How Do I Receive Credit Card Payments? (w/Examples) + FAQs

You receive credit card payments by signing up with a payment processor or merchant services provider, adding a card reader or online checkout, and letting that provider move each sale into your bank account within one to two business days. Setup is quick. But fees, hardware, and contract terms vary a lot by provider.

Over 80% of consumers now prefer paying by debit or credit card instead of cash, according to Square's 2025 Future of Retail report. A cash-only business turns away most of its potential customers before they reach the register. Freelancers, food trucks, retail shops, and online sellers all need slightly different setups. The wrong choice can mean thousands of extra dollars in fees each year. The steps below break that decision into pieces you can work through one at a time.

What Happens Behind the Scenes When a Customer Pays

Three players work together every time a card gets tapped, dipped, or typed in. A merchant account is a special bank account. It holds a business's card sales until they clear. A payment processor is the company that carries transaction details between the customer's bank and yours.

A payment gateway is the software that collects and encrypts card data at checkout. It works the same at a countertop or on a website. Here is the short version of what happens next. The gateway encrypts the card data and sends it to the processor.

The processor asks the customer's card issuing bank to confirm the account is real. It also checks for enough available funds. That bank sends back an approval or a decline in a second or two, so the shopper sees the result right away.

Approval is not the same as getting paid, and this trips up many new business owners. Once a sale is approved, the funds sit briefly in the merchant account while the sale clears between banks. From there, the processor moves the money into the business's regular checking account. Stripe's guide to merchant accounts describes that transfer as often taking a few days.

Small businesses used to need their own bank issued merchant account before they could take a single card payment. That rule kept many new businesses locked out for weeks. Modern providers changed this with a shared model, where many small businesses use one master account behind the scenes. That is why a business can sign up with a provider like Square in an afternoon instead of waiting on a bank's approval process.

A decline moves at the same speed as an approval, but it stops the chain earlier. The issuing bank, not your processor, makes that call. It is often low funds, a fraud flag, or a mismatched billing detail. Your gateway and processor simply pass that answer back to the checkout screen.

Merchant Account vs. Payment Processor vs. Payment Gateway

These three terms get used interchangeably online, and that causes real confusion for a business owner comparing options. A merchant account is a bank account, a payment processor is a service, and a payment gateway is software. Each one plays a distinct role. None of the three is another name for the same thing.

The gap between these terms matters most when you compare an all-in-one provider to a bank's own setup. PayPal's guide to merchant accounts notes that a bank issued merchant account often charges monthly, transaction, and chargeback fees. A business also has to add its own gateway for online sales under that setup. A bundled provider like Square, Stripe, or PayPal folds the account, the gateway, and the processing into one flat rate product.

That single-product design is why most small businesses now choose the bundled model. A common myth is that skipping the bank merchant account also means skipping oversight. That is not true. A business using a shared-account provider still has to follow that provider's rules, and the provider still watches for unusual sale patterns and can hold funds it flags as risky.

One more term is worth knowing: the merchant of record, the entity legally responsible for a sale. When a business uses a bundled provider, that provider is often the merchant of record. It handles chargebacks, sales-tax collection, and PCI compliance on the business's behalf. A business that opens its own bank merchant account becomes the merchant of record itself, which brings more control but also more direct risk.

Which Setup Fits Your Business?

The right path depends mostly on sales volume and where those sales happen, not on business size alone. A brand-new solo business makes occasional in person sales, like a craft vendor at weekend markets. That business almost always does best with a merchant services provider and a mobile card reader. There is no monthly minimum and no long term contract to break if plans change later.

A business doing most of its volume online, such as a boutique selling through its own site, needs a payment gateway built into that site. Most bundled providers now offer that gateway as part of one signup instead of two contracts. An established business with large, steady monthly volume can often negotiate a lower interchange plus rate through a bank merchant account instead. The savings at high volume can outweigh the extra work of managing an extra gateway and hardware vendor.

Some businesses take both in person and phone orders, like a repair shop or a contractor. These businesses generally need a virtual terminal along with a card reader. That lets staff key in a card number by hand when a customer is not standing in front of them. The sections below cover the setup steps, fee math, and compliance rules for each of these situations.

The extremes deserve a specific note, since the middle-ground advice above does not fit either one well. A hobbyist selling at a single weekend event a year rarely needs more than a free reader and a pay-as-you-go rate, since a monthly plan fee would eat up any profit from a handful of sales. A business in a higher-risk category, such as travel booking or subscription boxes, often gets assigned a different merchant category code that carries its own higher rate, so it is worth asking a provider how your industry is classified before you sign up. Skipping that question can mean discovering the higher rate only after your first statement arrives.

How to Start Accepting Credit Card Payments

Once you know roughly which path fits, the signup itself is short. Most small businesses fall into one of two paths. They either sign up with a merchant services provider, or they apply for a merchant account through a bank. The steps below cover both, plus the hardware you will need for each path.

Signing Up With a Merchant Services Provider

A merchant services provider bundles the merchant account, gateway, and processor into one product. That bundling is why it is the fastest path for most small businesses. You create an account online, and Square's step-by-step guide notes that approval is often instant, since the provider absorbs the approval risk across its whole shared account. Next, the provider ships or activates hardware: often a free or low-cost EMV card reader for in person sales, plus dashboard access for online payment links and a virtual terminal.

Most providers let a business start processing real sales the same day the hardware arrives. There is often no long term contract and no setup fee. The trade-off for that speed is a flat processing rate instead of the lower, but more complex, rates a bank can sometimes offer a high volume business. For a first-time card acceptor, that steady cost is often worth more than the small savings a bank contract might offer.

Opening a Bank Merchant Account

A bank issued merchant account involves a formal application, including a credit check and a review of your sales history. This route makes the most sense for an established business with high, steady monthly volume. The bank can offer negotiated rates that beat a flat rate provider once volume passes a certain point. That point varies by bank and industry, so it is worth asking several banks for a quote based on your actual monthly card volume.

Unlike a bundled provider, a bank issued account does not include hardware or a gateway. The business has to buy or lease a compatible card terminal on its own. It also has to set up its own payment gateway for online sales. That extra setup work is the main reason most small and new businesses skip this route until their volume justifies the added work.

Taking Payments in Person

An EMV chip reader that also supports contactless tap payments is the current standard for in person sales. This is not optional in practice. A business that can only swipe a card's stripe, instead of reading its chip, must cover the cost of any fraud on that sale. Square's guide describes this shift directly, and it is one of the biggest hidden costs of old hardware.

Beyond fraud protection, a modern reader also handles tap-to-pay methods like Apple Pay and Google Pay. A growing share of customers now expect that option at checkout. A mobile terminal is the right choice for a business that moves around, such as a food truck or a salon that serves clients tableside. A countertop terminal fits a fixed retail location better, since it stays plugged in at one register.

Taking Payments Online

An online business needs at least one of four tools: a hosted online store, a payment link, an invoice with a "pay now" button, or a virtual terminal for typing in a card. A payment link is the simplest option for a service business or a seller without a full website. It turns any single product or service into a shareable checkout page for email, text, or social media. An online store makes more sense once a business sells many products and wants customers to browse before checking out.

A virtual terminal deserves its own mention, because it solves a problem the other three do not. It handles a card payment when neither side is online at the moment of sale, such as a phone order. It turns a laptop or desktop into a card terminal, letting staff type in a card number securely instead of needing a physical reader. This makes it useful for remote billing, phone orders, and any desk based business.

Credit Card Processing Fees, With Real Numbers

Every card sale carries three layered costs, and knowing the stack beats guessing at your margins. An interchange fee goes to the customer's card issuing bank and varies by card type, with rewards and business cards often costing more to accept than a basic debit card. An assessment fee goes to the card network itself, such as Visa or Mastercard, for use of its payment rails. On top of both, your processor adds its own markup, and that is where pricing models start to differ.

As of Square's current pricing page, its flat rate for an in person tap, dip, or swipe is 2.6% plus 15 cents per sale. Stripe's guide to accepting cards cites a similar structure as a typical example of flat rate pricing across the industry. Flat rate pricing bundles interchange, assessment, and markup into one steady number. That is why it appeals to low volume and new businesses that want to know their exact cost per sale without reading a rate sheet.

Interchange plus pricing works differently: the processor passes through the real interchange fee set by the card network, then adds its own smaller markup on top. This model can lower costs for a higher volume or more varied business. But it makes the monthly total harder to predict, since interchange rates shift by card type and by sale. A subscription based model charges a flat monthly fee plus a small fixed cost per sale instead of taking a percentage of each sale, and that structure tends to save money for a high volume of low dollar sales.

PCI compliance costs are the fee businesses most often forget to budget for. A bundled provider like Square absorbs standard PCI compliance into its service, so a business processing through it pays no extra annual fee. A business using a standalone gateway or a bank merchant account, by contrast, may face an extra annual PCI fee from that provider. It is worth confirming that detail during setup rather than finding it on the first statement.

Worked Example: What a $100 Card Sale Nets You

Take a $100 in person sale processed through a flat rate provider charging Square's published rate of 2.6% plus 15 cents. The percentage fee is 2.6% of $100, which comes to $2.60. The flat per sale fee adds another 15 cents, for a total cost of $2.75. The business keeps $97.25 of that $100 sale, and that amount often lands in the bank within one to two business days.

Now compare that to a $500 sale under the same flat rate. The percentage portion scales up to $13, plus the same flat 15 cents, for a total fee of $13.15, leaving the business with $486.85. Notice that the flat per sale fee barely moves the total cost on a larger sale. This is exactly why a subscription model, which charges close to nothing on a percentage basis, can save more money for a business built around a few large sales instead of many small ones.

PCI Compliance and Keeping Card Data Safe

The Payment Card Industry Data Security Standard, often shortened to PCI DSS, is a set of security rules every card-accepting business must follow. It is not a government law. But every major card network requires it as a condition of processing their cards, which makes it required in practice for any business that wants to take credit cards. Ignoring it risks more than a fine: a data breach traced back to noncompliance can trigger network penalties on top of the damage to a business's name.

The good news for most small businesses is that a bundled provider absorbs most of this burden automatically. When a business processes payments through a provider like Square or PayPal, the provider's own systems are already PCI compliant. PayPal's own FAQ confirms that its handling of card data meets the required standard without extra work from the merchant. A common myth is that this means a small business carries zero compliance duty at all.

That is not quite right. A business still has real duties: never write down or store a customer's full card number, keep point-of-sale software updated, and use tested equipment instead of a personal device with an unverified card app. A business that stores card numbers in a spreadsheet "in case a customer calls back" has created exactly the kind of risk PCI DSS exists to prevent. That risk exists no matter how compliant its own processor is.

For a business selling online with its own custom checkout, tokenization is worth knowing as the modern fix for that exact risk. Instead of storing a customer's real card number for a repeat order, the gateway swaps it for a random token that is useless to a thief. This is why many checkouts now save "a card ending in 4242" instead of the real digits. It is also a good self-check: if your system, spreadsheet, or inbox ever holds a full 16-digit card number, that gap is worth fixing right away.

What Happens After the Sale: Settlement and Chargebacks

Settlement turns an approved sale into cash in your bank account, and it is not instant even though approval feels immediate. After a card is approved, the sale sits in a batch with the day's other approved sales. The processor sends that batch to the card networks, which route it to each customer's bank for final settlement. Only then does the money move into the merchant account, before its final move to the regular bank account.

Payout timing varies by provider and can often be set by you; some providers pay out the next business day by default. Others offer same day or instant payout for an added fee, and a business can often choose daily, weekly, or monthly payouts. A seasonal business with uneven sales, like a holiday pop-up shop, should confirm its exact payout schedule before its busiest weeks. A slower default schedule can strain cash flow right when it matters most.

A chargeback happens when a cardholder disputes a charge with their bank instead of asking the merchant for a refund. It is the single costliest thing that can happen after a sale. The bank pulls the disputed amount from the merchant's account right away, often with an extra chargeback fee, before the business gets any chance to respond. Stripe's settlement guide notes that a business must then submit proof the sale was legitimate or risk losing both the sale and the fee for good.

The most common myth about chargebacks is that winning a dispute is purely about proving the customer got the product. Card networks also weigh other signals. These include whether the sale used a chip or tap instead of a typed in card number, whether the shipping address matched the billing address, and whether the business met the network's deadline, which is often a matter of days. Keeping basic records, a signed receipt, a tracking number, a saved email, is the cheapest insurance a small business can carry against a dispute it did not deserve to lose.

Where Three Payment Setups Went Right or Wrong

Reading a fee schedule in the abstract only goes so far. Watching how the same rules played out for three different businesses makes the trade-offs concrete. Each situation below teaches a different lesson, from hardware liability to pricing-model math to chargeback defense.

Mara's Mobile Grooming Van

Mara runs a mobile pet-grooming business and signed up with a merchant services provider for a card reader she could use in driveways between appointments. Early on, her reader's battery died mid-appointment. Rather than lose the sale, she wrote down the customer's card number to charge later, then typed it into her phone's browser instead of using her provider's virtual terminal. That manual entry pulled the sale out of chip-verified pricing and into a higher fee category, and it also broke the "never store a card number" rule covered earlier.

The fix was simple once she found it. Her provider's app had an offline mode that queued the chip sale and processed it once her connection returned. She had never noticed that setting before. Turning it on meant a dead battery no longer forced her into a manual, higher fee entry.

Devon's Coffee Cart

Devon's coffee cart does roughly $18,000 a month in small sales, mostly $5 to $8 each, all under a flat rate provider's standard pricing. A friend suggested switching to interchange plus pricing to save money, and Devon nearly did it without running the numbers first. On a $6 sale, interchange plus can shave off a fraction of a percentage point in markup. But the fixed per sale cost stays about the same, so total savings across hundreds of small sales a week barely covered the added statement complexity.

The lesson is not that interchange plus is a bad model. It is that the model's advantage grows with average ticket size, not sale count. A business built on many low dollar sales, like Devon's, often keeps more money under steady flat rate pricing. A "cheaper-sounding" model like interchange plus only pays off at higher average tickets.

Priya's Online Boutique

Priya's online boutique faced a chargeback on a $340 order where the customer claimed the item never arrived. Her checkout used a payment gateway with delivery proof built in. That meant she had a tracking number showing delivery to the billing address on file. She submitted that proof within her processor's response window, before the deadline passed.

She won the dispute. The deeper lesson is that she could only submit that proof because her gateway captured and stored it automatically at the time of sale. A business using a checkout that skips this kind of logging has nothing to submit when a dispute lands. That is true no matter how honest the original sale was.

Mistakes to Avoid When You Start Taking Cards

• Swiping instead of using the chip or tap. This shifts fraud liability from the card issuer onto your business for that sale.
• Skipping a rate comparison before committing. Locking into a contract without comparing at least two providers often means overpaying for a full year.
• Writing down or storing a customer's card number. This creates a PCI compliance gap and a real risk if that information is ever exposed.
• Ignoring the payout schedule when cash flow is tight. A slow default payout schedule can strand a seasonal business right when it needs cash the most.
• Missing a chargeback response deadline. A missed deadline often means an automatic loss of the dispute, no matter how strong the evidence would have been.
• Assuming a bundled provider means zero compliance work. Basic habits like securing devices and never storing full card numbers are still the merchant's job.
• Choosing interchange plus pricing without running the math first. The model favors larger average tickets, and low-ticket businesses often pay more, not less.
• Not budgeting for a separate PCI fee with a standalone gateway. Some non-bundled providers charge an annual compliance fee that a flat rate provider would have absorbed.
• Using a personal phone app instead of certified card-reading hardware. Unverified apps can fail PCI requirements and leave a business exposed to fraud liability.

Do's and Don'ts for New Card-Accepting Businesses

Do

• Compare at least two providers' full fee schedules before signing up, since a low headline rate can hide other fees elsewhere.
• Use a chip or tap reader for every in person sale to keep fraud liability with the card issuer instead of your business.
• Confirm your payout schedule before a high volume period so a slower default schedule does not strain your cash flow.
• Keep delivery proof and receipts for every sale so you have evidence ready if a chargeback arrives later.
• Ask about interchange plus pricing once your monthly volume grows since the savings scale with both volume and average ticket size.

Don't

• Don't write down or store a customer's full card number even temporarily, since this creates a compliance gap outside your provider's protection.
• Don't assume a bundled provider handles everything for free without checking whether a separate PCI or monthly fee applies to your plan.
• Don't manually key in a card when a chip or tap option is available since keyed in sales often cost more and carry more fraud risk.
• Don't ignore a chargeback notice even if you believe the claim is false, since missing the response deadline forfeits the dispute automatically.
• Don't lock into a long term bank contract before comparing a flat rate provider since most new businesses save money starting with the simpler option.

Pros and Cons of Merchant Services Providers vs. Bank Merchant Accounts

Pros

• Fast approval and same day setup. Most merchant services providers approve new accounts within minutes instead of the weeks a bank approval process can take.
• Bundled pricing that is easy to predict. A flat rate combines interchange, assessment, and processor markup into one number a business can plan around.
• No long term contract in most cases. A business can switch providers without an early termination fee if its needs change.
• Built-in PCI compliance. The provider absorbs the compliance burden, removing a separate annual fee many bank-based gateways charge.
• Included hardware and software. A card reader, dashboard, and virtual terminal often ship as part of signup instead of costing extra.

Cons

• Flat rates can cost more at high volume. A business with large, steady monthly sales often pays less under a negotiated bank rate.
• Less room to negotiate. A bundled provider's pricing is largely fixed, unlike a bank that can tailor a rate to a specific business's volume.
• Funds can be held for review. A shared account may flag unusual sale patterns and delay a payout while it checks the activity.
• Fewer customization options. A bank merchant account paired with a separate gateway can offer deeper integration for a business with complex needs.
• Support can be less personal. A bundled provider often offers centralized support instead of the dedicated account manager some banks provide.

What to Do Next

1. List your sales channels — in person, online, phone, or a mix — so you know which hardware and gateway combination you need.
2. Get fee quotes from at least two providers, one flat rate and one interchange plus, and compare them against your typical transaction size.
3. Order a chip-and-tap card reader if you take any in person payments, since a swipe-only setup carries fraud liability you can avoid.
4. Confirm the default payout schedule for any provider you are considering, especially if your business has seasonal cash-flow swings.
5. Write down your PCI basics: never store full card numbers, keep software updated, and use certified hardware only.
6. Bring in an accountant once your monthly card volume is large enough that a negotiated bank rate might beat a flat rate provider.

Frequently Asked Questions

How much does it cost to accept credit card payments?

Most flat rate providers charge around 2.6% plus a small per-transaction fee for in person sales, based on Square's current published rate. The exact cost depends on your provider, card type, and whether the card is tapped, dipped, or typed in.

Do I need a business bank account to accept credit cards?

Yes. Nearly every payment processor requires a business bank account for payouts. Funds settle from the merchant account into that account, not into a personal checking account.

Can I accept credit card payments without a website?

Yes. A mobile card reader handles in person sales. A payment link lets you accept online payments through email, text, or social media without ever building a website.

What is the difference between a payment processor and a payment gateway?

A processor moves the money; a gateway collects and encrypts the card data at checkout. Many small-business providers bundle both into one signup instead of two contracts.

How long does it take to get approved to accept credit cards?

Approval through a merchant services provider is often instant or same day, since the provider spreads approval risk across its whole shared account. A bank merchant account can take one to several weeks.

Why was my card reader transaction declined?

A decline often means the issuing bank flagged low funds, a suspected fraud pattern, or a mismatched billing detail. It is rarely a failure on your processor's end.

Do I have to pay taxes on credit card processing fees?

No, processing fees are a deductible business expense, not a tax you owe directly. Keep your monthly processing statements as records when you file.

What happens if I get a chargeback?

The disputed amount is pulled from your account right away, often with an added chargeback fee. You then have a limited window to submit proof the sale was legitimate.

Can I lower my credit card processing fees?

Yes, common ways include negotiating interchange plus pricing at higher volume, pushing chip or tap payments over manual entry, and comparing providers once a year.

Is it safe to accept credit cards online without a big tech team?

Yes. A PCI-compliant gateway from a provider like Stripe, Square, or PayPal handles encryption and tokenization on its own, so a small business does not need in-house security engineers.

What is a virtual terminal, and do I need one?

A virtual terminal turns a computer into a card reader for typed in payments. You need one if you take phone orders, bill clients remotely, or run a desk based business without a register.

Do all providers charge the same fees for every card type?

No. Rewards cards, business cards, and international cards often carry higher interchange fees than a basic debit card. That is why your effective rate can shift sale to sale under interchange plus pricing.