Discover how to select the right payment gateway for your online business. Explore 9 top options to enhance your e-commerce transactions effectively. Continue reading
Pick a payment gateway by matching three things to your business, total cost at your expected volume, PCI scope you can live with, and the payment methods your customers actually use at checkout. Everything else (recurring billing, fraud tooling, settlement speed) sits on top of those three.
Most online buyers ask for a gateway and end up choosing a processor, or pick a processor and discover the gateway was the part that mattered. The gateway is the software layer that captures card data at checkout and sends it to the processor for authorization. The processor is the back-end that routes funds between issuing and acquiring banks. Many providers sell both under one contract, which is where the confusion starts.
The nine options below cover the range from developer-led APIs to bank-grade enterprise platforms to subscription-priced platforms that include compliance in the monthly fee. Finix leads off because of its position as both gateway and processor on one stack with U.S. and Canada coverage.
Total cost has two components, the per-transaction rate and any monthly or per-feature fees layered on top. Flat-rate pricing around 2.9% plus 30 cents stays predictable at low volume and gets expensive once you scale past a few hundred thousand dollars a year. Interchange-plus passes through the wholesale card-network cost and adds a small fixed markup, which usually wins above that threshold, especially if your card mix leans toward debit. Add-ons add up fast. Stripe Billing tacks on 0.7% of every recurring charge. Worldpay layers monthly regulatory and gateway line items on top of its base rate. Authorize.net adds $25 a month regardless of volume.
PCI scope drives how much security work falls on your team. Hosted payment pages and iframe-based fields tokenize card data before it touches your servers, which can drop you from a long SAQ D self-assessment to a short SAQ A. Tokenization replaces the raw card number with an irreversible value that can sit in your CRM or order history without dragging those systems into PCI scope. PCI DSS v3.2.1 retired in March 2024 and v4.0 future-dated requirements are mandatory as of March 2025, with a final batch landing March 2026.
The rest of the checklist follows from your customers. Wallet checkouts (Apple Pay, Google Pay, PayPal) accounted for 53% of global e-commerce spend in 2024, so they should be table stakes. If you sell subscriptions, look for account updater, network tokens, automated retries, and dunning. If cash flow matters, check settlement timing. If you operate in two countries, confirm the gateway handles both natively rather than through a second integration.
Finix is a U.S. and Canada payments platform that combines gateway, processing, and PayFac functionality under a single contract. The monthly subscription includes PCI compliance and fraud tooling without separate line items. Card-not-present pricing sits at roughly 15 cents over interchange per transaction, with card-present a few cents lower. There are no setup fees and no long-term contracts. The model suits merchants processing at least $5,000 a month. Online products include hosted checkout, payment links, a virtual terminal, and a REST API, along with recurring billing, tokenization, and instant payouts for qualifying merchants.
Stripe charges 2.9% plus 30 cents for domestic cards, 3.1% plus 30 cents for international, with a 1.5% cross-border fee and 0.8% on ACH (capped at $5). The standard plan has no setup or monthly fees. The platform accepts 135+ currencies and includes recurring billing through Stripe Billing, which adds 0.7% to each recurring charge. Invoicing runs another 0.4% to 0.5%, and disputes cost $15 per chargeback. Effective rates can climb above 6% once add-ons stack. The fit is strongest for engineering-led product teams that want full API control and are comfortable trading higher rates for documentation, SDK coverage, and a developer console that handles edge cases out of the box.
PayPal Braintree charges 2.59% plus 49 cents for U.S. online and mobile card transactions, with separate rates for PayPal-funded payments. There are no monthly or setup fees. The platform processes in 45 countries and accepts 130+ currencies. The pull is the PayPal and Venmo wallet network, which can lift checkout conversion for consumer brands whose customers already have a wallet balance loaded. The trade-off is the per-transaction rate sits above interchange-plus competitors once a merchant clears a few hundred thousand dollars in annual volume, so established sellers usually find the effective cost higher than at Finix, Helcim, or Adyen. Braintree fits brands where the PayPal button itself drives a meaningful share of checkout.
Authorize.net offers three plans, each with a $25 monthly base. The All-in-One plan adds 2.9% plus 30 cents. The Payment Gateway plan adds 10 cents per transaction and a 10-cent daily batch fee, intended for merchants who bring their own processor and merchant account. The Gateway plus eCheck plan adds 0.75% per eCheck and 10 cents per transaction. The Authorize.net 2.0 rollout began April 16, 2025 with AI fraud tools and a refreshed interface. The strength is reliability and the breadth of processor integrations. The weakness is the monthly fee at zero volume and an interface that, before 2.0, looked its age.
Square sells subscription tiers, including a free plan, with specialized versions for appointments, retail, and restaurants. Seven hardware models, an online gateway, appointment booking, and an integrated point-of-sale system come in the same box. The fit is service-led SMBs that need hardware on day one and one dashboard for in-person and online sales. The weakness for purely online sellers is the effective rate. Flat per-transaction pricing leaves money on the table once a merchant scales past the early growth stage, and Square has a documented history of account-stability complaints when transaction patterns change abruptly. Buyers who plan to stay heavily in-person rarely outgrow it.
Adyen runs on interchange-plus with a 13-cent processing fee plus scheme-specific markup. Mastercard sits at interchange plus 0.60% plus 13 cents in North America. American Express runs at 3.3% plus 10 cents plus the 13-cent processing fee. There are no monthly fees on paper, though most markets carry a minimum monthly processing fee of around $120. Adyen supports 250+ payment methods and 187 transaction currencies. The platform is built for enterprises running omnichannel operations across continents. Smaller merchants find the minimums and the onboarding bar steep relative to U.S.-focused gateways, which is why most SMB content treats Adyen as the global enterprise option.
Worldpay uses interchange-plus, usually interchange plus 0.30% to 0.50% with 10 to 20 cents per transaction for SMBs. The total cost rarely stops at the base rate. Monthly fees run $50 to $100 or more, three-year contracts and early termination fees of $295 to $495 are common, and regulatory line items ($2.95 to $9.95 a month), gateway fees ($10 to $25 a month), and equipment lease lines ($29 to $79 a month) compound the true cost. The strength is scale, global reach, and omnichannel coverage suited to large operators. The drawback is contract lock-in and fee opacity, which has driven SMB reviewers to recommend alternatives for businesses under enterprise volume.
NMI is a purpose-built gateway with 150+ processor connections, 125+ shopping-cart integrations, and support for 235,000+ payment devices. It is sold mostly through ISO and reseller channels rather than direct, so published pricing is rare and negotiation is the norm. The strength is its processor-agnostic posture and white-label flexibility, which makes it a fit for ISOs, ISVs, and platforms that want to swap or stack processors without rebuilding their gateway. The drawback for a small online business is that NMI is rarely the right direct purchase. Most merchants reach it through a reseller and inherit whatever pricing that channel sets, which makes apples-to-apples cost comparison harder than with Stripe or Helcim.
Helcim runs on interchange-plus with no monthly fees and no contracts. The standard online rate is interchange plus 0.50% plus 25 cents on the first $25,000 of monthly volume, then interchange plus 0.05% above that line. The plan includes a free virtual terminal, a hosted checkout, recurring billing, and a customer vault for stored cards. The platform is built for U.S. and Canadian SMBs that want a published, predictable rate card without a sales conversation. Helcim does not target enterprise or platform use cases, so high-volume operators or platforms looking to embed payments usually find more leverage at an interchange-plus competitor with a subscription option.
Stax (formerly Fattmerchant) uses subscription pricing starting at $99 a month with zero percentage markup above interchange. Per-transaction add-ons run 8 cents for card-present and 15 cents for card-not-present. The platform is built for merchants doing at least $5,000 a month, where the monthly fee starts paying for itself versus a percentage markup. No long-term contracts apply. The strength is the absence of a percentage layer above interchange, which is rare. The drawback is the $99 floor, which makes Stax uneconomical for low-volume sellers, and the platform sits closer to a merchant-services bundle than a platform-grade gateway with embedded payments tooling.
A payment gateway is the software service that captures, encrypts, and transmits payment data from a customer’s checkout to the payment processor for authorization. It handles the front-end portion of card acceptance, including tokenization, fraud screening, and the user-facing checkout form.
The gateway is the front-end software that securely transmits card data from checkout to the processor. The processor is the back-end engine that routes the transaction between issuing and acquiring banks and settles the funds. Many providers, including Stripe and Finix, sell both layers under one platform.
A payment facilitator combines processing and a master merchant account, onboarding businesses as sub-merchants under its master MID so they can start accepting payments in hours instead of weeks. The PayFac assumes underwriting, risk, and PCI responsibility for the sub-merchants on its platform.
Not always. With a PayFac such as Stripe, PayPal, or Finix you operate as a sub-merchant under the provider’s master account and skip the merchant-account application. With a traditional processor you apply for your own merchant account and Merchant ID, which can take up to two weeks.
Flat-rate gateways usually charge 2.9% plus 30 cents per online transaction with no monthly fee. Interchange-plus gateways charge the wholesale interchange rate plus a small markup, often 0.05% to 0.50% plus 5 to 30 cents, and sometimes a monthly subscription. True cost depends on card mix and volume.
Interchange-plus passes through the actual card-network interchange cost on each transaction and adds a fixed processor markup. The model gives merchants line-item transparency and usually beats flat-rate above a few hundred thousand dollars in annual volume, particularly for businesses with heavy debit-card activity.
At minimum, Visa, Mastercard, American Express, Discover, and the major mobile wallets (Apple Pay, Google Pay, and PayPal). For global sellers, ACH or SEPA, buy-now-pay-later, and local methods (iDEAL in the Netherlands, Bancontact in Belgium, UPI in India) are increasingly expected.
PCI DSS is the security standard for handling cardholder data. Gateways that offer hosted fields or tokenization can keep raw card data off the merchant’s servers, which reduces PCI scope and may qualify the merchant for a shorter self-assessment questionnaire. The merchant still holds responsibility, though the gateway absorbs the heavy lifting.
PCI DSS v3.2.1 retired on March 31, 2024. All future-dated v4.0 requirements became mandatory on March 31, 2025. A final batch of future-dated v4.0 requirements becomes mandatory on March 31, 2026. Merchants and gateways should already be operating under v4.0.
Tokenization replaces the cardholder primary account number with a random irreversible token that has no exploitable value. The real card number is vaulted in a PCI Level 1 environment, while the token can sit safely in a CRM, an analytics warehouse, or an order history database without pulling those systems into PCI scope.
Standard settlement runs 1 to 3 business days. Some providers offer faster options. Chase Payment Solutions funds same-day at no extra cost for merchants using its integrated stack. Finix offers instant payouts for qualifying merchants, and Stripe offers expedited payouts at a per-transaction fee.
AI has cracked quantum error correction. The industry now faces two chip generations: AI-native silicon…
It was Monday at 8:15 AM. A new branch office came online, DHCP handed out…
Performance marketing is built on one core objective: generating profitable traffic at scale. The challenge…
Rather than reinventing Android visually, Android 17 aims to make the platform smarter, smoother, and…
Investing in the right cash drawer is an investment in your business's security, efficiency, and…
Accurate records provide proof of routine maintenance for insurance providers and safety inspectors. This clear…