The Basic Setup: What You Need to Start Taking Cards

To accept credit card payments, you need three things: a merchant account, a payment processor, and a way to take the card information. A merchant account is a bank account that holds the money from card sales before it moves to your business checking account. A payment processor is the company that handles the transaction — they talk to the card networks (Visa, Mastercard, American Express, Discover) and move the money. The third piece is the payment method: a physical card reader, an online form, a mobile app, or a phone line where you key in the numbers.

You do not need all three from the same company, but most small businesses use an all-in-one provider because it is simpler. Companies like Square, Stripe, PayPal, Toast, and Clover bundle the merchant account and processor together and give you the hardware or software to take payments. You sign up, they approve you (usually in a few hours to a few days), and you can start processing cards the same day.

The approval process is faster than it used to be. Most providers now run a soft credit check and ask for basic business information — your legal name, address, tax ID, and bank account details. They do not require a separate merchant account application at a bank anymore; the processor handles that part for you.

Key Takeaways

  • A payment processor handles the transaction and moves money to your account; you can use a standalone processor or an all-in-one provider that includes the merchant account.
  • Fees vary by processor and payment method: in-person card readers usually cost 2.6% to 2.9% plus $0.10 per transaction, while online payments run 2.9% to 3.5% plus $0.30.
  • Monthly fees, statement fees, and PCI compliance fees are separate from per-transaction costs and differ by provider, so compare the full cost, not just the percentage.
  • You need to keep card data secure under PCI DSS standards; using a hosted payment form or a certified processor handles most of this for you automatically.
  • The money from card sales does not arrive instantly — it typically takes one to three business days to hit your bank account, depending on your processor and bank.

How Payment Processing Fees Work

Every time a customer swipes, taps, or enters a card, you pay a fee. The fee has three parts: an interchange fee (set by the card networks and paid to the customer's bank), an assessment fee (paid to Visa or Mastercard), and the processor's markup (the processor's profit). You see this combined as a single percentage plus a per-transaction dollar amount.

The percentage and dollar amount depend on how the card is presented. In-person card-present transactions (swiped or tapped at a physical reader) cost less because the card is verified in real time and fraud risk is lower. These typically run 2.6% to 2.9% plus $0.10 per transaction. Card-not-present transactions (online, phone, or mail order) cost more because there is no physical card to verify. These run 2.9% to 3.5% plus $0.30 per transaction. Keyed-in transactions (you type the number) fall in between.

Beyond per-transaction fees, many processors charge monthly fees ($10 to $50), statement fees ($0 to $10), batch fees (per day you process), or PCI compliance fees ($10 to $100 per year). Some waive monthly fees if you hit a minimum monthly volume. Read the full fee schedule before signing up; the lowest percentage does not always mean the lowest total cost.

In-Person Payment Methods: Card Readers and Terminals

If you take payments face-to-face, you have two main hardware options: a mobile card reader or a countertop terminal. A mobile card reader plugs into your phone or tablet via the headphone jack or Bluetooth and costs $20 to $100 upfront. Square Reader, PayPal Here, and Clover Mini are common examples. They work anywhere you have a phone signal and are good for small businesses, pop-up shops, or service providers who visit customers.

A countertop terminal is a standalone device that sits on your counter and connects to your internet. It costs $100 to $500 upfront and processes faster than a mobile reader. Clover Station, Square Terminal, and Toast terminals are examples. Terminals are better for retail shops, restaurants, and salons where customers come to you and you process many transactions per day.

Both types connect to your processor's system and send transaction data to your merchant account. The hardware is usually leased or purchased from the processor, and you own it outright after you pay for it. Some processors include the hardware free or at a discount if you commit to a contract; others sell it separately. Ask whether the device is yours to keep or whether you have to return it if you close the account.

Online Payment Methods: Checkout Forms and Payment Links

If you sell online, you need a way to take card information on your website or send a payment link to customers. A hosted payment form is a page on your website where customers enter their card details; the processor handles the form, not you, so you never see the raw card number. This is the most secure option and meets PCI compliance automatically. Stripe, Square Online, and Shopify all provide hosted forms.

A payment link is a URL you send to a customer via email or text. They click it, enter their card details on the processor's page, and the payment goes through. You do not need a website to use payment links. Square, PayPal, Stripe, and most processors offer this. Links are good for invoicing, donations, or one-off sales.

If you use a shopping cart (WooCommerce, BigCommerce, Shopify), the processor integrates directly into your cart software. Customers never leave your site; the payment form appears on your checkout page but the processor handles the data. This is also PCI-compliant as long as you use the processor's official plugin or integration, not a custom-built form.

Do not build your own payment form or store card numbers in your own database. This makes you responsible for PCI compliance, which is expensive and risky. Use a hosted form or a certified processor integration instead.

Security and PCI Compliance

The Payment Card Industry Data Security Standard (PCI DSS) is a set of rules that protect card data. If you take card payments, you must follow these rules or hire someone who does. The rules cover how you store data, who can access it, how you encrypt it, and how you monitor for fraud.

If you use a hosted payment form or a certified processor integration, the processor handles PCI compliance for you. You do not store card numbers, so you do not have to worry about most of the rules. This is why using a processor's official form is so important — it shifts the compliance burden to them.

If you take payments over the phone and write down card numbers, or if you store card data in a spreadsheet or email, you become responsible for PCI compliance. This means annual security audits, encryption, access controls, and regular monitoring. The cost and complexity are high enough that most small businesses avoid this route. If you must take phone payments, use a processor's phone payment system (where you read the card to the processor, not to your own system) or a virtual terminal (a secure web page where you key in the card number, and the processor handles the data).

Settlement: When Money Hits Your Account

When a customer swipes a card, the transaction is authorized (the bank approves it) and then captured (the processor sends it for payment). Authorization happens in seconds. Capture usually happens at the end of the day or when you manually submit the batch. Settlement is when the money actually moves from the processor to your bank account.

Settlement takes one to three business days, depending on your processor and your bank. Some processors settle the next business day; others take two or three days. Weekends and holidays do not count as business days, so a transaction on Friday may not settle until Tuesday. Check your processor's settlement schedule in their terms or dashboard.

The money lands in the bank account you provided during signup. Make sure that account is in your business name and that you have access to it. If the account closes or changes, you have to update it in your processor's settings, or settlements will fail and you will not receive the money.

Some processors hold a small percentage of each transaction in a reserve account for 30 to 180 days. This is a safety net in case of chargebacks or refunds. The reserve is released after the hold period ends. Ask your processor whether they hold reserves and for how long.

Choosing a Processor: What to Compare

Start by listing what you need: in-person, online, or both. Then compare processors on these points.

Total fees: Add up the per-transaction percentage, per-transaction dollar amount, monthly fees, statement fees, and any other charges. Calculate the total cost on a typical month of sales for your business. A processor with a lower percentage might cost more overall if the monthly fees are high.

Settlement speed: How many days until money hits your account? If you need cash flow quickly, next-day settlement matters.

Hardware cost: Is the card reader or terminal free, discounted, or full price? Do you own it or lease it?

Contract terms: Are you locked in for a year, or can you cancel anytime? What are the early termination fees?

Support: Can you reach someone by phone, email, or chat? How fast do they respond? Do they have a knowledge base or community forum?

Integrations: Does the processor work with your website platform, accounting software, or point-of-sale system?

Most small businesses start with Square, Stripe, or PayPal because they have low startup costs, no contracts, and clear fee structures. If you run a restaurant or retail shop, look at Toast or Clover because they include inventory and staff management. If you sell online only, Stripe or Shopify Payments are common choices.

Frequently Asked Questions

Do I need a separate business bank account to accept credit cards?

You do not need a separate account to process cards, but you must provide a bank account (business or personal) where the processor sends settlement money. Most processors require a business account for tax and liability reasons, and it makes accounting easier. Check your processor's requirements during signup.

What happens if a customer disputes a charge?

The customer's bank investigates and either sides with you or reverses the charge. If reversed, the money comes out of your account. This is called a chargeback. You can dispute the chargeback by providing proof (receipt, invoice, shipping confirmation, customer email). Keep records of every transaction for at least 18 months. Too many chargebacks can get your merchant account closed.

Can I accept American Express and Discover, or just Visa and Mastercard?

Most processors accept all four major networks. Amex and Discover have higher interchange fees, so your per-transaction cost is higher for those cards. You cannot decline Amex or Discover if you accept Visa and Mastercard; the networks require you to accept all or none. Some processors let you set different fees for different card types, but the customer still sees one price.

What if I process a refund?

You issue a refund through your processor's dashboard. The processor sends the money back to the customer's card, and it appears as a credit on their statement in one to three business days. You pay a small refund fee (usually $0.10 to $0.25) but not the full transaction percentage. Keep a record of the reason for each refund in case of disputes.

Do I have to pay fees on cash or check payments?

No. Card processing fees apply only to card transactions. Cash and checks are free, but they take longer to deposit and do not settle as fast. Some processors offer check deposit through their app, which speeds up the process.