The three main ways to accept credit cards
You can accept credit cards through a payment processor (a company that handles the transaction), a point-of-sale system (hardware and software that processes cards in person), or a payment gateway (software that connects your website to a processor). Most small businesses use one of these three, often in combination. The choice depends on whether you sell in person, online, or both.
Each route has different costs, setup time, and equipment needs. A coffee shop might use a point-of-sale terminal. An online store uses a payment gateway. A service business that meets clients in different locations might use a mobile card reader. You do not need all three — pick the one that matches how you actually sell.
Key Takeaways
- Payment processors, point-of-sale systems, and payment gateways are the three main routes, and you choose based on whether you sell in person, online, or both.
- Costs include a setup fee (sometimes zero), a per-transaction percentage (usually 2 to 3 percent), and a monthly fee (sometimes zero for low-volume sellers).
- You need a business bank account and a federal tax ID (EIN) to open a merchant account, which is what lets you accept cards.
- Processing times vary: in-person transactions settle in one to three business days, while online transactions may take longer if fraud checks are triggered.
- PCI compliance (data security standards) is required by law; most processors handle this for you, but you are responsible for keeping customer data safe.
Understanding payment processor costs
A payment processor charges you in three ways: a setup fee (often $0 to $100), a per-transaction fee (usually 2 to 3 percent of the sale plus $0.30 per transaction), and sometimes a monthly minimum or statement fee. The exact percentage depends on the type of card (debit cards cost less than premium credit cards) and your industry. A grocery store pays less per transaction than a restaurant or online retailer.
Some processors offer flat-rate pricing: you pay the same percentage on every transaction regardless of card type. Others use interchange-plus pricing, where you pay the bank's cost plus a markup. Flat-rate is simpler to budget; interchange-plus is usually cheaper if you process high volume. Ask for a written quote before you commit, and confirm whether the rate includes all fees or if there are hidden charges for chargebacks, refunds, or monthly statements.
Setting up a merchant account
Before any processor will let you accept cards, you need a merchant account — essentially permission from the payment network to handle customer card data. To open one, you will need a business bank account, your federal tax ID (EIN), and basic business information like your legal name, address, and how long you have been in business.
Most processors handle the merchant account setup as part of their onboarding. You fill out an process (online or on paper), provide copies of your ID and business license, and wait for approval. This usually takes three to five business days, though some processors approve within hours. Once approved, you receive login credentials and can start processing cards the same day or within 24 hours.
If you are a sole proprietor without an EIN, you can use your Social Security number instead, but having an EIN keeps your personal and business finances separate and looks more professional to customers and banks.
In-person payment processing with point-of-sale systems
A point-of-sale (POS) system is hardware (a terminal or card reader) plus software that rings up sales, tracks inventory, and processes payments. Common options include Square, Toast, Clover, and Shopify POS. Most modern systems are cloud-based, meaning your sales data syncs to the internet and you can view reports from your phone.
Setup is straightforward: order the hardware, read the app or software, connect to your processor, and start taking payments. Some systems charge for the hardware upfront ($100 to $500); others lease it to you monthly. Processing fees are the same as any other processor — usually 2 to 3 percent per transaction plus a small per-transaction fee.
POS systems also track sales by product, employee, and time of day, which helps you manage inventory and staffing. If you have multiple locations, you can see all of them in one dashboard. The trade-off is that you are paying for features you might not need if you are a very small business.
Online payment processing with payment gateways
A payment gateway is software that sits on your website and encrypts the customer's card information before sending it to the processor. Common gateways include Stripe, PayPal, Square Online, and Shopify Payments. You do not need separate hardware — customers enter their card details on your website, and the gateway handles the rest.
Setup takes minutes: create an account, paste a code snippet into your website (or use a plugin if you are on Shopify or WordPress), and you are live. Processing fees are the same as in-person: usually 2 to 3 percent plus $0.30 per transaction. Some gateways charge a monthly fee; others do not.
Gateways also offer fraud detection, which automatically flags suspicious transactions and can hold them for review. This protects you from chargebacks, but it can also delay legitimate sales. Most gateways let you adjust the fraud settings to match your risk tolerance.
Mobile card readers for payments on the go
If you meet clients at different locations — a plumber visiting job sites, a personal trainer at a client's home, a consultant meeting at coffee shops — a mobile card reader lets you accept cards anywhere you have a smartphone or tablet. Square Reader, PayPal Here, and Clover Go are common options.
The reader is a small device that plugs into your phone's headphone jack or connects via Bluetooth. Customers insert or tap their card, and the payment processes when ready. You get a receipt emailed or texted to the customer. Processing fees are the same as other methods, and most readers cost $20 to $50 upfront.
Mobile readers are slower than a fixed terminal (each transaction takes 30 to 60 seconds), and you need a reliable cell signal. But they are portable, affordable, and let you collect payment on the spot instead of invoicing later.
PCI compliance and data security
PCI compliance is a set of security standards that protect customer card data. The Payment Card Industry (made up of Visa, Mastercard, American Express, and others) requires that any business accepting cards follow these rules. Violations can result in fines of $5,000 to $100,000 per month, though most small businesses never face enforcement if they use a reputable processor.
The good news: if you use a certified processor, gateway, or POS system, most of the compliance work is done for you. These companies encrypt data, store it securely, and handle the technical requirements. Your job is to not store card numbers yourself, use strong passwords, keep your software updated, and train staff not to write down card details or leave receipts lying around.
Never email card numbers, store them in a spreadsheet, or take photos of cards. If you are unsure whether something is safe, ask your processor — they have compliance teams whose job is to answer these questions.
Frequently Asked Questions
How long does it take for money to show up in my bank account?
Most processors deposit funds within one to three business days. Some offer next-day or same-day deposits for an extra fee. Weekend and holiday transactions may take longer. Check your processor's settlement schedule before you sign up if timing matters for your cash flow.
What happens if a customer disputes a charge?
The customer contacts their bank and files a chargeback. The processor notifies you, and you have a window (usually 7 to 10 days) to provide evidence that the transaction was legitimate — a receipt, email confirmation, or tracking number. If you do not respond or the bank sides with the customer, the money is reversed and you may be charged a chargeback fee ($15 to $100).
Can I accept cards without a business bank account?
Most processors require a business bank account because they need somewhere to deposit your funds. Some will accept a personal account if you are a sole proprietor, but this mixes business and personal money and makes taxes harder. Open a business account — it is inexpensive and protects you legally.
Do I have to use the processor's hardware, or can I bring my own?
You must use hardware certified by your processor. This is a PCI requirement — the processor is responsible for the security of the device, so they cannot let you use untested equipment. You can usually choose between their options (for example, Square offers multiple reader models), but you cannot use a competitor's hardware.
What if I process very few transactions — do I still need a merchant account?
Yes. Even if you process one card per month, you need a merchant account to do it legally. Some processors waive monthly fees for low-volume sellers, so shop around. You might also consider invoicing customers and having them pay by bank transfer or check if card processing feels like overkill for your business.