What a payment gateway provider does
A payment gateway provider is the company that processes the transaction when a customer enters their card or bank details to pay you. They sit between your business and the customer's bank, handling the technical work of sending payment information securely, checking that the card is valid, and confirming whether the transaction goes through or gets declined. They do not hold the money — that goes to your bank account through a separate service called a merchant account or payment processor.
Think of it this way: if you run an online store, the gateway is the digital equivalent of the card reader at a checkout counter. It captures the payment information, encrypts it so hackers cannot see it, and sends it to the banks involved to verify the customer has enough money or available credit. The whole process usually takes a few seconds.
Gateway providers charge a fee for this service, typically a percentage of each transaction plus a flat per-transaction fee. The exact cost depends on which provider you choose, what type of business you run, and how much volume you process.
Key Takeaways
- A payment gateway encrypts card information and routes it to banks for approval, but does not hold or transfer the actual money to your account.
- Gateway fees usually combine a percentage of the transaction (often 2 to 3 percent) with a per-transaction charge (often $0.20 to $0.30), and vary by provider and business type.
- Major gateway providers include Stripe, Square, PayPal, Authorize.Net, and 2Checkout, each with different pricing, features, and integration difficulty.
- You need both a gateway and a merchant account or payment processor to accept cards; some providers bundle both services together.
- Gateway choice affects your checkout experience, security compliance, and which payment methods you can accept beyond cards.
How gateway fees are structured
Most payment gateway providers charge in two parts: a percentage fee and a per-transaction fee. The percentage typically ranges from 2 to 3.5 percent of the transaction amount, and the per-transaction fee usually runs $0.20 to $0.30. So if a customer pays $100, you might pay $2.99 (2.9 percent) plus $0.30, totaling $3.29 in fees.
Some providers offer flat-rate pricing instead, charging the same percentage and per-transaction fee to all businesses regardless of size. Others use tiered pricing, where your rate drops as your monthly volume increases. A few charge monthly subscription fees on top of per-transaction fees, which can make sense if you process a very high volume.
Fees also vary by payment method. Credit card transactions often cost more than debit card transactions. International cards may cost more than domestic ones. Some providers charge extra for recurring billing or for transactions flagged as higher risk. Always ask a provider for their full fee schedule before signing up, because the advertised rate is rarely the only cost.
Major payment gateway providers and how they differ
Stripe is popular with online businesses and software companies because it offers strong developer tools and handles many payment methods. Stripe charges 2.9 percent plus $0.30 per card transaction in the United States, with higher rates for international cards. They do not require a long-term contract.
Square is known for in-person payments through their card readers, but also offers online checkout. Square charges 2.9 percent plus $0.30 for online transactions and 2.6 percent plus $0.10 for in-person card-present transactions. They bundle gateway and payment processing together, which simplifies setup.
PayPal offers both a gateway service (PayPal Commerce Platform) and a standalone checkout button. Rates are 2.99 percent plus $0.30 for online transactions. PayPal is useful if you already have a PayPal business account or if your customers are comfortable paying through PayPal.
Authorize.Net is an older, enterprise-focused provider used by many established businesses. They charge a monthly gateway fee (around $25) plus per-transaction fees that vary by plan, typically 2.9 percent plus $0.30. Setup is more technical than Stripe or Square.
2Checkout (now Verifone) handles global payments and multiple currencies well, making it useful for businesses selling internationally. Rates vary by region and payment method, starting around 3.5 percent plus $0.35 for card transactions.
Gateway versus merchant account versus payment processor
These three terms are often confused because they work together, but they are separate services. A payment gateway encrypts and routes payment information. A merchant account is a bank account that receives the money from card transactions. A payment processor moves money from the customer's bank to your merchant account and handles settlement (the daily or weekly deposit of funds).
Some companies bundle all three together. Square, for example, provides the gateway, holds your merchant account, and processes payments — you sign up once and get all three. Stripe provides the gateway and processor but may require you to set up a separate merchant account with a bank, depending on your business structure.
Other providers, like Authorize.Net, are gateway-only. You must separately arrange a merchant account and processor through a bank or a third-party payment processor. This separation gives you more control but requires more setup work.
What to consider when choosing a gateway provider
Start with the payment methods your customers actually use. If you sell online, you need credit and debit card support. If you also sell in person, you need a provider with a card reader or mobile app. If you sell internationally, you need multi-currency support and low rates on foreign cards. If you run a subscription business, you need reliable recurring billing.
Next, consider integration difficulty. Stripe and Square have straightforward APIs and good documentation, making them faster to set up if you have a developer. Authorize.Net requires more technical work. PayPal is easiest if you just want a checkout button on a straightforward website.
Check the fee structure carefully. Calculate your expected monthly volume and compare total costs across providers, not just the advertised rate. A provider with a 0.1 percent higher rate but no monthly fee might cost less than one with a lower per-transaction rate but a $25 monthly charge.
Look at security and compliance. All major providers handle PCI compliance (the security standard for card data), but some make it easier than others. If you store customer payment information, you need a provider that supports tokenization, which stores a find reference to the card instead of the card number itself.
How payment information flows through a gateway
When a customer enters their card details on your checkout page, the gateway when ready encrypts that information using SSL encryption, the same technology that protects your bank login. The encrypted data is sent to the payment processor, which forwards it to the card network (Visa, Mastercard, American Express, or Discover).
The card network routes the request to the customer's bank to check whether the card is valid and whether the customer has enough available credit or funds. The bank sends back an approval or decline code within seconds. The gateway displays this result to the customer — either a success message or an error explaining why the transaction failed.
If approved, the transaction is logged and settled. Settlement means the money moves from the customer's bank to your merchant account, usually within one to three business days. The gateway provider takes their fee from this amount before the remainder lands in your account.
Common mistakes when setting up a gateway
One frequent mistake is choosing a gateway without understanding the full fee picture. Providers advertise their per-transaction rate, but monthly fees, setup fees, and higher rates for certain card types add up. Always request a detailed fee schedule and calculate your actual cost for a typical month of transactions.
Another mistake is not testing the checkout experience before going live. Different gateways create different customer experiences — some are faster, some require more steps, some work better on mobile. Test on the devices your customers actually use.
A third mistake is ignoring security compliance. If you handle card data yourself instead of using tokenization, you become responsible for PCI compliance, which is expensive and complex. Always use a gateway that handles encryption and tokenization so the card data never touches your servers.
Finally, many businesses choose a gateway based on price alone and then get locked into a long-term contract. Read the terms carefully. Some providers require minimum volumes or charge early termination fees. Others allow month-to-month cancellation with no penalty.
Frequently Asked Questions
Do I need a separate merchant account if I use Stripe or Square?
No. Stripe and Square both provide the gateway and the merchant account as one bundled service. You sign up once and can start processing payments. Other providers like Authorize.Net are gateway-only and require you to set up a merchant account separately with a bank or payment processor.
What happens if a transaction is declined?
The gateway receives a decline code from the customer's bank — usually "insufficient funds," "card expired," "incorrect CVV," or "fraud suspected." The gateway displays a message to the customer explaining the decline. The customer can try a different card or contact their bank. No fee is charged for a declined transaction.
Can I switch gateway providers without losing my transaction history?
Yes. Your transaction history stays with your old provider, and you can read it for your records. When you switch, you update your website or payment form to point to the new gateway. Existing customer payment information stored with the old provider does not automatically transfer, so you may need to ask returning customers to enter their card details again.
Which gateway is best for a small business just starting out?
Square or Stripe are usually the easiest for small businesses because they bundle gateway, merchant account, and processor together with no monthly fees or long-term contracts. Square is simpler if you need in-person payments; Stripe is better if you need strong developer tools or plan to grow quickly.
Do payment gateways work with all types of businesses?
Most major gateways work with standard retail and service businesses. Some restrict high-risk categories like gambling, adult content, or firearms. Check the provider's acceptable use policy before signing up, especially if your business falls into a category that some providers decline.