Updated September 2026
Every online sale relies on a few seconds of invisible work: your checkout collects card or wallet details, a payment gateway passes them on securely, and a chain of banks and card networks decides whether to approve the charge. When that chain works, customers barely notice it; when it doesn’t, you lose sales to declines, fees, fraud and chargebacks. This guide explains how payment gateways work in 2026, what they cost, and how to choose the right setup for a store selling to the US, UK, EU or the UAE.
Key takeaways
- A payment gateway securely passes payment data from your checkout to a processor, which routes it through the acquirer and card network to the customer’s bank for approval.
- Compare the total cost of accepting payments, not the headline rate: platform fees, cross-border surcharges, dispute fees and declines all add up.
- Digital wallets are now the leading way people pay online, so Apple Pay, Google Pay and PayPal belong next to cards at checkout.
- Buy now, pay later (BNPL) is regulated in more markets: the UK started regulating it on 15 July 2026, and the UAE allows only licensed firms to offer it.
- PCI DSS v4.0.1 is the only active version of the card security standard, and Visa’s stricter dispute thresholds took effect in April 2026.
What is a payment gateway?
A payment gateway is the technology that securely transmits payment information between your customer, your store and the payment processor. As Stripe puts it, the gateway encrypts and transmits payment data, while the processor authorizes the transaction, communicates with the banks and settles the funds.
Most merchants now buy these pieces as one service: Shopify Payments, Stripe, PayPal, Adyen and Checkout.com bundle the gateway with processing. The separate roles still matter, because each one affects approval rates, fees and disputes. If you are still at the setup stage, our step-by-step guide to starting an eCommerce business shows where payments fit in.
Who is involved in an online card payment
Stripe’s overview of transaction processing describes five players and a simple sequence:
- Gateway: encrypts the card or wallet details from your checkout and forwards them.
- Processor: manages the transaction and communicates with the card networks.
- Acquirer: your bank-side partner, which holds the merchant account and handles authorization, clearing and settlement.
- Card network: Visa, Mastercard and others connect acquirers with issuers and set the rules.
- Issuer: the customer’s bank, which approves or declines the payment.
- Authentication (where needed): the issuer may confirm the real cardholder is paying, usually through 3-D Secure.
- Authorization: the request travels through the acquirer and card network to the issuer, and the approval or decline comes back to your checkout.
- Clearing and settlement: the issuer transfers the amount, minus fees, to the acquirer, which pays it into your business account.
Integration options range from hosted payment pages and embedded secure fields, which keep card data off your systems, to direct APIs, pay-by-link and virtual terminals, as N-Genius Online’s list shows.
Payment gateway fees and pricing models
Providers usually charge a flat or blended rate (one percentage plus a fixed fee, easy to forecast), interchange++ (actual card scheme costs plus the provider’s markup, more transparent and often cheaper at volume), or custom pricing for larger merchants. Here are published list prices as of September 2026 for US businesses and domestic cards; rates vary by country and plan, so check the page for your market.
| Provider | Published online card pricing | Worth knowing |
|---|---|---|
| Shopify Payments | Basic 2.9% + 30¢, Grow 2.7% + 30¢, Advanced 2.5% + 30¢, Plus 2.25% + 30¢ (Shopify pricing) | Using a third-party gateway on Shopify adds 2%, 1%, 0.6% or 0.2% per transaction, depending on plan. |
| Stripe | 2.9% + 30¢ (Stripe pricing) | Plus 1.5% for international cards, 1% if currency conversion is needed, and $15 per dispute received. |
| PayPal | PayPal Checkout 3.49%, card payments 2.99%, Pay Later 4.99%, each plus $0.49 (PayPal fees) | An extra 1.5% applies to international transactions. |
| Adyen | $0.13 per transaction plus a payment method fee; interchange++ pricing for major card schemes (Adyen pricing) | No setup or monthly fees, but a minimum invoice that depends on industry or business model. |
| Checkout.com | Custom quote, flat-rate or interchange++ (Checkout.com pricing) | Priced on business profile and risk category; no setup or account maintenance fees. |
The cheapest rate is not always the most profitable. Baymard Institute puts the average documented cart abandonment rate at 70.22%. Among shoppers who abandoned a checkout (excluding those “just browsing”), 19% didn’t trust the site with their card details and 9% said there weren’t enough payment methods.
How to choose a payment gateway for your online store
- Where you and your customers are. Providers only onboard businesses in supported countries, and shoppers expect different methods in different markets, such as Klarna in parts of Europe or Tabby and Tamara in the Gulf.
- Platform fit. On Shopify, Shopify Payments avoids the third-party fee and switches on Shop Pay. On WooCommerce, Magento or a custom build, compare plugins and APIs from Stripe, Adyen, Checkout.com and regional gateways.
- Total cost. Add processing, platform fees, cross-border and currency charges, dispute fees and revenue lost to false declines.
- Approval rates. Ask how the provider performs for your card mix and whether it uses network tokens.
- Fraud tools. Look for built-in screening (Stripe includes AI-based fraud prevention for card payments on standard pricing), 3-D Secure support and a clear dispute workflow.
- Payouts and support. Check payout currency, timing and reserves, and make sure you can reach a person if payouts are paused.
As a rule of thumb, Shopify Payments suits most Shopify stores, Stripe suits custom builds, PayPal adds its wallet, Venmo (US) and Pay Later, and Adyen or Checkout.com suit high-volume, multi-market brands. Our Shopify store design and development team can set up payments, checkout and tracking together, so you can see which options actually convert.
Digital wallets: Apple Pay, Google Pay, PayPal and Shop Pay
Worldpay’s Global Payments Report 2026 found that digital wallets accounted for 56% of global online spending in 2025, making them the world’s leading payment method. In card-led markets such as the US and UK, wallets are mostly funded by cards; they just make paying faster.
Wallets also replace the real card number with a token, which helps approvals and security. Visa reports that 50% of all e-commerce transactions are now tokenized, that tokenized transactions had a 4.8% higher authorization rate than those using the card number in 2025, and that tokenized credentials show a 39.4% lower fraud rate. Enable Apple Pay and Google Pay, show express buttons on the cart as well as at checkout, and test on both iPhone and Android.
Buy now, pay later (BNPL)
BNPL lets shoppers pay in installments while you are paid upfront, for a higher fee; PayPal’s US list price for Pay Later is 4.99% plus a fixed fee. On Shopify, Shop Pay Installments is provided by Affirm for businesses in the US, Canada and the UK, and Klarna is available through Shopify Payments in 25 European countries.
Regulation is catching up. The UK’s Financial Conduct Authority began regulating BNPL on 15 July 2026, requiring lenders to be authorized, lend affordably and support customers in financial difficulty. In the UAE, the Central Bank’s 2023 Finance Companies Regulation treats BNPL as short-term credit that only licensed firms may offer, capped at AED 20,000 or three months of verified income, whichever is lower. Test BNPL where your prices make installments meaningful, and check whether it lifts conversion and order value or just moves buyers to a costlier method.
Fraud prevention, 3-D Secure and SCA
3-D Secure (3DS) lets the issuer confirm that the real cardholder is paying. With 3DS2, many payments are approved silently using device and transaction data (the frictionless flow), and only riskier ones are challenged. According to Stripe, authenticated payments benefit from a fraud liability shift even when they go through the frictionless flow.
In the EEA and UK, Strong Customer Authentication (SCA) makes authentication the default for most online card payments. Exemptions cover payments under €30 (£25), low-risk payments approved through transaction risk analysis, and merchant-initiated payments such as subscriptions, but an exempted payment loses the liability shift. EU rules are also moving: in November 2025 the Council and Parliament provisionally agreed a new Payment Services Regulation and PSD3, including tougher anti-fraud measures and a requirement that merchant trading names match customers’ statements. Final adoption was still pending at the time, so check current dates before planning around them.
Outside Europe, 3DS is generally optional; use it selectively on risky orders alongside your gateway’s fraud screening.
PCI DSS v4.0.1: where things stand in 2026
PCI DSS applies to every business that accepts cards. The PCI Security Standards Council retired v4.0 on 31 December 2024, leaving v4.0.1 as the only active version, and the “future-dated” requirements became effective on 31 March 2025. In January 2025 the Council also removed requirements 6.4.3 and 11.6.1 from SAQ A (the short questionnaire for merchants that fully outsource card entry) and replaced them with a new criterion: merchants must confirm their site is not susceptible to script attacks that could affect their e-commerce systems.
Hosted platforms carry much of the load. Shopify is certified PCI DSS Level 1, and that certification extends by default to stores on its platform. Keep your side tidy anyway: limit third-party scripts and apps, and never collect card numbers by email, chat or phone notes.
Chargebacks and dispute management
A chargeback happens when a customer disputes a charge with their bank. You lose the sale, usually pay a fee, and a high dispute rate puts your merchant account at risk. The Visa Acquirer Monitoring Program (VAMP) took effect on 1 April 2025, consolidating Visa’s earlier fraud and dispute programs. It combines reported fraud and disputes as a share of card-not-present transactions, and from 1 April 2026 the “excessive” merchant threshold fell from 2.2% to 1.5% in most regions, including the US, Canada and the EU.
- Use a billing descriptor that matches your store name.
- Send confirmations, shipping updates and tracking links automatically.
- Make returns and refunds easy; a fast refund is cheaper than a chargeback.
- Keep evidence such as delivery confirmation, IP address, device data and messages. For Visa “friendly fraud” disputes, Compelling Evidence 3.0 (since April 2023) can shift liability back to the issuer if you show two earlier undisputed transactions, 120 to 365 days old, with matching data such as IP address or device ID.
Our guide to e-commerce conversion tracking explains how to track checkout steps and refunds so payment problems show up early.
Accepting payments in the UAE
- Shopify Payments is available in the UAE for online selling, with Visa, Mastercard, Maestro, Apple Pay, Google Pay and Shop Pay, but not for in-person POS payments.
- Stripe launched in the UAE in April 2021, and Checkout.com became the first global payments platform with a UAE Central Bank acquiring license in 2023.
- N-Genius Online supports international cards, the domestic card scheme Jaywan, the Aani instant payments network, Apple Pay and Google Pay, with plugins for Shopify, WooCommerce and Magento.
- Tabby (UAE and Saudi Arabia) and Tamara (Saudi Arabia, UAE, Kuwait and Bahrain) both offer Shopify integrations; Tamara states its UAE entity is licensed and regulated by the Central Bank of the UAE.
Local rails are growing fast. The National reported in August 2026 that Aani had about 12.5 million users and 750,000 merchants, and that Jaywan is accepted on e-commerce platforms as well as in stores. For UAE-based brands selling mainly to the US, UK or EU, the key questions are which provider will onboard your entity, which currencies you can settle in, and whether you can offer the wallets and BNPL options your target market expects.
Frequently asked questions
What is the difference between a payment gateway and a payment processor?
The gateway securely captures and transmits payment details from your checkout; the processor handles authorization with the card networks and banks and moves the money. Most modern providers bundle both.
How much does a payment gateway cost?
For a small US store, published domestic card rates start at 2.9% plus 30 cents with Stripe or Shopify Payments Basic, plus extra charges for international cards, currency conversion and disputes.
Do I still need to think about PCI compliance on Shopify or Stripe?
Yes, but the workload is light when card data never touches your systems. Control the apps and scripts you add and how staff handle customer data.
Is 3-D Secure mandatory?
In the EEA and UK, SCA makes authentication the default for most online card payments. Elsewhere it is generally optional, but using it on riskier orders can cut fraud and shift fraud liability to the issuer.
Your payment setup is part of your conversion rate. For help choosing a gateway, streamlining checkout or connecting payments to your analytics, talk to our Shopify store design and development team. Start with a free digital audit, and we’ll review your checkout, payment methods and tracking and show you what to fix first.