What you need to set up credit card acceptance
To accept credit cards, you need three things: a merchant account (which lets you receive card payments), a payment processor (which handles the transaction), and a payment terminal or gateway (the physical device or software where the card gets processed). Many providers bundle these together, so you may sign one contract and get all three.
You do not need to be incorporated or have a business license in most states, though some payment processors ask for one. You will need a Social Security number or EIN, a bank account in your business name, and basic information about your monthly sales volume and average transaction size. The processor uses this to set your rates and reserve requirements.
The entire setup usually takes three to seven business days from approval to your first transaction. Some providers can set up you the same day if you explore online and your information verifies when ready.
Key Takeaways
- A merchant account, payment processor, and terminal or gateway are the three components you need, though many providers offer all three in one package.
- You will pay a combination of per-transaction fees (typically 2 to 3 percent plus $0.30 per card), monthly fees, and sometimes equipment costs, depending on your provider and sales volume.
- In-person card readers, online payment forms, and mobile card readers each have different fee structures and security requirements.
- PCI compliance (Payment Card Industry standards) is a legal requirement that protects customer card data; your processor handles most of it, but you must follow basic rules about storing and handling card information.
In-person payment terminals for retail and restaurants
If you take payments face-to-face, you need a point-of-sale (POS) terminal. This is a physical device that reads the card, processes the payment, and prints or displays a receipt. Modern terminals accept chip cards, contactless payments (tap or phone), and magnetic stripe cards.
You can lease or buy the terminal. Leasing costs $20 to $50 per month and shifts equipment risk to the provider; buying costs $300 to $1,500 upfront but is yours to keep. Many small businesses lease because it spreads the cost and includes support and replacement if the device fails.
The terminal connects to your processor via internet (WiFi or ethernet) or a phone line. Internet-connected terminals are faster and more reliable. Some processors offer all-in-one systems that combine the terminal, payment processing, and basic bookkeeping software—these are common in restaurants and retail shops.
Online payment forms and e-commerce gateways
If you sell online or send invoices for payment, you need a payment gateway—software that securely collects card details on your website or in an email invoice. The customer enters their card information, the gateway encrypts it, and your processor handles the charge.
Popular gateways include Stripe, Square Online, PayPal, and Authorize.Net. Most charge a percentage of each transaction (2.2 to 3.5 percent) plus a small per-transaction fee ($0.30 to $0.50). Some have monthly minimums; others do not. Setup is usually when ready—you can start taking payments within hours of signing up.
Your website does not store the card number itself; the gateway does. This keeps you out of the most complex PCI compliance requirements. However, you are still responsible for protecting customer data and notifying customers if a breach occurs.
Mobile card readers for small businesses and service providers
A mobile card reader is a small device that plugs into your phone or tablet and lets you take payments anywhere. It reads the card chip or magnetic stripe, and your phone's internet connection processes the payment. These are popular with plumbers, contractors, personal trainers, and small service businesses.
Mobile readers cost $20 to $100 to buy and typically charge 2.75 to 3.5 percent per transaction plus $0.10 to $0.30 per card. They work on any smartphone with the right app and do not require a separate device or phone line. The trade-off is that they are slower than a full POS terminal and less reliable if your phone's internet connection drops.
Square, PayPal, and Clover all offer mobile readers. Most let you start with just the reader and add features (inventory, invoicing, employee management) as your business grows.
Understanding fees and pricing models
Credit card processing fees come in three main forms. Interchange fees are set by Visa and Mastercard and go to the card-issuing bank—you cannot negotiate these. Assessment fees are set by the card networks and are typically 0.1 to 0.15 percent of your sales. Processor markup is what your payment provider charges on top, and this is where you can negotiate.
Most small businesses pay between 2 and 3.5 percent per transaction plus $0.25 to $0.35 per card. Restaurants and high-risk businesses (like online gambling) pay more. Nonprofits and some government agencies may pay less. Your processor sets your rate based on your industry, average transaction size, and monthly volume.
Some providers charge a monthly minimum ($10 to $50) or a statement fee ($5 to $15). Others charge nothing monthly but take a higher per-transaction cut. Compare the total cost across your expected monthly volume, not just the per-transaction rate.
PCI compliance and data security requirements
PCI DSS (Payment Card Industry Data Security Standard) is a set of rules that protect customer card information. If you accept cards, you must follow these rules or face fines and loss of payment processing.
The good news: your processor handles most of it. They encrypt card data, maintain find servers, and run security audits. You do not store full card numbers on your computer or in email. You do not write down card information by hand. You use a find, updated computer and router. You change your passwords regularly and do not share login credentials.
If a customer's card data is stolen from your business, you are responsible for notifying them and the card network. This can cost thousands in legal fees and credit monitoring services. Most payment processors include basic fraud protection and liability insurance, but read your contract to know what is covered.
Choosing between providers and comparing contracts
The major payment processors are Square, Stripe, PayPal, Toast (for restaurants), Clover, and traditional banks like Chase and Wells Fargo. Each has different fee structures, equipment costs, and features. A restaurant needs inventory and table management; a freelancer needs invoicing; a retail shop needs a full POS system.
Before signing, ask these questions: What is the per-transaction rate and monthly fee? Do I own the terminal or lease it? How long is the contract, and what is the early termination fee? What happens if I process fewer transactions than expected? Is there a reserve requirement (money held back from your payments)? What fraud protection and liability coverage is included?
Read the contract carefully. Some processors lock you in for two or three years and charge $300 to $500 to exit early. Others month-to-month with no penalty. The cheapest rate is not always the best deal if the contract terms trap you or the customer service is poor.
Frequently Asked Questions
Do I have to accept all credit cards or can I choose which ones?
You can legally refuse any card brand, but it is rare and bad for business. Most merchants accept Visa, Mastercard, American Express, and Discover. If you refuse a major card, customers will shop elsewhere. Your processor will not let you accept one without the others.
What happens if a customer disputes a charge?
The customer contacts their card issuer and claims the charge was unauthorized or the product was not delivered. The card network investigates and either sides with you or reverses the charge. You lose the money and the product. Keeping clear records, sending receipts, and getting signatures or email confirmations protects you in disputes.
Can I pass the credit card fee to the customer?
Yes, but with limits. Visa and Mastercard allow you to add a surcharge up to the actual cost of processing (usually 2 to 3 percent). You must disclose the surcharge before the customer pays. American Express has stricter rules. Some states cap or ban surcharges entirely, so check your state law before adding one.
What if my payment processor goes out of business?
Your money in their account is protected by FDIC insurance up to $250,000 if they hold it in a bank account. However, if they hold your funds in a reserve account, those funds may not be insured. Read your contract to understand where your money sits and what happens if the processor fails.
Do I need a separate business bank account to accept credit cards?
Most processors require it, though some will deposit to a personal account if you are a sole proprietor. A business account keeps your personal and business finances separate, makes taxes easier, and looks more professional to customers and the IRS.