medium: Campaign management UI, ~6 weeks |
| Retail Media Platform | New revenue stream managing retailer ad businesses | Platform fee (15-25% of retailer ad revenue) | High: Full integration, ~3-6 months |
Key Principle: The payment processor should avoid building a large direct sales force in the early phases. Vendor partnerships provide immediate distribution to thousands of advertisers without the cost and complexity of enterprise sales. The direct sales team should focus exclusively on the top 100 enterprise advertisers and the top 50 retail media infrastructure clients. Everything else scales through the vendor channel.
Why privacy-first positioning is the competitive moat, not a constraint
Payment Card Industry Data Security Standards (PCI DSS) impose strict requirements on cardholder data, including primary account numbers (PANs), cardholder names, and card expiration dates. The advertising use case must operate entirely outside PCI scope. This is achievable because:
| Regulation | Scope | Key Requirement | Compliance Approach |
|---|---|---|---|
| CCPA / CPRA | California consumers | Right to opt out of "sale" or "sharing" of personal information for targeted advertising | Transaction data is used under "service provider" relationship with merchants. Consumer opt-out honored via universal privacy signal. |
| GDPR | EU/EEA data subjects | Lawful basis required. Consent or legitimate interest for profiling. | Legitimate interest assessment for aggregated analytics. Consent-based for individual-level matching. DPIA required. |
| VCDPA / CPA / CTDPA | VA, CO, CT consumers | Opt-out of targeted advertising and profiling | Universal opt-out mechanism. Data minimization by design. Annual privacy assessments. |
| FTC Act Sec. 5 | All U.S. consumers | Prohibition on unfair or deceptive practices | Transparent merchant agreements. Consumer-facing privacy disclosures. No "dark patterns" in consent flows. |
The technical architecture that makes this privacy-compliant at scale:
Data Flow: Merchant POS/Payment Data -> Tokenization Engine (PAN stripped, hashed consumer ID created) -> Aggregation Layer (min cohort 1,000) -> Clean Room (match against ad platform hashed IDs) -> Attribution Report / Audience Segment (no PII, no raw transactions, no individual histories)
Banks move slowly on privacy innovation. Cardlytics has spent years navigating regulatory relationships with financial institutions. Ad tech companies like The Trade Desk, Criteo, and LiveRamp built their businesses on third-party data that is now under existential regulatory threat. A payment processor that builds a privacy-first architecture from day one has three structural advantages:
Pricing framework, TAM/SAM/SOM estimates, and 5-year financial projections
| Product | Pricing Model | Indicative Pricing | Margin Profile |
|---|---|---|---|
| Attribution-as-a-Service | Per-campaign fee + % of measured spend | $1,000-$10,000 per study + 1-3% of attributed ad spend | 75-85% gross margin |
| Audience Segments | CPM (cost per thousand users) or flat license | $3-10 CPM for standard segments; $15-30 CPM for premium/custom | 80-90% gross margin |
| Ad Network (merchant campaigns) | CPC or CPM with revenue share | $0.50-3.00 CPC; 70/30 merchant/platform split | 50-65% gross margin |
| Retail Media Infrastructure | Platform fee (% of retailer ad revenue) + setup | 15-25% of ad revenue generated; $50K-$250K setup fee | 60-70% gross margin |
The serviceable addressable market narrows based on geographic availability (U.S. and Western Europe initially), merchant coverage (existing POS and payment merchant base), and product maturity (not all layers launch simultaneously).
Assumes 8-15% penetration of SAM by Year 5, with attribution and audiences ramping fastest (established buyer demand) and ad network/retail media infrastructure following as product matures.
| Revenue Line | Year 1 | Year 2 | Year 3 | Year 4 | Year 5 |
|---|---|---|---|---|---|
| Attribution-as-a-Service | $45M | $120M | $280M | $450M | $650M |
| Audience Segments | $15M | $80M | $220M | $450M | $750M |
| Ad Network | -- | $25M | $150M | $450M | $1,000M |
| Retail Media Platform | -- | -- | $50M | $300M | $800M |
| Total Revenue | $60M | $225M | $700M | $1,650M | $3,200M |
| Blended Gross Margin | 80% | 78% | 72% | 68% | 65% |
Valuation Implication: At $3.2B in Year 5 revenue with 65% gross margins and a SaaS/platform revenue profile, this business line alone could be valued at $25B-$40B using comparable multiples from ad tech (The Trade Desk at 20x revenue) and data infrastructure (LiveRamp at 5x revenue). For a company valued at $159B, this represents meaningful incremental value creation.
Phased execution from attribution to full ad platform
Key Hire: Chief Privacy Officer with dual expertise in PCI DSS and consumer privacy law. This role is existential for credibility with merchants, regulators, and enterprise clients.
Key Milestone: 500+ agency and SaaS vendor partners actively using attribution or audience products. Combined attribution and audience revenue exceeds $200M annual run rate.
Key Milestone: Ad network achieves $150M+ in merchant ad spend. First retail media infrastructure clients generating $50M+ in combined ad revenue.
Key Milestone: Transaction-powered advertising becomes a top-3 revenue line for the payment processor, contributing 15-20% of total company revenue with significantly higher margins than payment processing.
| Function | Year 1 | Year 2 | Year 3 | Year 5 |
|---|---|---|---|---|
| Engineering (data, platform, privacy) | 40 | 120 | 250 | 500 |
| Product & Design | 8 | 25 | 50 | 80 |
| Sales & Partnerships | 10 | 40 | 100 | 250 |
| Ad Operations | 5 | 20 | 60 | 150 |
| Legal & Privacy | 5 | 12 | 25 | 40 |
| Total Headcount | 68 | 217 | 485 | 1,020 |
What could go wrong, and how to protect against it
Merchants may resist sharing transaction data for advertising purposes, viewing it as a competitive threat or privacy liability. If opt-in rates fall below 40%, the data coverage becomes too sparse for viable audience segments.
Mitigation: Offer merchants direct financial incentives (revenue share on attribution and audience fees), control over data granularity (category-level vs. SKU-level), and transparent dashboards showing exactly how their data is used. Make advertising products a value-add that increases merchant retention on the payment platform. Frame data sharing as a feature, not a concession.
FTC, state attorneys general, or EU data protection authorities could challenge the use of payment transaction data for advertising purposes, even with clean room architecture. A high-profile enforcement action could force product changes or create reputational damage.
Mitigation: Proactive engagement with regulators before launch. Publish a transparency report detailing data practices. Implement privacy-by-design architecture that exceeds current regulatory requirements. Maintain a "war chest" of privacy certifications (SOC 2 Type II, ISO 27701, TrustArc). Build in regulatory flexibility: architecture should allow rapid compliance with new requirements without product redesign.
Meta, Google, and Amazon could view the payment processor's ad products as competitive and restrict API access, degrade clean room integrations, or launch competing transaction-data products through their own payment solutions (Meta Pay, Google Pay, Amazon Pay).
Mitigation: Phase 1 is deliberately non-competitive: attribution makes Meta and Google more valuable, not less. Build deep integration dependencies before launching competitive products (Layers 3-4). Diversify platform partnerships so no single platform represents more than 30% of revenue. Pursue antitrust-protective positioning: the payment processor as a neutral, cross-platform measurement standard.
Transaction data from a payment processor covers card and digital wallet transactions but misses cash payments (~15% of U.S. retail), peer-to-peer transfers, and transactions on competing payment platforms. This creates coverage gaps that reduce audience accuracy and attribution match rates.
Mitigation: Focus initial product on categories where card payment penetration exceeds 85% (restaurants, retail, travel, e-commerce). Supplement with merchant-provided first-party data (loyalty programs, e-commerce). Develop statistical models to account for cash leakage in attribution reporting. Expand coverage through partnerships with complementary payment processors or POS providers.
Block owns Square (merchant POS) and Cash App (consumer identity), giving it a similar structural position. If Block launches a competing ad product, it could fragment the market and reduce the payment processor's first-mover advantage.
Mitigation: Move fast. Block has historically been slow to execute on data monetization despite years of discussion. Its Afterpay acquisition consumed organizational bandwidth through 2025. The payment processor's enterprise client base and higher transaction volume create a more attractive advertiser proposition. Scale advantage compounds: more merchants means better audiences, which attracts more advertisers, which generates more merchant revenue.
Consumer advocacy groups or media coverage could frame transaction-based advertising as surveillance capitalism, creating PR risk for both the payment processor and advertisers using the platform.
Mitigation: Pre-emptive transparency: publish the privacy architecture, invite independent audits, create a consumer-facing dashboard showing what data is used and how. Position the product as "better ads through better data" rather than "more tracking." Implement consumer opt-out that is genuinely easy to find and use.
Building a real-time clean room, audience management platform, ad server, and attribution engine requires deep ad tech expertise that a payment company does not currently possess.
Mitigation: Acqui-hire from Cardlytics (which is struggling and shedding talent), The Trade Desk, Criteo, or LiveRamp. Consider targeted acquisition of a clean room startup (InfoSum, Habu) or attribution vendor (Measured, InMarket). Build vs. buy evaluation should favor buying for time-to-market; infrastructure can be rebuilt in-house once the product market fit is validated.