The basic setup: what you need before your first transaction

To accept credit cards online, you need three things: a payment processor (the company that handles the transaction), a merchant account (the bank account where money lands), and payment gateway software (the tool that encrypts card data and sends it securely). Most payment processors bundle the merchant account and gateway together, so you often sign up with one company and get both.

The processor charges you a fee per transaction — typically 2.2% to 3.5% of the sale plus a flat fee of 20 to 30 cents, though rates vary by processor and by how you accept the card (online form, in-person reader, phone call). Some processors also charge a monthly fee; others charge only per transaction. You choose based on your sales volume and how often you process payments.

You do not need a separate business bank account to start, though most processors require one eventually. Your personal account works initially, but as soon as you process regular payments, opening a business account keeps your finances separate and makes tax time simpler.

Key Takeaways

  • A payment processor, merchant account, and payment gateway are the three components you need; most processors sell them as one package.
  • Transaction fees range from 2.2% to 3.5% plus 20 to 30 cents per sale, and some processors add a monthly fee on top.
  • Stripe, Square, PayPal, and Shopify Payments are the most common choices for small businesses and online sellers, each with different fee structures and features.
  • PCI compliance (a security standard) is required by law; most modern processors handle it automatically, but you must never store raw card data yourself.
  • Setup takes 15 minutes to an hour, and money typically arrives in your bank account within one to three business days after a sale.

Choosing between hosted pages, embedded forms, and payment links

A hosted payment page redirects the customer to the processor's website to enter their card details, then sends them back to you. This is the simplest option and puts the security burden entirely on the processor. Stripe, Square, and PayPal all offer this. The downside is that customers leave your website, which can feel jarring and slightly increases cart abandonment.

An embedded payment form keeps customers on your website while they enter their card information. The form is hosted by the processor but appears inside your page. This feels more seamless and usually converts better. Stripe Checkout and Square Payment Form are the most common embedded options. Setup requires copying a few lines of code into your website, but no coding experience is necessary.

A payment link is a URL you send to customers via email or text. They click it, enter their card details on the processor's page, and the payment lands in your account. This works well for invoices, one-off sales, or customers who prefer not to enter payment info on a website. Most processors generate payment links in seconds from their dashboard.

The major processors and what sets them apart

Stripe charges 2.2% plus 30 cents per online transaction and has no monthly fee. It integrates deeply with most website builders and shopping carts. Setup takes about 15 minutes. Stripe is popular with developers and works well if you have a custom website or use platforms like Shopify, WooCommerce, or Webflow. Payouts arrive every 24 hours.

Square charges 2.6% plus 10 cents per online transaction, also with no monthly fee. Square's dashboard is simpler than Stripe's and requires less technical knowledge. It works well if you also sell in person and want one processor for both channels. Payouts arrive within one to two business days.

PayPal charges 2.2% plus 30 cents per transaction for standard online payments. If you already have a PayPal account, setup is when ready. PayPal integrates with most shopping carts and website builders. The main drawback is that some customers distrust PayPal or prefer not to use it, which can reduce conversion rates.

Shopify Payments is built into Shopify and charges 2.9% plus 30 cents per transaction. If you use Shopify to run your store, this is the simplest choice because it requires no separate setup. You cannot use it outside Shopify, so it only works if your entire store runs on that platform.

PCI compliance and why it matters

PCI compliance is a legal requirement that protects customer card data. The Payment Card Industry Security Standards Council sets the rules, and all card networks (Visa, Mastercard, American Express, Discover) enforce them. If you accept credit cards, you must follow PCI rules or face fines and loss of payment processing.

The core rule is straightforward: never store, process, or transmit raw card data yourself. If you use a hosted payment page, embedded form, or payment link from a major processor, the processor handles PCI compliance for you automatically. You are protected as long as you do not try to capture the card number directly.

If you build a custom website and want to accept cards, use a processor's API (a set of code instructions) that tokenizes the card — meaning the processor converts the card number into a code that only the processor can read. You store and use the token, never the actual card number. Stripe, Square, and PayPal all provide APIs that handle tokenization securely.

Setting up your first payment form in under an hour

Start by choosing a processor. If you use Shopify, WooCommerce, or another shopping platform, check which processors integrate natively — that usually means the fastest setup. If you have a custom website or no website yet, Stripe or Square are the most straightforward choices.

Sign up for an account on the processor's website. You will need your business name, your personal Social Security number or EIN, and a bank account number where payouts will land. Most processors verify your identity when ready or within a few hours. Some may ask for additional documents if your business type is considered higher-risk (like subscription services or digital goods).

Once approved, log into your dashboard and create a payment form or link. If you use a hosted page or payment link, you are done — copy the URL and send it to customers or embed it on your website. If you use an embedded form, copy the code snippet the processor provides and paste it into your website's HTML. If you use a website builder like Wix or Squarespace, look for the processor in the app marketplace and connect your account — no code needed.

Test the form with a test card number (the processor provides these in the dashboard). Process a test transaction, confirm the money appears in your dashboard, and verify the confirmation email reaches you. Then switch to live mode and you are ready to accept real payments.

Understanding fees and when money arrives

Transaction fees are the main cost. A typical online sale of $100 costs you $2.20 to $3.50 in fees plus 20 to 30 cents, leaving you $96.20 to $97.60. Some processors charge a monthly fee (usually $10 to $30) instead of or in addition to per-transaction fees; this makes sense only if you process hundreds of transactions per month. Calculate your expected monthly volume and compare the total cost across processors before choosing.

Chargeback fees explore if a customer disputes a charge with their bank. Most processors charge $15 to $25 per chargeback. Chargebacks are rare for legitimate businesses, but they happen if a customer claims they did not authorize the charge or did not receive what they paid for. Keep records of what you sold and when, and respond to chargebacks with proof.

Money from a sale typically arrives in your bank account within one to three business days. Stripe and Square often deposit within 24 hours. PayPal can take up to five business days. Some processors hold a small percentage of your payouts in a reserve account for the first few months, releasing it gradually as they confirm you are a legitimate business. This is normal and usually lasts 90 to 180 days.

Keeping your customers' data safe

Use HTTPS on your website, which encrypts data in transit. Most website hosts and builders enable this automatically now, but check your settings to confirm. If you see a lock icon in the browser address bar, HTTPS is on.

Never ask customers to email you their card details. Never store card numbers in a spreadsheet, email, or text file. Never take a photo of a card or write down the number. All of these violate PCI rules and expose you to liability.

If you collect other customer information (name, email, address), store it securely. Use a password manager for your processor dashboard login. Enable two-factor authentication if the processor offers it. Review your transaction history regularly for suspicious activity.

If you use a third-party tool to manage customer data (like a CRM or email platform), confirm it is PCI-compliant. Most major platforms are, but ask before you integrate it with your payment processor.

Frequently Asked Questions

Do I need a business license to accept credit cards online?

No, but most payment processors require you to have a legitimate business. They verify your identity and may ask for a business registration or tax ID. If you are a sole proprietor or freelancer, your Social Security number usually works. Processors are checking that you are real and not using the account for fraud, not that you have a specific license.

What happens if a customer disputes a charge?

The customer contacts their bank and claims they did not authorize the charge or did not receive the product. The bank asks you for proof that the transaction was legitimate. Respond with an order confirmation, shipping receipt, or email exchange showing the customer authorized the purchase. Most disputes are resolved in your favor if you have documentation. If you lose, the charge is reversed and you pay a chargeback fee.

Can I accept credit cards without a website?

Yes. You can send customers a payment link via email or text, or use a processor's mobile app to accept card payments in person with a card reader. Square and Stripe both offer mobile apps and readers for around $30 to $50. Payment links work for any business — you do not need a website at all.

How long does it take to get approved?

Most processors approve you when ready or within a few hours. Some may take one to three business days if they need to verify additional information. Once approved, you can start accepting payments when ready. Money from your first sale arrives within one to three business days after that.

What if my sales volume is very low?

Choose a processor with no monthly fee and pay only per transaction. Stripe, Square, and PayPal all work this way. If you process only a few sales per month, you pay only a few dollars in fees. Monthly-fee processors make sense only if you process enough volume to justify the fixed cost.