Accepting Payments as a Small Business

How Card Payments Actually Work

Accepting payments as a small business is straightforward today compared to even ten years ago. Modern payment processors handle most of the complexity behind the scenes. That said, understanding how the system works, what your options cost, and what your obligations are will save you money and help you avoid problems like chargebacks and compliance issues.

This guide covers everything a small business needs to know about accepting payments, from choosing a processor to handling chargebacks.

How Card Payments Work

When accepting payments by card, several parties are involved behind the scenes. Understanding this helps explain the fees you pay as a small business.

• The issuing bank is the bank that issued the customer’s card (Chase, Bank of America, etc.). It authorizes the transaction and takes a cut called the interchange fee.
• The card network (Visa, Mastercard, American Express, Discover) operates the payment rails and charges an assessment fee on each transaction.
• The acquiring bank is the financial institution on your side that processes the transaction into your account.
• The payment processor sits between you and the acquiring bank, providing the technology and merchant services. This is who you actually sign up with.

In practice, you deal with one company: your payment processor. They bundle all the fees together and charge you a single rate per transaction.

Choosing a Payment Processor for Your Small Business

You do not need a traditional merchant account to accept card payments today. Modern payment service providers handle everything in one place. Here are the most common options for small businesses:

Stripe is the most developer-friendly option and works well for online businesses, subscriptions, and platforms. It charges a flat rate of 2.9% plus 30 cents per online transaction. Stripe also handles international payments, recurring billing, and a wide range of payment methods.

Square is the most popular choice for in-person businesses. The card reader is free, setup takes minutes, and the flat rate is 2.6% plus 10 cents for in-person transactions. Square also includes a free point-of-sale system, inventory tracking, and basic reporting.

PayPal is widely recognized by customers and works well for both online and in-person payments. Rates are comparable to Stripe and Square. PayPal also offers a buy-now-pay-later option (Pay Later) that can increase conversion for higher-ticket purchases.

Shopify Payments is built into the Shopify e-commerce platform. If you run a Shopify store, using Shopify Payments avoids the additional transaction fee Shopify charges when using third-party processors. Rates start at 2.9% plus 30 cents per transaction.

Traditional merchant accounts through banks or payment processors like Helcim or Dharma Merchant Services offer interchange-plus pricing, which is more transparent and often cheaper at higher volumes. They are worth considering once your monthly card volume exceeds roughly $10,000.

For most new businesses, Stripe for online payments and Square for in-person payments are the simplest starting points. Both have no monthly fees, no setup fees, and no long-term contracts.

Understanding Payment Processing Fees

Payment processing fees come in a few forms. Knowing the difference helps you evaluate your options accurately.

Flat rate pricing charges the same percentage on every transaction regardless of card type. This is what Stripe, Square, and PayPal use. It is simple and predictable, but slightly more expensive on average because the processor bundles low-cost and high-cost cards together.

Interchange-plus pricing passes the actual interchange fee from the card network directly to you and adds a small fixed markup on top. This is more transparent and typically cheaper for businesses with significant volume, but the monthly statements are more complex to read.

Tiered pricing groups transactions into qualified, mid-qualified, and non-qualified tiers at different rates. This model is generally the least transparent and most profitable for the processor. Avoid it if you can.

Beyond per-transaction fees, watch for monthly fees, statement fees, PCI compliance fees, and early termination fees when evaluating traditional merchant accounts. Modern payment service providers like Stripe and Square have largely eliminated these.

PCI DSS Compliance

PCI DSS stands for Payment Card Industry Data Security Standard. It is a set of security requirements that every business accepting card payments must follow to protect cardholder data. Compliance is not optional. Card networks require it, and failure to comply can result in fines and loss of the ability to accept cards.

The good news for most small businesses is that using a reputable payment processor like Stripe or Square handles the vast majority of PCI compliance automatically. Because these processors handle all card data on their own infrastructure, your business never touches sensitive card numbers directly. You still need to complete an annual PCI self-assessment questionnaire (SAQ) and confirm that your systems meet basic security requirements, but the heavy lifting is done by your processor.

Compliance becomes more complex if you build a custom payment system, store card data yourself, or use older point-of-sale hardware. In those cases, consult your processor’s compliance team or a qualified security assessor.

Chargebacks

A chargeback happens when a customer disputes a charge with their bank rather than coming to you directly. The bank reverses the transaction and debits the funds from your account. You then have a window of time to dispute the chargeback by providing evidence.

Chargebacks cost more than just the transaction amount. Most processors charge a chargeback fee of $15 to $25 per dispute, regardless of outcome. Furthermore, a high chargeback rate (above 1% of transactions) can result in additional fees, account restrictions, or termination of your merchant account.

Common Chargeback Reasons

• The customer did not recognize the charge on their statement (use a clear billing descriptor)
• The product was not delivered or the service was not performed
• The item received did not match the description
• Fraudulent use of the customer’s card
• The customer was unable to reach you for a refund

How to Reduce Chargebacks

• Use a recognizable billing descriptor that matches your business name
• Respond promptly to customer complaints and refund requests
• Use delivery confirmation and tracking for physical products
• Keep clear records of orders, communications, and delivery
• Use address verification (AVS) and CVV checks for card-not-present transactions
• Have clear, easy-to-find refund and cancellation policies

How to Dispute a Chargeback

When a chargeback arrives, your processor will notify you and give you a deadline to respond, typically 7 to 14 days. To dispute it, gather evidence showing the transaction was legitimate: order confirmation, delivery tracking, signed receipts, email communications with the customer, and proof the product or service was delivered as described. Submit everything through your processor’s dispute portal before the deadline. After that, the card network makes the final decision.

Accepting Payments Online as a Small Business

To accept payments on your website, you need a payment gateway integrated into your site. Most payment processors provide this. Stripe, Square, and PayPal all offer embeddable checkout forms, hosted payment pages, and API integrations for custom implementations.

For e-commerce stores, platforms like Shopify, WooCommerce, and BigCommerce have built-in payment integrations that handle the technical setup. For service businesses sending invoices, most processors offer an invoicing tool that lets customers pay online with a single click.

If you accept recurring payments or subscriptions, make sure your processor supports this explicitly. Stripe and Braintree are particularly strong for subscription billing.

Accepting Payments in Person

For in-person payments, you need a card reader connected to your point-of-sale system or phone. Square, Stripe, and PayPal all offer card readers that plug into a phone or tablet. Contactless payments (tap-to-pay) and mobile wallets like Apple Pay and Google Pay are now expected by many customers and are supported by all major card readers.

If your business does significant in-person volume, a dedicated point-of-sale terminal provides a more professional experience and often supports faster transaction speeds than a phone-based reader.

Common Mistakes

• Choosing a processor with a long-term contract and early termination fees. Many traditional merchant account providers lock you in for 2 to 3 years. Read the contract carefully before signing.
• Ignoring PCI compliance. Completing your annual SAQ and following basic security practices is required. Skipping it creates liability if a breach occurs.
• Not having a clear refund policy. Customers who cannot find your refund policy go straight to their bank for a chargeback. Make it visible at checkout and in your confirmation emails.
• Using a personal PayPal account for business payments. Personal accounts have lower limits and fewer protections than business accounts. Set up a PayPal Business account from the start.
• Not reconciling payments with your bookkeeping. Deposits from payment processors arrive net of fees. Make sure your bookkeeping records gross revenue and processor fees separately for accurate financial reporting.

Where to Go Next

Accepting payments connects directly to your bookkeeping obligations. See the Basic Bookkeeping guide for how to record payment processor deposits correctly. If you sell online across multiple states, the Taxes 101 guide covers sales tax nexus and when you are required to collect sales tax from customers in other states.