Introduction

Accepting payments online is what turns a website from a brochure into a business. Whether you sell products, downloads, services, or subscriptions, customers need a way to pay you without emailing card details or mailing a check — and taking card payments is much easier than it used to be, with no merchant account or developer on retainer needed to get started.

The harder part is choosing the right setup. There are three main ways to accept payments on a website: hosted checkout, payment buttons and links, and an integrated payment gateway — each trading simplicity for control in a different way, and each costing a different amount.

The Three Ways to Accept Payments Online

Hosted checkout

With hosted checkout, your customer clicks “buy” on your site and is taken to a payment page run entirely by your payment provider — Stripe Checkout, PayPal Checkout, and Square Checkout are common examples — and returns to your site after paying.

This is the simplest option for most small businesses: setup can take less than a day, no code is usually involved, and the provider handles the hardest security work for you. The trade-off is that your customer briefly leaves your website, so you have less control over the payment step’s look.

Payment buttons and payment links

Payment buttons and links are the lightest-weight option: you paste a button or link on your site, in an email, or in a message, and the customer clicks it to pay a set amount — no shopping cart, no checkout page to build.

This works well for one service, a few fixed-price products, deposits, or donations, and it is a good way to start taking payments before your full store is ready. The limitation is that it does not scale into a real store with a cart, discounts, or shipping options.

Integrated payment gateway

An integrated gateway keeps the customer on your website for the whole purchase: the card form sits inside your own checkout page while the provider’s software processes the payment in the background, giving you the most control over branding and the smoothest checkout experience.

It also takes the most work: you or your developer must integrate the provider’s tools, test success and failure paths, and take on more security responsibility. For a new small business this is usually overkill — start with hosted checkout and upgrade only when your volume justifies the extra effort.

How to Choose Between Them

• Just starting out, or selling a handful of items: payment buttons or links — fastest to launch.
• Running a real store but want the simplest secure setup: hosted checkout — professional, trusted, and quick.
• Established store with steady volume and a developer available: integrated gateway — best branding and control.
• Selling services or invoicing clients: payment links and invoices often beat a full store. Pair them with a simple invoice template, as explained in How to Make an Invoice in Google Sheets.

There is no universally best provider. The right choice depends on what you sell, how many orders you expect, whether your customers are local or international, and how much technical help you have — so compare two or three providers on the criteria in this guide.

Understanding Payment Fees

The headline rate is real, but rarely the whole cost — here are its components.

The percentage fee. This is the main charge — a percentage of each payment. As published in November 2026, standard US online card rates sit roughly in the 2.9% to 3.5% range — Stripe 2.9%, PayPal 2.99% for cards and 3.49% for PayPal Checkout, Square 3.3% free and 2.9% paid. Rates change, so confirm the current rate on the provider’s official pricing page.

The fixed per-transaction fee. Most providers add a small fixed amount to every payment — commonly around 30 to 49 cents. On a $10 sale, that fixed fee matters far more than on a $200 sale.

International and currency conversion fees. Payments from customers abroad usually cost extra — commonly around 1% for an international card and another 1% for currency conversion. For overseas-heavy stores, this surcharge can matter more than the headline rate.

Chargeback and dispute fees. When a customer disputes a payment, the provider charges a fee on top of the disputed amount. As of November 2026, Stripe lists $15 per dispute, PayPal lists a $20 chargeback fee and a $15 standard dispute fee, and Square lists no chargeback fee. Dispute fees vary and change, so confirm them on the provider’s official dispute documentation.

Monthly fees and payout timing. Many providers offer a free plan and paid plans with lower per-transaction rates; a paid plan only pays off once your volume beats the monthly charge. Standard payouts take one to two business days; a new account’s first payout can take 7 to 14 days.

Work out your effective rate instead: a typical month’s fees and plan cost, divided by your total sales. That single number is what you are really paying, and it is the number to compare across providers.

Setting Up Payments: The Practical Steps

• Create your business account. You will need your business name, a bank account in the business name, and ID documents. Providers verify your business before approving live payments, so start early.
• Connect it to your website. On a website builder or store platform, this is usually a plugin or built-in integration; on a custom site, you use the provider’s checkout tools or API.
• Set your currency and payment methods. Offer what your customers use: cards at minimum, plus digital wallets such as Apple Pay or Google Pay if supported — wallets cut abandoned checkouts because customers skip typing in card details.
• Test before going live. Every major provider offers a test mode with test card numbers. Run a successful payment, a failed payment, and a refund through it before accepting real money — and confirm your verification status separately, since a working test payment does not mean your account is approved for live payments.
• Write your policies before launch. Your refund policy, shipping policy, and contact details should be live before the first order arrives.

Building the store too? See How to Build a Simple Online Store and How to Start an Online Business With a Small Budget.

Security Basics You Cannot Skip

Payment security is not optional, and choosing a reputable provider does most of the heavy lifting — but only if you set things up correctly.

Use HTTPS everywhere. Your entire site, not just the checkout page, should run over HTTPS with a valid security certificate. Browsers now warn visitors about sites without it, and most hosting providers include a free certificate.

Let the provider handle card data. Never let card numbers touch your own server: with hosted checkout or a provider’s tokenized card form, card details go straight from the customer’s browser to the provider. This is called reducing your PCI scope.

Understand PCI DSS. The Payment Card Industry Data Security Standard (PCI DSS) is the security standard the card brands require of every business that handles card data. The current version is PCI DSS v4.0.1, and its newer requirements became mandatory in March 2025. Most small businesses validate compliance with a Self-Assessment Questionnaire (SAQ); if card entry is fully outsourced to your provider, you usually qualify for SAQ A, the shortest one. Your provider and bank can confirm which SAQ applies to you.

Never store card security codes. The card security code (CVV/CVC) must never be stored after authorization. If a customer emails you their card details, delete the message and ask them to pay through your checkout link instead.

Turn on fraud signals and protect your accounts. Most providers flag mismatched billing addresses, unusual locations, or rapid repeat attempts — turn these on and review flagged orders before shipping. Use a strong, unique password for your payment provider account and turn on two-factor authentication: if someone gets into that account, they can change where your payouts go.

Refund Policy Checks Before Launch

Before you launch, make sure your refund policy answers these questions:

• What is your refund window? State a clear number of days — vague wording like “reasonable time” creates arguments.
• What condition must returned items be in? Spell out whether items must be unused, in original packaging, or whether digital products are refundable.
• Who pays return shipping? Say so plainly — customers assume the answer, and assumptions cause disputes.
• How long do refunds take? Card refunds typically take several business days to appear on a customer’s statement — say so upfront, so they do not file a chargeback while waiting.

Publish it on your checkout page and footer.

Payment-Readiness Checklist

Before you take your first live payment:

• Your site loads over HTTPS, and your provider account is verified for live payments.
• You have tested a successful payment, a failed payment, and a refund.
• Your refund, shipping, and contact pages are published and linked from checkout.
• You offer the payment methods your customers use, including a digital wallet.
• Fraud detection is turned on and you know how to review flagged orders.
• Two-factor authentication is enabled on your payment provider account.
• You know your effective fee rate and payout timing.
• Your checkout works on a phone, not just on a desktop.
• You have a chargeback plan: respond promptly, keep order records, and keep proof of delivery.

For a broader pre-launch review, see the How to Create a Small Business Website Checklist.

Frequently Asked Questions

How much does it cost to accept online payments?

There is usually no setup fee on standard plans. Your main cost is the per-transaction fee — for US online card payments, roughly 2.9% to 3.5% plus around 30 to 49 cents per transaction. International payments, chargebacks, and instant payouts cost extra, so confirm current rates on the provider’s pricing page.

Can I accept payments without a website?

Yes. Payment links can be shared by email, text, or social media, and customers pay on the provider’s hosted page — good for services, deposits, and one-off sales. A website becomes worth it when you want a store or a checkout with your own branding.

Which payment methods should I offer?

Cards are essential. Digital wallets such as Apple Pay and Google Pay speed up checkout on phones, PayPal is popular and can lift trust, and bank transfers (ACH in the US) cost less per transaction — often under 1% — and suit larger invoices. Offer the methods your customers actually use.

What happens if a customer disputes a payment?

The provider notifies you and temporarily holds the disputed amount. You respond with evidence — order details, delivery confirmation, and customer messages. If you win, the money is returned; if you lose, the customer is refunded and you pay the dispute fee.

The Bottom Line

Accepting online payments is not about finding the cheapest provider — it is about finding the setup that fits your business today. For most small businesses, that means hosted checkout from a reputable provider, letting the provider handle card data, and keeping your own security obligations small. Learn your effective fee rate, publish a clear refund policy, test in test mode, and turn on two-factor authentication.