What is a payment gateway, and how do you pick one?

When a customer pays on your website, a terminal is not in the room. Something has to stand in for that box: capture the card, encrypt it, and send it for approval. That something is a payment gateway. If you sell online, take payments over the phone, or bill customers on a schedule, the gateway is the piece doing the work. This is the plain-English version of what it is and how to choose one.

What is a payment gateway?

A payment gateway is the software that authorizes card-not-present payments, the online and over-the-phone sales where no physical card is read. It is the online equivalent of a countertop terminal. When a shopper enters a card on your checkout page, the gateway encrypts those details, passes them to the processor and the card networks for approval, and returns a yes or no in a second or two. It is the secure door between your website and the payment system. Without one, your site cannot take a card at all.

A gateway is not the same as a merchant account, though you need both. The merchant account is where the money lands. The gateway is the software that moves the sale to that account. Some providers, including us, give you both together so you are not stitching two vendors into one checkout.

Hosted checkout or API: which should you use?

Choose a hosted checkout if you want the simplest, safest path, and a direct API if you want full control of the checkout and have a developer. That is the core choice, and it decides how much of the payment touches your own systems.

• Hosted checkout. The customer is handed to a secure page the gateway runs, enters the card there, and comes back. The card never touches your server, which shrinks your PCI burden dramatically. Fast to set up, and right for most small businesses.
• Direct API integration. The card is entered on your own page and your code sends it to the gateway. You control the whole look and flow, but the card passes through your systems, so your PCI responsibility is far larger. This is a build for a business with developers and a reason.
• A middle path exists too: embedded fields the gateway hosts inside your page, so the checkout looks like yours while the card data stays with the gateway.

A hosted checkout keeps the actual card off your servers. That one choice takes most of your PCI compliance headache off the table, which is why we steer most owners to it unless they have a real reason to build their own.

How much does a payment gateway cost?

With us, the gateway costs nothing on top of your rate. It is included on the same dime. That is not the industry norm, which is where the double dip comes in: many providers charge a separate monthly gateway fee plus a per-transaction gateway fee, stacked on top of your processing rate. We do not bolt on either one. You pass interchange through at cost, add the same flat dime per transaction, and the software that takes your online sales rides along with it.

One note on online cost, because it is the truth of card-not-present selling: online sales are keyed by nature, so the underlying interchange runs higher than a tap at a counter, roughly 0.2 to 0.5 percent more, all illustrative. That is a network cost, not a markup, and no gateway erases it. What we control is the markup, and on that our answer is the same dime online as it is in the store.

What about recurring billing and saved cards?

A gateway is also what lets you bill a customer again without asking for the card each time. It stores the card in a secure vault, represented by a token rather than the real number, so you can charge a monthly membership, a subscription, or a payment plan on schedule. This is called tokenization, and it means your systems hold a stand-in, not the card itself, which keeps you out of the riskiest part of PCI scope. If your business runs on repeat payments, confirm the gateway supports recurring billing and card vaulting before you commit. Not every one handles it well.

When you compare gateways feature by feature, the lists look almost identical: hosted checkout, saved cards, recurring billing, fraud tools. The line that actually varies between providers is the pricing, specifically whether the gateway is billed as its own charge or folded into one rate. Ours is folded in, at the same flat dime, which is the whole reason we can print the price.