How Payment Gateway Providers Work and What They Do for Your Business

What a payment gateway provider does

A payment gateway provider is the company that processes the actual transaction when a customer enters their card number, bank account, or digital wallet into your checkout. They sit between your business and the customer's bank, moving the payment information securely and checking whether the card is valid and the account has funds. Without a gateway provider, you have no way to accept card payments online or over the phone.

The gateway provider does not hold the money—that is the job of a separate company called an acquiring bank or merchant acquirer. The gateway just handles the technical handoff. Think of it this way: the gateway is the checkout counter, and the acquiring bank is the cash register that connects to the bank's vault.

Most small businesses do not work with a gateway provider directly. Instead, they use a payment processor (like Square, Stripe, or PayPal) that bundles the gateway, the acquiring bank relationship, and customer support into one service. But understanding what the gateway does separately helps you see why different processors charge different fees and offer different features.

Key Takeaways

• A payment gateway provider handles the technical work of moving payment information from your customer to their bank, checking that the card is valid, and confirming funds are available.
• The gateway provider is separate from the acquiring bank, which actually deposits money into your business account—many processors bundle both roles together.
• Major standalone gateway providers include Authorize.Net, First Data, and Global Payments, but most small businesses use a processor like Stripe or Square instead.
• Gateway fees typically run 0.5% to 1.5% per transaction plus a flat per-transaction charge, but you usually pay the processor's bundled rate instead of the gateway fee alone.
• Your choice of gateway affects which payment methods you can accept, how fast transactions settle, and what fraud protection tools you get.

Standalone gateway providers versus bundled processors

A standalone gateway provider sells only the gateway service—they move the payment information and validate the transaction. You then contract separately with an acquiring bank to receive the money. This route is common for large businesses, high-volume merchants, or companies that already have a relationship with a specific bank.

Examples of standalone gateway providers include Authorize.Net (owned by Visa), First Data (now part of Fiserv), Global Payments, and Worldpay. These companies typically charge a monthly gateway fee (often $10 to $25) plus a per-transaction fee (often $0.10 to $0.30) and a percentage of each transaction (often 0.5% to 1.5%). You then pay the acquiring bank separately for their services.

A bundled processor combines the gateway, the acquiring bank relationship, and customer support into one contract. Stripe, Square, PayPal, Toast, and Shopify Payments are bundled processors. You pay one rate (usually 2.2% to 3.5% per card transaction, plus $0.30 per transaction) and deal with one company. For most small and medium businesses, bundled processors are simpler and cheaper because you avoid the separate gateway and acquiring bank fees.

The trade-off: bundled processors are less flexible. You cannot choose a different acquiring bank or gateway if you want to. Standalone gateways give you more control but require you to manage multiple vendor relationships and understand how each piece works.

How payment information flows through a gateway

When a customer enters their card details at your checkout, the gateway provider receives that information in an encrypted format. The gateway does not store the card number—it passes the encrypted data to the card networks (Visa, Mastercard, American Express, Discover) and the customer's issuing bank to check whether the card is valid and whether the account has sufficient funds.

This check happens in seconds. The issuing bank sends back an approval or decline code. The gateway relays that response to your checkout page, which either completes the transaction or shows an error message. If approved, the transaction is logged and sent to your acquiring bank for settlement—the actual movement of money into your business account.

Settlement usually takes one to three business days, depending on your processor and your bank. During that time, the money is held by the card network or the acquiring bank. The gateway provider's role ends once the approval code is issued; the acquiring bank handles the rest.

This is why the gateway provider and the acquiring bank are separate roles: the gateway is responsible for the speed and security of the validation, while the acquiring bank is responsible for the accuracy and timing of the money reaching your account.

Payment methods and gateway compatibility

Not every gateway provider supports every payment method. Some gateways accept credit and debit cards only. Others also support digital wallets (Apple Pay, Google Pay, PayPal), bank transfers (ACH), or international payment methods (Alipay, WeChat Pay). Before choosing a gateway or processor, check which payment methods your customers are likely to use and confirm the gateway supports them.

If you sell internationally, your gateway provider must be able to handle currency conversion and comply with payment regulations in the countries where you operate. Some standalone gateways are stronger in specific regions—for example, a gateway provider focused on European merchants may have better support for SEPA bank transfers or local payment methods. Bundled processors like Stripe and PayPal typically support more payment methods globally, but at a higher per-transaction cost.

The payment methods you offer also affect your fraud risk and chargeback rates. Gateways that support 3D Secure (a verification step that adds a layer of security to card transactions) can reduce fraud but may also increase cart abandonment because the checkout takes longer. Your gateway provider should offer tools to balance security and conversion.

Fraud detection and security features

A gateway provider's fraud detection tools examine each transaction for signs of fraud—mismatched billing and shipping addresses, unusual card-use patterns, velocity checks (too many transactions in a short time), and other signals. These tools run automatically and either approve, decline, or flag a transaction for manual review.

The level of fraud detection varies widely. Basic gateways offer simple address verification (AVS) and card verification value (CVV) checks. More advanced gateways use machine learning to spot fraud patterns and offer tools like 3D Secure, which requires the customer to verify their identity with their bank before the transaction completes.

Fraud detection is not perfect. False positives (legitimate transactions flagged as fraud) can hurt your sales. False negatives (fraudulent transactions approved) can cost you money and damage your reputation. Your gateway provider should let you adjust fraud rules to match your business—for example, a subscription business might accept higher fraud risk in exchange for fewer false positives, while a high-ticket retailer might prefer stricter rules.

You are also responsible for PCI compliance (Payment Card Industry Data Security Standard), which sets rules for how you handle card data. A gateway provider that is PCI-compliant does not may provide your business is; you must follow PCI rules in how you store, transmit, and process card information. Most bundled processors handle much of the PCI burden for you, while standalone gateways require you to manage more of it yourself.

Gateway fees and how they compare

Gateway fees come in several forms. A monthly gateway fee (typically $10 to $25) covers the cost of maintaining your account and access to the gateway. A per-transaction fee (typically $0.10 to $0.30) is charged each time a transaction is processed, whether it is approved or declined. A percentage fee (typically 0.5% to 1.5%) is a cut of the transaction amount.

If you use a bundled processor, you usually pay one combined rate instead of these separate fees. For example, Stripe charges 2.9% + $0.30 per successful card transaction. Square charges 2.6% + $0.30 for in-person card transactions and 3.5% + $0.15 for online transactions. These rates are higher than standalone gateway fees alone, but they include the acquiring bank fee and customer support, so the total cost is often lower than paying for a gateway and acquiring bank separately.

Additional fees may apply for specific services: chargebacks (typically $15 to $100 per chargeback), refunds, batch processing, or PCI compliance. Some gateways charge a fee if your monthly volume falls below a minimum. Always ask your provider for a complete fee schedule before signing a contract.

Choosing between gateway providers and processors

If you are a small business just starting to take card payments, a bundled processor (Stripe, Square, PayPal, Shopify Payments) is usually the right choice. You get a gateway, an acquiring bank, fraud tools, and support in one place, with no setup fees and no long-term contract. You pay per transaction, so your costs scale with your revenue.

If you are a larger business with high transaction volume, complex payment needs, or an existing relationship with a bank, a standalone gateway provider may save you money. You can negotiate lower per-transaction rates and choose your own acquiring bank. But you will need to manage multiple vendor relationships and understand how each piece works.

If you operate a marketplace, a subscription service, or a business with recurring payments, look for a gateway provider or processor that specializes in your industry. They will have built-in tools for invoicing, recurring billing, and customer management that save you time and reduce errors.

Before you commit, test the gateway's checkout experience on your website or app. A slow or confusing checkout increases cart abandonment. Ask the provider for references from businesses similar to yours, and ask those references about uptime, customer support, and whether fees stayed as quoted.

Frequently Asked Questions

Can I switch gateway providers without losing my transaction history?

Yes, but the process depends on your current setup. If you use a bundled processor like Stripe, switching means setting up a new account with a different processor and updating your website's checkout code. Your old transaction history stays with your old processor, but you can export it for your records. If you use a standalone gateway, switching is more complex because you may also need to change acquiring banks.

What happens if my gateway provider goes out of business?

If a bundled processor shuts down, you lose access to your account and transaction history, though you can usually request a data export. If a standalone gateway provider shuts down, your acquiring bank relationship may continue, but you will need to switch gateways quickly. This is one reason bundled processors are less risky for small businesses—they are usually larger companies with more financial stability.

Do I need a different gateway provider for in-person and online payments?

Not necessarily. Most bundled processors (Stripe, Square, PayPal) support both online and in-person payments through the same account. Standalone gateways also typically support both, though you may need separate hardware (a card reader) for in-person transactions. Check your provider's documentation to confirm both payment types are included in your plan.

What is the difference between a gateway and a payment processor?

A gateway handles the technical validation of the payment (checking the card is real and has funds). A processor bundles the gateway with an acquiring bank relationship and customer support. Most small businesses use a processor, not a standalone gateway, because it is simpler and cheaper.

Can I use multiple gateway providers at the same time?

Yes, some businesses do this to reduce risk or to support different payment methods. For example, you might use Stripe for card payments and PayPal for PayPal transactions. However, managing multiple providers increases complexity and may increase your total fees. Most businesses find one provider that meets their needs is simpler and cheaper.