How Payment Gateways Connect Your Business to Customer Money
What a payment gateway does and why you need one
A payment gateway is the software that sits between your customer, their bank, and your bank. When someone enters a card number on your website or at your register, the gateway encrypts that information, sends it to the card networks (Visa, Mastercard, American Express), checks with the customer's bank that the money is there, and tells you yes or no in seconds. Without a gateway, you have no way to accept cards at all.
The gateway does not hold the money — that is the job of a payment processor, which is often the same company or a partner company. The gateway is the messenger. It also handles the security rules (called PCI compliance) that protect card data so you do not have to store it yourself. If you sell online, in person, or over the phone, you need a gateway.
Most small businesses do not build their own gateway. Instead, you sign up with a provider — Stripe, Square, PayPal, your bank, or a specialized merchant services company — and they give you the tools to accept payments. The provider handles the technical side; you handle the business side.
Key Takeaways
- A payment gateway encrypts card data and routes it to the customer's bank for approval, then tells you whether the transaction went through.
- You do not store card numbers yourself — the gateway handles that security requirement, which is called PCI compliance.
- Most gateways charge a percentage of each transaction (typically 2 to 3 percent for cards) plus sometimes a flat fee per transaction.
- Your choice of gateway affects which payment methods you can accept, how fast you get your money, and what tools you have to run your business.
- Integration means connecting the gateway to your website, point-of-sale system, or accounting software so payments flow automatically.
How payment gateways charge and what the fees cover
Payment gateway fees vary by provider and by payment method. A typical structure for card transactions is a percentage fee (2.2 to 2.9 percent of the sale) plus a per-transaction fee (usually 30 cents). So a $100 sale might cost you $2.50 to $3.20. Some providers charge monthly minimums or monthly flat fees instead of per-transaction fees; others charge both.
The percentage and per-transaction fee cover the cost of the gateway itself, the payment processor, the card networks, and fraud protection. Different payment methods have different costs — debit cards are usually cheaper than credit cards, and ACH transfers (bank-to-bank) are cheaper than either. Some providers charge extra for international cards or for certain industries (like nonprofits or high-risk businesses).
Beyond the basic transaction fee, watch for hidden costs: setup fees (usually $0 to $500), monthly gateway fees (if charged separately from processing fees), fees for chargebacks or disputes, fees for refunds, and fees for accessing your money faster than the standard timeline. Read the pricing page and the contract carefully. Many providers hide the per-transaction fee in small print or bundle it into a "discount rate" that sounds like you are getting a deal when you are just paying the standard amount.
Which payment methods your gateway can accept
Not all gateways accept all payment methods. Most accept Visa, Mastercard, and American Express. Many also accept Discover. Beyond that, the options vary: some accept digital wallets like Apple Pay and Google Pay, some accept PayPal, some accept bank transfers (ACH), some accept international cards, and some accept cryptocurrency or buy-now-pay-later services like Affirm or Klarna.
If you sell internationally, you need a gateway that handles multiple currencies and foreign cards. If you sell to younger customers, you may want a gateway that supports digital wallets and buy-now-pay-later. If you sell high-ticket items, you may want one that supports ACH or wire transfers. The more payment methods you offer, the more sales you usually capture — but each method may have different fees and settlement times.
Before you sign up, list the payment methods your customers ask for or expect. Then check the provider's website to see which ones they support and at what cost. This is one of the few things you can change later without too much friction, but it is easier to get it right the first time.
How integration works and what it connects to
Integration means plugging the gateway into your other systems so data flows automatically instead of you typing it in by hand. If you have a website, the gateway integrates with your shopping cart or checkout page so customers can pay without leaving your site. If you have a physical store, the gateway integrates with your point-of-sale (POS) system so transactions sync to your register. If you use accounting software like QuickBooks, the gateway can sync transactions there so you do not have to enter them twice.
Most modern gateways offer APIs (application programming interfaces) that let developers connect them to almost any system. If you use Shopify, WooCommerce, Square Online, or another popular platform, the gateway usually integrates with one click. If you use custom software or an older system, you may need a developer to build the connection, which costs money and takes time.
Some gateways also offer plugins or extensions — pre-built connectors for common platforms. For example, Stripe has a plugin for WooCommerce, and Square has one for Shopify. These are usually free and take minutes to install. If your platform is not on the list, ask the gateway provider whether they have a plugin in development or whether you will need custom integration.
Settlement: when you actually get your money
Settlement is the day the gateway sends your money to your bank account. This is not the same as the day the customer's card was charged. Most gateways settle once per day, usually one to three business days after the transaction. So a sale on Monday might not hit your account until Wednesday or Thursday.
Some providers offer instant settlement or same-day settlement for an extra fee (usually 1 to 2 percent of the transaction). This is useful if you need cash flow fast, but it costs money. Others offer a rolling reserve, which means they hold back a percentage of your sales (often 5 to 10 percent) for 30 to 180 days in case of chargebacks. This protects them but hurts your cash flow.
Check the settlement terms before you sign up. If you operate on thin margins or need money quickly, a provider with fast, free settlement is worth paying slightly higher per-transaction fees. If you have steady, predictable sales and can wait a few days, standard settlement is fine.
Security, fraud protection, and PCI compliance
PCI compliance is a set of security rules set by the card networks to protect card data. The core rule is simple: you must never store, process, or transmit a full card number yourself. The gateway does that for you. If you use a gateway, you are automatically compliant with the biggest PCI requirement. If you try to handle card data yourself, you are breaking the law and exposing yourself to massive fines and liability.
Beyond PCI, gateways offer fraud detection tools. These scan transactions for signs of fraud — mismatched addresses, unusual amounts, multiple failed attempts, cards from high-risk countries — and flag or block them. Some gateways let you set your own rules; others use machine learning to learn your normal sales patterns and flag outliers. Fraud protection is usually free, but chargebacks (when a customer disputes a charge and their bank reverses it) usually cost you a fee ($15 to $100 per chargeback) plus the refund itself.
Ask your provider what fraud tools they offer and whether they are included in your base fee or cost extra. Also ask about their chargeback process — some providers will fight chargebacks on your behalf, and some will not. If you sell high-risk products (like digital goods or high-ticket items), this matters.
Choosing between hosted pages, embedded forms, and custom builds
There are three main ways to collect payment information. A hosted payment page redirects the customer to the gateway's website to enter their card number, then sends them back to you. This is the safest for you (the gateway handles all the security) but the worst for the customer (they leave your site). A embedded form (also called an iframe or hosted field) lets the customer enter their card on your website, but the gateway handles the encryption so you never see the raw number. This is the middle ground — good security, good experience. A custom build means your developer writes custom code to collect and encrypt the data, which is the best experience but the most expensive and risky.
For most small businesses, an embedded form is the right choice. It looks and feels like your site, the customer stays on your page, and the security is solid. Hosted pages are fine if you do not care about brand consistency. Custom builds are only worth it if you have the budget and the developer expertise.
Comparing providers: what to look at
When you are comparing payment gateway providers, make a spreadsheet with these columns: transaction fees (percentage and per-transaction), monthly fees, setup fees, settlement time, payment methods supported, integration options, fraud tools, customer support availability, and contract terms (can you cancel anytime, or are you locked in for a year?). Then fill it in for each provider you are considering.
Do not just pick the cheapest. A provider that charges 2.9 percent but settles in one day and has great fraud tools may be better than one that charges 2.5 percent but settles in five days and has no fraud tools. Also check reviews from other small business owners in your industry — some providers are better for restaurants, some for nonprofits, some for e-commerce, and some for services.
Finally, test the provider's customer support before you sign up. Call their support line or email them with a question and see how long it takes to get an answer. If you have a payment problem on a Saturday and cannot reach anyone, that is a disaster. Some providers offer 24/7 phone support; others only offer email during business hours. Pick the level of support you need.
Frequently Asked Questions
Can I switch payment gateways without losing my transaction history?
Yes. Your transaction history stays with your old provider — you can download it or access it through their dashboard. Your new provider will not have that history, but you can keep both accounts open for a while if you need to reference old transactions. The main hassle is updating your website or POS system to point to the new gateway, which usually takes a few hours.
What happens if a customer disputes a charge after I have already shipped the product?
The customer's bank will reverse the charge and you lose the money. This is called a chargeback. You can dispute it by providing proof of delivery or proof that the customer received the product, but the burden is on you. This is why tracking numbers and delivery confirmation matter — they are your evidence in a chargeback case.
Do I need a separate merchant account, or does the gateway provide one?
Most modern gateways (like Stripe and Square) provide a merchant account as part of their service. You do not need to open one separately. Older providers sometimes require you to open a merchant account with a bank first, then connect the gateway to it. Check the provider's website to see whether they handle this for you or whether you need to set it up yourself.
What is the difference between a payment gateway and a payment processor?
A gateway is the software that collects and encrypts the card data. A processor is the company that routes it to the bank and settles the money to your account. Many companies do both — Stripe is both a gateway and a processor. Some companies do only one; for example, your bank might be the processor and you use Stripe as the gateway.
Can I accept payments without a website or physical store?
Yes. You can use a payment link (a unique URL you send to the customer via email or text), a virtual terminal (a form you fill out on the gateway's website), or a mobile app. These are useful for service businesses, nonprofits, and anyone who takes payments over the phone or in person without a register. Most gateways offer these tools for free or a small fee.