What you need to set up credit card acceptance
To accept credit cards, you need three things: a merchant account (a bank account that receives card payments), a payment processor (the company that handles the transaction), and payment hardware or software (the terminal, reader, or online form where customers enter their card details). Some providers bundle all three together; others you source separately.
The merchant account is the foundation. Your regular business bank account cannot receive card payments directly — the card networks (Visa, Mastercard, American Express, Discover) require a separate account set up specifically for this purpose. Your processor applies for this account on your behalf, or you can open one yourself and connect it to a processor.
The payment processor is the middleman. When a customer swipes, taps, or enters their card, the processor routes that information to the card network, the customer's bank, and back to you — all in seconds. The processor also handles disputes, refunds, and deposits the money into your merchant account, usually within one to three business days.
Key Takeaways
- You need a merchant account, a payment processor, and hardware or software to accept cards — many providers offer all three as a package.
- Costs include a percentage of each transaction (typically 1.5% to 3.5%), a per-transaction fee (usually $0.10 to $0.30), and sometimes monthly minimums or equipment fees.
- Square, Stripe, PayPal, and Clover are common for small businesses; larger operations may use Authorize.net, First Data, or Worldpay.
- In-person payments (chip or tap) have lower fees than online or phone payments because fraud risk is lower.
- You can start with a mobile card reader and upgrade to a full terminal or online checkout later as your business grows.
How payment processing fees work
Every card transaction costs you money. The fee structure has three parts: the interchange fee (set by the card networks and paid to the customer's bank), the assessment fee (paid to Visa, Mastercard, or Amex), and the processor's markup (the processor's profit). Together, these typically run 1.5% to 3.5% of the transaction amount, plus a flat fee per transaction.
The exact percentage depends on how the card is processed. A customer who taps their chip card in your store pays a lower percentage than one who enters their card number over the phone or online, because in-person transactions are harder to counterfeit. A customer paying with American Express typically costs you more than one paying with Visa, because Amex sets higher interchange rates.
Beyond per-transaction fees, some processors charge a monthly minimum (often $10 to $25), a statement fee, or a fee to lease or buy a terminal. A few charge nothing monthly but take a higher percentage per transaction. Read the pricing page carefully — the lowest percentage is not always the lowest total cost.
Choosing between in-person, online, and phone payments
If you run a retail store, restaurant, or service business where customers are physically present, you will use a point-of-sale (POS) terminal or a mobile card reader. The customer taps, inserts, or swipes their card. Examples include Square Terminal, Clover, and Ingenico devices. These have the lowest fraud risk, so fees are lowest.
If you sell online, you need a payment gateway — software that sits on your website and encrypts card data before sending it to the processor. Stripe, PayPal, and Shopify Payments are common gateways. You do not handle the card number yourself; the gateway does. Fees are higher than in-person because online fraud is more common.
If you take payments over the phone or by mail, you manually enter the card number into your processor's system. This is called a card-not-present transaction and has the highest fees because fraud risk is highest. Some processors charge extra for this method or require you to get the customer's signature or verbal authorization recorded.
Comparing major payment processors
| Provider | Best for | In-person fees | Online fees | Hardware |
|---|---|---|---|---|
| Square | Small retail, food trucks, service businesses | 2.6% + $0.10 | 2.9% + $0.30 | Free reader; terminal $299 |
| Stripe | Online stores, SaaS, subscriptions | 2.7% + $0.05 | 2.9% + $0.30 | Terminal $299 |
| PayPal | Existing PayPal users, online and in-person | 2.99% + $0.30 | 2.99% + $0.30 | Free reader; terminal $299 |
| Clover | Restaurants, retail with inventory tracking | 2.7% + $0.10 | 3.5% + $0.15 | Terminal $300–$2,000 |
| Authorize.net | High-volume businesses, custom integrations | Varies | Varies | Works with third-party terminals |
Square and PayPal are easiest to start with because they require no long-term contract and charge no monthly fee — you pay only per transaction. Stripe is best if you are building a custom online store or app. Clover works well if you need inventory management or employee timekeeping built in. Authorize.net and First Data are for larger businesses that process thousands of transactions monthly and want to negotiate custom rates.
The fees shown above are examples and vary by card type, region, and your processing volume. Amex and Discover typically cost more than Visa and Mastercard. If you process more than $10,000 per month, contact processors directly — they often negotiate lower rates for higher volume.
Setting up your first merchant account
Start by choosing a processor and visiting their website. Most let you sign up in 15 to 30 minutes. You will need your business name, address, tax ID (EIN), and a personal Social Security number. The processor will ask about your average transaction size, monthly processing volume, and business type — they use this to assess fraud risk.
Once you submit, the processor runs a background check and verifies your information with your bank. This usually takes one to three business days. You will receive an email with your merchant account number and login credentials. At that point, you can order hardware (a terminal or reader) or set up your online checkout.
If you are rejected, it is usually because of a mismatch between your stated business and your bank account, a previous merchant account that ended badly, or a high-risk business category (like adult services or gambling). You can reapply with a different processor — each has different underwriting standards — or ask the processor why you were declined and fix the issue.
Understanding PCI compliance and security
PCI DSS (Payment Card Industry Data Security Standard) is a set of rules that protect customer card data. If you accept cards, you must follow these rules or you risk fines and losing your merchant account. The good news: if you use a modern processor with a certified terminal or gateway, most of the work is done for you.
The core rule is straightforward: never store, process, or transmit a customer's full card number yourself. Use your processor's terminal or gateway instead. If you take payments over the phone, use your processor's phone system, not a recording app. If you store customer data (like for subscriptions), use your processor's vault, not your own database.
Your processor will send you a PCI compliance form once a year. For most small businesses, it is a short questionnaire. Answer honestly. If you are storing card data or running your own system, you may need a security audit, which costs $1,000 to $5,000 annually. This is one reason to use a hosted solution like Stripe or Square rather than building your own.
Reducing fraud and chargebacks
A chargeback happens when a customer disputes a charge with their bank and the bank reverses the payment. You lose the money and pay a chargeback fee (usually $15 to $100). Chargebacks fall into two categories: fraud (the customer's card was stolen) and disputes (the customer says they did not receive the item or it was not as described).
To reduce fraud, always ask for a signature or ID for large in-person purchases, use the chip reader instead of the magnetic stripe, and enable address verification (AVS) for online payments. For subscriptions, send a receipt when ready and make cancellation straightforward — customers who cannot cancel often dispute the charge instead.
To reduce disputes, describe your product or service clearly, deliver quickly, and respond to customer complaints before they escalate to a chargeback. If a customer does file a chargeback, you have the right to dispute it by submitting evidence (a receipt, shipping confirmation, or email exchange). Most processors have a portal where you upload this evidence.
Frequently Asked Questions
Do I need a business license to accept credit cards?
No, but you do need a business tax ID (EIN). Processors ask for this to verify you are a legitimate business. If you are a sole proprietor, you can use your Social Security number, but an EIN is better because it separates your personal and business finances. You can get an EIN for free from the IRS website in minutes.
What is the difference between a payment processor and a payment gateway?
A processor is the company that handles the transaction — they route the payment, manage the merchant account, and deposit money into your bank. A gateway is the software that encrypts and transmits the card data. Stripe is both; Square is both. Some businesses use a processor like Authorize.net and a separate gateway like Adyen. For most small businesses, one provider does both.
Can I accept credit cards without a physical location?
Yes. You can accept online payments through a website, mobile app, or email invoice. You can also accept in-person payments using a mobile card reader (like Square Reader) at a customer's location, a market, or a pop-up event. You do not need a storefront — just a merchant account and a way to process the payment.
What happens if a customer's card is declined?
The processor sends a decline code (like "insufficient funds" or "card expired") to your terminal or website. You can ask the customer for a different card or payment method. You are not charged a fee for a declined transaction. If a card is declined repeatedly, do not keep trying — it usually means the customer cannot pay.
How long does it take to receive money after a payment?
Most processors deposit money into your bank account within one to three business days. Some offer next-day deposits for a small fee. Weekends and holidays slow this down — a Friday payment may not arrive until Tuesday. Check your processor's settlement schedule on their website or in your account settings.