Murph's Take

What I Learned Building CardinalCommerce (And What It Means for Your Business)

Building a payments security company from startup to Visa acquisition taught me things about business that no consultant ever told me. Here's the condensed version.

MurphDecember 28, 20247 min read

People ask me about CardinalCommerce a lot. Not because they know the payments security space, but because "acquired by Visa" shorthand-signals something.

Here's what I actually learned. Not the polished version. The one that's useful.

What CardinalCommerce Was

For those who don't know: CardinalCommerce built authentication and fraud prevention solutions for online payments. We were working in the unglamorous but essential layer of ecommerce — the part that made sure the person using a credit card was actually the cardholder.

Not a consumer brand. Not something anyone talks about at dinner parties. But if you bought something online in the 2000s and early 2010s, there's a reasonable chance our technology was in the background.

Visa acquired us in 2017. That was the outcome. Here's what the journey actually teaches.

Lesson 1: Solve a Problem Nobody Wants to Think About

The sexiest businesses aren't always the best businesses.

Payments fraud isn't exciting. Authentication is not a cocktail party topic. But it was a real, expensive, growing problem for every business that sold things online. And very few people wanted to deal with it.

That's actually a great place to be. Not where everyone is rushing — where everyone needs something and nobody wants to figure it out themselves.

For small business owners: the best niches aren't always the ones with the most buzz. Sometimes the best niche is the one where people have a real, painful problem they desperately want someone else to handle.

Lesson 2: Trust Is the Actual Product

We were in the security business. Trust was literally what we sold.

But every business sells trust. You just might not frame it that way.

Customers hire you because they trust you'll solve their problem, show up when you said you would, and not make their situation worse. Before price, before features, before anything else — they have to trust you.

Everything that builds trust faster gets rewarded. Reviews, referrals, transparency about process, proof of past results, clear communication. These aren't nice-to-haves. They're the core of the sales process.

Lesson 3: The Network Effects You Build Early Are Your Moat

Early on, we made a decision to become the standard that banks and card networks built around. That meant doing work to shape the industry standards — not just building to existing ones.

It was a long play. It took years. But when we became embedded in the standards that everyone had to implement, our moat wasn't just our technology — it was the entire ecosystem built around our approach.

For most small businesses, this looks like: build such deep relationships and such a strong reputation in your market that competitors can't easily displace you even if they offer comparable services. Reputation and relationships are your network effect.

Lesson 4: Sales Cures Most Business Problems

When things were hard at CardinalCommerce — and they were hard, multiple times — what got us through was almost always a new sales win or a new partnership.

Revenue solves problems. Not planning. Not analysis. Not more meetings. Revenue.

This sounds obvious. It isn't, in practice. When things get hard, the instinct is to cut costs and get organized and plan more carefully. Those things matter. But they don't solve the fundamental problem.

Founders and business owners who bias toward sales activity when things are tough outperform the ones who go internal.

Lesson 5: The People Who Execute Beat the People Who Think

I've worked with brilliant strategic thinkers who couldn't ship a product or close a deal to save their lives.

I've worked with average thinkers who were absolutely relentless at execution — making calls, following up, fixing problems, shipping — and they ran circles around the strategists.

In the real world, strategy has a half-life. Markets shift. Plans become obsolete. What doesn't become obsolete is the capacity to actually do things, fix things, and move forward.

Hire for execution. Think strategically. But never confuse brilliant thinking with effective work.

Lesson 6: Every Exit Starts With Not Needing One

Visa acquired CardinalCommerce because we'd built something that was genuinely embedded in the infrastructure they cared about. We weren't desperate to sell. That mattered enormously.

The businesses that get acquired at great terms are the ones that don't need to be acquired. The ones built to thrive independently.

I see small business owners get so focused on "exit strategy" that they optimize for the wrong things. Build a real business that creates real value. That's the strategy. The exit is a potential outcome, not a destination to manage toward from day one.

What This Means for VibeTokens

Everything I do now is shaped by 15 years of that experience.

The focus on systems that actually work, not just look good in a demo. The skepticism toward consultants who haven't built anything. The bias toward results you can measure. The belief that trust is the real product.

When I help a small business owner build their AI stack or their website, I'm not running a framework from a textbook. I'm applying what I learned from building something real over a long time.

The businesses I work with don't need a strategy deck. They need specific things built, specific systems running, specific problems solved.

That's all I do. And it's informed by actually having done it before.

Want this for your business?

Tell us what you're building. We'll map out exactly what to build and what it costs.

Start Your Project →

Frequently Asked

What business lessons came out of building CardinalCommerce?

The most durable lessons: solving problems nobody wants to think about is often better than chasing exciting markets, because the competition is thinner and the need is real. Distribution beats product — being embedded in Visa's network was worth more than any technical advantage. And building infrastructure rather than consumer products produces a different kind of defensibility, slower to build but much harder to displace.

How does experience building a payments security company apply to AI consulting?

Payments security and AI implementation share a structure: complex technical capability solving an unglamorous operational problem for businesses that need the solution but don't want to manage it themselves. In both cases, the value is in making something complicated invisible — the business gets the outcome without needing to understand the mechanism. That's the same design philosophy behind building AI systems for small businesses.

What did the Visa acquisition teach about building a business for exit?

The acquisition happened because CardinalCommerce was genuinely embedded in the payments stack — not as a nice-to-have feature, but as infrastructure that transactions depended on. Businesses that get acquired at meaningful multiples are typically ones that are hard to replace, not ones that are nice to have. The lesson for building any business: solve something mission-critical, get embedded, make yourself hard to remove.

Jason Murphy

Written by

Murph

Jason Matthew Murphy. Twenty years building digital systems for businesses. Former CardinalCommerce (acquired by Visa). Now running VibeTokens — AI-built websites and content for small businesses.

The window is open.

It won't be forever.

Start Your Project →