How to Accept Online Payments for a Small Business

Taking money online used to be the hardest part of running a small business. Now it's one of the easiest parts technically — you can be accepting card payments in an afternoon — but the decision of which provider to use is more confusing than it's ever been, and picking wrong is expensive in ways that don't show up until months later.

I've built and integrated payment flows into web apps and fintech tooling, and the mistakes I see almost never come from the code. They come from choosing the wrong type of provider for the business, then getting ambushed by fees, tax obligations, or a frozen account holding two weeks of revenue. This is the guide I'd give a non-technical friend who just wants to get paid without stepping on a landmine.

First, understand the two kinds of providers

This is the single most important distinction in the whole article, and most guides skip it. Payment providers fall into two camps, and they solve genuinely different problems.

Payment processors / gateways — Stripe, PayPal, Adyen, and most regional players. These move the money. You are the "merchant of record," which means you are legally the seller. That sounds obvious until you realize it makes you responsible for registering, collecting, and remitting sales tax, VAT, or GST in every jurisdiction where you have an obligation. Lower fees, more responsibility.

Merchant of Record (MoR) providers — Paddle, Lemon Squeezy, and similar. Here the provider is legally the seller. They collect and remit consumption taxes worldwide, absorb most fraud and chargeback handling, and hand you a single clean payout. You pay a higher percentage for the privilege of never becoming an international tax expert. This model is especially popular for digital products and software sold globally.

If you remember one thing from this article, make it this: the fee percentage is not the real cost. The real cost is how much compliance work each model leaves on your plate.

The major providers, and who each is actually for

Stripe is the developer favorite for good reason — clean APIs, excellent documentation, cards, digital wallets, bank debits, and subscriptions out of the box. Its widely quoted online card fee is around 2.9% plus a small fixed amount per successful transaction in several markets (could vary). Availability and exact pricing vary a lot by country. Reach for Stripe when you want control and low fees and you're willing to own your own tax situation.

PayPal wins on buyer trust and reach. A meaningful slice of customers will only complete a purchase if PayPal is an option, which is why I often add it as a second method rather than a sole one. Fees are broadly comparable to Stripe's, though structured differently across products (could vary). The recurring complaint you should know about going in is account holds — PayPal can freeze funds on sudden volume spikes.

Wise (Business) isn't a checkout processor in the same sense — you don't drop a Wise "buy button" on a page the way you do with Stripe. What it gives you is a multi-currency account: local bank details in several currencies so international clients can pay you as if you were local, with FX conversion at rates far better than a traditional bank's (could vary). If you invoice cross-border clients or freelance internationally, this is the account that stops banks from quietly eating your margin on every transfer.

Paddle is a Merchant of Record built for software, SaaS, and digital goods. It handles global sales-tax and VAT compliance for you, which is its entire value proposition. Expect a higher blended fee than a bare processor — figures around 5% plus a small fixed amount per transaction are commonly cited (could vary).

Lemon Squeezy is the MoR that became popular with indie makers and solo digital sellers; it's now part of Stripe. Same core benefit as Paddle — tax collected and remitted on your behalf so you can sell a template or an app worldwide without registering for tax in a dozen places (could vary).

Regional methods matter more than people expect. Customers convert better when they see a payment method they already trust, and that method is local. As neutral examples: Paystack and Flutterwave are common across parts of Africa, Razorpay and PayU in India, Mercado Pago across Latin America, iDEAL in the Netherlands, and Alipay and WeChat Pay in China. You don't need all of them — you need the one or two your actual customers expect.

Hosted checkout vs embedded checkout

Once you've picked a provider, you'll choose how the payment form appears. There are two approaches and the right default is clear.

Hosted checkout — Stripe Checkout, Stripe Payment Links, PayPal's buttons. The provider hosts the actual payment page; you send the customer there and they come back after paying. This is the fastest to set up, the safest, and it offloads the bulk of your security-compliance burden onto the provider. For most small businesses, this is the correct choice and you should not overthink it.

Embedded checkout — Stripe Elements and equivalents. The payment fields live inside your own page or app, so nothing looks like a redirect. You get brand consistency and control, at the cost of more responsibility and a bigger compliance footprint. Only reach for this when the redirect genuinely hurts conversion enough to justify the extra work.

There's also a genuine no-code path most people don't realize exists: with Payment Links you can generate a shareable link or a copy-paste button and start collecting money with no website and no code at all. For a freelancer sending an invoice or someone selling through social media, that's often the entire solution.

What a non-developer can set up this week

Here's the realistic sequence, none of which requires writing code if you use hosted checkout or payment links:

1. Pick a provider that's actually available and well-supported in your country.
2. Create the account and complete identity/business verification (KYC — have a government ID and your bank details ready).
3. Create your product and price inside the dashboard.
4. Generate a Payment Link or a hosted checkout, or embed the provider's prebuilt button.
5. Note your payout schedule — most processors pay out on a rolling basis a few business days after a sale, and the first payout is often held longer (could vary).

Compliance basics you can't skip

None of this is legal advice, but these are the things that trip up small sellers:

• KYC / identity verification. Every legitimate provider will verify who you are. Use your real, matching business and bank details — a mismatch is the fastest way to get funds held.
• PCI DSS. If you use hosted checkout, the provider shoulders the hard parts of card-data security. The one rule that's always yours: never store raw card numbers yourself.
• Strong Customer Authentication / 3D Secure. In Europe, regulation (PSD2) requires extra authentication on many card payments. The major providers implement it for you — just test that your checkout actually completes for a European card.
• Sales tax, VAT, and GST. This is the one people forget. With a plain processor, you are responsible for registering and remitting where you have obligations, and thresholds and rules vary widely by jurisdiction (could vary). With a Merchant of Record, the provider handles it. For a lot of global digital sellers, this single fact is the entire reason to pay MoR fees.
• Refund and dispute policy. Publish a clear one. It reduces chargebacks, and some platforms require it.
• Privacy. You'll need a privacy policy, and in the EU/UK, cookie consent — payment providers set cookies.

How to actually choose (a real recommendation, not a shrug)

• Selling digital products or SaaS to a global audience and you don't want to become a tax specialist → a Merchant of Record (Paddle or Lemon Squeezy).
• Selling in one or a few markets, want the lowest fees, comfortable owning your own tax filing → Stripe, ideally with PayPal added as a second option for trust.
• Getting paid by international clients or freelancing → Wise Business plus invoices.
• Selling physical goods in a local market → your strongest local processor, plus one global card option for travelers and expats.

The honest, slightly boring truth is that the "best" payment provider is the one that's available in your country, trusted by your specific customers, and matched to whether you want to own tax compliance or pay someone to make it disappear. Get paid first with the simplest option that works. Optimize the fees later, once you have revenue worth optimizing.