The basics of taking credit card payments
To accept credit card payments, you need a merchant account — a contract with a bank or payment processor that lets you receive money from customers' cards. The processor connects to the card networks (Visa, Mastercard, American Express, Discover), verifies the transaction, and deposits the funds into your business bank account. You pay a fee for each transaction, usually a percentage of the sale plus a flat amount per transaction.
You also need a way to process those payments — either a physical card reader, an online payment form, or both. The equipment or software you choose depends on whether you run a brick-and-mortar store, an online business, or both. Most small businesses start with a payment processor like Square, Stripe, PayPal, or their bank's own system.
The entire setup typically takes a few days to a week. You'll provide business information, banking details, and sometimes proof of your business license or tax ID. Once approved, you can start taking payments when ready.
Key Takeaways
- A merchant account is a contract with a payment processor that lets you receive card payments and deposit them into your business bank account.
- You pay a transaction fee (usually 2 to 3 percent of the sale plus 25 to 30 cents) each time a customer pays by card.
- Physical card readers, online payment forms, and mobile apps are the three main ways to accept payments, and many processors offer all three.
- Setup takes three to seven business days and requires your business name, tax ID, and a business bank account.
- Chargebacks and fraud are real costs — a customer can dispute a charge and reverse the payment, so keep clear records of what you sold.
In-person payment processing with a card reader
If you have a physical location or meet customers face-to-face, a card reader is the simplest tool. The reader plugs into your phone, tablet, or computer and lets customers insert, tap, or swipe their card. Popular options include Square Reader, PayPal Here, and Stripe Terminal.
Most readers cost between $30 and $300 upfront, depending on the model. Some processors include the reader free or at a discount if you commit to using their service. The transaction fee is the same whether you use a reader or another method — typically 2.6 percent plus 30 cents per transaction for Visa and Mastercard, though American Express and Discover may cost more.
Card readers work offline in many cases, meaning you can process a payment even if your internet connection drops. The transaction syncs once you're back online. This is useful for markets, pop-up shops, or delivery routes where WiFi isn't reliable.
Online payment forms and checkout pages
If you sell online, you need a payment form or checkout page that customers fill out on your website. This form collects the card number, expiration date, and security code, then sends that data securely to your processor. The processor charges the card and tells your website whether the payment went through.
Most payment processors provide a pre-built checkout page you can link to from your website, or they offer code you can embed directly into your site. Shopify, WooCommerce, and other e-commerce platforms have built-in payment processing, so you don't have to set up a separate merchant account if you use them. However, you still pay the same per-transaction fees.
Online payments carry more fraud risk than in-person ones because the customer isn't physically present. Processors use fraud detection tools that flag suspicious orders — for example, a card used in two different countries within an hour, or a purchase amount far higher than the customer's usual spending. You can also add extra security steps like requiring a CVV code or using 3D find, which asks the customer to verify their identity with their bank.
Subscription and recurring payments
If you charge customers on a schedule — monthly memberships, retainers, or installment plans — you need a processor that handles recurring billing. You store the customer's card information securely (you never store the full card number yourself; the processor does), and the processor automatically charges it on the dates you set.
Recurring payments reduce the friction of asking customers to pay again each month, but they also increase chargeback risk. A customer might forget they signed up and dispute the charge as unauthorized. To protect yourself, send a confirmation email before the first charge and a receipt after each one. Keep records of when the customer signed up and what they agreed to pay.
Most processors charge the same transaction fee for recurring payments as for one-time payments. Some offer a discount if you process a high volume of recurring charges.
Fees, deposits, and what you actually receive
When a customer pays $100 by card, you don't receive $100. The processor takes a fee, and sometimes your bank takes a small cut. A typical breakdown looks like this:
| Customer pays | $100.00 |
| Processor fee (2.6% + $0.30) | −$2.90 |
| You receive | $97.10 |
Fees vary by processor, card type, and how you process the payment. In-person payments with a card reader typically cost less than online payments or phone orders, because the card is physically present and fraud risk is lower. American Express and Discover usually charge 1 to 2 percent more than Visa and Mastercard.
Deposits usually arrive in your business bank account within one to two business days, though some processors hold funds for longer if you're new or if they detect unusual activity. Ask your processor about their deposit schedule before you sign up.
Chargebacks and fraud protection
A chargeback happens when a customer disputes a charge with their bank and the bank reverses the payment. The customer gets their money back, and you lose both the payment and the product or service you provided. You also pay a chargeback fee, usually $15 to $100 per dispute.
Common reasons for chargebacks include: the customer claims they didn't authorize the purchase, the product didn't arrive, the product was damaged or not as described, or the customer straightforward changed their mind. You can dispute a chargeback by providing evidence — an order confirmation, a shipping receipt, a signed contract, or a message from the customer confirming they received what they paid for.
To reduce chargebacks, keep clear records of every transaction. For online sales, save the customer's IP address, shipping address, and email. For in-person sales, ask for ID if the card doesn't match the customer's appearance. For subscriptions, send a confirmation email before the first charge and make it straightforward for customers to cancel. If a customer contacts you with a problem, resolve it quickly — a refund is cheaper than a chargeback.
Choosing a payment processor
The major payment processors — Square, Stripe, PayPal, Toast, and your own bank — all offer similar features and similar fees. The differences are in ease of setup, customer support, and which tools they include.
Square is known for straightforward setup and good support for small retail businesses. Stripe is popular with online businesses and developers because it offers flexible code and detailed reporting. PayPal has been around longest and works well if you already use PayPal for other business needs. Toast is built for restaurants and includes features like kitchen display systems and delivery tracking. Your bank may offer payment processing directly, which can be convenient if you already have a business account there.
Compare processors on three things: transaction fees (ask for the exact rate for Visa, Mastercard, American Express, and Discover), deposit timing (how long until money hits your account), and support (phone, email, or chat). Most offer a free trial or low-cost first month, so you can test the interface before committing.
Frequently Asked Questions
Do I need a separate business bank account to accept card payments?
Yes. Payment processors require a business bank account to deposit funds. They need the account holder's name to match the business name on your merchant account. A personal account won't work, even if you're a sole proprietor.
What happens if a customer's card is declined?
The processor tells you when ready that the payment failed. You can ask the customer to try a different card, or they can contact their bank to find out why it was declined. Common reasons include insufficient funds, a card that's expired or reported lost, or fraud detection flagging the transaction. You don't pay a fee for a declined transaction.
Can I accept payments without a physical card reader or website?
Yes. Most processors let you send a payment link via email or text message. The customer clicks the link, enters their card details, and pays. This works well for invoices, donations, or one-off sales. The fee is the same as for other payment methods.
How long does it take to get approved for a merchant account?
Most processors approve you within one to three business days if you provide accurate information. Some approve when ready. If the processor flags your business as higher risk — for example, if you sell items that often get chargebacks, or if your business is brand new — approval can take up to a week. You'll receive an email with your approval status and next steps.
What's the difference between a payment processor and a payment gateway?
A payment processor handles the entire transaction — it connects to the card networks, verifies the card, charges the customer, and deposits money into your account. A payment gateway is just the software that encrypts and sends the card information to the processor. Most small businesses use an all-in-one processor like Square or Stripe and don't need to think about the gateway separately.