Also called: Gateway, Gateway provider, Payment gateway provider, Merchant payment gateway, Secure payment gateway
What a payment gateway is
A payment gateway is the technology that captures your customer’s payment details and sends them securely into the payment process. Online, it connects checkout on your website or app to the processor and payment network. In a store, a payment terminal can perform the gateway role by sending the card transaction onward.
The gateway passes information such as the card number and billing details to request approval. The customer receives an approval or decline, often within seconds. An approval places a hold on the customer’s funds; it does not mean the sale has already reached your bank account.
A gateway routes payment data; it does not tell you whether your processing price is competitive.
How it works
At online checkout, your customer enters payment details on your site or a hosted page. The gateway encrypts and routes the information to the payment processor, which sends an authorization request through the card network to the customer’s bank. The response travels back to your checkout so you can confirm or decline the order.
After approval, you submit the sale for settlement. That step moves the transaction toward funding your merchant account. A gateway and a processor have different jobs, but one provider can bundle both services, so your business may not have separate companies or logins for each.
What it means for your costs
Gateway fees are separate from the underlying card costs, which include interchange, network fees and processor markup. Providers charge gateway-related fees in different ways, including per-transaction charges, monthly platform fees or one-time setup fees. The research does not establish a standard gateway price, so compare the exact fee schedule rather than assuming a quoted processing rate includes every service.
On your monthly statement or invoice, look for separate charges described as gateway, platform, monthly service or transaction fees. Compare each charge with your agreement and the service it covers. If a provider bundles the gateway with processing, ask for an itemized breakdown so you can distinguish gateway charges from negotiable processor markup.
Security and checkout choices
A hosted gateway sends customers to a separate page to enter payment details. This limits the card data your website handles, but sends shoppers away from your own checkout. A self-hosted setup keeps the payment form on your site and gives you more control, while putting more responsibility for protecting card data on your business.
Using a compliant gateway does not by itself make your business compliant with PCI DSS. If your site collects card details, you still have security and compliance responsibilities. Before launch, test successful and declined payments, refunds, receipts and order confirmations, then check that approved sales reconcile with your deposits.
What you can actually change
- Separate the fees. Ask for an itemized list of gateway, platform, setup and per-transaction charges. Compare those charges with processor markup instead of treating them as one fee.
- Choose your checkout. Decide whether a hosted page or an on-site form fits your customer experience and security responsibilities. Confirm the gateway supports your sales channels and payment methods.
- Test before launch. Run approved and declined transactions, refunds and receipts in a test environment. Then verify that live sales reconcile with your deposits.
Frequently asked questions
Is a payment gateway the same as a payment processor?
No. The gateway captures and routes payment data for authorization. The processor handles transaction processing and the movement of funds between the customer’s bank and your merchant account. One provider can offer both services.
Do I need a payment gateway to accept payments online?
Your online checkout needs a way to capture and securely transmit payment details for authorization. That function can come from a separate gateway or be built into a combined payment service or ecommerce platform.
Does a payment gateway make my business PCI compliant?
No. A compliant gateway does not remove your business’s PCI DSS responsibilities. Hosted checkout can limit how much card data your website handles, while a self-hosted form puts more security responsibility on your business.
What gateway fees should I look for?
Look for separate gateway or platform charges, per-transaction fees and one-time setup fees. Compare the exact charges on your agreement and statement with processor markup, since gateway fees do not have one standard price.