What is an ecommerce payment gateway?

An ecommerce payment gateway is the technology that securely passes transaction information between your online checkout, the relevant payment processor and the acquiring bank. It helps your website request authorisation when a customer pays by card or another supported payment method.

The gateway is only one part of the arrangement. Most ecommerce businesses also need an acquiring or merchant account relationship through which transactions are processed and settled. Your checkout, gateway and acquiring setup must be compatible with each other.

This distinction matters because a gateway may offer an attractive interface while the acquiring partner determines whether your business can be approved, what sectors are supported, how funds settle and whether a rolling reserve or other risk controls apply.

Gateway, merchant account and payment processor: what is the difference?

Payment gateway: connects your website or checkout to the payment-processing infrastructure. It can support functions such as tokenisation, fraud screening, recurring payments and reporting.

Merchant account or acquiring relationship: enables card transactions to be accepted and funds to be settled to your business bank account, subject to underwriting and risk terms.

Payment processor: handles transaction messaging between the gateway, card networks, acquiring bank and card issuer. Some providers combine gateway, processing and acquiring into one commercial package; others allow the components to be selected separately.

A bundled solution can be convenient. A separate gateway and acquirer may offer more flexibility, particularly where a business needs specialist underwriting, multiple acquiring routes or more control over its checkout.

Start with your business model—not a provider name

The most suitable gateway depends on how your business actually takes payments. Before comparing providers, define your products or services, average transaction value, expected monthly volume, refund pattern, delivery times, countries served and whether payments are one-off or recurring.

Providers assess these factors during underwriting. A gateway suitable for a straightforward UK retailer may not support supplements, travel, subscriptions, digital services, online pharmacies, adult businesses or another sector with a different risk profile.

Matching the provider to the business model at the outset can reduce wasted applications and avoid building a checkout around a gateway that the eventual acquirer cannot support.

Check website-platform compatibility before applying

Your platform can materially narrow the available options. Confirm the technical integration before accepting commercial terms.

• WooCommerce: offers broad flexibility through established plugins, direct gateway integrations and custom development. Check that the relevant plugin is maintained and compatible with your checkout.
• Custom-built websites: can support direct API integrations, hosted payment pages or embedded checkout components, subject to the provider’s developer documentation and security requirements.
• Shopify: supports a defined payment ecosystem. Confirm that the proposed provider can integrate with Shopify in your operating country and for your business sector.
• Wix and other hosted platforms: may restrict gateway choices. Verify compatibility before underwriting or signing a contract.
• Marketplaces and platforms: may require seller onboarding, split payments, sub-merchant controls or separate compliance arrangements beyond a standard ecommerce gateway.

Do not assume that a provider supporting one ecommerce platform automatically supports every platform or every type of merchant on that platform.

Choose the right checkout model

Hosted payment page: the customer is directed to a payment page operated by the gateway provider. This can simplify implementation and may reduce the amount of card data handled directly by your website.

Embedded or hosted fields: payment fields appear within your checkout while sensitive data is handled through provider-controlled components. This can offer a more integrated customer experience while limiting direct exposure to card details.

Direct API integration: provides greater control over the payment journey but normally requires more development, testing, monitoring and security responsibility.

The best choice depends on your conversion priorities, technical resources, desired branding and PCI DSS scope. Ask the gateway and your qualified technical adviser to explain the responsibilities created by the proposed integration.

Compare the payment methods your customers use

Card acceptance remains important, but the right payment mix depends on customer location and buying behaviour. Consider whether you need Visa and Mastercard, digital wallets, open banking payments, recurring payments or relevant local methods.

More methods are not automatically better. Each option can affect integration, reconciliation, refunds and commercial terms. Prioritise methods that support genuine customer demand and fit your operational processes.

Assess recurring and subscription-payment capabilities

Subscription businesses need more than a basic card form. Look for secure tokenisation, configurable billing schedules, tools for updating payment credentials, retry controls for failed payments and clear cancellation processes.

Confirm how the provider handles customer authentication, stored credentials and merchant-initiated transactions. Also establish whether your sector and subscription model are acceptable to the acquiring partner, as recurring billing can receive additional underwriting scrutiny.

Plan for international and multi-currency payments

If you sell outside the UK, check which currencies can be presented to customers and which currencies can be settled to your business. These are not always the same.

Review foreign-exchange arrangements, cross-border charges, regional acquiring coverage and local payment-method support. Ask whether your legal entity and bank account are eligible for each requested market.

International reach should be assessed alongside refund handling, chargeback management, settlement timing and reporting. A gateway that technically accepts a currency may not provide the most suitable end-to-end acquiring arrangement for that market.

Understand the complete cost—not only the headline rate

Ecommerce payment costs can include transaction charges, gateway fees, authorisation charges, monthly minimums, refund charges, chargeback fees, cross-border costs, currency conversion and optional fraud tools. Some providers combine several items; others price them separately.

Higher-risk arrangements may also include a rolling reserve, delayed settlement or other controls. These terms affect cash flow even though they are not transaction fees.

Ask for a written proposal that separates every recurring, transaction-based and exceptional charge. Compare projected monthly costs using your expected volume, average order value, card mix and refund levels rather than relying on a single advertised percentage.

Review settlement and cash-flow terms

Settlement describes when processed funds are paid to your nominated bank account. Timings vary by provider, sector, currency and risk assessment.

Check the standard settlement period, cut-off times, weekend treatment and any conditions attached to faster settlement. Where a reserve applies, confirm the percentage held, release schedule and circumstances in which the arrangement may be reviewed.

These terms should be considered before launch because an unsuitable settlement structure can place pressure on stock purchasing, advertising, supplier payments and refunds.

Evaluate fraud, authentication and security controls

A gateway should support appropriate card-data security, customer authentication and fraud controls. Relevant tools may include 3D Secure, address or security-code checks, velocity rules, device information, transaction monitoring and configurable risk filters.

More aggressive fraud filtering can reduce suspicious transactions but may also decline genuine customers. Ask how rules can be adjusted, what reporting is available and who is responsible for monitoring performance.

PCI DSS responsibilities depend on how your checkout is implemented and how card data is handled. Using a compliant provider does not remove every obligation from the merchant. Confirm your own validation requirements for the chosen integration.

Look beyond initial approval

Approval is only the beginning. Consider how the setup will be supported if transactions decline unexpectedly, settlements are delayed, your website changes or your sales volumes grow.

Ask who owns the technical relationship, who handles acquiring issues and what happens if your current provider changes its risk appetite. Businesses with complex or higher-risk models may benefit from an independent review before committing to a long agreement or a bespoke integration.

Questions to ask before choosing a payment gateway

• Does the gateway support my website platform and exact business sector?
• Is acquiring included, or do I need a separate merchant account?
• Which payment methods, countries and currencies are supported?
• What are all transaction, monthly, refund, chargeback and cross-border charges?
• What settlement period applies, and could a reserve be required?
• Does the solution support subscriptions, tokenisation or payment links if needed?
• Which fraud and authentication tools are included?
• What PCI DSS responsibilities remain with my business?
• Who provides technical and account support after launch?
• What contract term, notice period and early-termination provisions apply?

How We Tranxact helps UK ecommerce businesses

We Tranxact reviews the complete payment requirement rather than recommending a gateway in isolation. We consider your website platform, products, transaction profile, countries, currencies, settlement needs and risk factors before approaching suitable providers.

We support standard and higher-risk ecommerce businesses, including merchants that have been declined or need an alternative to their current arrangement. Where appropriate, we can also help assess merchant accounts, payment links, virtual terminals, open banking options and more complex gateway structures.

Explore our ecommerce payment solutions or speak with us before committing to a provider.