The basics of accepting card payments online
To take credit card payments online, you need three things: a payment processor (the company that handles the transaction), a merchant account (the bank account where money lands), and payment gateway software (the tool that encrypts the card data and sends it securely). Most small businesses use an all-in-one provider like Stripe, Square, or PayPal that bundles all three together, so you do not have to set them up separately.
The payment processor charges you a fee for each transaction — typically 2.2% to 3% of the sale plus a small flat fee like $0.30. That fee comes out before the money reaches your account. The processor also handles the security requirements (called PCI compliance) that protect your customer's card information, which means you do not have to store card numbers yourself or meet those security standards on your own.
You can start taking payments within hours of signing up with most providers. You do not need a business license, a separate bank account, or approval from a bank — the processor handles the underwriting themselves. However, they will ask for basic information about your business, your expected monthly sales volume, and sometimes your personal credit history.
Key Takeaways
- All-in-one providers like Stripe, Square, and PayPal handle payment processing, merchant accounts, and security in one platform, which is simpler than hiring each service separately.
- You pay a percentage of each sale (usually 2.2% to 3%) plus a small per-transaction fee, and this comes out before money reaches your account.
- The processor handles PCI security compliance, which means you do not have to store card numbers or meet complex security rules yourself.
- Setup takes a few hours to a day, and you can begin accepting payments when ready after approval without needing a business license or separate bank account.
- Different providers charge different fees and offer different features — comparing them before you sign up saves money over time.
Choosing between payment processors
The major all-in-one providers differ in fees, features, and who they work best for. Stripe charges 2.2% + $0.30 per online transaction and works well if you have a website or use tools like Shopify. Square charges 2.6% + $0.30 for online payments and is known for in-person card readers and point-of-sale systems. PayPal charges 2.29% + $0.30 for standard transactions and works through your existing PayPal account if you already have one.
Smaller providers like Authorize.net, Worldpay, and Clover exist too, but they often require you to set up a separate merchant account with a bank, which adds time and complexity. They can be cheaper if you process very high volumes (tens of thousands per month), but for most small businesses the all-in-one route is faster and simpler.
Before you choose, calculate what your fees will actually cost. If you expect to process $10,000 per month, Stripe will cost roughly $220 to $300 per month in fees. Square will cost roughly $260 to $330. The difference sounds small, but over a year it adds up. Also check whether the provider charges monthly minimums, setup fees, or early termination fees — most do not, but some do.
Setting up your first payment form
Once you have chosen a processor, you need a way for customers to enter their card information. The simplest option is a hosted payment page — the processor gives you a link you can email or post on your website, and customers enter their card details on the processor's find page, not yours. This is the safest option because you never touch the card data.
If you have a website, you can embed a payment form directly into your site using code the processor provides. Stripe and Square both offer this. The form looks like it is part of your site, but the card data goes straight to the processor's servers, not to your website's server. This requires some technical setup or help from a web developer, but it looks more professional.
For very straightforward needs — invoicing a few clients per month — you can use the processor's invoice tool. You create an invoice in their dashboard, email it to the customer, and they pay by clicking a link. Stripe Invoicing and Square Invoices both work this way. This requires no website or technical setup at all.
Understanding fees and what they cover
The standard online card fee (2.2% to 3% plus $0.30) covers the cost of the processor, the payment network (Visa, Mastercard, Amex), the bank that issued the customer's card, and fraud protection. You pay this fee on every transaction, whether the customer's card is approved or declined. Some processors charge a small fee for declined cards; most do not.
Beyond the per-transaction fee, watch for these additional costs: monthly account fees (some providers charge $10 to $30 per month; others charge nothing), batch fees (a small charge each time you settle your daily transactions; most providers include this), and chargeback fees (typically $15 to $100 if a customer disputes a charge and the processor has to investigate). Chargebacks are rare if you keep good records and communicate clearly with customers, but they happen.
International cards cost more. If a customer pays with a card issued outside the United States, most processors charge an extra 1% to 2%. Some processors also charge more for American Express than for Visa or Mastercard, though this is becoming less common. Check the processor's fee schedule before you sign up if you expect international payments.
Security and compliance requirements
When you use an all-in-one processor, they handle PCI DSS compliance (Payment Card Industry Data Security Standard) for you. This is a set of rules that protect card data. The processor's job is to make sure card numbers never touch your servers. Your job is to make sure your website uses HTTPS (the padlock icon in the browser), does not store card numbers, and does not ask customers to email card information.
If you use a hosted payment page or an embedded form from your processor, you are already compliant — the processor handles it. If you build your own payment form, you have to follow PCI rules yourself, which is complex and expensive. Do not do this. Always use the processor's form or page.
The processor will also screen transactions for fraud. If a charge looks suspicious — a card used in two countries within an hour, or a very large purchase from a new customer — the processor may block it or flag it for review. You can adjust these settings in your dashboard, but the default settings are usually good enough for small businesses.
Getting paid and managing your money
Money from card sales lands in your merchant account, which is separate from your personal checking account. Most processors transfer this money to your bank account automatically on a set schedule — usually daily or weekly. Stripe transfers daily by default. Square transfers daily or weekly depending on your account type. PayPal transfers on a schedule you choose.
There is usually a holding period before the first transfer. If you process a payment on Monday, it might not reach your bank until Wednesday or Thursday. This is normal and protects the processor in case the customer disputes the charge within the first few days.
You can see all your transactions in the processor's dashboard — what was sold, when, to whom, and what fee was charged. This data is useful for taxes and accounting. Most processors let you export transaction history as a CSV file, which you can give to an accountant or import into accounting software like QuickBooks.
Common problems and how to avoid them
The most common issue is a customer's card being declined even though they have money. This usually means the card issuer (their bank) blocked the transaction because it looked suspicious — a different country, a very large amount, or a merchant category they do not recognize. Tell the customer to call their bank and let them know the charge is legitimate, then try again.
Another common issue is a customer disputing a charge weeks later, claiming they never authorized it or that the product did not arrive. This is called a chargeback. You can fight it by providing proof — an email confirmation, a shipping receipt, a signed contract. Keep records of every transaction for at least a year. If you lose too many chargebacks (usually more than 1% of your sales), the processor can close your account.
A third issue is accidentally charging a customer twice. This usually happens when a customer clicks the "Pay" button twice because the page is slow. To prevent this, use the processor's built-in duplicate prevention, which most offer. Also tell customers to wait for a confirmation page before closing their browser.
Frequently Asked Questions
Do I need a business license to take credit card payments online?
No. Payment processors do not require a business license. However, you do need to report the income to the IRS, and some states require a license if you are selling certain products or services. Check your state and local rules, but the processor will not stop you from signing up without one.
What happens if a customer's card is declined?
The transaction fails and no money changes hands. You are not charged a fee for a declined card with most processors. The customer can try a different card or contact their bank to find out why the card was blocked. You should tell them what happened and ask them to try again.
Can I take payments over the phone or by email?
Yes, but it costs more. Phone and email payments are considered "card not present" transactions and carry higher fraud risk, so processors charge an extra fee — usually 3.5% to 4% instead of 2.2% to 3%. You can use the processor's invoice tool or virtual terminal to enter the card details yourself, but never ask a customer to email their card number.
How long does it take to get approved?
Most processors approve you within a few hours to one business day. Stripe and Square often approve when ready. PayPal may take a day or two. If the processor has questions about your business, approval can take longer. You can start taking payments as soon as you are approved.
What if I want to stop using a processor?
You can switch anytime with most providers — there are no long-term contracts. Your old processor will transfer your transaction history to you, and your new processor will give you a new payment link or form. Customers do not need to do anything; they just use your new payment method going forward.