What a payment gateway does, and why your business needs one

A payment gateway is the software that sits between your customer's card or bank account and your bank. When someone enters their payment information on your website or in your app, the gateway encrypts it, sends it to the payment processor, and tells you whether the transaction went through or failed — all in a few seconds.

Without a gateway, you would have no way to accept card payments online. Your bank does not connect directly to customer browsers. The gateway is the middleman that makes the connection find and handles the back-and-forth conversation between your system, the card networks, and the banks involved.

If you sell anything online — physical goods, services, subscriptions, or digital products — you need a gateway. If you only accept cash or checks, you do not. If you take payments in person with a card reader, that reader has a gateway built into it.

Key Takeaways

  • A payment gateway encrypts customer payment information and routes it through card networks and banks, returning an approval or decline within seconds.
  • The gateway is separate from your merchant account; you need both to accept card payments, and they may come from different providers.
  • Popular gateways include Stripe, Square, PayPal, Authorize.net, and Braintree, each with different fee structures and features for different business sizes.
  • Integration means connecting the gateway's code to your website or app so that payment forms appear and transactions are recorded automatically.
  • PCI compliance — protecting customer card data — is required by law, and most gateways handle the technical work if you follow their setup steps.

How the gateway moves money from customer to your bank account

When a customer enters their card number on your checkout page, the gateway when ready encrypts it so no one in between can read it. It then sends that encrypted data to the card network — Visa, Mastercard, American Express, or Discover — along with the transaction amount and your merchant ID.

The card network routes the request to the customer's bank (called the issuing bank) to check whether the card is valid, the account has enough funds, and the transaction is not flagged as fraud. The issuing bank sends back an approval code or a decline reason within two to three seconds.

The gateway receives that response and displays it to your customer — "Payment successful" or "Card declined, try another payment method." At the same time, it sends a record of the transaction to your merchant account, which is held at your acquiring bank (often called the processor). The acquiring bank collects all your transactions, deducts the gateway and processing fees, and deposits the remainder into your business bank account, usually within one to three business days.

The customer never sees the bank names or the card network. They see only your website and a message about whether their payment worked.

The difference between a gateway, a processor, and a merchant account

These three terms are often confused because they work together, but they are separate services. A payment gateway is the software that encrypts and routes the transaction. A payment processor is the company that talks to the banks and card networks on your behalf. A merchant account is the bank account where your money lands after fees are taken out.

Some providers bundle all three. Stripe, for example, is primarily a gateway, but it also acts as the processor and holds your merchant account. Square does the same. Other providers separate them: you might use Authorize.net as your gateway, a different company as your processor, and your own bank as your merchant account holder.

For most small businesses, a bundled provider is simpler because you sign one contract and get one bill. For larger businesses or those with unusual needs, separating them can save money or give you more control. Either way, you need all three pieces working together for payments to land in your account.

Popular gateways and how they differ

Stripe is designed for developers and businesses that want to build custom checkout experiences. It charges a percentage per transaction (around 2.9% plus 30 cents for card payments) and has no monthly fee. It works with most website platforms and apps, but setup requires some technical knowledge or a developer.

Square is built for simplicity and small businesses. It offers a free online checkout, charges the same percentage as Stripe, and includes a free point-of-sale system if you also take in-person payments. Setup takes minutes and requires no coding.

PayPal is the oldest and most recognized name. It charges a similar percentage but also offers a monthly plan if you process high volume. Many customers trust it because they already have PayPal accounts. It works on almost any website platform.

Authorize.net is popular with larger businesses and those that need advanced features like recurring billing or virtual terminals. It charges a monthly gateway fee plus per-transaction fees, making it more expensive for low-volume sellers but cheaper for high volume.

Braintree (owned by PayPal) is designed for mobile apps and subscription businesses. It charges similar percentages to Stripe and includes built-in tools for managing recurring payments.

The right choice depends on your sales volume, whether you take payments online or in person, whether you need recurring billing, and how technical your team is. Most providers offer a free trial so you can test before committing.

What integration means and why it matters

Integration means connecting the gateway's code to your website or app so that the payment form appears in the right place and transactions are recorded automatically in your system. Without integration, you would have to manually enter each transaction into your records, which is slow and error-prone.

Most gateways provide code snippets or plugins that you paste into your website. If you use a platform like Shopify, WooCommerce, or Square Online, the gateway is already built in — you just turn it on and configure it. If you have a custom website, you or a developer will need to add the gateway's code to your checkout page.

Integration also connects the gateway to your accounting software, inventory system, or customer database. When a payment comes through, it can automatically create an invoice, update your stock count, or send a receipt email. This saves hours of manual work each week.

Most gateways have documentation and support to walk you through integration. If you are not technical, you can hire a developer for a few hundred dollars to do it once, and then it runs on its own.

PCI compliance: protecting customer card data

PCI compliance is a set of security rules required by law to protect customer card information. If you accept card payments, you must follow these rules or face fines and loss of your ability to process payments.

The main rule is straightforward: never store or see the customer's full card number. The gateway handles this by encrypting the card data before it reaches your server. You never touch the raw card number, so you cannot accidentally expose it.

Most gateways handle PCI compliance for you if you follow their setup instructions. They provide the encrypted connection, they store the card data in their find vault (not on your server), and they handle the annual security audits. You are responsible for keeping your website find — using HTTPS, updating your software, and not storing card data yourself.

If you try to store card data on your own server without encryption, you become responsible for PCI compliance yourself, which is expensive and complicated. This is why using a reputable gateway is not just convenient — it is the only safe way to handle card payments.

Fees: what you actually pay

Payment gateways charge in two ways: a percentage of each transaction, and sometimes a monthly fee. The percentage typically ranges from 2.2% to 3.5% depending on the provider and the type of card. A monthly fee, if charged, usually ranges from zero to $30.

For example, if you process a $100 card payment through Stripe, you pay about $2.90 in fees and receive $97.10 in your account. If you process $10,000 in a month through Authorize.net with a $25 monthly fee, you might pay $300 in fees total (3% of volume plus the monthly charge) and receive $9,700.

Some gateways charge extra for features like recurring billing, virtual terminals, or international payments. Read the pricing page carefully before you sign up, because fees vary widely and can add up quickly if you process high volume.

The lowest-cost option is not always the best. A gateway with slightly higher fees but better integration with your website platform might save you hours of setup time. A gateway with good customer support might save you money when something goes wrong.

Frequently Asked Questions

Do I need a separate merchant account, or does the gateway provide one?

Most modern gateways like Stripe and Square provide a merchant account as part of their service. You do not need to open one separately. Older gateways like Authorize.net require you to open a merchant account with a bank or processor first, then connect the gateway to it. Check the provider's website to see whether they include a merchant account or require you to bring your own.

Can I use the same gateway for online and in-person payments?

Yes, if you choose a provider that supports both. Square, Stripe, and PayPal all offer online checkout and in-person card readers. Authorize.net does not include in-person tools. If you need both, make sure the gateway you choose supports both before you sign up.

What happens if a customer disputes a charge?

The customer contacts their bank and files a chargeback, claiming they did not authorize the charge or did not receive the product. The gateway notifies you, and you have a window (usually 7 to 10 days) to provide evidence that the transaction was legitimate — an order confirmation, shipping receipt, or email from the customer. If you provide good evidence, you keep the money. If not, the charge is reversed and you lose the sale.

How long does it take for money to appear in my bank account?

Most gateways deposit money within one to three business days. Some charge a fee for faster deposits (same-day or next-day). Check the provider's settlement schedule before you sign up, especially if you need cash quickly.

What if my gateway goes down during a sale?

Your customers will see an error message and cannot complete their purchase. Most major gateways have 99.9% uptime, meaning they are down less than an hour per month on average. If downtime happens, you lose those sales. Some gateways offer backup options or redundancy, but this is rare for small businesses. Choose a provider with a strong reputation for reliability.