Payment Gateway / Platform
What is a Payment Gateway?
A payment gateway is an e-commerce technology that securely facilitates the transfer of funds between a cardholder’s bank and a merchant, without exposing sensitive personal or card information. It acts as the intermediary between the customer, the merchant, and the financial institutions involved in processing a transaction.
Payment gateways are offered as a service and can be priced on a subscription basis or on a per-transaction fee model. During a transaction, the gateway encrypts the customer’s card data, forwards it to the relevant acquiring bank, and coordinates the authorization and processing steps required to complete the payment.
Beyond processing payments, a gateway also screens transactions for potential fraud or data breaches. Fraud detection tools typically include geolocation checks, Address Verification Service (AVS) checks, and cardholder authentication measures such as 3D Secure.
How Does a Payment Gateway Work?
A payment gateway manages the flow of information between four key parties: the cardholder, the merchant, the acquiring bank, and the issuing bank. Although a typical transaction is completed in under 10 seconds, the process involves several distinct steps.
Step-by-Step: What Happens After You Click “Buy Now”
- Customer places an order — The customer selects a product and proceeds to checkout, entering their credit card details on the payment page before clicking “Submit.”
- Data is sent to the merchant — The card details and order amount are securely transmitted to the merchant’s system, which forwards them to the payment gateway.
- Authorization request is sent — The payment gateway sends an authorization request to the acquiring bank, which forwards it through the card network (Visa, Mastercard, or Amex) to the issuing bank to verify the card is valid and active.
- 3D Secure authentication (if applicable) — If the card is enrolled in 3D Secure, the customer is redirected to a verification page to enter a password or confirm their identity. Once verified, the issuing bank notifies the card network.
- Verification is relayed — The card network passes the verification result back to the acquiring bank.
- Deduction request is made — The payment gateway instructs the acquiring bank to deduct the order amount from the cardholder’s account.
- Issuing bank confirms funds — The issuing bank checks whether sufficient funds are available. If they are, it transfers the requested amount and confirms the transaction to the card network.
- Confirmation is sent — The card network (Visa, Mastercard, or Amex) sends a confirmation to the acquiring bank and the payment gateway.
- Merchant is notified — Within minutes, the merchant receives confirmation of the successful transaction, and the funds are withdrawn from the cardholder’s account.
Types of Payment Gateways
Payment gateways come in different forms depending on how they are integrated into a merchant’s checkout experience:
- Hosted payment gateways redirect the customer to a third-party payment page to complete their transaction, then return them to the merchant’s site.
- Self-hosted gateways allow the merchant to collect card details directly on their own website before passing them to the gateway for processing.
- API-based gateways give merchants full control over the checkout experience by integrating the gateway’s functionality directly into their platform via an API.
Payment Gateway vs. Payment Processor
These two terms are often confused. A payment gateway is the technology that securely captures and transmits card data, while a payment processor is the service that actually moves the funds between banks. In many modern solutions, both functions are combined into a single platform, but they serve distinct roles in the transaction flow.
