The short answer
Pick how you will process cards: your own merchant account through a processor, or a payment facilitator such as Square or Stripe that signs you up under its master account. Then choose your channels: a reader or Tap to Pay in person, checkout online, invoices or payment links remotely. Follow PCI DSS, and compare the cost on effective rate.
Do You Need a Merchant Account or a Payment Facilitator?
Either works. With a payment facilitator, "the payfac effectively 'rents out' merchant account functionality under its larger master merchant account," which is why Square or Stripe can approve a new business in minutes and charge one flat rate.
A traditional processor gives the business its own merchant account, which "can take time and often involves a detailed application process and credit checks," but opens up interchange-plus pricing as volume grows. The difference is explained in what is a merchant account.
How Do You Take Cards in Person?
With a card reader or terminal at the counter, or with the phone itself. Square says Tap to Pay on iPhone lets you "accept contactless payments anywhere on-the-go with just your iPhone," on an iPhone XS or newer. Note the limits: "offline payments are not supported with Tap to Pay on iPhone." More in Tap to Pay for small business.
How Do You Take Payments Online, by Invoice or by Link?
Without building a website checkout, if you want. Stripe notes that "invoicing and Payment Links are two ways you can start using Stripe to accept payments without writing any code," and that a payment link can be shared "on social media, in emails, or on your website." Square offers the same tools. For a full online store, the checkout runs through a payment gateway; see what is a payment gateway.
What Is PCI DSS, and What Does a Small Business Have to Do?
PCI DSS is the card industry's security standard. The PCI Security Standards Council says it "provides a baseline of technical and operational requirements designed to protect payment account data."
For a small business the basics are simple: use a provider that keeps card numbers off your own systems, complete the PCI validation your provider asks for, and change default passwords. The Council warns that "the use of weak and default passwords is one of the leading causes of payment data breaches for businesses."
What Do You Need to Apply?
Identity and business details. Square tells applicants that "federal law and banking industry regulations require that all financial institutions verify and record information that identifies each person who opens an account." For a sole proprietor, that includes a Social Security number or ITIN and a date of birth.
How Much Does It Cost to Accept Credit Cards?
On flat-rate plans, about 2.4% to 2.7% plus a fixed fee in person and more online; Stripe charges 2.9% + 30¢ for domestic online cards. Benchmarks are in average credit card processing fees.
BatchOut sets up all of it, matched to how the business takes money, with hardware free for qualifying volume, leased or bought. See the setup for your business type.
Commonly Asked Questions
What is the easiest way for a small business to accept credit cards?
A payment facilitator such as Square or Stripe, which signs the business up under its own master merchant account and charges a flat rate, with no separate merchant account application.
Can I accept credit cards without a card reader?
Yes. Tap to Pay on iPhone or Android takes contactless payments on the phone, and invoices and payment links take payments remotely.
Do small businesses have to be PCI compliant?
Yes. PCI DSS applies to any business that accepts cards. Using a provider that keeps card data off your systems and completing the validation it asks for is the starting point.
What information do I need to start accepting cards?
Identity details for each owner, such as a Social Security number or ITIN and date of birth, plus business details. Financial institutions are required to verify the identity of each person who opens an account.
Sources
- Stripe: Payment processor vs payment facilitator
- Square Support: Get started with Tap to Pay on iPhone
- Stripe Docs: Payment Links
- Stripe: Pricing
- PCI Security Standards Council: PCI DSS
- PCI Security Standards Council: Merchant resources
- Square Support: Onboard your sole proprietorship
- Square Support: Identity verification
Keep reading
