First Data Merchant Services will pay $40m in a settlement over allegations the payment processor ignored warnings that one of its independent sales organization (ISO) partners facilitated payments made to scammers targeting hundreds of thousands of consumers.