Online Payment Services: How Card Payments Work

Updated 6 November 2026 · Standard formula, shown below

Online payment services are digital platforms that let you send and receive money over the internet without handing over your card details to every merchant. They work by acting as a secure middleman: you enter your card or bank information once, and the service encrypts it, stores it safely, and passes only a transaction token to the seller. Card payments themselves follow a multi-step process involving the merchant, a payment gateway, the card networks (Visa, Mastercard, etc.), and the issuing bank, all happening in seconds.

What Online Payment Services Actually Do

At their core, online payment services (like PayPal, Stripe, or Square) handle three jobs that used to be separate: they authorize the payment, they move the money from the buyer’s account to the seller’s account, and they record the transaction for both sides. They also provide the user interface you see—the “Pay Now” button, the login screen, the receipt—and they handle security features like encryption, fraud screening, and chargeback disputes.

For a merchant, the service replaces the need to build their own payment infrastructure. Instead of connecting directly to dozens of banks, they integrate with one API (application programming interface). The service also handles compliance with payment card industry standards (PCI DSS), which is a set of security rules that any business storing card data must follow. For a consumer, the service means you can pay with a saved card or a linked bank account without re-entering your details on every website.

How Card Payments Work: Step by Step

When you swipe, tap, or type your card number, the payment doesn’t just go straight from your bank to the store. It travels through a chain of intermediaries. Here’s the typical flow for an online card payment:

You enter your card details on the merchant’s checkout page. The details are sent to the payment gateway (the service that connects the website to the payment networks).
The gateway encrypts the data and sends it to the card network (Visa, Mastercard, American Express, etc.). The network acts as a router.
The network asks your issuing bank (the bank that gave you the card) for authorization. The bank checks if you have enough funds or credit, and if the transaction looks legitimate.
The bank sends an approval or decline back through the network to the gateway, which tells the merchant’s website whether to complete the sale.
The merchant captures the payment – this is when the money is actually moved. The issuing bank transfers the funds to the merchant’s acquiring bank (the bank that processes payments for the merchant).
Settlement happens – usually within 1-2 business days, the acquiring bank deposits the money into the merchant’s account, minus processing fees.

This entire process typically takes 2-5 seconds. The card network charges a small fee for each transaction, which is why merchants pay a percentage of each sale to the payment service.

Types of Online Payment Services

Not all payment services work the same way. The main categories are:

Digital wallets (like PayPal, Apple Pay, Google Pay): store your card or bank details and let you pay with a click or a fingerprint. They often add an extra layer of security by not sharing your card number with the merchant.
Payment gateways (like Stripe, Authorize.Net): are the technical pipes that connect a website to the card networks. They process the transaction but don’t hold your money.
Merchant account providers (like Square, Adyen): give businesses a full package – a payment gateway, a merchant account, and often a physical card reader for in-person sales.
Bank transfers (like ACH in the US, SEPA in Europe): move money directly from one bank account to another, bypassing card networks. These are cheaper but slower (2-3 days).

Some services combine multiple types. For example, PayPal is both a digital wallet and a payment gateway. The choice of service affects what you pay in fees, how fast you get your money, and what security features you get.

Security and Fraud Protection

Card payments are protected by several layers of security, but no system is perfect. The most important protections are:

Encryption: your card number is scrambled so that even if a hacker intercepts it, they can’t read it.
Tokenization: instead of sending your card number, the payment service sends a unique “token” that only works for that specific merchant. If the merchant’s database is hacked, the token is useless.
3-D Secure (like Verified by Visa or Mastercard SecureCode): an extra step where you enter a password or a one-time code sent to your phone. This reduces fraud but adds a step to checkout.
Chargeback protection: if you dispute a transaction, the card network can reverse it. This protects you but costs the merchant money, which is why merchants screen orders carefully.

A common misconception is that paying with a debit card is as safe as a credit card. In many countries, credit cards offer stronger fraud liability protection because they use the bank’s money, not yours. Debit cards pull directly from your account, so a fraudulent charge can leave you without cash while the dispute is resolved. Check your bank’s policy before relying on one over the other.

Fees and Costs: Who Pays What

Payment services are not free. The merchant pays the bulk of the costs, but you may see some fees as a consumer. The typical costs are:

Merchant discount rate: a percentage of each transaction, usually 1.5% to 3.5% for online payments. This covers the card network fee, the issuing bank’s fee, and the payment service’s profit.
Fixed per-transaction fee: a small flat amount (e.g., $0.30) added to the percentage.
Chargeback fees: charged to the merchant when a customer disputes a charge, often $15-$25 per incident.
Consumer fees: some services charge you for sending money to friends or family, converting currency, or using a credit card instead of a bank account. For example, PayPal charges a fee for “goods and services” transactions but not for “friends and family” within the same currency.

These fees are why some small businesses offer a discount for cash or charge a surcharge for credit cards. The fees are set by the card networks and banks, not by the payment service alone, so they vary by country and card type.

How to Choose an Online Payment Service

If you’re a merchant, the right service depends on your business type and sales volume. If you’re a consumer, your choice is usually about which wallet to install on your phone. Here are the key factors:

Transaction fees: compare the percentage and flat fee for your typical order size. For small transactions, a high flat fee hurts; for large ones, a high percentage hurts more.
Payout speed: how quickly the merchant gets the money. Some services offer instant payouts for a fee; others take 2-3 days.
Supported payment methods: does the service accept credit cards, debit cards, bank transfers, and digital wallets? Does it support international payments?
Security features: look for tokenization, 3-D Secure, and fraud detection tools.
Ease of integration: for a website, check the API documentation and whether there are plugins for your e-commerce platform.
Customer support: read reviews about how quickly disputes are resolved.

For consumers, a good rule is to use a digital wallet that doesn’t store your card number on the merchant’s server. Apple Pay and Google Pay use tokenization by default, which is more secure than typing your card number into a random website.

Common Problems and How to Avoid Them

Even with smooth systems, things go wrong. The most common issues are:

Payment declined: your bank may block a transaction it thinks is fraudulent. Call your bank or check your app for a fraud alert. Also check that you entered the CVV and expiry date correctly.
Double charges: if you refresh the checkout page or click “Pay” twice, you may get two charges. The second usually reverses automatically, but check your statement after a few days.
Money not received by merchant: this can happen if the payment was authorized but not captured. Contact the payment service with the transaction ID.
Chargeback abuse: some consumers falsely dispute charges to get free items. This is illegal in many places, and merchants can respond with evidence. As a consumer, only dispute what is genuinely wrong.

To avoid problems, always use a secure internet connection (not public Wi-Fi) when paying, double-check the merchant’s URL, and keep your payment app updated. If you’re a merchant, always send a confirmation email and keep records of the transaction details.

Alternatives to Card Payments

Cards are not the only way to pay online. Depending on where you live, you may have these options:

Bank transfers: direct from your bank account to the merchant’s. In Europe, SEPA instant transfers are now common. In the US, “ACH” is slower but cheaper.
Buy now, pay later (BNPL): services like Klarna or Afterpay split the payment into installments. They are not credit cards but often charge interest or late fees.
Cryptocurrency: some merchants accept Bitcoin or stablecoins. Transactions are irreversible and the value can fluctuate, so this is riskier for consumers.
Mobile money: common in Africa and parts of Asia, where you pay via SMS or a mobile app linked to your phone number (e.g., M-Pesa).
Prepaid cards and gift cards: you load money onto a card and use it like a debit card. These are useful for budgeting or for people without a bank account.

Each alternative has its own trade-offs in speed, cost, and consumer protection. Cards and digital wallets generally offer the best fraud protection, while bank transfers are cheapest but slower and harder to reverse.

Frequently Asked Questions

Is it safe to save my card details on a payment service?

Yes, if the service is PCI-DSS compliant and uses tokenization. Your card number is replaced with a token that only works for that merchant. However, no system is 100% hack-proof, so enable two-factor authentication and monitor your statements.

Why was my card declined when I have enough money?

Possible reasons: your bank’s fraud system flagged the transaction, you entered the wrong CVV or expiry date, the merchant’s processor is down, or your card issuer has a daily limit. Contact your bank to check if a fraud alert was triggered.

How long does a refund take to appear?

Refunds are initiated by the merchant, not the payment service. Once the merchant processes it, the funds typically appear in 3-10 business days depending on your bank and card network. If it takes longer, contact the merchant first.

What is a chargeback and how does it affect me?

A chargeback is when you dispute a charge with your card issuer and the money is pulled back from the merchant. It protects you, but it costs the merchant a fee. If you file too many chargebacks, you may be flagged as a fraud risk, so only use it for legitimate issues.

Do online payment services charge me as a consumer?

Usually no, for standard purchases. But some services charge for sending money to friends (if using a credit card), for currency conversion, or for instant transfers. Always check the fee schedule before sending money.

Can I use a payment service without a bank account?

Yes, some services let you load cash at a retail store or use a prepaid card. However, most require a bank account or card to send money. If you don’t have either, look for services that support cash top-ups, but expect higher fees.

Method: the standard formula for this calculation, rounded as each result states. See how the calculators work or report an error.