To accept credit cards, you need a merchant account or payment processor, a way to collect payment (card reader, online checkout, or invoicing tool), and an understanding of processing fees — typically 1.5–3.5% per transaction. Setup can take as little as one business day with most modern processors.
Accepting credit and debit cards opens your business to a much larger pool of customers — the Federal Reserve's payments study consistently shows card payments account for the majority of non-cash consumer and small-business transactions. The tradeoff is processing fees and PCI compliance responsibilities. Setting up card acceptance typically takes a few days and requires choosing a payment processor that fits how your business collects payments.
Processing fees are composed of interchange (paid to the card-issuing bank), assessments (paid to Visa/Mastercard/Amex), and the processor's markup. Most small-business processors bundle these into a flat rate (e.g., a fixed percentage per transaction) or interchange-plus pricing (interchange cost + a fixed markup). Card-present transactions typically cost less than card-not-present. American Express cards generally carry higher interchange than Visa or Mastercard. Negotiate pricing once your monthly volume grows.
A merchant account is a type of business bank account that holds funds from card transactions before they're transferred to your operating account. Modern payment facilitators bundle the merchant account into their service, so you apply once and can start accepting payments within hours or days. You'll need: a government-issued ID, your EIN (how to get an EIN), a business bank account (how to open a business bank account), and basic business information. Some processors perform a soft credit check; high-risk industries (firearms, certain health products, subscription billing) face additional review.
The Payment Card Industry Data Security Standard (PCI DSS) is a set of security requirements for any business that processes, stores, or transmits card data. Small businesses are typically in PCI Level 4 (fewest requirements), but you must still complete an annual Self-Assessment Questionnaire (SAQ) and ensure your hardware and software are PCI-compliant. Most modern payment processors handle the technology-side compliance for you; your responsibilities are physical security (don't write down card numbers), network security (firewall, secure Wi-Fi), and the annual SAQ. The PCI Security Standards Council publishes guidance for small merchants.
Your processor settles funds to your bank account typically within 1–2 business days. Each deposit is a batch settlement — the gross card volume minus processing fees. Reconcile these deposits against your sales records monthly as part of your bookkeeping process. Chargebacks (customer disputes) deduct from future settlements; keep transaction records for at least 18 months to fight invalid disputes. If card acceptance puts you over the threshold where working capital gets tight, a business line of credit can smooth the gap — one application routes to one matched lender partner.