What you need to set up credit card payments
To accept credit cards, you need three things: a merchant account (which lets you receive card payments), a payment processor (which handles the transaction), and a payment gateway (which securely transmits the card data). Many providers bundle these together, so you may sign one contract and get all three.
You also need a business bank account where the money lands. Most processors deposit funds within one to three business days, though some offer next-day settlement for a higher fee. Your bank will need your business tax ID, and the processor will ask for your average monthly sales volume and the types of cards you plan to accept.
The physical or digital setup depends on your business model. A retail store needs a point-of-sale (POS) terminal or a card reader that plugs into a tablet or phone. An online store needs a payment gateway integrated into your website. A service business taking payments over the phone needs a virtual terminal or a phone-based system.
Key Takeaways
- You need a merchant account, payment processor, and payment gateway — often sold as one package — plus a business bank account to receive deposits.
- Fees vary by processor and card type: interchange fees (set by card networks), assessment fees, and processing fees typically range from 1.5% to 3.5% per transaction, plus monthly or per-transaction minimums.
- POS systems for retail, payment gateways for online, and virtual terminals for phone payments are the three main hardware or software setups.
- Contracts usually lock you in for 12 months, and early termination fees can be $300 to $500, so compare terms before signing.
- PCI compliance (Payment Card Industry standards) is required by law; your processor handles most of it, but you must protect customer data and never store full card numbers.
Understanding payment processor fees and costs
Every credit card transaction costs you money. The largest piece is the interchange fee, which Visa, Mastercard, American Express, and Discover set themselves — you cannot negotiate this. Interchange ranges from roughly 1.5% to 2.5% for debit cards and 2% to 3% for credit cards, depending on the card type and how the transaction is processed (in-person, online, or phone).
On top of interchange, your processor adds its own processing fee, usually 0.3% to 0.5% of the transaction plus a per-transaction charge of $0.10 to $0.30. Some processors offer flat-rate pricing (for example, 2.9% plus $0.30 per transaction) instead of itemizing each fee. Flat-rate is easier to budget but may cost more if your average transaction is large.
Beyond per-transaction costs, expect monthly fees. These range from $0 to $50 depending on the processor and your sales volume. Some charge a statement fee, a gateway fee, or a PCI compliance fee. A few waive monthly fees if you process a minimum volume each month — typically $1,000 to $5,000.
American Express often charges higher interchange than Visa or Mastercard, so some small businesses negotiate a separate deal with Amex or decline it. Discover usually has lower volume but lower fees as well. Ask your processor to show you a sample statement so you see exactly what you will pay on a typical transaction.
Choosing between different payment systems
A traditional POS system is a dedicated device (like a Square Terminal or Clover) that sits on your counter. It processes cards, prints receipts, tracks inventory, and stores sales history. Setup takes a few hours, and monthly costs run $50 to $300 depending on features. These work best for retail stores, restaurants, and service businesses with a physical location.
A mobile payment reader plugs into a smartphone or tablet and costs $20 to $100 upfront. Square Reader, PayPal Here, and Stripe Reader are common examples. Monthly fees are low or zero, but you pay higher per-transaction fees (often 2.75% to 3.5%). This works for small businesses, pop-up shops, or service providers who move around.
A payment gateway for online stores integrates into your website and lets customers enter card details directly. Stripe, Authorize.net, and PayPal are common gateways. Setup requires some technical work or a developer, and fees are typically 2.9% plus $0.30 per transaction. You handle your own customer service and refunds through a dashboard.
A virtual terminal is a web-based form where you manually enter card details for phone or mail orders. It costs $10 to $30 per month and works for low-volume businesses. Security is your responsibility — you must never write down or email card numbers.
Contracts, terms, and early exit fees
Most merchant account contracts lock you in for 12 months. If you cancel early, you pay an early termination fee ranging from $300 to $500. Some processors offer month-to-month terms, but they charge higher per-transaction fees to offset the risk. Read the contract carefully: some include automatic renewal, meaning you stay locked in unless you cancel 30 days before the anniversary date.
Check whether the contract includes a minimum monthly processing volume. If you commit to $2,000 per month and only process $1,200, you may owe the difference. Some contracts waive this if you are a new business in your first year.
Ask about rate increases. Some contracts allow the processor to raise your fees with 30 days' notice. Others lock in your rate for the full term. A locked rate is worth paying slightly higher upfront fees.
If you are unhappy with your processor, you can switch, but you will lose any equipment you bought (unless you own it outright) and pay the early termination fee. The new processor can port your merchant account number to their system, so your customers' recurring payments do not break. This process takes one to two weeks.
PCI compliance and data security requirements
PCI DSS (Payment Card Industry Data Security Standard) is a set of rules that protect customer card data. You are legally required to follow it. The good news: if you use a certified processor or POS system, they handle most of the heavy lifting.
Your main responsibilities are straightforward: never store the full card number, expiration date, or security code after the transaction is complete. Your processor stores this encrypted on their servers. If you take payments over the phone or by mail, use a virtual terminal or POS system — do not write down card numbers or email them.
Keep your devices and software updated with the latest security patches. If you use a POS system, the processor usually pushes updates automatically. If you use a website gateway, your web host and payment processor handle encryption, but you must use HTTPS (the padlock icon in your browser).
Some processors charge a PCI compliance fee ($5 to $15 per month) to cover their security audits. Others include it in your processing fees. If a processor asks you to complete a PCI self-assessment questionnaire (SAQ), it means they are checking that you are following the rules — this is normal and free.
Setting up recurring or subscription payments
If you offer subscriptions or memberships, your processor must support recurring billing. This means the customer authorizes one charge, and you automatically bill them on a schedule (weekly, monthly, yearly) without asking each time.
Most modern processors handle this through a dashboard where you set up a billing schedule and upload a customer list. The processor charges the card on the date you specify and notifies you of failures. If a card declines, the processor usually retries it a few days later.
You must get written consent from the customer before starting recurring charges. This can be a checkbox on your website, an email confirmation, or a signed form. Keep this record in case the customer disputes the charge later.
Recurring billing fees are usually included in your standard processing fees, though some processors charge an extra $0.50 to $1.00 per failed retry. Ask your processor what happens if a card fails three times in a row — most will stop trying and notify you so you can contact the customer.
Comparing major payment processors
| Processor | Best For | Per-Transaction Fee | Monthly Fee | Hardware Cost |
|---|---|---|---|---|
| Square | Retail, restaurants, mobile | 2.6% + $0.10 (card-present); 3.5% + $0.15 (online) | $0 to $60 | $0 to $299 |
| Stripe | Online stores, SaaS | 2.9% + $0.30 | $0 | $0 |
| PayPal | Small business, online | 2.99% + $0.30 (online); 2.7% + $0.10 (in-person) | $0 | $0 to $99 |
| Clover | Retail, inventory tracking | 2.6% + $0.10 (card-present) | $10 to $50 | $99 to $999 |
| Authorize.net | Online, custom integration | 2.9% + $0.30 | $25 | $0 |
Fees and features change frequently, so visit each processor's website to confirm current pricing. Most offer a free trial period (usually 30 days) so you can test the system before committing.
Frequently Asked Questions
What happens if a customer disputes a charge?
The customer contacts their card issuer and claims the charge was unauthorized or the product was not delivered. The issuer investigates and either sides with you or reverses the charge. If reversed, the money comes out of your account. You can dispute the chargeback by providing proof of delivery or authorization, but the process takes 30 to 60 days. Keep receipts and delivery confirmations for at least 18 months.
Can I accept credit cards without a physical location?
Yes. Use a payment gateway for online sales, a virtual terminal for phone or mail orders, or a mobile reader if you meet customers in person. Each has different fees and setup requirements. A gateway is cheapest for high volume; a virtual terminal is simplest for low volume.
Do I have to accept all card types?
No. You can decline American Express, Discover, or any card type. However, most customers expect you to take Visa and Mastercard, so declining them will cost you sales. Some businesses negotiate separate rates with Amex if their fees are too high.
What is the difference between a merchant account and a payment processor?
A merchant account is the bank account where your card payments land. A payment processor is the company that handles the transaction and deposits the money into that account. Many companies provide both, so the distinction is technical — you sign one contract and get both services.
How long does it take to get approved?
Most processors approve you within 24 to 48 hours if you provide your business tax ID, bank account details, and expected monthly sales volume. Some require a phone call to verify information. You can start processing cards as soon as approval is complete, usually the same day or the next business day.