What a payment gateway does

A payment gateway is the tool that moves money from a customer's bank account or card to your business account when someone buys something online. It sits between your website or app and the banks involved — it collects the payment information, checks that the card or account is real and has enough money, and tells your business whether the transaction went through or was declined.

The gateway does not hold the money itself. It passes the transaction to a payment processor, which talks to the customer's bank and your bank to complete the transfer. The whole process usually takes a few seconds, though the money may take one to three business days to land in your account depending on your bank and the gateway you use.

You need a payment gateway if you sell anything online — physical goods, digital products, services, or subscriptions. Without one, you have no way to accept card payments or bank transfers through your website or mobile app.

Key Takeaways

  • A payment gateway collects payment information from customers and checks whether the transaction is valid before sending it to your bank.
  • Different gateways charge different fees — typically a percentage of each transaction plus a flat fee per transaction, or a monthly subscription, or both.
  • Some gateways work only with certain types of businesses or payment methods, so you need to check what your customers want to pay with and what the gateway supports.
  • The gateway you choose affects how fast money reaches your account, what payment methods you can offer, and how much you pay in fees.
  • Most gateways require you to have a business bank account and a merchant account or agreement with a payment processor.

How payment gateways charge fees

Payment gateways make money by taking a cut of each transaction. The most common fee structure is a percentage of the sale plus a flat per-transaction fee — for example, 2.9% plus $0.30 per transaction. This means a $100 sale costs you $3.20 in gateway fees.

Some gateways charge a monthly subscription instead of or in addition to per-transaction fees. A subscription model might be $20 to $300 per month depending on the features and transaction volume you need, with lower or no per-transaction fees. This works better if you process a high volume of sales.

A few gateways charge a flat monthly fee with no per-transaction fees at all, but these are rare and usually only for very high-volume sellers. International transactions, refunds, and chargebacks may carry additional fees on top of the standard rate. Always check the gateway's pricing page for the exact fees that explore to your type of business and the countries you sell to.

Payment methods each gateway accepts

Not every gateway accepts every payment method. Most major gateways accept credit cards (Visa, Mastercard, American Express, Discover) and debit cards. Many also accept digital wallets like PayPal, Apple Pay, Google Pay, and Stripe's own wallet.

Some gateways accept bank transfers (ACH in the United States, SEPA in Europe), though this is less common. A few accept cryptocurrency or regional payment methods like Alipay or WeChat Pay if you sell internationally. Before you choose a gateway, check what your customers actually want to use — if most of your customers pay with PayPal and your gateway does not support it, you will lose sales.

The gateway's documentation or pricing page lists every payment method it supports. If you are unsure whether a specific method matters for your business, look at your sales history or ask your customers what they prefer.

Settlement time and when money reaches your account

Settlement is the time between when a customer's transaction is approved and when the money actually lands in your business bank account. Most gateways settle within one to three business days, though some offer next-day or same-day settlement for an extra fee.

The settlement time depends on three things: how fast the gateway processes the transaction, how fast your bank processes the deposit, and whether you pay for expedited settlement. Weekends and holidays can add extra days. If you need money quickly — for example, if you run a high-volume retail business — look for gateways that offer next-day settlement as a standard or low-cost option.

Some gateways hold a small percentage of each transaction in a reserve account for 30 to 180 days to cover potential chargebacks or refunds. This is more common if you are new to the gateway or if your business type is considered higher-risk (like travel, digital goods, or subscription services). Ask the gateway whether it holds reserves and for how long.

Security and fraud protection

Payment gateways use encryption to scramble payment information so that hackers cannot read it if they intercept it. They also use tokenization, which means the gateway stores a code instead of the actual card number, so your website never touches the real payment data.

Most gateways include basic fraud detection — they flag suspicious transactions (like a card used in two countries in one hour) and can decline them automatically or send them to you for review. Some gateways charge extra for advanced fraud tools like machine learning that learns your normal transaction patterns and spots unusual activity.

All major gateways are PCI DSS compliant, which means they meet security standards set by the payment card industry. This protects both you and your customers. If you store payment information yourself instead of using the gateway's tokenization, you become responsible for PCI compliance, which is expensive and complicated — most small businesses should not do this.

Gateways for different business types

Some gateways work better for certain types of businesses. E-commerce gateways like Shopify Payments and BigCommerce are built into those platforms and work seamlessly if you already use them. Standalone gateways like Stripe and Square work with any website or app but require more setup.

Subscription and SaaS businesses often use gateways that specialize in recurring billing, like Recurly or Zuora, because these handle automatic charges, failed payment retries, and dunning (asking customers to update expired cards). Nonprofits and charities may may have access to for lower fees from gateways like Donorbox or GiveWP.

High-risk businesses — like adult content, gambling, or high-ticket items — have fewer gateway options because many gateways refuse to work with them. If your business is considered high-risk, you may need to use a specialized gateway or a payment processor that works with high-risk merchants, and you will likely pay higher fees.

What you need to set up a payment gateway

To use a payment gateway, you need a business bank account in your business name. The gateway deposits money there, and you cannot use a personal account. You also need a merchant account or a payment processor agreement — this is the contract between you and the bank or processor that lets you accept card payments. Some gateways set this up for you; others require you to arrange it separately.

You will need to provide business information: your legal business name, address, tax ID (EIN in the United States), and details about what you sell. The gateway may ask for bank statements or tax returns to verify that your business is real and that you are not a fraud risk. This verification process usually takes a few days to a week.

If you use a website platform like Shopify or WooCommerce, the setup is simpler — you connect your bank account to the platform and choose a gateway, and the platform handles most of the technical work. If you build a custom website, you will need a developer to integrate the gateway's code into your checkout page.

Frequently Asked Questions

Do I need a separate merchant account if I use a payment gateway?

It depends on the gateway. Some gateways like Stripe and Square set up a merchant account for you automatically when you sign up. Others require you to have a merchant account with a bank or processor before you connect the gateway. Check the gateway's documentation or call their support team to find out what you need before you start.

What happens if a customer disputes a charge?

The customer's bank investigates the dispute, called a chargeback. The gateway notifies you and gives you a window (usually 7 to 10 days) to provide evidence that the transaction was real — like an order confirmation, shipping receipt, or email from the customer. If you do not respond or the bank sides with the customer, the money is refunded and you pay a chargeback fee, usually $15 to $100.

Can I use multiple payment gateways at the same time?

Yes, many businesses use two gateways for backup or to offer different payment methods. For example, you might use Stripe for credit cards and PayPal for customers who prefer PayPal. Each gateway charges its own fees, so using multiple gateways costs more unless one of them is significantly cheaper for your transaction mix.

What is the difference between a payment gateway and a payment processor?

A payment gateway collects payment information and checks that it is valid. A payment processor talks to the banks and actually moves the money. Most gateways work with a processor behind the scenes — you just see the gateway. Some companies like Stripe and Square do both jobs themselves, which is why they are sometimes called "payment platforms" instead.

How do I know if a gateway is safe to use?

Check whether the gateway is PCI DSS compliant (all major ones are), whether it uses encryption and tokenization, and whether it has a clear privacy policy. Read recent reviews from other businesses in your industry. If the gateway is backed by a major company (like Shopify Payments or Square) or is well-known in the industry (like Stripe), it is almost certainly safe. Avoid unknown gateways with no reviews or unclear security information.