How Payment Gateways Work and Which Ones Businesses Use Most
What a payment gateway does and why it matters to your money
A payment gateway is the system that captures payment information when a customer buys something from you—online, in person, or over the phone. It encrypts that information, sends it to the bank that issued the customer's card, and tells you whether the charge went through or was declined. The gateway itself does not hold the money; it is the messenger between your business, the customer's bank, and your own bank account.
If you sell anything—physical goods, services, subscriptions, or digital products—you need a gateway to process those payments safely. Without one, you cannot accept cards at all, and you have no way to know whether a transaction is legitimate or fraudulent. The gateway also creates the record that both you and the customer need for disputes, refunds, and taxes.
Different gateways charge different fees, connect to different banks, and work with different types of businesses. Choosing the right one affects how much money you keep, how fast you get paid, and how much work you have to do to set it up.
Key Takeaways
- A payment gateway encrypts card information and routes it to the customer's bank to verify the charge, then tells you whether the transaction succeeded.
- Gateways charge per-transaction fees (usually 2–3% plus a flat fee per sale) or monthly subscription fees, depending on your sales volume and business type.
- Stripe, Square, PayPal, and Authorize.Net are the most widely used gateways because they work with most business types and integrate with common accounting software.
- In-person, online, and phone payments often require different gateway setups or add-ons, so confirm your gateway supports the sales channels you use.
- Your gateway choice affects how quickly you receive money, what disputes look like, and whether you can process refunds yourself or need to contact support.
How payment gateways charge and what fees actually cost
Most gateways use one of two pricing models: per-transaction fees or monthly subscriptions. Per-transaction fees are the most common and work like this: you pay a percentage of each sale (usually 2.2% to 3.5%) plus a flat fee per transaction (usually $0.30 to $0.50). If you sell a $100 item, you might pay $2.90 to $3.99 in fees, meaning you keep $96.01 to $97.10.
Subscription models charge a fixed monthly fee—often $20 to $300—regardless of how many sales you make. These work better if you process high volume or high-dollar transactions, because the percentage you pay per sale drops or disappears. A business processing $50,000 per month in sales might save money with a subscription; a business processing $2,000 per month usually pays less with per-transaction fees.
Some gateways also charge setup fees, monthly minimum fees, PCI compliance fees, or fees for features like recurring billing or fraud detection. Always ask what the total monthly cost would be at your expected sales volume before you sign up. Many gateways offer a free trial or let you see the fee structure before you commit.
Stripe: The gateway most software integrates with
Stripe is used by more online businesses than any other gateway because it integrates with thousands of shopping carts, accounting programs, and business tools. If you use Shopify, WooCommerce, QuickBooks, or Zapier, Stripe usually connects with one click. It works for online sales, phone orders, and in-person payments (with a card reader), and it handles subscriptions and invoicing built in.
Stripe charges 2.7% plus $0.30 per online transaction, and 2.7% plus $0.05 per in-person transaction. There are no monthly fees, no setup fees, and no minimum sales volume. Money lands in your bank account within one to two business days. The downside is that Stripe's customer support is email-only unless you pay for a premium plan, so if something breaks on a Saturday, you are waiting until Monday.
Stripe also requires you to meet their terms of service, which means they can freeze your account if they suspect fraud or if you sell certain high-risk products. This is rare for legitimate businesses, but it is worth knowing.
Square: The gateway built for in-person and small retail
Square started as a card reader you plug into your phone, and it has grown into a full payment system that handles online, in-person, and phone sales. If you run a retail store, restaurant, salon, or service business, Square's point-of-sale system is often simpler to set up than a traditional gateway because it bundles the reader, the software, and the payment processing into one product.
Square charges 2.6% plus $0.40 per online transaction, and 2.6% plus $0.10 per in-person transaction. The card reader itself costs $29 to $49 depending on the model. Money arrives in your bank account within one to two business days. Square also offers invoicing, inventory tracking, and employee management, so if you need those tools, you may not need separate software.
Square's main limitation is that it does not integrate as deeply with third-party accounting software as Stripe does. If you use QuickBooks or Xero, the connection works, but it is not as seamless. Square is strongest when you use their own ecosystem.
PayPal and Authorize.Net: Established gateways with different strengths
PayPal Payments Pro and PayPal Commerce Platform let you accept cards without sending customers to PayPal's website. PayPal charges 2.99% plus $0.30 per online transaction, or 2.7% plus $0.30 per in-person transaction. Money can arrive in your account within one business day. PayPal integrates with WooCommerce, Shopify, and most major platforms, and it has phone support available 24/7.
Authorize.Net is older and less flashy than Stripe or Square, but it is used by thousands of established businesses because it is reliable and works with almost any software. It charges $25 per month plus 2.9% plus $0.30 per transaction. There is no per-transaction minimum, so it works for businesses of any size. Authorize.Net also has strong fraud detection tools and integrates with accounting software like QuickBooks and Xero.
Both PayPal and Authorize.Net are good choices if you need phone support, if you process high volume and want to negotiate rates, or if you use accounting software that integrates better with them than with Stripe. Neither is wrong; they are just different paths to the same outcome.
What to check before you choose a gateway
Before you sign up, confirm that your gateway handles the payment types you need. Do you sell online, in person, or both? Do you need to send invoices and wait for payment, or do you charge immediately? Do you offer subscriptions or one-time sales? Do you need to process refunds yourself, or will you contact support? Some gateways make refunds instant; others take a few days.
Also check whether your gateway integrates with the software you already use. If you use Shopify, Stripe and Square both work perfectly. If you use WooCommerce, Stripe is the easiest. If you use QuickBooks, Authorize.Net and PayPal both sync automatically. If your software is not on the list, ask the gateway's support team whether the integration exists or whether you will have to export data manually.
Finally, read the terms of service and ask about dispute resolution. If a customer claims they did not authorize a charge, how does the gateway handle it? Can you respond with proof, or do you lose the money automatically? How long do you have to respond? These details matter when something goes wrong.
How money moves from the gateway to your bank account
When a customer makes a purchase, the gateway captures the card information and sends it to the customer's bank for approval. If approved, the money is held temporarily in the gateway's account. The gateway then deposits it into your business bank account on a schedule—usually daily, but sometimes weekly depending on your volume and the gateway's policy.
This process normally takes one to two business days, but it can take longer if the transaction is flagged as high-risk or if you are a new merchant. Some gateways hold money for 7 to 30 days on new accounts as a fraud prevention measure. Once the money is in your account, it is yours; the gateway cannot take it back unless a customer disputes the charge and wins the dispute.
If a customer requests a refund, the gateway sends the money back to their card. This also takes one to two business days. During that time, the refund shows as "pending" on the customer's statement, and you see it as a deduction from your account.
Frequently Asked Questions
Can I use more than one payment gateway?
Yes. Many businesses use one gateway for online sales and another for in-person sales, or they keep a backup gateway in case one goes down. However, each gateway charges its own fees, so using multiple gateways costs more. Most businesses stick with one unless they have a specific reason to split.
What happens if a customer disputes a charge?
The customer contacts their bank and claims they did not authorize the charge or did not receive what they paid for. The gateway notifies you and gives you a window (usually 7 to 10 days) to respond with proof—a receipt, email confirmation, tracking number, or signed agreement. If you respond with proof, you usually win. If you do not respond or your proof is weak, the money goes back to the customer and you lose it.
Do I need a separate merchant account?
No. Stripe, Square, and PayPal all provide merchant accounts as part of their service. Authorize.Net requires you to set up a merchant account separately, usually through your bank or a third-party processor, which adds a step but gives you more control over your banking relationship.
What is PCI compliance and do I need to worry about it?
PCI compliance means your business follows security standards set by card networks to protect customer payment information. If you use a hosted gateway like Stripe or Square, they handle PCI compliance for you. If you build your own payment system, you have to meet PCI standards yourself, which is expensive and complex. Stick with a hosted gateway unless you have a specific reason not to.
How do I know if a gateway is safe?
Check whether the gateway uses encryption (look for "https" in the URL and a lock icon in your browser), whether it is registered with the Payment Card Industry Security Standards Council, and whether it has been in business for at least a few years. Read reviews from other businesses in your industry. Avoid gateways that are brand new, have no reviews, or promise unrealistic rates.