Glossary
What is a payment gateway?
A payment gateway securely captures and passes card details from a customer to the processor. See how it works and how it differs from a processor.
Updated · By PayToMe Editorial
A payment gateway is the service that securely collects a customer’s card details at checkout, or on an online invoice, and sends them on for approval. It is the digital version of a card terminal in a shop.
How it works
A gateway sits between the page where the client pays and the rest of the payments chain. When a client clicks “Pay” on an invoice, this happens in a few seconds:
- Capture. The client enters their card details into a form run by the gateway, not stored on your own server.
- Encrypt. The gateway encrypts the details and often replaces the card number with a token.
- Forward. It passes the request to your payment processor.
- Approve or decline. The processor asks the card network and the client’s bank, and the answer returns through the gateway.
- Confirm. The client sees a success or failure message, and you receive a notification.
The gateway does not hold your money. Approved funds settle into your merchant account and are then paid out. Many modern providers bundle the gateway, processor and merchant account into one service, which is why people mix up the terms.
Because gateways handle card data, they follow security rules such as PCI DSS. Using a hosted payment page keeps card numbers off your own systems, which reduces your security burden.
Example
A freelancer emails a $1,250 invoice with a pay link. The client opens it and pays by card.
| Step | What happens | Time |
|---|---|---|
| Client clicks Pay | Gateway shows secure form | instant |
| Card details submitted | Encrypted and tokenized | under 1 second |
| Authorization | Processor and bank approve | 1 to 3 seconds |
| Confirmation | Invoice marked paid | immediate |
| Payout | Funds reach the bank account | typically 1 to a few business days |
These timings are typical, not guaranteed. To make a pay link possible, you start with a clean invoice. Create one in the invoice generator, and read how to accept credit card payments.
Related terms
- Payment processor: connects the gateway to banks and card networks.
- Merchant account: where approved card sales settle.
- PCI DSS: the security standard for handling card data.