What Is a Payment Gateway? How It Works, Types & Costs

What's a Payment Gateway? Why You May Not Need It in 2026

9 min read

•

06 May 2026

A payment gateway is software that lets merchants accept credit cards, debit cards and other electronic payments online. It sits between your business, your customers and the payment processor, and keeps every transaction secure.

This article explains what a payment gateway is, the different types and how they work, with real examples and definitions. It also covers why many businesses in 2026 no longer buy a gateway on its own. If you're just starting an online business, it's a good place to begin.

Here's what we'll cover:

What a payment gateway is and how it works
The different types of payment gateways
Key features to look for
Payment gateway vs. payment processor
Payment gateway vs. merchant account
Do you still need a separate payment gateway?
The benefits of payment gateways
How secure payment gateways are

What is a payment gateway?

A payment gateway is the online version of a point-of-sale (POS) terminal: it lets merchants accept online payments.

It's a front-end software application on a website. It captures card data, sends it to a payment processor, and passes approvals or rejections back to you and your customers.

How does a payment gateway work?

Five key players are involved:

Merchant: the business selling products or services.
Cardholder: the customer buying the product or service.
Issuing bank: the bank that issued the credit or debit card to the customer.
Acquiring bank: the financial institution the merchant uses to accept card payments.
Card networks: companies like Visa, Mastercard and American Express.

Payment gateway flow diagram showing the merchant, processor, card network and banks

Here's what happens when a customer pays on your website:

The customer enters their details and clicks "buy" or "checkout".
The payment gateway sends the encrypted card information to a payment processor.
The processor passes the transaction to the card network, which checks the customer's details. The transaction is approved or rejected.
The processor sends the result back to the gateway, which shows the approval or decline to the customer.
If approved, the amount is taken from the customer's account and transferred to the merchant's bank account.

What are the different types of payment gateways?

There are three types of gateways: hosted, self-hosted and API-hosted. Each needs different integrations and comes with different maintenance demands and support levels. Know which one fits your business before you commit, so there are no surprises.

Hosted gateway

Many business owners need to accept credit cards online but don't have the budget or technical expertise to run their own gateway. If that's you, a hosted gateway is likely the right choice.

Hosted gateways are easy to set up and offer good security and fraud protection. With a hosted gateway, customers are redirected to a third-party provider's page (for example, PayPal) to enter their payment details. They're then sent back to the merchant's website to complete the sale.

The drawbacks are significant. The redirect makes buying slower, which often lowers conversion rates. It can also look less professional, because you have no control over branding or the checkout experience.

Self-hosted gateway

A self-hosted gateway keeps customers on your website for the entire checkout. That makes the experience faster, more seamless and more professional, and it puts you in control of the customer journey.

The main drawback is that you handle integrations and maintenance yourself. If something breaks, you'll need to fix it or bring in a payments professional.

API-hosted gateway

An API-hosted gateway processes payments through an API and also keeps customers on your website throughout checkout. It allows full control over the UI and design and can be integrated with mobile apps and other devices.

The main drawback is that you're responsible for security. That can mean paying more for SSL certification and ensuring PCI compliance.

What features should a payment gateway have?

With so many options, choosing a gateway can feel overwhelming. Start with these three essential features.

Merchant tools

The best gateways offer detailed reporting and analytics, so you can view every transaction, gain customer insights and spot trends. With access to customer payment data, you can see what to improve to raise customer satisfaction and revenue and lower costs.

Tokenization

Tokenization replaces sensitive payment data, like card numbers, with unique identifiers. Gateways that support tokenization mean you don't store sensitive card data in your own system. That reduces your PCI scope and liability and protects against data breaches.

Security, fraud detection and PCI DSS compliance

Not all gateways are equal on security. Cybercriminals keep evolving their methods, so your gateway should include several fraud tools:

Address Verification Service (AVS)
Card Verification Value (CVV) checks
Device identification
Payer authentication (3-D Secure)
Risk scoring

The gateway should also detect high-risk countries and flag or limit large or failed transactions.

It must be PCI DSS compliant too. PCI DSS is a set of security standards that keeps businesses that accept, process and store card data secure, and it applies to every merchant that accepts, transfers or stores cardholder data.

Traditional vs. digital payment gateways

One of the most important early decisions is whether to use a traditional or a modern digital gateway.

Traditional payment gateways

Traditional gateways take longer to set up because you first have to register for your own merchant account. That means a review process and a contract with a bank.

Do your homework: compare merchant account providers and make sure you understand every fee that comes with the account.

Digital payment gateways

Digital gateways are usually the better, more efficient option. They're much faster and more convenient to set up and don't require you to register for a merchant account. The trade-off is that they often charge higher fees per transaction.

Payment gateway vs. payment processor: what's the difference?

A gateway and a payment processor are both essential for accepting online payments, but they do different jobs:

A payment gateway is a front-end application that captures card data, sends it to the processor and communicates approvals or rejections to merchants and customers.
A payment processor executes the transaction, passing the card data from the gateway between the merchant, the issuing bank and the acquiring bank.

In short, the processor moves the money, while the gateway communicates the result. Confusion arises because some companies offer both services, though most provide only one.

Payment gateway vs. merchant account: what's the difference?

They serve two different functions. A payment gateway, as covered above, is the front-end application that captures card data and communicates approvals or rejections.

A merchant account is a bank account for businesses that want to accept electronic payments such as credit and debit cards. It's linked to the business's acquiring bank and holds payments before they're deposited into your standard bank account.

Do you still need a separate payment gateway in 2026?

Often, no. Traditionally, merchants stitched together three separate services: a gateway to capture card data, a processor to move the transaction, and a merchant account to receive funds. Each came with its own contract, fees and integration work.

Today, all-in-one payment platforms bundle the gateway, processing and merchant account into a single service. For most online businesses, that means one integration, one contract and one dashboard, with less setup time and fewer points of failure.

A standalone gateway still makes sense if you already have a merchant account you want to keep, or if you route payments across several processors and need a gateway layer that sits above them all.

What are the benefits of payment gateways?

A payment gateway gives you a fully automated way to accept online payments. With one, your business can:

Accept multiple payment methods
Process payments faster
Handle recurring payments
Give customers a seamless payment experience
Control your checkout and collect customer data to optimise revenue
Keep transactions secure and comply with standards like PCI DSS
Increase online sales and expand into new markets

Are payment gateways secure?

With data breaches and fraud on the rise, merchants are right to worry about security. The good news is that industry standards have tightened, and most reputable gateways offer several protections.

PCI compliance

The Payment Card Industry Data Security Standard (PCI DSS) is a set of standards that keeps merchants who accept, process and store card data secure. Using a PCI DSS compliant gateway is both required and one of the best ways to protect your business and customers from cybercriminals.

Encryption

Gateways use encryption to protect payments. After a customer enters their details, the data is scrambled into an unreadable format. That greatly reduces the chance of anyone reading it while it travels from the gateway to the acquiring bank.

Secure Sockets Layer (SSL)

Most gateways use the SSL protocol to transfer private data safely between a web server and a browser. It adds another layer of protection to data moving between parties.

FAQs

How much does a payment gateway cost?

It depends on the provider. In general, expect three types of fees: a setup fee, a monthly gateway fee and a processing fee per transaction.

What is a payment gateway, with an example?

A payment gateway is a front-end application on a merchant's website that captures card data, sends it to a payment processor and communicates approvals or rejections to the merchant and customer. Pay.com is one example: it's simple to set up and offers advanced features for merchants.

Do online payment gateways process international payments?

Yes, many online payment gateways process international payments. Always check conversion fees, processing fees and processing times, as they can affect both your customers' experience and your bottom line.