The basic setup: what you need before you can take cards

To accept credit card payments online, you need three things: a merchant account (which lets you process card transactions), a payment processor (the company that handles the actual transaction), and a way to collect card details from your customer. Most small businesses use an all-in-one platform that combines all three — Stripe, Square Online, PayPal, or Shopify — rather than setting them up separately.

The merchant account is the legal agreement between you and a bank or payment company that says they will accept card payments on your behalf. You cannot process cards without one. The payment processor is the technology that talks to the card networks (Visa, Mastercard, American Express, Discover) and moves money from the customer's bank to yours. Some companies do both; some specialize in one.

You also need a way to actually collect the card number, expiration date, and security code. You can do this through a website checkout form, an invoice link you email to customers, a mobile app, or a physical card reader. The method depends on your business model — a freelancer might email invoices, a retail shop might use a card reader, an e-commerce site uses a checkout page.

Key Takeaways

  • You need a merchant account and a payment processor; most small businesses use one platform that provides both, such as Stripe or Square.
  • Fees vary by processor and by how you collect the card — online checkout, email invoices, and card readers often have different rates.
  • PCI compliance (the security standard for handling card data) is required by law; most platforms handle this for you if you do not store card numbers yourself.
  • Settlement time — how long before money hits your bank account — ranges from same-day to three business days depending on the processor and your bank.
  • You can start with a free or low-cost platform and upgrade later as your volume grows; there is no single "best" option for all businesses.

Comparing payment processors by how you collect cards

The processor you choose depends partly on how your customers will pay you. If you run an online store, you need a platform with a shopping cart and checkout page — Shopify, WooCommerce with a payment plugin, or Stripe's hosted checkout. If you send invoices to customers, you need a processor that lets you email a payment link — PayPal, Square Invoices, or Stripe Billing. If you take payments in person or over the phone, you need a card reader or virtual terminal.

Each method has different fees. A Shopify store pays a percentage of each sale plus a fixed per-transaction fee. Square Invoices charges a percentage when the customer pays the emailed link. A Stripe card reader charges a percentage plus a per-transaction fee. PayPal's rates vary by product — their standard checkout is one rate, their invoicing tool is another. You need to know your expected monthly volume and average transaction size to compare which is cheapest for your situation.

Some processors offer multiple ways to collect cards under one account. Stripe lets you use their hosted checkout, send email payment links, and accept card-present payments all from the same merchant account. Square does the same. This flexibility matters if your business model changes — you can add a card reader later without switching processors entirely.

Understanding the fees you will actually pay

Credit card processing fees have three parts: an interchange fee (set by the card networks and paid to the customer's bank), an assessment fee (paid to Visa, Mastercard, or Amex), and the processor's markup (their profit). You cannot negotiate the first two, but you can shop around on the third.

Most online processors quote a single percentage rate — often 2.2% to 2.9% plus $0.30 per transaction for online checkout, or 2.6% to 3.5% plus $0.10 for email invoices. These rates bundle all three fee types together. A few processors (usually for higher-volume merchants) offer "interchange-plus" pricing, where they show you the actual interchange and assessment fees, then add a fixed markup on top. This is usually cheaper if you process more than $10,000 per month, but it requires reading a detailed fee schedule.

Watch for hidden fees: monthly account fees (some platforms charge $0 to $30 per month), chargeback fees (usually $15 to $100 when a customer disputes a charge), refund fees (some processors charge to process a refund), and fees for moving money to your bank account (most are free, but some charge $1 to $3 per transfer). Read the processor's pricing page and fee schedule before you sign up, not after your first transaction.

How to set up a merchant account and connect it to your bank

The signup process varies by processor, but the basic steps are the same. You provide your business name, address, and tax ID (or Social Security number if you are a sole proprietor). You give the processor your bank account details so they can deposit payments. You agree to their terms of service, which include their fraud and chargeback policies. Most processors complete this in 5 to 15 minutes online.

Some processors verify your identity immediately; others take a few business days to confirm your bank account by depositing a small amount and asking you to verify it. A few (usually those targeting higher-risk businesses like e-commerce or subscriptions) may ask for additional documents like a business license or recent bank statement. This verification step can add 1 to 5 business days to your setup time.

Once your account is approved, you can start taking payments right away. The processor will give you a link to your checkout page, an invoice tool, or a card reader to use. Money from each transaction will deposit into your bank account on a schedule set by the processor — usually within 1 to 3 business days, though some offer same-day settlement for an extra fee.

PCI compliance: what the law requires you to do

PCI DSS (Payment Card Industry Data Security Standard) is a set of security rules that apply to anyone who handles credit card data. The rules exist to prevent card theft and fraud. If you accept cards online, you must follow them — it is not optional.

The good news: if you use a major processor like Stripe, Square, or PayPal and you do not store card numbers yourself, the processor handles PCI compliance for you. You do not need to get certified or fill out forms. The processor is responsible for keeping card data secure, and they do it by not letting you touch the raw card number in the first place.

The bad news: if you store card numbers in your own database, or if you email card details to yourself, or if you write them down, you become responsible for PCI compliance yourself. This means annual security audits, encryption, firewalls, and detailed documentation. It is expensive and complicated. Do not do this. Use a processor that handles the card data for you.

Settlement: when the money actually reaches your bank account

Settlement time is how long between when a customer swipes or clicks "pay" and when the money lands in your bank account. Most processors settle within 1 to 3 business days. Stripe and Square typically settle in 1 to 2 business days. PayPal typically settles in 1 to 2 business days for standard transactions. Some processors offer same-day or next-day settlement for an extra fee (usually 0.5% to 1% of the transaction).

Settlement time matters if you need cash quickly or if you operate on thin margins. A 3-day delay means you are funding inventory or payroll out of pocket for 3 days longer. If you process $5,000 per day, a 3-day delay means you are carrying $15,000 in float at any given time. For most small businesses this is not a problem, but for high-volume or low-margin operations it can be.

The settlement schedule also depends on your bank. Some banks process ACH transfers (the method most processors use to deposit money) faster than others. If your processor says "1 to 2 business days" but your bank is slow, you might see 2 to 3 days in practice. You can ask your bank how long ACH transfers typically take before you sign up with a processor.

Fraud protection and chargebacks: what happens when a customer disputes a charge

A chargeback happens when a customer tells their bank "I did not authorize this charge" or "I did not receive what I paid for." The bank pulls the money back from your account and charges you a fee (usually $15 to $100). If you get too many chargebacks, the processor can close your account.

You can fight a chargeback by providing evidence that the customer authorized the charge and received the product or service. For online transactions, this means an email confirmation, a shipping receipt, or a delivery signature. For digital products, it means a download record or account access log. You have 7 to 10 days to submit evidence, and the bank decides whether to side with you or the customer.

Most processors offer fraud tools to reduce chargebacks: address verification (checking that the billing address matches the card), CVV verification (checking the security code), and velocity checks (flagging multiple charges in a short time). These tools catch some fraud but not all. The best defense is clear communication — send order confirmations, shipping updates, and delivery proof so customers know what they paid for and when it arrived.

Choosing between hosted checkout, email invoices, and card readers

A hosted checkout is a page on the processor's server where customers enter their card details. You never see the card number. This is the most secure option and the standard for online stores. Shopify, WooCommerce, and Stripe all offer hosted checkouts. The downside: you have limited control over the look and feel, though most processors let you customize colors and logos.

An email invoice is a link you send to a customer that takes them to a payment page. This works well for service businesses, freelancers, and anyone who bills after the work is done. Square Invoices, PayPal, and Stripe Billing all offer this. The advantage: you can send one link to multiple customers and track who has paid. The disadvantage: the customer has to click the link and enter their card details, so conversion is lower than a checkout page on your own site.

A card reader is a physical device that plugs into your phone or computer and reads the card's magnetic stripe or chip. Square Reader, PayPal Here, and Stripe Terminal all make these. This is the only option if you take payments in person or over the phone. The advantage: fast and familiar to customers. The disadvantage: you need the physical device, and fees are usually slightly higher than online checkout.

Frequently Asked Questions

Do I need a business license or tax ID to accept credit cards?

Most processors require a business name and tax ID (or Social Security number for sole proprietors), but they do not verify that you actually have a license. Some states require a business license to operate legally, but that is a state law issue, not a processor requirement. Check your state's business registration rules separately.

What happens if a customer's card is declined?

The processor tells you the transaction failed and why — insufficient funds, expired card, fraud block, or other reason. You can ask the customer for a different card or payment method. The declined transaction does not charge the customer or you, so there is no fee.

Can I accept international credit cards?

Most major processors accept cards from many countries, but support varies. Stripe and PayPal support cards from over 100 countries. Square and Shopify support most major countries but not all. Check the processor's list of supported countries before you sign up if you expect international customers.

What is the difference between a payment processor and a payment gateway?

A payment gateway is the software that collects card details and sends them to the processor. A payment processor is the company that actually handles the transaction with the card networks. Most modern platforms combine both — Stripe is both a gateway and a processor. The distinction matters mainly if you are building a custom system, not if you are using an off-the-shelf platform.

Can I use the same processor for online and in-person payments?

Yes. Stripe, Square, and PayPal all let you accept online checkout, email invoices, and card-present payments from the same account. You pay different fees for each method, but you only need one merchant account and one bank connection.