Exclusive Rates From as Low as 0.26%
A payment gateway is the technology that securely captures a customer's card or bank details during an online, telephone, or in-app transaction and passes them, encrypted, to the acquiring bank and card networks for authorisation. For UK businesses, it is the essential link between your website or virtual terminal and the banking infrastructure that actually moves the money, sitting alongside (but distinct from) your merchant account and payment processor. Understanding how these pieces fit together is the first step to choosing the right setup and avoiding overpaying for card acceptance.
Key Takeaways
- A payment gateway encrypts and transmits card data; it does not hold your money - that is the job of your merchant account.
- Most UK gateways charge either a per-transaction fee (typically 10p-25p) or a monthly platform fee, sometimes both.
- Popular UK gateway providers include Opayo (formerly Sage Pay), Stripe, Worldpay, Braintree, and Checkout.com.
- Hosted gateways are quicker to set up and reduce PCI DSS burden; self-hosted and API-based gateways offer more control over checkout design.
- Gateways are essential for card-not-present transactions - ecommerce, MOTO, and subscription billing - and increasingly integrate in-person payments too.
- All UK gateways must support 3D Secure 2 for Strong Customer Authentication (SCA) compliance under UK payment services regulations.
- Choosing the right gateway and merchant account combination can meaningfully reduce your total cost of card acceptance - which is exactly what Compare Card Fees helps UK businesses do for free.
What Does a Payment Gateway Actually Do?
When a customer enters their card details on your website or over the phone, several things need to happen in seconds: the data must be captured securely, checked for fraud, authorised by the card issuer, and confirmed back to your checkout page. A payment gateway handles this entire round trip. It is often described as the "digital card machine" for transactions where the physical card is not present.
In practical terms, the gateway:
- Encrypts sensitive card data the moment it is entered, so it never travels across the internet in plain text.
- Routes the transaction to your acquiring bank or payment processor for authorisation.
- Applies fraud screening tools, such as address verification (AVS) and 3D Secure 2 checks.
- Returns an approval or decline message to your website in real time, usually within one to two seconds.
- Passes settlement instructions onward so funds eventually reach your merchant account and, from there, your business bank account.
Crucially, the gateway itself does not hold or settle funds. That distinction trips up a lot of business owners, so it is worth unpacking properly.
Payment Gateway vs Merchant Account vs Payment Processor
These three terms get used interchangeably, but they describe different functions in the payment chain. Getting this right matters because some providers bundle all three together (like Stripe or Square), while others require you to arrange them separately (like a traditional bank merchant account paired with a standalone gateway such as Opayo).
| Component | What It Does | Example UK Providers |
|---|---|---|
| Payment Gateway | Captures and encrypts card data, routes it for authorisation, returns approve/decline result | Opayo, Stripe, Braintree, Checkout.com |
| Merchant Account | A specialised bank account that temporarily holds card transaction funds before they settle to your business account | Elavon, Worldpay, Barclaycard, Lloyds Cardnet |
| Payment Processor / Acquirer | The infrastructure that communicates with card networks (Visa, Mastercard) and banks to authorise and settle payments | Worldpay, Global Payments, Fiserv, Elavon |
Some all-in-one providers, such as Stripe, Square, and SumUp, combine the gateway, processor, and merchant account into a single package with one set of fees. Others, particularly larger or higher-turnover businesses, still separate their gateway from their acquiring bank to negotiate better rates on each element independently. For a deeper look at how these pieces interact, see our guide on ecommerce payment gateways UK.
Types of Payment Gateways Available to UK Businesses
Hosted Gateways
With a hosted gateway, your customer is redirected away from your website (or shown a pop-up overlay) to enter their card details on a page hosted and secured by the gateway provider. This is the simplest option for smaller businesses because the provider takes on most of the PCI DSS compliance burden. Opayo's Hosted Payment Pages and PayPal Checkout are common examples used by UK small businesses and charities.
Self-Hosted (Direct Post) Gateways
Here, the checkout form lives on your own website, but the actual card data submission is sent directly to the gateway's servers behind the scenes. This gives you full control over branding and checkout flow, at the cost of a slightly higher PCI DSS compliance requirement (typically SAQ A-EP rather than SAQ A).
API-Integrated Gateways
API gateways, such as Stripe's Payment Intents API or Braintree's SDK, let developers build a completely custom, seamless checkout experience embedded within the website or app itself. This is the preferred route for larger ecommerce businesses, marketplaces, and SaaS platforms that want full control over user experience and conversion optimisation. It requires more development resource but offers the smoothest customer journey. For a full breakdown of which model suits which business, read our comparison of hosted vs self-hosted payment gateways.
Virtual Terminals for Phone and Mail Order
Many gateways also offer a virtual terminal - essentially a secure web form your staff use to key in card details taken over the phone or by post. This is central to MOTO (Mail Order/Telephone Order) payment acceptance, which remains common among UK businesses in sectors like hospitality, home services, and B2B sales. See our dedicated guide to MOTO payments UK for more detail on compliance and setup.
How Much Does a Payment Gateway Cost in the UK?
Gateway pricing in the UK typically follows one of a few models, and it is easy for the cost to hide inside a wider "total processing fee" quoted by a provider. It is worth separating the gateway fee from the interchange, scheme, and acquirer margin that make up the rest of your card processing costs.
| Pricing Model | Typical UK Cost | Best Suited To |
|---|---|---|
| Per-transaction fee | 10p - 25p per transaction | Businesses with moderate, steady transaction volumes |
| Monthly platform/licence fee | £15 - £40 per month | Businesses wanting predictable fixed costs |
| Percentage-based (bundled) | 1.4% - 2.9% + 20p per transaction (all-in) | Startups and small businesses using all-in-one platforms like Stripe or Square |
| Enterprise/negotiated rate | Custom, volume-discounted | High-turnover businesses processing significant monthly card volumes |
All-in-one providers such as Stripe and Square wrap the gateway fee into a single headline percentage, which is simple but often more expensive at scale. Businesses processing more than roughly £10,000-£15,000 a month in card payments frequently save money by separating a standalone gateway (charged per transaction) from a merchant account priced on interchange-plus terms. This is precisely the kind of comparison Compare Card Fees carries out for free.
Security and Compliance: What Every UK Business Needs to Know
Because a payment gateway handles cardholder data, it sits at the centre of your PCI DSS (Payment Card Industry Data Security Standard) obligations. Choosing a reputable, PCI DSS Level 1 compliant gateway significantly reduces your own compliance workload, but it does not remove it entirely - you are still responsible for how you handle receipts, refunds, and any card data that touches your systems.
3D Secure 2 and Strong Customer Authentication
Under UK payment services regulations (aligned with the EU's PSD2 framework prior to Brexit and retained in UK law), most online card transactions require Strong Customer Authentication. In practice, this means your gateway must support 3D Secure 2, which prompts customers to verify their identity via a banking app, SMS code, or biometric check during checkout. A gateway without robust 3D Secure 2 support can see higher decline rates and increased fraud liability.
Data Encryption and Tokenisation
Reputable gateways use tokenisation, replacing sensitive card numbers with a unique token for recurring billing or refunds, so your business never needs to store raw card data. This is particularly important for subscription businesses, membership organisations, and any company taking repeat payments. For more on evaluating gateway security credentials, see our guide to secure payment gateways.
Choosing the Right Payment Gateway for Your Business
There is no single "best" gateway - the right choice depends on your sales channels, technical resources, transaction volumes, and existing systems. Consider the following before committing to a provider or contract term.
Sales Channel Fit
A business selling exclusively through Shopify has very different needs from one taking phone orders for bespoke furniture or a subscription software company billing customers monthly. Match the gateway's strengths - ecommerce plugins, virtual terminals, recurring billing tools - to how you actually take payments.
Integration With Existing Systems
Check compatibility with your website platform (WooCommerce, Shopify, Magento), accounting software (Xero, QuickBooks), and any EPOS or booking system you already use. Poor integration often causes more operational headaches than the headline fee ever does. Our guide to payment gateway integrations covers this in more depth.
Contract Terms and Exit Costs
Some gateways lock businesses into 12- or 18-month minimum terms with early termination fees running into hundreds of pounds. Always check notice periods, PCI DSS non-compliance fees, and whether monthly minimums apply even in quiet trading periods.
Settlement Speed
Settlement times to your business bank account vary from next-day to three business days depending on the provider and your merchant account arrangement. For businesses managing tight cash flow, this can matter as much as the headline transaction fee.
For a side-by-side look at how the major UK options stack up across these factors, see our full comparison of the best payment gateways UK businesses currently use.
Common Mistakes UK Businesses Make With Payment Gateways
- Focusing only on the headline percentage rate and ignoring monthly fees, authorisation fees, refund fees, and cross-border charges that add up quickly.
- Choosing an all-in-one provider by default without checking whether a separate gateway and merchant account would be cheaper at their volume.
- Overlooking 3D Secure 2 configuration, which can lead to unnecessarily high decline rates if not tuned correctly for the business's risk profile.
- Signing long contracts without exit clauses, only to find switching costs prohibitive when a better rate becomes available elsewhere.
- Not reviewing rates annually - card processing costs are negotiable, and rates agreed several years ago are rarely still competitive.
Frequently Asked Questions
Is a payment gateway the same as a merchant account?
No. A payment gateway is the technology that captures and transmits card data securely, while a merchant account is the bank account that temporarily holds transaction funds before they settle into your business bank account. Some providers, like Stripe and Square, bundle both together, while others require you to arrange them separately.
Do small UK businesses need a payment gateway?
Any UK business taking online, phone, or mail order payments needs a payment gateway, as it is the only way to securely capture and process card details when the physical card is not present. Even very small businesses can access affordable, PCI-compliant gateways through providers like Stripe, Opayo, or PayPal, often with no monthly minimum.
How much does a payment gateway typically cost in the UK?
Standalone gateway fees usually range from 10p to 25p per transaction, plus a monthly fee of £15-£40, while all-in-one providers charge a bundled percentage of around 1.4%-2.9% plus a small fixed fee per transaction. The cheapest option depends heavily on your monthly transaction volume and average order value.
Can I use one payment gateway for both online and telephone payments?
Yes, most modern UK gateways support both ecommerce checkout integration and a virtual terminal for keying in MOTO (Mail Order/Telephone Order) payments from a single account. This is often more cost-effective and easier to manage than running separate systems for each channel.
What is 3D Secure and why does my gateway need it?
3D Secure 2 is an authentication step that verifies a customer's identity during online checkout, typically via a banking app prompt, and is required for Strong Customer Authentication compliance in the UK. Gateways without properly configured 3D Secure 2 can experience higher fraud exposure and unnecessarily high transaction decline rates.
How long does it take to set up a payment gateway?
A hosted gateway from providers like Stripe or Opayo can often be live within a few days, sometimes even hours, for straightforward ecommerce use cases. Self-hosted or fully custom API integrations, or setups requiring a separate merchant account application, can take one to three weeks depending on underwriting and development work required.
Can I switch payment gateways without disrupting my business?
Yes, switching is usually straightforward if planned properly, particularly for businesses using a separate gateway and merchant account rather than a fully bundled all-in-one provider. Most switches involve updating API keys or checkout integration and can be timed to avoid disrupting live sales, though it is worth checking any early termination fees on your current contract first.
How Compare Card Fees Can Help
Compare Card Fees is a free, independent advisory service. We compare rates from leading UK payment providers to find you the best deal available - no fee, no obligation.
Whether you are looking to reduce your card processing costs, switch provider, or understand what you are currently paying, our experts can help. Tell us about your business and we will find the best rates available.
