How to Choose a Payment Gateway Provider for Your Business

On this page 8 sections

1. Types of Payment Gateway Providers: Standalone, Bundled, and Processor-Owned
2. Compatibility With Your Shopping Cart, Invoicing, and Accounting Tools
3. Payment Gateway Comparison: Pricing Models and Hidden Costs
4. Fraud Tools and Security Features to Require
5. Recurring Billing, Card Vaults, and Data Portability
6. Small Business vs. Growing Business Gateway Needs
7. Gateway Provider Comparison Checklist
8. Next Steps

Key takeaways

• The gateway type (standalone, bundled or processor-owned) determines how easily you can change processors later.
• Confirm cart, invoicing and accounting integrations before you compare price, because a cheap gateway that doesn't connect costs more in labor.
• Ask in writing who owns your stored card data and how it can be migrated, especially if you bill on a recurring basis.
• Compare total monthly cost, including add-ons for fraud tools, recurring billing and card updating, not just the per-transaction fee.

Choosing among payment gateway providers is one of the few payment decisions that is hard to undo. Your gateway connects your website, invoices and virtual terminal to the card networks. Over time it also stores your customers' card data and runs your recurring billing. This guide shows you how to compare gateways on five things that matter: cart compatibility, processor portability, fees, recurring billing and fraud tools. The goal is a gateway you won't outgrow in two years.

If you need a refresher on the basics first, start with our explainer on how a payment gateway gets online payments approved.

Types of Payment Gateway Providers: Standalone, Bundled, and Processor-Owned

A gateway is not the same as a processor. The gateway securely captures and transmits card data. The processor and acquiring bank move the money. Our breakdown of payment gateway vs. payment processor roles covers the handoffs in detail. For buying purposes, gateway providers fall into three broad groups.

Standalone Gateways

These are independent gateways that connect to many processors. Authorize.Net and NMI are common examples. Because the gateway is separate from the processor, you can often change your merchant account without rebuilding your checkout or re-collecting stored cards. Confirm that your current gateway supports the new processor before you switch.

Bundled Gateways

Many merchant services providers sell a standalone gateway together with the merchant account. You get one point of contact and one application. You also keep much of the flexibility of a standalone gateway. Ask whether the gateway account is in your business's name and whether it can stay active if you change processors.

Processor-Owned and All-in-One Platforms

Some platforms combine the gateway, processing and often an aggregated account in a single product. Setup is usually fast, which suits new businesses. The trade-off is that the pieces generally aren't separable. Leaving often means moving your checkout, your reporting and your stored card data all at once. If you're weighing this route, read merchant account vs. payment aggregator first.

Compatibility With Your Shopping Cart, Invoicing, and Accounting Tools

An ecommerce payment gateway that doesn't plug cleanly into your existing tools creates manual work: re-keying orders, reconciling deposits by hand, or paying a developer to maintain a custom connection. Check compatibility before you compare prices.

Shopping cart. Confirm a supported, maintained plugin or integration for your platform, such as Shopify, WooCommerce, BigCommerce, Magento, OpenCart, Ecwid, Volusion or Zen Cart. "Supported" should mean the gateway or cart vendor keeps it updated. A community plugin that breaks on the next cart update doesn't count.

Checkout method. Ask whether the gateway offers a hosted payment page or embedded fields, where card data goes straight to the gateway. These options can reduce how much of your environment falls under PCI DSS. A fully custom checkout that touches raw card data increases your compliance burden. Confirm scope with your provider and your PCI assessor.

Invoicing and keyed payments. Professional services firms and B2B sellers often collect payment by invoice, email link or phone. Look for a virtual terminal for keyed and phone orders, plus invoice or payment-link tools. Our guide to accepting credit card payments over the phone covers the security steps for that channel.

Accounting and CRM. If you use QuickBooks or Salesforce, ask how payments sync. Do they sync per transaction or per batch? Do they sync automatically? How are refunds and fees recorded?

B2B data fields. Wholesale and B2B sellers should ask whether the gateway can pass enhanced transaction data, often called Level 2 and Level 3 data, on business and purchasing cards. Depending on the card and transaction, this data may qualify for lower interchange categories. Eligibility rules change, so confirm current requirements with your provider.

Payment Gateway Comparison: Pricing Models and Hidden Costs

Gateway fees sit on top of your card processing costs, which are a separate decision. For that side of the bill, see our comparison of interchange-plus, flat-rate and tiered pricing.

Gateway pricing usually comes in one of these forms:

• Monthly fee plus per-transaction fee. This is common with standalone and bundled gateways. Predictable, but the per-transaction fee adds up at high volume or with small tickets.
• Bundled into the processing rate. This is common with all-in-one platforms. You see no separate gateway line, but the cost is built into what you pay per sale.
• One-time setup fee. Some providers charge one and some don't. Ask.
• Add-on modules. These include fraud filters, recurring billing, customer vaults, automatic card updating, invoicing and extra users. Each may carry its own monthly or per-use fee.

How to Compare Total Cost

Build a simple monthly estimate for each provider using your own numbers:

1. Monthly gateway fee
2. Per-transaction fee × your monthly transaction count (include declines and refunds if they're billed)
3. Monthly cost of every add-on you'll actually use
4. Any annual, PCI or batch fees tied to the gateway

Illustrative example only, not real pricing: A subscription business running 2,000 transactions a month may find that a gateway with a higher monthly fee but lower per-transaction fee costs less overall than a "cheap" plan. A shop running 100 transactions a month may see the opposite. Run the math on your own volume.

Ask for gateway fees in writing, and ask what happens to pricing at renewal.

Fraud Tools and Security Features to Require

Card-not-present sales carry more fraud and chargeback exposure than in-person sales. Card-not-present fees, fraud and rules explains why. Your gateway is where most of your fraud controls live.

Baseline Tools Every Gateway Should Offer

• Address Verification Service (AVS) and CVV checks, with settings you can adjust
• 3-D Secure authentication for higher-risk orders. See how 3D Secure authentication works for online sellers.
• Velocity limits on attempts per card, IP address or email in a set time window
• Blocklists for known bad cards, emails, IPs and countries
• Tokenization, so your systems store a token instead of the card number

Features Growing Businesses Should Ask About

• Rules-based or scored fraud filtering with a manual review queue
• Card-testing protection on checkout and donation-style forms
• Detailed decline reason codes and reporting
• Support for network tokens, which can help keep stored credentials current

Tight filters stop fraud but can also turn away good customers. Ask whether you can tune each rule, and review why good customers get falsely declined before you lock settings down.

Recurring Billing, Card Vaults, and Data Portability

For subscription, membership and retainer businesses, this section often matters more than price.

Recurring Billing Capabilities

Check whether the gateway supports the billing patterns you actually use:

• Fixed and variable amounts, trials, setup fees and prorations
• Changing plans or billing dates without re-entering the card
• Automatic retries on failed payments, with configurable timing
• Customer notifications for upcoming charges and expiring cards
• Card updater services and network tokenization, which can help reduce failed renewals. See how network tokenization supports renewals.

If the gateway's built-in tools are thin, you may pair it with separate software. Our guide to choosing recurring billing software walks through that decision. Our article on dunning management for failed subscription payments covers recovery workflows.

Who Owns Your Card Vault?

Stored card tokens generally work only with the gateway that issued them. If you leave, you can't simply export tokens and import them elsewhere. Moving stored cards usually requires the old provider to transfer the underlying card data securely to the new provider through a PCI-compliant process.

Ask every provider, and get the answers in writing:

1. Will you release stored card data to a new PCI-compliant provider if we leave?
2. How long does the transfer take, and is there a fee?
3. Can you import our existing vault if we come to you?
4. Do recurring schedules and customer records transfer, or only card data?

A gateway that won't commit to an exit process can lock you in. You may end up asking your entire customer base to re-enter their cards.

Small Business vs. Growing Business Gateway Needs

There is no single best payment gateway. The right choice depends on where your business is now and where it's going.

A payment gateway for small business should be easy to launch. It also shouldn't block the next stage. If you expect to add subscriptions, wholesale accounts or a second storefront, choose for that stage now. Migrating payment data later is usually harder than starting with a flexible setup.

Gateway Provider Comparison Checklist

Use this list when you request quotes. Mark each provider yes, no or "needs follow-up."

Compatibility - Maintained integration for our cart platform - Hosted or embedded payment fields to help limit PCI scope - Virtual terminal, invoicing and payment links - Accounting and CRM sync that fits how we reconcile - Enhanced B2B data support, if we sell to businesses

Portability - Gateway works with multiple processors - Gateway account in our business's name - Written card-vault migration terms, both in and out

Pricing - All gateway fees listed in writing, including add-ons - Total monthly cost estimated on our real volume - Renewal and cancellation terms reviewed

Fraud and Security - AVS, CVV, velocity limits, blocklists and 3-D Secure - Adjustable rules and a review queue - Tokenization and card-testing protection

Recurring Billing - Supports our plan structures and billing changes - Automatic retries and customer notifications - Card updater and network token support

Support - How to reach a person, during which hours, and how fast they respond - Who handles gateway issues versus processor issues

Next Steps

Start with compatibility and portability, then compare cost and features among the providers that pass. That order keeps a low headline fee from steering you into a gateway you'll have to leave later.

MannyPay offers payment gateways and integrations including Authorize.Net, NMI, Shopify, WooCommerce, BigCommerce, Magento, QuickBooks and Salesforce. These connect to merchant accounts for online and e-commerce payments. Pricing, features and approval depend on your business and underwriting. To see how a gateway would fit your cart, billing model and volume, request a free quote. A MannyPay specialist responds within one business day.

ME

About the author

MannyPay Editorial Team

Beyond the Swipe's editorial desk researches the publication's guides and news and cites its sources in every article. Articles reviewed by a named MannyPay editor carry that editor's byline.

This article is for general educational purposes and is not legal, tax or financial advice. Card network rules and state laws change; confirm current requirements for your business.