If you are looking to buy or sell goods or services using payment cards, the main card types to be aware of are:

1. Credit cards

• allow the cardholder to spend up to a specified credit limit
• offer the account holder an interest-free period
• require the account holder to repay at least the minimum amount each month, but charge interest on the unpaid balance
• incur no interest if the bill is paid in full by the specified date
• can be issued to employees, with an approved spending limit

There are numerous credit card providers - most are Visa or MasterCards issued through a bank or building society.

Read more about Visa credit cards and MasterCard credit cards.

2. Debit cards

• are issued in conjunction with a bank or building society current account
• limit the cardholder to the funds available in that account plus any overdraft, if available
• may offer a greater degree of control - you can only spend what's in your account
• have less flexibility than other cards

3. Charge cards

• may require the account holder to pay an annual fee
• allow the cardholder a period of credit, but - to avoid additional fees - this must be paid off in full each month
• can be issued to employees
• allow you to set spending limits

4. Pre-paid cards

• can be provided pre-loaded - eg for staff to pay expenses
• enable businesses to manage and monitor spending
• are available in different currencies, so can be used as an alternative to business travel cards
• usually incur various fees and charges

5. Business travel cards

• operate in the same way as other business credit or charge cards
• can offer a convenient way for staff to pay for business travelling expenses
• often offer additional benefits, such as travel insurance or currency facilities

6. Purchasing cards

• are generally restricted to buyers for large businesses or public sector bodies
• are designed to cut down on paperwork and the need for purchase orders

Issuing payment cards to staff

With the exception of debit cards - which must be used by the signatory - all the other types of payment cards outlined above can be issued to staff for them to make business-related purchases.

Contactless payment technology

Contactless cards utilise the security built into chip and PIN cards, and can be used for transactions of £100 or less. The aim of contactless payments is to speed up transactions.

Read more on contactless cards.

You could use a personal debit or credit card instead of a business card for business expenses, however this means you will be mixing personal debts with business debts.

There are advantages to using payment cards in your business - particularly when cards are issued to staff. But there are several disadvantages to be aware of too.

Advantages of using payment cards for purchases

Advantages of using company credit, debit, charge or pre-paid cards to make purchases include:

• Convenience - cards are quicker and might be cheaper to use than cheques. They're useful for everyday expenses and can be used over the phone and internet.
• Credit - credit or charge cards can offer an interest-free period of varying lengths, dependent on which card issuer you use.
• Most cards are globally recognised - using cards for foreign travel purchases may give you better exchange rates.
• Ability to monitor expenditure - you can specify which employees receive cards and set different credit limits for each card.
• Fast access to cash - cash can be withdrawn from ATMs. However, card issuers may levy a commission and - if given on credit - interest is payable from the day the cash is withdrawn.
• Reduction in administration - with a company credit or charge card, you pay one bill each month, no matter how many purchases you make. Itemised monthly statements can help with your accounting and administrative procedures.

Disadvantages of using payment cards for purchases

Even though you can usually set maximum spending limits on employees' cards, be aware that you're giving your employees the opportunity to spend company money unchecked.

As with personal payment cards, you are also open to the possibility of two further major drawbacks.

• Card fraud - if the card details are discovered or revealed, you may find fraudulent purchases appearing on your statement. If this is due to an employee's negligence, your business will be liable for the payments. Access Take Five's business advice.
• Debt - with the convenience of a plastic card and the time lapse between purchase and payment, it can be tempting to overextend yourself and build up debts for the business. Remember, if you make purchases with a credit card and don't pay off the bill in full, you'll incur interest charges.
• Unchecked spending - even though you can usually set maximum spending limits on employees' cards, you should be aware that you're giving your employees the opportunity to spend company money unchecked.

When you have decided which types of business payment card to use for your business, you will then need to find the right provider.

Debit card choices may be the most straightforward. Your business bank account is most likely to offer a debit card free as part of the package.

However, for other types of card it's worth considering a range of providers as well as your own bank.

Business charge cards are offered by most business banks, and companies such as Barclaycard and American Express. It's worth examining the different deals available and considering a number of key points:

• Is there an annual fee? If so, how much and is it payable for each cardholder?
• Can you give individual cards to chosen employees?
• What are the minimum and maximum spending limits?
• What are the penalties for late payment of your bill?
• Are there any extra perks - eg Air Miles or hotel discounts - that would be useful to your business?

The same considerations generally apply if you're choosing a credit card for your business. But here it's essential to compare the interest rate - usually expressed as the APR (annual percentage rate) - of different deals. The length of any interest-free period is also an important consideration.

Whichever type of card you are looking for, it is advisable to shop around and negotiate. Interest rates, charges, interest-free periods and benefits can vary significantly. Your bank account provider may be prepared to amend its terms if you can show that another provider offers a better deal.

To find out about the deals on offer, go into local bank branches or visit the websites of banks with small-business accounts. Compare business bank accounts with Moneyfacts.

Many businesses accept payment by card for their goods and services, which undoubtedly offer some distinct advantages. However, there are potential drawbacks that should be considered.

Advantages of accepting payment cards for sales

• Responding to customer preferences - people expect to be able to pay by card.
• Encouraging impulse purchases - the customer doesn't need to have cash with them.
• Avoiding lost sales opportunities - if a customer leaves to get cash they may not return.
• Reaching a wider customer base - you can accept payment by phone, mail and online from customers who can't reach your premises.
• Cashflow improvements - card payments usually clear more quickly than cheques, although this depends on your merchant agreement. Funds can take up to four working days to reach a business' bank account for face-to-face sales - this may be different for online sales.
• Improved security - you hold less cash on your premises.
• Easing your admin - a regular statement of card transactions is easier to reconcile than numerous cash transactions.
• Cards can be used internationally and currency conversions are handled automatically - offering an important payment method for tourist-sector businesses or those selling to consumers overseas.
• With card payments, the customer's card is checked to see if it is valid and that it hasn't been reported lost or stolen. In addition, in a majority of cases, the customer's account is checked to ensure the funds are available.

Disadvantages of accepting payment cards for sales

• There are costs involved - though these aren't usually prohibitive. See the costs of accepting card payments.
• Accepting cards can increase your exposure to fraud - see your liability for disputed card payments.
• To accept and process certain major charge cards - including American Express and Diners Club - you must reach a separate agreement with the charge card company.
• You will need to train staff - in the technical and administrative issues of processing a card payment, as well as in fraud prevention measures.

Take into account the expectations of your business sector. If you run a service-sector business or shop selling higher-price goods, life will be difficult if you don't accept cards.

Setting up the necessary bank account and equipment to enable you to accept card payments is a quick and straightforward process. The main things you need to do are:

• Set up a merchant account with an 'acquiring bank' to process card payments. See setting up a merchant account for your business.
• Install the necessary equipment. Most card payments are processed using terminals or integrated tills where cards are swiped through or inserted. Your acquiring bank may provide you with a terminal on a monthly rental basis.
• Connect your terminal or integrated till to a standard telephone line so that transactions can be processed. This can be an existing phone line, but most businesses use a dedicated line.
• Discuss with your acquirer if you need to comply with the Payment Card Industry Data Security Standard (PCI DSS) requirements given the way that you are handling card payments. The PCI DSS is a worldwide security standard developed to protect sensitive cardholder information. Find PCI DSS guidance and forms from the PCI Security Standard Council.

Merchant accounts, in agreement with your acquirer, normally allow you to accept all major debit and credit cards - including Visa, MasterCard and Maestro.

To accept and process a number of major charge cards - including American Express and Diners Club - you must reach a separate agreement with the charge card company. Your acquiring bank may be able to help you with an application.

If you are interested in accepting contactless cards, you should ask your acquiring bank about this too. 

Read UK Finance guidance on contactless card payments.

Card payment training

Before accepting card payments, make sure your employees are trained in how to:

• use the terminal
• avoid fraud - see payment card security measures
• respond to any problems, such as a card not swiping properly or the terminal failing

If you want to accept payments directly from customers' credit, debit or charge cards you may choose to set up a merchant account. These are accounts that allow card payments and chargebacks to be made to a merchant-nominated bank account.

You can also accept customer payments through a third party payment processing service or online shopping mall. You can find out more about these in accepting online payments.

Before setting up a merchant account, your acquiring bank will request a wide range of information. This is used to assess your business and to determine the level of charges you'll have to pay for each transaction. You may be asked to provide information relating to:

• your business history and performance
• business accounts
• your projected turnover
• expected average transaction values and volumes on credit and debit cards
• transaction frequencies
• the type of goods you sell
• the proportion of transactions you expect to receive face to face, by phone, mail order, or online
• your suppliers' details
• how you deliver your goods or services

You may need to open a number of merchant accounts if you want to accept card payments for different sales channels. For instance, if you sell goods from a retail shop and through an e-commerce website you'll need separate accounts for your online and face-to-face sales. 

It takes between one and four weeks to open a merchant account. The process may take slightly longer for start-up businesses and banks may want to see additional information - such as a business plan and cashflow forecasts.

Unless a cardholder later disputes a transaction, the card payment process for card present or face-to-face transactions is very simple:

• When customers make a purchase, their card should be inserted or swiped through your terminal - or you key in their card number if you're taking an order by phone or email.
• You key in the transaction amount.
• If the transaction is face to face, in the majority of cases for UK-issued cards, the customer usually has to enter a PIN (personal identification number) to verify the purchase and that they are entering into the transaction. Customers undertaking a contactless transaction simply hold their contactless enabled card up to a secure reader to make their payment.
• The terminal checks to see if the card is valid. In addition, in a majority of cases, the terminal sends details of the transaction via your acquiring bank to your customer's card issuing bank to check if sufficient funds are available to complete the transaction and that the card has not been reported as lost or stolen. Where these checks are pass the transaction is authorised and an authorisation code for the transaction is generated.
• Once a transaction is completed, your bank processes the transaction and credits your account with the customer's money - usually within three to four days. A processing charge is applied by your bank.

However, an authorisation does not guarantee that a transaction is not fraudulent or that it will not be charged back at a later date.

Contactless cards are secured by the same technology that underpins chip & PIN. Although contactless transactions do not usually require a PIN to be entered, occasionally the terminal will ask the cardholder to undertake a full chip & PIN transaction.

Disputed payments

If a cardholder queries a charge made on their card and can show they didn't authorise it - perhaps because the card was stolen - you could be told to refund the cardholder's money. This is known as a chargeback. Chargebacks can be made up to 120 days (this timing may differ depending on the type of card used eg MasterCard or Visa) after the transaction has been debited from the cardholder's account.

For more information see your liability for disputed card payments.

You should shop around and check the costs of accepting card payments. Banks apply different charges depending on a wide range of factors - including the expected overall value of your card transactions and the bank's assessment of your exposure to card fraud.

Remember that you are likely to be charged differently for credit card and debit card transactions. Credit card and charge card processing fees can range from less than 2 per cent to as much as 6 per cent of the value of each transaction. Debit cards are more likely to charge a flat rate of so many pence per transaction and the level may be determined by the number and average value of these transactions.

In addition to transaction charges, other costs you may face include the following:

• A monthly fee if you rent the terminal that is used to accept a chip & PIN transaction, swipe cards or key in card numbers from your bank.
• A service from a payment service provider (PSP) can be used to process transactions on your behalf, and is most likely to be used for internet transactions. PSP charges can be on a per-month or per-transaction basis. See accepting online payments.
• Banks can ask high-risk businesses for a security bond to cover the costs of unauthorised transactions that are refunded later. Criteria can include the amount of online trading you do, average transaction values and the length of time it takes to fulfil an order.

Chargebacks can occur when a customer disputes a card transaction. Your bank can transfer liability to you and reclaim the value of the transaction from your account.

Chargebacks can be made where there has been:

• fraud - for instance, where a transaction has been made with a stolen card or account number
• inadequate customer service - for instance, if a customer did not receive their order or the goods were defective

Even if a transaction has been authorised and has been authenticated with a PIN it does not prevent all types of chargeback. A chargeback can be made up to 120 days after the transaction has been debited or from when the goods or services were due to be received.

Your customers' key statutory rights in relation to the goods and services you provide remain the same whichever payment method is used.

To minimise chargebacks you must verify the identity of people making card payments. In face-to-face transactions the customer's PIN or, where a PIN cannot be used, signature is the most important security measure. If a PIN verified transaction is authorised through your terminal, you won't be liable for a chargeback unless the goods or service are not as described or are faulty. Where you cannot accept a PIN, a clear signature will help but is no guarantee against a chargeback.

Customer/card-not-present transactions - such as internet, mail order or phone transactions - present a greater risk because it is more difficult to verify the customer's identity. You therefore face a greater risk of fraud and the resulting chargebacks.

For advice on protecting your business from payment card fraud, see payment card security measures.

There are a number of steps you can take to reduce the risk of fraudulent card payments. Training is crucial - you should draw up a clear list of security measures and make sure your employees are fully aware of them.

Talk to the bank providing you with your merchant account. Ask them what security measures they recommend.

When the cardholder is present you should:

• check the card hasn't been reported lost or stolen - your terminal will check this when it seeks authorisation
• make sure that the PIN entered verifies the transaction, or where the card is not chip & PIN-enabled that the signature matches the one on the back of the card
• check the card is in the right format and hasn't been tampered with - ask your bank for a card-recognition guide
• check with your bank's authorisation phone line if the card won't swipe - this can happen for innocent reasons but it may indicate a fake card
• beware of people who seem nervous or who try to distract you as you're processing their purchase
• look out for people making hurried and seemingly random purchases, eg several pairs of designer sunglasses or high-priced electronics

For cardholder-not-present transactions, you can:

• ask for the card security code if you have the facility - usually the last three digits on the signature strip or, in the case of an American Express card, four numbers on the front of the card
• ask customers to bring their card when collecting goods
• ask for faxed confirmation of the order with a signature and proof of address
• check the name and address details you have been given with those held by the company which issued the card
• use the Address Verification Service offered by your bank, which checks the numerical details of the cardholder's address with the card issuer
• take advantage of specific programmes aimed at preventing fraudulent transactions - like Verified by Visa and MasterCard SecureCode

Find out about MasterCard SecureCode and read about Verified by Visa.

Find out about fraud prevention measures.

Data protection and security standards

As with any business that stores or processes customers' personal information, you will need to ensure that your business complies with the Data Protection Act. Businesses that don't properly protect their customers' personal information can be fined.

For more information, see General Data Protection Regulation (GDPR) and GDPR penalties and fines.

If you are looking to buy or sell goods or services using payment cards, the main card types to be aware of are:

1. Credit cards

• allow the cardholder to spend up to a specified credit limit
• offer the account holder an interest-free period
• require the account holder to repay at least the minimum amount each month, but charge interest on the unpaid balance
• incur no interest if the bill is paid in full by the specified date
• can be issued to employees, with an approved spending limit

There are numerous credit card providers - most are Visa or MasterCards issued through a bank or building society.

Read more about Visa credit cards and MasterCard credit cards.

2. Debit cards

• are issued in conjunction with a bank or building society current account
• limit the cardholder to the funds available in that account plus any overdraft, if available
• may offer a greater degree of control - you can only spend what's in your account
• have less flexibility than other cards

3. Charge cards

• may require the account holder to pay an annual fee
• allow the cardholder a period of credit, but - to avoid additional fees - this must be paid off in full each month
• can be issued to employees
• allow you to set spending limits

4. Pre-paid cards

• can be provided pre-loaded - eg for staff to pay expenses
• enable businesses to manage and monitor spending
• are available in different currencies, so can be used as an alternative to business travel cards
• usually incur various fees and charges

5. Business travel cards

• operate in the same way as other business credit or charge cards
• can offer a convenient way for staff to pay for business travelling expenses
• often offer additional benefits, such as travel insurance or currency facilities

6. Purchasing cards

• are generally restricted to buyers for large businesses or public sector bodies
• are designed to cut down on paperwork and the need for purchase orders

Issuing payment cards to staff

With the exception of debit cards - which must be used by the signatory - all the other types of payment cards outlined above can be issued to staff for them to make business-related purchases.

Contactless payment technology

Contactless cards utilise the security built into chip and PIN cards, and can be used for transactions of £100 or less. The aim of contactless payments is to speed up transactions.

Read more on contactless cards.

You could use a personal debit or credit card instead of a business card for business expenses, however this means you will be mixing personal debts with business debts.

There are advantages to using payment cards in your business - particularly when cards are issued to staff. But there are several disadvantages to be aware of too.

Advantages of using payment cards for purchases

Advantages of using company credit, debit, charge or pre-paid cards to make purchases include:

• Convenience - cards are quicker and might be cheaper to use than cheques. They're useful for everyday expenses and can be used over the phone and internet.
• Credit - credit or charge cards can offer an interest-free period of varying lengths, dependent on which card issuer you use.
• Most cards are globally recognised - using cards for foreign travel purchases may give you better exchange rates.
• Ability to monitor expenditure - you can specify which employees receive cards and set different credit limits for each card.
• Fast access to cash - cash can be withdrawn from ATMs. However, card issuers may levy a commission and - if given on credit - interest is payable from the day the cash is withdrawn.
• Reduction in administration - with a company credit or charge card, you pay one bill each month, no matter how many purchases you make. Itemised monthly statements can help with your accounting and administrative procedures.

Disadvantages of using payment cards for purchases

Even though you can usually set maximum spending limits on employees' cards, be aware that you're giving your employees the opportunity to spend company money unchecked.

As with personal payment cards, you are also open to the possibility of two further major drawbacks.

• Card fraud - if the card details are discovered or revealed, you may find fraudulent purchases appearing on your statement. If this is due to an employee's negligence, your business will be liable for the payments. Access Take Five's business advice.
• Debt - with the convenience of a plastic card and the time lapse between purchase and payment, it can be tempting to overextend yourself and build up debts for the business. Remember, if you make purchases with a credit card and don't pay off the bill in full, you'll incur interest charges.
• Unchecked spending - even though you can usually set maximum spending limits on employees' cards, you should be aware that you're giving your employees the opportunity to spend company money unchecked.

When you have decided which types of business payment card to use for your business, you will then need to find the right provider.

Debit card choices may be the most straightforward. Your business bank account is most likely to offer a debit card free as part of the package.

However, for other types of card it's worth considering a range of providers as well as your own bank.

Business charge cards are offered by most business banks, and companies such as Barclaycard and American Express. It's worth examining the different deals available and considering a number of key points:

• Is there an annual fee? If so, how much and is it payable for each cardholder?
• Can you give individual cards to chosen employees?
• What are the minimum and maximum spending limits?
• What are the penalties for late payment of your bill?
• Are there any extra perks - eg Air Miles or hotel discounts - that would be useful to your business?

The same considerations generally apply if you're choosing a credit card for your business. But here it's essential to compare the interest rate - usually expressed as the APR (annual percentage rate) - of different deals. The length of any interest-free period is also an important consideration.

Whichever type of card you are looking for, it is advisable to shop around and negotiate. Interest rates, charges, interest-free periods and benefits can vary significantly. Your bank account provider may be prepared to amend its terms if you can show that another provider offers a better deal.

To find out about the deals on offer, go into local bank branches or visit the websites of banks with small-business accounts. Compare business bank accounts with Moneyfacts.

Many businesses accept payment by card for their goods and services, which undoubtedly offer some distinct advantages. However, there are potential drawbacks that should be considered.

Advantages of accepting payment cards for sales

• Responding to customer preferences - people expect to be able to pay by card.
• Encouraging impulse purchases - the customer doesn't need to have cash with them.
• Avoiding lost sales opportunities - if a customer leaves to get cash they may not return.
• Reaching a wider customer base - you can accept payment by phone, mail and online from customers who can't reach your premises.
• Cashflow improvements - card payments usually clear more quickly than cheques, although this depends on your merchant agreement. Funds can take up to four working days to reach a business' bank account for face-to-face sales - this may be different for online sales.
• Improved security - you hold less cash on your premises.
• Easing your admin - a regular statement of card transactions is easier to reconcile than numerous cash transactions.
• Cards can be used internationally and currency conversions are handled automatically - offering an important payment method for tourist-sector businesses or those selling to consumers overseas.
• With card payments, the customer's card is checked to see if it is valid and that it hasn't been reported lost or stolen. In addition, in a majority of cases, the customer's account is checked to ensure the funds are available.

Disadvantages of accepting payment cards for sales

• There are costs involved - though these aren't usually prohibitive. See the costs of accepting card payments.
• Accepting cards can increase your exposure to fraud - see your liability for disputed card payments.
• To accept and process certain major charge cards - including American Express and Diners Club - you must reach a separate agreement with the charge card company.
• You will need to train staff - in the technical and administrative issues of processing a card payment, as well as in fraud prevention measures.

Take into account the expectations of your business sector. If you run a service-sector business or shop selling higher-price goods, life will be difficult if you don't accept cards.

Setting up the necessary bank account and equipment to enable you to accept card payments is a quick and straightforward process. The main things you need to do are:

• Set up a merchant account with an 'acquiring bank' to process card payments. See setting up a merchant account for your business.
• Install the necessary equipment. Most card payments are processed using terminals or integrated tills where cards are swiped through or inserted. Your acquiring bank may provide you with a terminal on a monthly rental basis.
• Connect your terminal or integrated till to a standard telephone line so that transactions can be processed. This can be an existing phone line, but most businesses use a dedicated line.
• Discuss with your acquirer if you need to comply with the Payment Card Industry Data Security Standard (PCI DSS) requirements given the way that you are handling card payments. The PCI DSS is a worldwide security standard developed to protect sensitive cardholder information. Find PCI DSS guidance and forms from the PCI Security Standard Council.

Merchant accounts, in agreement with your acquirer, normally allow you to accept all major debit and credit cards - including Visa, MasterCard and Maestro.

To accept and process a number of major charge cards - including American Express and Diners Club - you must reach a separate agreement with the charge card company. Your acquiring bank may be able to help you with an application.

If you are interested in accepting contactless cards, you should ask your acquiring bank about this too. 

Read UK Finance guidance on contactless card payments.

Card payment training

Before accepting card payments, make sure your employees are trained in how to:

• use the terminal
• avoid fraud - see payment card security measures
• respond to any problems, such as a card not swiping properly or the terminal failing

If you want to accept payments directly from customers' credit, debit or charge cards you may choose to set up a merchant account. These are accounts that allow card payments and chargebacks to be made to a merchant-nominated bank account.

You can also accept customer payments through a third party payment processing service or online shopping mall. You can find out more about these in accepting online payments.

Before setting up a merchant account, your acquiring bank will request a wide range of information. This is used to assess your business and to determine the level of charges you'll have to pay for each transaction. You may be asked to provide information relating to:

• your business history and performance
• business accounts
• your projected turnover
• expected average transaction values and volumes on credit and debit cards
• transaction frequencies
• the type of goods you sell
• the proportion of transactions you expect to receive face to face, by phone, mail order, or online
• your suppliers' details
• how you deliver your goods or services

You may need to open a number of merchant accounts if you want to accept card payments for different sales channels. For instance, if you sell goods from a retail shop and through an e-commerce website you'll need separate accounts for your online and face-to-face sales. 

It takes between one and four weeks to open a merchant account. The process may take slightly longer for start-up businesses and banks may want to see additional information - such as a business plan and cashflow forecasts.

Unless a cardholder later disputes a transaction, the card payment process for card present or face-to-face transactions is very simple:

• When customers make a purchase, their card should be inserted or swiped through your terminal - or you key in their card number if you're taking an order by phone or email.
• You key in the transaction amount.
• If the transaction is face to face, in the majority of cases for UK-issued cards, the customer usually has to enter a PIN (personal identification number) to verify the purchase and that they are entering into the transaction. Customers undertaking a contactless transaction simply hold their contactless enabled card up to a secure reader to make their payment.
• The terminal checks to see if the card is valid. In addition, in a majority of cases, the terminal sends details of the transaction via your acquiring bank to your customer's card issuing bank to check if sufficient funds are available to complete the transaction and that the card has not been reported as lost or stolen. Where these checks are pass the transaction is authorised and an authorisation code for the transaction is generated.
• Once a transaction is completed, your bank processes the transaction and credits your account with the customer's money - usually within three to four days. A processing charge is applied by your bank.

However, an authorisation does not guarantee that a transaction is not fraudulent or that it will not be charged back at a later date.

Contactless cards are secured by the same technology that underpins chip & PIN. Although contactless transactions do not usually require a PIN to be entered, occasionally the terminal will ask the cardholder to undertake a full chip & PIN transaction.

Disputed payments

If a cardholder queries a charge made on their card and can show they didn't authorise it - perhaps because the card was stolen - you could be told to refund the cardholder's money. This is known as a chargeback. Chargebacks can be made up to 120 days (this timing may differ depending on the type of card used eg MasterCard or Visa) after the transaction has been debited from the cardholder's account.

For more information see your liability for disputed card payments.

You should shop around and check the costs of accepting card payments. Banks apply different charges depending on a wide range of factors - including the expected overall value of your card transactions and the bank's assessment of your exposure to card fraud.

Remember that you are likely to be charged differently for credit card and debit card transactions. Credit card and charge card processing fees can range from less than 2 per cent to as much as 6 per cent of the value of each transaction. Debit cards are more likely to charge a flat rate of so many pence per transaction and the level may be determined by the number and average value of these transactions.

In addition to transaction charges, other costs you may face include the following:

• A monthly fee if you rent the terminal that is used to accept a chip & PIN transaction, swipe cards or key in card numbers from your bank.
• A service from a payment service provider (PSP) can be used to process transactions on your behalf, and is most likely to be used for internet transactions. PSP charges can be on a per-month or per-transaction basis. See accepting online payments.
• Banks can ask high-risk businesses for a security bond to cover the costs of unauthorised transactions that are refunded later. Criteria can include the amount of online trading you do, average transaction values and the length of time it takes to fulfil an order.

Chargebacks can occur when a customer disputes a card transaction. Your bank can transfer liability to you and reclaim the value of the transaction from your account.

Chargebacks can be made where there has been:

• fraud - for instance, where a transaction has been made with a stolen card or account number
• inadequate customer service - for instance, if a customer did not receive their order or the goods were defective

Even if a transaction has been authorised and has been authenticated with a PIN it does not prevent all types of chargeback. A chargeback can be made up to 120 days after the transaction has been debited or from when the goods or services were due to be received.

Your customers' key statutory rights in relation to the goods and services you provide remain the same whichever payment method is used.

To minimise chargebacks you must verify the identity of people making card payments. In face-to-face transactions the customer's PIN or, where a PIN cannot be used, signature is the most important security measure. If a PIN verified transaction is authorised through your terminal, you won't be liable for a chargeback unless the goods or service are not as described or are faulty. Where you cannot accept a PIN, a clear signature will help but is no guarantee against a chargeback.

Customer/card-not-present transactions - such as internet, mail order or phone transactions - present a greater risk because it is more difficult to verify the customer's identity. You therefore face a greater risk of fraud and the resulting chargebacks.

For advice on protecting your business from payment card fraud, see payment card security measures.

There are a number of steps you can take to reduce the risk of fraudulent card payments. Training is crucial - you should draw up a clear list of security measures and make sure your employees are fully aware of them.

Talk to the bank providing you with your merchant account. Ask them what security measures they recommend.

When the cardholder is present you should:

• check the card hasn't been reported lost or stolen - your terminal will check this when it seeks authorisation
• make sure that the PIN entered verifies the transaction, or where the card is not chip & PIN-enabled that the signature matches the one on the back of the card
• check the card is in the right format and hasn't been tampered with - ask your bank for a card-recognition guide
• check with your bank's authorisation phone line if the card won't swipe - this can happen for innocent reasons but it may indicate a fake card
• beware of people who seem nervous or who try to distract you as you're processing their purchase
• look out for people making hurried and seemingly random purchases, eg several pairs of designer sunglasses or high-priced electronics

For cardholder-not-present transactions, you can:

• ask for the card security code if you have the facility - usually the last three digits on the signature strip or, in the case of an American Express card, four numbers on the front of the card
• ask customers to bring their card when collecting goods
• ask for faxed confirmation of the order with a signature and proof of address
• check the name and address details you have been given with those held by the company which issued the card
• use the Address Verification Service offered by your bank, which checks the numerical details of the cardholder's address with the card issuer
• take advantage of specific programmes aimed at preventing fraudulent transactions - like Verified by Visa and MasterCard SecureCode

Find out about MasterCard SecureCode and read about Verified by Visa.

Find out about fraud prevention measures.

Data protection and security standards

As with any business that stores or processes customers' personal information, you will need to ensure that your business complies with the Data Protection Act. Businesses that don't properly protect their customers' personal information can be fined.

For more information, see General Data Protection Regulation (GDPR) and GDPR penalties and fines.

If you are looking to buy or sell goods or services using payment cards, the main card types to be aware of are:

1. Credit cards

• allow the cardholder to spend up to a specified credit limit
• offer the account holder an interest-free period
• require the account holder to repay at least the minimum amount each month, but charge interest on the unpaid balance
• incur no interest if the bill is paid in full by the specified date
• can be issued to employees, with an approved spending limit

There are numerous credit card providers - most are Visa or MasterCards issued through a bank or building society.

Read more about Visa credit cards and MasterCard credit cards.

2. Debit cards

• are issued in conjunction with a bank or building society current account
• limit the cardholder to the funds available in that account plus any overdraft, if available
• may offer a greater degree of control - you can only spend what's in your account
• have less flexibility than other cards

3. Charge cards

• may require the account holder to pay an annual fee
• allow the cardholder a period of credit, but - to avoid additional fees - this must be paid off in full each month
• can be issued to employees
• allow you to set spending limits

4. Pre-paid cards

• can be provided pre-loaded - eg for staff to pay expenses
• enable businesses to manage and monitor spending
• are available in different currencies, so can be used as an alternative to business travel cards
• usually incur various fees and charges

5. Business travel cards

• operate in the same way as other business credit or charge cards
• can offer a convenient way for staff to pay for business travelling expenses
• often offer additional benefits, such as travel insurance or currency facilities

6. Purchasing cards

• are generally restricted to buyers for large businesses or public sector bodies
• are designed to cut down on paperwork and the need for purchase orders

Issuing payment cards to staff

With the exception of debit cards - which must be used by the signatory - all the other types of payment cards outlined above can be issued to staff for them to make business-related purchases.

Contactless payment technology

Contactless cards utilise the security built into chip and PIN cards, and can be used for transactions of £100 or less. The aim of contactless payments is to speed up transactions.

Read more on contactless cards.

You could use a personal debit or credit card instead of a business card for business expenses, however this means you will be mixing personal debts with business debts.

There are advantages to using payment cards in your business - particularly when cards are issued to staff. But there are several disadvantages to be aware of too.

Advantages of using payment cards for purchases

Advantages of using company credit, debit, charge or pre-paid cards to make purchases include:

• Convenience - cards are quicker and might be cheaper to use than cheques. They're useful for everyday expenses and can be used over the phone and internet.
• Credit - credit or charge cards can offer an interest-free period of varying lengths, dependent on which card issuer you use.
• Most cards are globally recognised - using cards for foreign travel purchases may give you better exchange rates.
• Ability to monitor expenditure - you can specify which employees receive cards and set different credit limits for each card.
• Fast access to cash - cash can be withdrawn from ATMs. However, card issuers may levy a commission and - if given on credit - interest is payable from the day the cash is withdrawn.
• Reduction in administration - with a company credit or charge card, you pay one bill each month, no matter how many purchases you make. Itemised monthly statements can help with your accounting and administrative procedures.

Disadvantages of using payment cards for purchases

Even though you can usually set maximum spending limits on employees' cards, be aware that you're giving your employees the opportunity to spend company money unchecked.

As with personal payment cards, you are also open to the possibility of two further major drawbacks.

• Card fraud - if the card details are discovered or revealed, you may find fraudulent purchases appearing on your statement. If this is due to an employee's negligence, your business will be liable for the payments. Access Take Five's business advice.
• Debt - with the convenience of a plastic card and the time lapse between purchase and payment, it can be tempting to overextend yourself and build up debts for the business. Remember, if you make purchases with a credit card and don't pay off the bill in full, you'll incur interest charges.
• Unchecked spending - even though you can usually set maximum spending limits on employees' cards, you should be aware that you're giving your employees the opportunity to spend company money unchecked.

When you have decided which types of business payment card to use for your business, you will then need to find the right provider.

Debit card choices may be the most straightforward. Your business bank account is most likely to offer a debit card free as part of the package.

However, for other types of card it's worth considering a range of providers as well as your own bank.

Business charge cards are offered by most business banks, and companies such as Barclaycard and American Express. It's worth examining the different deals available and considering a number of key points:

• Is there an annual fee? If so, how much and is it payable for each cardholder?
• Can you give individual cards to chosen employees?
• What are the minimum and maximum spending limits?
• What are the penalties for late payment of your bill?
• Are there any extra perks - eg Air Miles or hotel discounts - that would be useful to your business?

The same considerations generally apply if you're choosing a credit card for your business. But here it's essential to compare the interest rate - usually expressed as the APR (annual percentage rate) - of different deals. The length of any interest-free period is also an important consideration.

Whichever type of card you are looking for, it is advisable to shop around and negotiate. Interest rates, charges, interest-free periods and benefits can vary significantly. Your bank account provider may be prepared to amend its terms if you can show that another provider offers a better deal.

To find out about the deals on offer, go into local bank branches or visit the websites of banks with small-business accounts. Compare business bank accounts with Moneyfacts.

Many businesses accept payment by card for their goods and services, which undoubtedly offer some distinct advantages. However, there are potential drawbacks that should be considered.

Advantages of accepting payment cards for sales

• Responding to customer preferences - people expect to be able to pay by card.
• Encouraging impulse purchases - the customer doesn't need to have cash with them.
• Avoiding lost sales opportunities - if a customer leaves to get cash they may not return.
• Reaching a wider customer base - you can accept payment by phone, mail and online from customers who can't reach your premises.
• Cashflow improvements - card payments usually clear more quickly than cheques, although this depends on your merchant agreement. Funds can take up to four working days to reach a business' bank account for face-to-face sales - this may be different for online sales.
• Improved security - you hold less cash on your premises.
• Easing your admin - a regular statement of card transactions is easier to reconcile than numerous cash transactions.
• Cards can be used internationally and currency conversions are handled automatically - offering an important payment method for tourist-sector businesses or those selling to consumers overseas.
• With card payments, the customer's card is checked to see if it is valid and that it hasn't been reported lost or stolen. In addition, in a majority of cases, the customer's account is checked to ensure the funds are available.

Disadvantages of accepting payment cards for sales

• There are costs involved - though these aren't usually prohibitive. See the costs of accepting card payments.
• Accepting cards can increase your exposure to fraud - see your liability for disputed card payments.
• To accept and process certain major charge cards - including American Express and Diners Club - you must reach a separate agreement with the charge card company.
• You will need to train staff - in the technical and administrative issues of processing a card payment, as well as in fraud prevention measures.

Take into account the expectations of your business sector. If you run a service-sector business or shop selling higher-price goods, life will be difficult if you don't accept cards.

Setting up the necessary bank account and equipment to enable you to accept card payments is a quick and straightforward process. The main things you need to do are:

• Set up a merchant account with an 'acquiring bank' to process card payments. See setting up a merchant account for your business.
• Install the necessary equipment. Most card payments are processed using terminals or integrated tills where cards are swiped through or inserted. Your acquiring bank may provide you with a terminal on a monthly rental basis.
• Connect your terminal or integrated till to a standard telephone line so that transactions can be processed. This can be an existing phone line, but most businesses use a dedicated line.
• Discuss with your acquirer if you need to comply with the Payment Card Industry Data Security Standard (PCI DSS) requirements given the way that you are handling card payments. The PCI DSS is a worldwide security standard developed to protect sensitive cardholder information. Find PCI DSS guidance and forms from the PCI Security Standard Council.

Merchant accounts, in agreement with your acquirer, normally allow you to accept all major debit and credit cards - including Visa, MasterCard and Maestro.

To accept and process a number of major charge cards - including American Express and Diners Club - you must reach a separate agreement with the charge card company. Your acquiring bank may be able to help you with an application.

If you are interested in accepting contactless cards, you should ask your acquiring bank about this too. 

Read UK Finance guidance on contactless card payments.

Card payment training

Before accepting card payments, make sure your employees are trained in how to:

• use the terminal
• avoid fraud - see payment card security measures
• respond to any problems, such as a card not swiping properly or the terminal failing

If you want to accept payments directly from customers' credit, debit or charge cards you may choose to set up a merchant account. These are accounts that allow card payments and chargebacks to be made to a merchant-nominated bank account.

You can also accept customer payments through a third party payment processing service or online shopping mall. You can find out more about these in accepting online payments.

Before setting up a merchant account, your acquiring bank will request a wide range of information. This is used to assess your business and to determine the level of charges you'll have to pay for each transaction. You may be asked to provide information relating to:

• your business history and performance
• business accounts
• your projected turnover
• expected average transaction values and volumes on credit and debit cards
• transaction frequencies
• the type of goods you sell
• the proportion of transactions you expect to receive face to face, by phone, mail order, or online
• your suppliers' details
• how you deliver your goods or services

You may need to open a number of merchant accounts if you want to accept card payments for different sales channels. For instance, if you sell goods from a retail shop and through an e-commerce website you'll need separate accounts for your online and face-to-face sales. 

It takes between one and four weeks to open a merchant account. The process may take slightly longer for start-up businesses and banks may want to see additional information - such as a business plan and cashflow forecasts.

Unless a cardholder later disputes a transaction, the card payment process for card present or face-to-face transactions is very simple:

• When customers make a purchase, their card should be inserted or swiped through your terminal - or you key in their card number if you're taking an order by phone or email.
• You key in the transaction amount.
• If the transaction is face to face, in the majority of cases for UK-issued cards, the customer usually has to enter a PIN (personal identification number) to verify the purchase and that they are entering into the transaction. Customers undertaking a contactless transaction simply hold their contactless enabled card up to a secure reader to make their payment.
• The terminal checks to see if the card is valid. In addition, in a majority of cases, the terminal sends details of the transaction via your acquiring bank to your customer's card issuing bank to check if sufficient funds are available to complete the transaction and that the card has not been reported as lost or stolen. Where these checks are pass the transaction is authorised and an authorisation code for the transaction is generated.
• Once a transaction is completed, your bank processes the transaction and credits your account with the customer's money - usually within three to four days. A processing charge is applied by your bank.

However, an authorisation does not guarantee that a transaction is not fraudulent or that it will not be charged back at a later date.

Contactless cards are secured by the same technology that underpins chip & PIN. Although contactless transactions do not usually require a PIN to be entered, occasionally the terminal will ask the cardholder to undertake a full chip & PIN transaction.

Disputed payments

If a cardholder queries a charge made on their card and can show they didn't authorise it - perhaps because the card was stolen - you could be told to refund the cardholder's money. This is known as a chargeback. Chargebacks can be made up to 120 days (this timing may differ depending on the type of card used eg MasterCard or Visa) after the transaction has been debited from the cardholder's account.

For more information see your liability for disputed card payments.

You should shop around and check the costs of accepting card payments. Banks apply different charges depending on a wide range of factors - including the expected overall value of your card transactions and the bank's assessment of your exposure to card fraud.

Remember that you are likely to be charged differently for credit card and debit card transactions. Credit card and charge card processing fees can range from less than 2 per cent to as much as 6 per cent of the value of each transaction. Debit cards are more likely to charge a flat rate of so many pence per transaction and the level may be determined by the number and average value of these transactions.

In addition to transaction charges, other costs you may face include the following:

• A monthly fee if you rent the terminal that is used to accept a chip & PIN transaction, swipe cards or key in card numbers from your bank.
• A service from a payment service provider (PSP) can be used to process transactions on your behalf, and is most likely to be used for internet transactions. PSP charges can be on a per-month or per-transaction basis. See accepting online payments.
• Banks can ask high-risk businesses for a security bond to cover the costs of unauthorised transactions that are refunded later. Criteria can include the amount of online trading you do, average transaction values and the length of time it takes to fulfil an order.

Chargebacks can occur when a customer disputes a card transaction. Your bank can transfer liability to you and reclaim the value of the transaction from your account.

Chargebacks can be made where there has been:

• fraud - for instance, where a transaction has been made with a stolen card or account number
• inadequate customer service - for instance, if a customer did not receive their order or the goods were defective

Even if a transaction has been authorised and has been authenticated with a PIN it does not prevent all types of chargeback. A chargeback can be made up to 120 days after the transaction has been debited or from when the goods or services were due to be received.

Your customers' key statutory rights in relation to the goods and services you provide remain the same whichever payment method is used.

To minimise chargebacks you must verify the identity of people making card payments. In face-to-face transactions the customer's PIN or, where a PIN cannot be used, signature is the most important security measure. If a PIN verified transaction is authorised through your terminal, you won't be liable for a chargeback unless the goods or service are not as described or are faulty. Where you cannot accept a PIN, a clear signature will help but is no guarantee against a chargeback.

Customer/card-not-present transactions - such as internet, mail order or phone transactions - present a greater risk because it is more difficult to verify the customer's identity. You therefore face a greater risk of fraud and the resulting chargebacks.

For advice on protecting your business from payment card fraud, see payment card security measures.

There are a number of steps you can take to reduce the risk of fraudulent card payments. Training is crucial - you should draw up a clear list of security measures and make sure your employees are fully aware of them.

Talk to the bank providing you with your merchant account. Ask them what security measures they recommend.

When the cardholder is present you should:

• check the card hasn't been reported lost or stolen - your terminal will check this when it seeks authorisation
• make sure that the PIN entered verifies the transaction, or where the card is not chip & PIN-enabled that the signature matches the one on the back of the card
• check the card is in the right format and hasn't been tampered with - ask your bank for a card-recognition guide
• check with your bank's authorisation phone line if the card won't swipe - this can happen for innocent reasons but it may indicate a fake card
• beware of people who seem nervous or who try to distract you as you're processing their purchase
• look out for people making hurried and seemingly random purchases, eg several pairs of designer sunglasses or high-priced electronics

For cardholder-not-present transactions, you can:

• ask for the card security code if you have the facility - usually the last three digits on the signature strip or, in the case of an American Express card, four numbers on the front of the card
• ask customers to bring their card when collecting goods
• ask for faxed confirmation of the order with a signature and proof of address
• check the name and address details you have been given with those held by the company which issued the card
• use the Address Verification Service offered by your bank, which checks the numerical details of the cardholder's address with the card issuer
• take advantage of specific programmes aimed at preventing fraudulent transactions - like Verified by Visa and MasterCard SecureCode

Find out about MasterCard SecureCode and read about Verified by Visa.

Find out about fraud prevention measures.

Data protection and security standards

As with any business that stores or processes customers' personal information, you will need to ensure that your business complies with the Data Protection Act. Businesses that don't properly protect their customers' personal information can be fined.

For more information, see General Data Protection Regulation (GDPR) and GDPR penalties and fines.

If you are looking to buy or sell goods or services using payment cards, the main card types to be aware of are:

1. Credit cards

• allow the cardholder to spend up to a specified credit limit
• offer the account holder an interest-free period
• require the account holder to repay at least the minimum amount each month, but charge interest on the unpaid balance
• incur no interest if the bill is paid in full by the specified date
• can be issued to employees, with an approved spending limit

There are numerous credit card providers - most are Visa or MasterCards issued through a bank or building society.

Read more about Visa credit cards and MasterCard credit cards.

2. Debit cards

• are issued in conjunction with a bank or building society current account
• limit the cardholder to the funds available in that account plus any overdraft, if available
• may offer a greater degree of control - you can only spend what's in your account
• have less flexibility than other cards

3. Charge cards

• may require the account holder to pay an annual fee
• allow the cardholder a period of credit, but - to avoid additional fees - this must be paid off in full each month
• can be issued to employees
• allow you to set spending limits

4. Pre-paid cards

• can be provided pre-loaded - eg for staff to pay expenses
• enable businesses to manage and monitor spending
• are available in different currencies, so can be used as an alternative to business travel cards
• usually incur various fees and charges

5. Business travel cards

• operate in the same way as other business credit or charge cards
• can offer a convenient way for staff to pay for business travelling expenses
• often offer additional benefits, such as travel insurance or currency facilities

6. Purchasing cards

• are generally restricted to buyers for large businesses or public sector bodies
• are designed to cut down on paperwork and the need for purchase orders

Issuing payment cards to staff

With the exception of debit cards - which must be used by the signatory - all the other types of payment cards outlined above can be issued to staff for them to make business-related purchases.

Contactless payment technology

Contactless cards utilise the security built into chip and PIN cards, and can be used for transactions of £100 or less. The aim of contactless payments is to speed up transactions.

Read more on contactless cards.

You could use a personal debit or credit card instead of a business card for business expenses, however this means you will be mixing personal debts with business debts.

There are advantages to using payment cards in your business - particularly when cards are issued to staff. But there are several disadvantages to be aware of too.

Advantages of using payment cards for purchases

Advantages of using company credit, debit, charge or pre-paid cards to make purchases include:

• Convenience - cards are quicker and might be cheaper to use than cheques. They're useful for everyday expenses and can be used over the phone and internet.
• Credit - credit or charge cards can offer an interest-free period of varying lengths, dependent on which card issuer you use.
• Most cards are globally recognised - using cards for foreign travel purchases may give you better exchange rates.
• Ability to monitor expenditure - you can specify which employees receive cards and set different credit limits for each card.
• Fast access to cash - cash can be withdrawn from ATMs. However, card issuers may levy a commission and - if given on credit - interest is payable from the day the cash is withdrawn.
• Reduction in administration - with a company credit or charge card, you pay one bill each month, no matter how many purchases you make. Itemised monthly statements can help with your accounting and administrative procedures.

Disadvantages of using payment cards for purchases

Even though you can usually set maximum spending limits on employees' cards, be aware that you're giving your employees the opportunity to spend company money unchecked.

As with personal payment cards, you are also open to the possibility of two further major drawbacks.

• Card fraud - if the card details are discovered or revealed, you may find fraudulent purchases appearing on your statement. If this is due to an employee's negligence, your business will be liable for the payments. Access Take Five's business advice.
• Debt - with the convenience of a plastic card and the time lapse between purchase and payment, it can be tempting to overextend yourself and build up debts for the business. Remember, if you make purchases with a credit card and don't pay off the bill in full, you'll incur interest charges.
• Unchecked spending - even though you can usually set maximum spending limits on employees' cards, you should be aware that you're giving your employees the opportunity to spend company money unchecked.

When you have decided which types of business payment card to use for your business, you will then need to find the right provider.

Debit card choices may be the most straightforward. Your business bank account is most likely to offer a debit card free as part of the package.

However, for other types of card it's worth considering a range of providers as well as your own bank.

Business charge cards are offered by most business banks, and companies such as Barclaycard and American Express. It's worth examining the different deals available and considering a number of key points:

• Is there an annual fee? If so, how much and is it payable for each cardholder?
• Can you give individual cards to chosen employees?
• What are the minimum and maximum spending limits?
• What are the penalties for late payment of your bill?
• Are there any extra perks - eg Air Miles or hotel discounts - that would be useful to your business?

The same considerations generally apply if you're choosing a credit card for your business. But here it's essential to compare the interest rate - usually expressed as the APR (annual percentage rate) - of different deals. The length of any interest-free period is also an important consideration.

Whichever type of card you are looking for, it is advisable to shop around and negotiate. Interest rates, charges, interest-free periods and benefits can vary significantly. Your bank account provider may be prepared to amend its terms if you can show that another provider offers a better deal.

To find out about the deals on offer, go into local bank branches or visit the websites of banks with small-business accounts. Compare business bank accounts with Moneyfacts.

Many businesses accept payment by card for their goods and services, which undoubtedly offer some distinct advantages. However, there are potential drawbacks that should be considered.

Advantages of accepting payment cards for sales

• Responding to customer preferences - people expect to be able to pay by card.
• Encouraging impulse purchases - the customer doesn't need to have cash with them.
• Avoiding lost sales opportunities - if a customer leaves to get cash they may not return.
• Reaching a wider customer base - you can accept payment by phone, mail and online from customers who can't reach your premises.
• Cashflow improvements - card payments usually clear more quickly than cheques, although this depends on your merchant agreement. Funds can take up to four working days to reach a business' bank account for face-to-face sales - this may be different for online sales.
• Improved security - you hold less cash on your premises.
• Easing your admin - a regular statement of card transactions is easier to reconcile than numerous cash transactions.
• Cards can be used internationally and currency conversions are handled automatically - offering an important payment method for tourist-sector businesses or those selling to consumers overseas.
• With card payments, the customer's card is checked to see if it is valid and that it hasn't been reported lost or stolen. In addition, in a majority of cases, the customer's account is checked to ensure the funds are available.

Disadvantages of accepting payment cards for sales

• There are costs involved - though these aren't usually prohibitive. See the costs of accepting card payments.
• Accepting cards can increase your exposure to fraud - see your liability for disputed card payments.
• To accept and process certain major charge cards - including American Express and Diners Club - you must reach a separate agreement with the charge card company.
• You will need to train staff - in the technical and administrative issues of processing a card payment, as well as in fraud prevention measures.

Take into account the expectations of your business sector. If you run a service-sector business or shop selling higher-price goods, life will be difficult if you don't accept cards.

Setting up the necessary bank account and equipment to enable you to accept card payments is a quick and straightforward process. The main things you need to do are:

• Set up a merchant account with an 'acquiring bank' to process card payments. See setting up a merchant account for your business.
• Install the necessary equipment. Most card payments are processed using terminals or integrated tills where cards are swiped through or inserted. Your acquiring bank may provide you with a terminal on a monthly rental basis.
• Connect your terminal or integrated till to a standard telephone line so that transactions can be processed. This can be an existing phone line, but most businesses use a dedicated line.
• Discuss with your acquirer if you need to comply with the Payment Card Industry Data Security Standard (PCI DSS) requirements given the way that you are handling card payments. The PCI DSS is a worldwide security standard developed to protect sensitive cardholder information. Find PCI DSS guidance and forms from the PCI Security Standard Council.

Merchant accounts, in agreement with your acquirer, normally allow you to accept all major debit and credit cards - including Visa, MasterCard and Maestro.

To accept and process a number of major charge cards - including American Express and Diners Club - you must reach a separate agreement with the charge card company. Your acquiring bank may be able to help you with an application.

If you are interested in accepting contactless cards, you should ask your acquiring bank about this too. 

Read UK Finance guidance on contactless card payments.

Card payment training

Before accepting card payments, make sure your employees are trained in how to:

• use the terminal
• avoid fraud - see payment card security measures
• respond to any problems, such as a card not swiping properly or the terminal failing

If you want to accept payments directly from customers' credit, debit or charge cards you may choose to set up a merchant account. These are accounts that allow card payments and chargebacks to be made to a merchant-nominated bank account.

You can also accept customer payments through a third party payment processing service or online shopping mall. You can find out more about these in accepting online payments.

Before setting up a merchant account, your acquiring bank will request a wide range of information. This is used to assess your business and to determine the level of charges you'll have to pay for each transaction. You may be asked to provide information relating to:

• your business history and performance
• business accounts
• your projected turnover
• expected average transaction values and volumes on credit and debit cards
• transaction frequencies
• the type of goods you sell
• the proportion of transactions you expect to receive face to face, by phone, mail order, or online
• your suppliers' details
• how you deliver your goods or services

You may need to open a number of merchant accounts if you want to accept card payments for different sales channels. For instance, if you sell goods from a retail shop and through an e-commerce website you'll need separate accounts for your online and face-to-face sales. 

It takes between one and four weeks to open a merchant account. The process may take slightly longer for start-up businesses and banks may want to see additional information - such as a business plan and cashflow forecasts.

Unless a cardholder later disputes a transaction, the card payment process for card present or face-to-face transactions is very simple:

• When customers make a purchase, their card should be inserted or swiped through your terminal - or you key in their card number if you're taking an order by phone or email.
• You key in the transaction amount.
• If the transaction is face to face, in the majority of cases for UK-issued cards, the customer usually has to enter a PIN (personal identification number) to verify the purchase and that they are entering into the transaction. Customers undertaking a contactless transaction simply hold their contactless enabled card up to a secure reader to make their payment.
• The terminal checks to see if the card is valid. In addition, in a majority of cases, the terminal sends details of the transaction via your acquiring bank to your customer's card issuing bank to check if sufficient funds are available to complete the transaction and that the card has not been reported as lost or stolen. Where these checks are pass the transaction is authorised and an authorisation code for the transaction is generated.
• Once a transaction is completed, your bank processes the transaction and credits your account with the customer's money - usually within three to four days. A processing charge is applied by your bank.

However, an authorisation does not guarantee that a transaction is not fraudulent or that it will not be charged back at a later date.

Contactless cards are secured by the same technology that underpins chip & PIN. Although contactless transactions do not usually require a PIN to be entered, occasionally the terminal will ask the cardholder to undertake a full chip & PIN transaction.

Disputed payments

If a cardholder queries a charge made on their card and can show they didn't authorise it - perhaps because the card was stolen - you could be told to refund the cardholder's money. This is known as a chargeback. Chargebacks can be made up to 120 days (this timing may differ depending on the type of card used eg MasterCard or Visa) after the transaction has been debited from the cardholder's account.

For more information see your liability for disputed card payments.

You should shop around and check the costs of accepting card payments. Banks apply different charges depending on a wide range of factors - including the expected overall value of your card transactions and the bank's assessment of your exposure to card fraud.

Remember that you are likely to be charged differently for credit card and debit card transactions. Credit card and charge card processing fees can range from less than 2 per cent to as much as 6 per cent of the value of each transaction. Debit cards are more likely to charge a flat rate of so many pence per transaction and the level may be determined by the number and average value of these transactions.

In addition to transaction charges, other costs you may face include the following:

• A monthly fee if you rent the terminal that is used to accept a chip & PIN transaction, swipe cards or key in card numbers from your bank.
• A service from a payment service provider (PSP) can be used to process transactions on your behalf, and is most likely to be used for internet transactions. PSP charges can be on a per-month or per-transaction basis. See accepting online payments.
• Banks can ask high-risk businesses for a security bond to cover the costs of unauthorised transactions that are refunded later. Criteria can include the amount of online trading you do, average transaction values and the length of time it takes to fulfil an order.

Chargebacks can occur when a customer disputes a card transaction. Your bank can transfer liability to you and reclaim the value of the transaction from your account.

Chargebacks can be made where there has been:

• fraud - for instance, where a transaction has been made with a stolen card or account number
• inadequate customer service - for instance, if a customer did not receive their order or the goods were defective

Even if a transaction has been authorised and has been authenticated with a PIN it does not prevent all types of chargeback. A chargeback can be made up to 120 days after the transaction has been debited or from when the goods or services were due to be received.

Your customers' key statutory rights in relation to the goods and services you provide remain the same whichever payment method is used.

To minimise chargebacks you must verify the identity of people making card payments. In face-to-face transactions the customer's PIN or, where a PIN cannot be used, signature is the most important security measure. If a PIN verified transaction is authorised through your terminal, you won't be liable for a chargeback unless the goods or service are not as described or are faulty. Where you cannot accept a PIN, a clear signature will help but is no guarantee against a chargeback.

Customer/card-not-present transactions - such as internet, mail order or phone transactions - present a greater risk because it is more difficult to verify the customer's identity. You therefore face a greater risk of fraud and the resulting chargebacks.

For advice on protecting your business from payment card fraud, see payment card security measures.

There are a number of steps you can take to reduce the risk of fraudulent card payments. Training is crucial - you should draw up a clear list of security measures and make sure your employees are fully aware of them.

Talk to the bank providing you with your merchant account. Ask them what security measures they recommend.

When the cardholder is present you should:

• check the card hasn't been reported lost or stolen - your terminal will check this when it seeks authorisation
• make sure that the PIN entered verifies the transaction, or where the card is not chip & PIN-enabled that the signature matches the one on the back of the card
• check the card is in the right format and hasn't been tampered with - ask your bank for a card-recognition guide
• check with your bank's authorisation phone line if the card won't swipe - this can happen for innocent reasons but it may indicate a fake card
• beware of people who seem nervous or who try to distract you as you're processing their purchase
• look out for people making hurried and seemingly random purchases, eg several pairs of designer sunglasses or high-priced electronics

For cardholder-not-present transactions, you can:

• ask for the card security code if you have the facility - usually the last three digits on the signature strip or, in the case of an American Express card, four numbers on the front of the card
• ask customers to bring their card when collecting goods
• ask for faxed confirmation of the order with a signature and proof of address
• check the name and address details you have been given with those held by the company which issued the card
• use the Address Verification Service offered by your bank, which checks the numerical details of the cardholder's address with the card issuer
• take advantage of specific programmes aimed at preventing fraudulent transactions - like Verified by Visa and MasterCard SecureCode

Find out about MasterCard SecureCode and read about Verified by Visa.

Find out about fraud prevention measures.

Data protection and security standards

As with any business that stores or processes customers' personal information, you will need to ensure that your business complies with the Data Protection Act. Businesses that don't properly protect their customers' personal information can be fined.

For more information, see General Data Protection Regulation (GDPR) and GDPR penalties and fines.

If you are looking to buy or sell goods or services using payment cards, the main card types to be aware of are:

1. Credit cards

• allow the cardholder to spend up to a specified credit limit
• offer the account holder an interest-free period
• require the account holder to repay at least the minimum amount each month, but charge interest on the unpaid balance
• incur no interest if the bill is paid in full by the specified date
• can be issued to employees, with an approved spending limit

There are numerous credit card providers - most are Visa or MasterCards issued through a bank or building society.

Read more about Visa credit cards and MasterCard credit cards.

2. Debit cards

• are issued in conjunction with a bank or building society current account
• limit the cardholder to the funds available in that account plus any overdraft, if available
• may offer a greater degree of control - you can only spend what's in your account
• have less flexibility than other cards

3. Charge cards

• may require the account holder to pay an annual fee
• allow the cardholder a period of credit, but - to avoid additional fees - this must be paid off in full each month
• can be issued to employees
• allow you to set spending limits

4. Pre-paid cards

• can be provided pre-loaded - eg for staff to pay expenses
• enable businesses to manage and monitor spending
• are available in different currencies, so can be used as an alternative to business travel cards
• usually incur various fees and charges

5. Business travel cards

• operate in the same way as other business credit or charge cards
• can offer a convenient way for staff to pay for business travelling expenses
• often offer additional benefits, such as travel insurance or currency facilities

6. Purchasing cards

• are generally restricted to buyers for large businesses or public sector bodies
• are designed to cut down on paperwork and the need for purchase orders

Issuing payment cards to staff

With the exception of debit cards - which must be used by the signatory - all the other types of payment cards outlined above can be issued to staff for them to make business-related purchases.

Contactless payment technology

Contactless cards utilise the security built into chip and PIN cards, and can be used for transactions of £100 or less. The aim of contactless payments is to speed up transactions.

Read more on contactless cards.

You could use a personal debit or credit card instead of a business card for business expenses, however this means you will be mixing personal debts with business debts.

There are advantages to using payment cards in your business - particularly when cards are issued to staff. But there are several disadvantages to be aware of too.

Advantages of using payment cards for purchases

Advantages of using company credit, debit, charge or pre-paid cards to make purchases include:

• Convenience - cards are quicker and might be cheaper to use than cheques. They're useful for everyday expenses and can be used over the phone and internet.
• Credit - credit or charge cards can offer an interest-free period of varying lengths, dependent on which card issuer you use.
• Most cards are globally recognised - using cards for foreign travel purchases may give you better exchange rates.
• Ability to monitor expenditure - you can specify which employees receive cards and set different credit limits for each card.
• Fast access to cash - cash can be withdrawn from ATMs. However, card issuers may levy a commission and - if given on credit - interest is payable from the day the cash is withdrawn.
• Reduction in administration - with a company credit or charge card, you pay one bill each month, no matter how many purchases you make. Itemised monthly statements can help with your accounting and administrative procedures.

Disadvantages of using payment cards for purchases

Even though you can usually set maximum spending limits on employees' cards, be aware that you're giving your employees the opportunity to spend company money unchecked.

As with personal payment cards, you are also open to the possibility of two further major drawbacks.

• Card fraud - if the card details are discovered or revealed, you may find fraudulent purchases appearing on your statement. If this is due to an employee's negligence, your business will be liable for the payments. Access Take Five's business advice.
• Debt - with the convenience of a plastic card and the time lapse between purchase and payment, it can be tempting to overextend yourself and build up debts for the business. Remember, if you make purchases with a credit card and don't pay off the bill in full, you'll incur interest charges.
• Unchecked spending - even though you can usually set maximum spending limits on employees' cards, you should be aware that you're giving your employees the opportunity to spend company money unchecked.

When you have decided which types of business payment card to use for your business, you will then need to find the right provider.

Debit card choices may be the most straightforward. Your business bank account is most likely to offer a debit card free as part of the package.

However, for other types of card it's worth considering a range of providers as well as your own bank.

Business charge cards are offered by most business banks, and companies such as Barclaycard and American Express. It's worth examining the different deals available and considering a number of key points:

• Is there an annual fee? If so, how much and is it payable for each cardholder?
• Can you give individual cards to chosen employees?
• What are the minimum and maximum spending limits?
• What are the penalties for late payment of your bill?
• Are there any extra perks - eg Air Miles or hotel discounts - that would be useful to your business?

The same considerations generally apply if you're choosing a credit card for your business. But here it's essential to compare the interest rate - usually expressed as the APR (annual percentage rate) - of different deals. The length of any interest-free period is also an important consideration.

Whichever type of card you are looking for, it is advisable to shop around and negotiate. Interest rates, charges, interest-free periods and benefits can vary significantly. Your bank account provider may be prepared to amend its terms if you can show that another provider offers a better deal.

To find out about the deals on offer, go into local bank branches or visit the websites of banks with small-business accounts. Compare business bank accounts with Moneyfacts.

Many businesses accept payment by card for their goods and services, which undoubtedly offer some distinct advantages. However, there are potential drawbacks that should be considered.

Advantages of accepting payment cards for sales

• Responding to customer preferences - people expect to be able to pay by card.
• Encouraging impulse purchases - the customer doesn't need to have cash with them.
• Avoiding lost sales opportunities - if a customer leaves to get cash they may not return.
• Reaching a wider customer base - you can accept payment by phone, mail and online from customers who can't reach your premises.
• Cashflow improvements - card payments usually clear more quickly than cheques, although this depends on your merchant agreement. Funds can take up to four working days to reach a business' bank account for face-to-face sales - this may be different for online sales.
• Improved security - you hold less cash on your premises.
• Easing your admin - a regular statement of card transactions is easier to reconcile than numerous cash transactions.
• Cards can be used internationally and currency conversions are handled automatically - offering an important payment method for tourist-sector businesses or those selling to consumers overseas.
• With card payments, the customer's card is checked to see if it is valid and that it hasn't been reported lost or stolen. In addition, in a majority of cases, the customer's account is checked to ensure the funds are available.

Disadvantages of accepting payment cards for sales

• There are costs involved - though these aren't usually prohibitive. See the costs of accepting card payments.
• Accepting cards can increase your exposure to fraud - see your liability for disputed card payments.
• To accept and process certain major charge cards - including American Express and Diners Club - you must reach a separate agreement with the charge card company.
• You will need to train staff - in the technical and administrative issues of processing a card payment, as well as in fraud prevention measures.

Take into account the expectations of your business sector. If you run a service-sector business or shop selling higher-price goods, life will be difficult if you don't accept cards.

Setting up the necessary bank account and equipment to enable you to accept card payments is a quick and straightforward process. The main things you need to do are:

• Set up a merchant account with an 'acquiring bank' to process card payments. See setting up a merchant account for your business.
• Install the necessary equipment. Most card payments are processed using terminals or integrated tills where cards are swiped through or inserted. Your acquiring bank may provide you with a terminal on a monthly rental basis.
• Connect your terminal or integrated till to a standard telephone line so that transactions can be processed. This can be an existing phone line, but most businesses use a dedicated line.
• Discuss with your acquirer if you need to comply with the Payment Card Industry Data Security Standard (PCI DSS) requirements given the way that you are handling card payments. The PCI DSS is a worldwide security standard developed to protect sensitive cardholder information. Find PCI DSS guidance and forms from the PCI Security Standard Council.

Merchant accounts, in agreement with your acquirer, normally allow you to accept all major debit and credit cards - including Visa, MasterCard and Maestro.

To accept and process a number of major charge cards - including American Express and Diners Club - you must reach a separate agreement with the charge card company. Your acquiring bank may be able to help you with an application.

If you are interested in accepting contactless cards, you should ask your acquiring bank about this too. 

Read UK Finance guidance on contactless card payments.

Card payment training

Before accepting card payments, make sure your employees are trained in how to:

• use the terminal
• avoid fraud - see payment card security measures
• respond to any problems, such as a card not swiping properly or the terminal failing

If you want to accept payments directly from customers' credit, debit or charge cards you may choose to set up a merchant account. These are accounts that allow card payments and chargebacks to be made to a merchant-nominated bank account.

You can also accept customer payments through a third party payment processing service or online shopping mall. You can find out more about these in accepting online payments.

Before setting up a merchant account, your acquiring bank will request a wide range of information. This is used to assess your business and to determine the level of charges you'll have to pay for each transaction. You may be asked to provide information relating to:

• your business history and performance
• business accounts
• your projected turnover
• expected average transaction values and volumes on credit and debit cards
• transaction frequencies
• the type of goods you sell
• the proportion of transactions you expect to receive face to face, by phone, mail order, or online
• your suppliers' details
• how you deliver your goods or services

You may need to open a number of merchant accounts if you want to accept card payments for different sales channels. For instance, if you sell goods from a retail shop and through an e-commerce website you'll need separate accounts for your online and face-to-face sales. 

It takes between one and four weeks to open a merchant account. The process may take slightly longer for start-up businesses and banks may want to see additional information - such as a business plan and cashflow forecasts.

Unless a cardholder later disputes a transaction, the card payment process for card present or face-to-face transactions is very simple:

• When customers make a purchase, their card should be inserted or swiped through your terminal - or you key in their card number if you're taking an order by phone or email.
• You key in the transaction amount.
• If the transaction is face to face, in the majority of cases for UK-issued cards, the customer usually has to enter a PIN (personal identification number) to verify the purchase and that they are entering into the transaction. Customers undertaking a contactless transaction simply hold their contactless enabled card up to a secure reader to make their payment.
• The terminal checks to see if the card is valid. In addition, in a majority of cases, the terminal sends details of the transaction via your acquiring bank to your customer's card issuing bank to check if sufficient funds are available to complete the transaction and that the card has not been reported as lost or stolen. Where these checks are pass the transaction is authorised and an authorisation code for the transaction is generated.
• Once a transaction is completed, your bank processes the transaction and credits your account with the customer's money - usually within three to four days. A processing charge is applied by your bank.

However, an authorisation does not guarantee that a transaction is not fraudulent or that it will not be charged back at a later date.

Contactless cards are secured by the same technology that underpins chip & PIN. Although contactless transactions do not usually require a PIN to be entered, occasionally the terminal will ask the cardholder to undertake a full chip & PIN transaction.

Disputed payments

If a cardholder queries a charge made on their card and can show they didn't authorise it - perhaps because the card was stolen - you could be told to refund the cardholder's money. This is known as a chargeback. Chargebacks can be made up to 120 days (this timing may differ depending on the type of card used eg MasterCard or Visa) after the transaction has been debited from the cardholder's account.

For more information see your liability for disputed card payments.

You should shop around and check the costs of accepting card payments. Banks apply different charges depending on a wide range of factors - including the expected overall value of your card transactions and the bank's assessment of your exposure to card fraud.

Remember that you are likely to be charged differently for credit card and debit card transactions. Credit card and charge card processing fees can range from less than 2 per cent to as much as 6 per cent of the value of each transaction. Debit cards are more likely to charge a flat rate of so many pence per transaction and the level may be determined by the number and average value of these transactions.

In addition to transaction charges, other costs you may face include the following:

• A monthly fee if you rent the terminal that is used to accept a chip & PIN transaction, swipe cards or key in card numbers from your bank.
• A service from a payment service provider (PSP) can be used to process transactions on your behalf, and is most likely to be used for internet transactions. PSP charges can be on a per-month or per-transaction basis. See accepting online payments.
• Banks can ask high-risk businesses for a security bond to cover the costs of unauthorised transactions that are refunded later. Criteria can include the amount of online trading you do, average transaction values and the length of time it takes to fulfil an order.

Chargebacks can occur when a customer disputes a card transaction. Your bank can transfer liability to you and reclaim the value of the transaction from your account.

Chargebacks can be made where there has been:

• fraud - for instance, where a transaction has been made with a stolen card or account number
• inadequate customer service - for instance, if a customer did not receive their order or the goods were defective

Even if a transaction has been authorised and has been authenticated with a PIN it does not prevent all types of chargeback. A chargeback can be made up to 120 days after the transaction has been debited or from when the goods or services were due to be received.

Your customers' key statutory rights in relation to the goods and services you provide remain the same whichever payment method is used.

To minimise chargebacks you must verify the identity of people making card payments. In face-to-face transactions the customer's PIN or, where a PIN cannot be used, signature is the most important security measure. If a PIN verified transaction is authorised through your terminal, you won't be liable for a chargeback unless the goods or service are not as described or are faulty. Where you cannot accept a PIN, a clear signature will help but is no guarantee against a chargeback.

Customer/card-not-present transactions - such as internet, mail order or phone transactions - present a greater risk because it is more difficult to verify the customer's identity. You therefore face a greater risk of fraud and the resulting chargebacks.

For advice on protecting your business from payment card fraud, see payment card security measures.

There are a number of steps you can take to reduce the risk of fraudulent card payments. Training is crucial - you should draw up a clear list of security measures and make sure your employees are fully aware of them.

Talk to the bank providing you with your merchant account. Ask them what security measures they recommend.

When the cardholder is present you should:

• check the card hasn't been reported lost or stolen - your terminal will check this when it seeks authorisation
• make sure that the PIN entered verifies the transaction, or where the card is not chip & PIN-enabled that the signature matches the one on the back of the card
• check the card is in the right format and hasn't been tampered with - ask your bank for a card-recognition guide
• check with your bank's authorisation phone line if the card won't swipe - this can happen for innocent reasons but it may indicate a fake card
• beware of people who seem nervous or who try to distract you as you're processing their purchase
• look out for people making hurried and seemingly random purchases, eg several pairs of designer sunglasses or high-priced electronics

For cardholder-not-present transactions, you can:

• ask for the card security code if you have the facility - usually the last three digits on the signature strip or, in the case of an American Express card, four numbers on the front of the card
• ask customers to bring their card when collecting goods
• ask for faxed confirmation of the order with a signature and proof of address
• check the name and address details you have been given with those held by the company which issued the card
• use the Address Verification Service offered by your bank, which checks the numerical details of the cardholder's address with the card issuer
• take advantage of specific programmes aimed at preventing fraudulent transactions - like Verified by Visa and MasterCard SecureCode

Find out about MasterCard SecureCode and read about Verified by Visa.

Find out about fraud prevention measures.

Data protection and security standards

As with any business that stores or processes customers' personal information, you will need to ensure that your business complies with the Data Protection Act. Businesses that don't properly protect their customers' personal information can be fined.

For more information, see General Data Protection Regulation (GDPR) and GDPR penalties and fines.