It used to be against the terms that the businesses signed with the credit card companies. This allowed CC companies to build up their market share while offloading the blame. Then in 2013 a lawsuit ended with them not being able to enforce that.