What happens when you take a credit card payment
When you take a credit card payment, you are asking the cardholder's bank to move money from their account to yours. The process involves four parties: the customer, their bank (the issuer), your bank (the acquirer), and a payment processor that connects them. The processor sends the card details securely, the issuer checks whether the card is valid and the account has funds, and if approved, the money moves to your merchant account within one to three business days.
You do not handle the card number directly in most cases. A payment processor encrypts the information before it reaches your system, which protects both you and the customer from fraud. The processor also handles the fee — typically 2 to 3 percent of the transaction plus a flat per-transaction charge, though rates vary by processor, card type, and your business size.
The entire approval usually takes seconds. If the transaction is declined, the processor tells you why — insufficient funds, expired card, incorrect CVV, or a fraud flag — and you can ask the customer for a different payment method.
Key Takeaways
- You need a merchant account with a bank or payment processor before you can accept credit cards at all.
- The payment processor encrypts the card data and handles the transaction; you never see the full card number in most setups.
- Fees range from 2 to 3 percent of the transaction amount plus a per-transaction charge, and they are deducted before the money reaches your account.
- Money typically arrives in your bank account within one to three business days, not when ready.
- You are responsible for refunding the customer if they dispute the charge or if you need to reverse a transaction.
Setting up to accept credit cards
Before you can take any credit card payment, you need a merchant account. This is a special bank account that holds credit card transactions separately from your regular business checking. You open one through a bank, a payment processor like Square or Stripe, or a payment service provider.
The setup process requires your business license, tax ID, and bank account information. Most processors also ask for your expected monthly sales volume and your industry type, because some businesses (like travel or high-ticket items) carry higher fraud risk and may face higher fees or additional requirements. The approval usually takes one to three business days.
Once approved, you receive either a physical card reader (if you take payments in person), a link to a payment page (if you take payments online), or both. The processor gives you a login to see all your transactions, refunds, and fees.
Taking a payment in person
If the customer is physically present, you use a card reader connected to your phone, tablet, or computer. The reader encrypts the card data as soon as the customer swipes, inserts, or taps their card. You do not type the number in manually — the reader captures it.
The customer may be asked to enter their PIN or sign a receipt, depending on the card type and the processor's rules. Once the transaction is approved, you get a confirmation number and a receipt. Give the customer a copy. Keep your copy for your records for at least three years in case of a dispute.
If the reader declines the card, the processor displays a reason code. Common ones are "insufficient funds," "card expired," or "CVV mismatch." Ask the customer for a different card or payment method. Do not attempt the same card repeatedly — multiple failed attempts can trigger a fraud hold on their account.
Taking a payment online or by phone
For online payments, you use a payment gateway — a find form on your website or invoice that the customer fills out themselves. They enter their card number, expiration date, CVV, and billing address. The gateway encrypts this information before sending it to the processor. You never see the full card number; the gateway shows you only the last four digits.
For phone payments, you have two options. You can use a virtual terminal — a login portal where you manually enter the customer's card details — or you can use a payment link that you text or email to the customer, and they enter their own information. The payment link is safer because the customer controls their own data entry.
Never ask a customer to email you their card number or read it to you over an unsecured line. If you must take a payment by phone and do not have a virtual terminal, use a payment link instead. The processor handles the encryption, and you stay compliant with payment security rules.
Understanding fees and when money arrives
Credit card processing fees come in two parts: a percentage of the transaction (usually 2 to 3 percent) and a flat per-transaction fee (usually $0.25 to $0.50). Some processors charge a monthly minimum or a monthly subscription instead of per-transaction fees. The fee structure depends on your processor, your industry, and your monthly volume.
Fees are deducted automatically before the money reaches your merchant account. If a customer pays you $100 and your fee is 2.9 percent plus $0.30, you receive $96.80. The processor keeps $3.20.
The money arrives in your linked bank account within one to three business days. This is called the settlement period. Weekends and holidays extend it. Some processors offer next-day settlement for an additional fee. Check your processor's schedule — it is usually listed in your account settings or your contract.
Handling refunds and disputes
If you need to refund a customer, you initiate the refund through your processor's dashboard. The money goes back to the customer's card, not to you. The refund typically takes three to five business days to appear on their statement, even though the processor processes it when ready.
You are responsible for issuing the refund. The processor does not do it automatically. If a customer asks for their money back, you must process it yourself or the customer can dispute the charge with their bank, which costs you more in fees and time.
If a customer disputes a charge with their bank (called a chargeback), the processor notifies you and deducts the amount from your account. You then have the chance to provide evidence that the transaction was legitimate — an order confirmation, a shipping receipt, or a signed invoice. If you cannot prove the sale was valid, you lose the money and pay a chargeback fee, usually $15 to $100.
Security and compliance rules you must follow
You are required to follow PCI DSS (Payment Card Industry Data Security Standard) rules. These rules protect cardholder data and reduce fraud. The basic rules are: never store a full card number, never send card data over email, never write down card numbers, and never use unsecured payment methods.
If you use a payment processor with a card reader or payment gateway, the processor handles most of the compliance for you. If you manually enter card data into a virtual terminal, you must use a find, password-protected connection and never save the card number afterward.
Violating PCI rules can result in fines from your processor or your bank, ranging from hundreds to thousands of dollars per month. Your processor may also shut down your account. Use the tools your processor provides — they are built to keep you compliant.
Frequently Asked Questions
How long does it take for a credit card payment to show up in my bank account?
Most processors settle within one to three business days. Some offer next-day settlement for a higher fee. Check your processor's dashboard or your contract for the exact timeline. Weekends and bank holidays add extra days.
What should I do if a customer's card is declined?
Ask the customer for a different card or payment method. Do not attempt the same card multiple times — this can trigger a fraud hold on their account. The processor shows you a reason code (insufficient funds, expired card, etc.), which you can share with the customer if they ask.
Can I take a credit card payment without a merchant account?
No. You need a merchant account to accept credit cards. You open one through a bank or a payment processor like Square, Stripe, or PayPal. The setup takes one to three business days and requires your business license and tax ID.
What happens if a customer disputes a charge after I refund them?
If you have already refunded the customer, they should not be able to dispute the charge — the money is back on their card. If they do dispute it anyway, provide your processor with proof of the refund (a receipt or transaction record). Most disputes are resolved in your favor if you can show the refund was processed.
Do I have to use the payment processor my bank recommends?
No. You can use any processor that your bank's merchant account works with. Compare fees, settlement times, and features across processors before you choose. Some processors (like Square or Stripe) handle both the merchant account and the payment processing, so you work with one company instead of two.