Online payments provide a means of getting money from your customer or donor to your bank account. 

It’s worth taking the time to understand how an online transaction process works. You will then know how long it will take and what is involved. But first, you’ll need to understand some of the terminology involved.

Online payments allow you to easily make and receive payments from your customers or suppliers. This guide sets out the process and how long payments take.

Important terms

A merchant account is an account that exclusively holds funds from card transactions. These funds are regularly transferred to your organisation’s bank account by your Merchant Acquirer.

An Issuer / Issuing bank is the bank (or financial institution) that issued a customer with their card and maintains a contract with them for repayment of card transactions.

A payment gateway is a service provider, often referred to as a Payment Service Provider (PSP). It links your website’s shopping basket or donor form to the card processing network. Lloyds Bank Cardnet has a Payment Gateway platform that supports this requirement.

You must choose a suitable Payment Gateway to meet your business's initial and future needs. Ideally, it should support tokenisation which enables your customers to securely store their card details in a virtual wallet to simplify payment at your checkout.

Fraudsters regularly target ecommerce websites so choose a Gateway with good fraud management.

A Merchant Acquirer will handle the transaction, moving it through the processing network. They will also send you a billing statement.

How the process works

1. Your customer buys an item on your website with a credit or debit card, or with Google Pay® or Apple Pay®.

2. Their personal details and card information then pass through the payment gateway. Their data is encrypted to protect it before forwarding it to the merchant acquirer.

3. The merchant acquirer sends a request to the customer’s issuing bank for funds to pay for the items or services they wish to purchase.

4. The issuer will either approve or refuse the transaction.

5. If approved, the result is passed back through the payment gateway to advise that:

a. the transaction is accepted
b. your merchant acquirer should credit your account.

The customer will then be told whether or not their payment is accepted.
If the payment is refused, you can simply cancel the purchase with the buyer, or request an alternative card or payment method.
This entire first part of the process takes place within a few seconds. The second part, known as settlement, can take up to a few days.

6. The card issuer sends the funds to your merchant acquirer, which deposits the money into your bank account.

7. The funds are now available for you to use. Your bank may let you access your money before it is even sent to them, but this can vary between banks and accounts.
Your bank may also ringfence some of the money in your account so that you can’t yet spend it. This is known as a reserve. It’s done in case the customer decides to return the goods later. Under the Distance Selling Regulations, customers have the right to change their minds within 14 days.

A flow chart showing the route a transaction makes between consumer, merchant or shopping cart. Payment gateway, Bank, Processor, Issuer, Card Networks Directory Severs and 3DS Server.

When considering provider options, make sure you fully understand the charges

These can include:

  • a Merchant Service Charge (MSC)
  • set up fees 
  • monthly fees.

Make sure your customers’ money is safe. 

This should inform your decisions about how you build your website, which providers you select and how they integrate. 

Some solutions have secure built-in payment software modules that connect to secure payment gateways.  

If you haven’t chosen a packaged approach you should select secure, third-party payment software. They’re vital when it comes to protecting your customers' payment details. Options include Google Wallet®† or Paypal†.

There are also secure payment options designed specifically for non-profit organisations. Options for accepting donations include Blackbaud† and DonorPerfect†.

† These are just examples of the types of software available and Lloyds Bank does not endorse the services they provide.

Cardnet® is a registered trademark of Lloyds Bank plc.

Google Pay® is a registered trademark of Google LLC.

Important legal information

Lloyds Bank is a trading name of Lloyds Bank plc, Bank of Scotland plc, Lloyds Bank Corporate Markets plc and Lloyds Bank Corporate Markets Wertpapierhandelsbank GmbH.

Lloyds Bank plc. Registered Office: 25 Gresham Street, London EC2V 7HN. Registered in England and Wales no. 2065. Bank of Scotland plc. Registered Office: The Mound, Edinburgh EH1 1YZ. Registered in Scotland no. SC327000. Lloyds Bank Corporate Markets plc. Registered office 25 Gresham Street, London EC2V 7HN. Registered in England and Wales no. 10399850. Authorised by the Prudential Regulation Authority and regulated by the Financial Conduct Authority and the Prudential Regulation Authority under registration number 119278, 169628 and 763256 respectively.

Lloyds Bank Corporate Markets Wertpapierhandelsbank GmbH is a wholly-owned subsidiary of Lloyds Bank Corporate Markets plc. Lloyds Bank Corporate Markets Wertpapierhandelsbank GmbH has its registered office at Thurn-und-Taxis Platz 6, 60313 Frankfurt, Germany. The company is registered with the Amtsgericht Frankfurt am Main, HRB 111650. Lloyds Bank Corporate Markets Wertpapierhandelsbank GmbH is supervised by the Bundesanstalt für Finanzdienstleistungsaufsicht.

Eligible deposits with us are protected by the Financial Services Compensation Scheme (FSCS). We are covered by the Financial Ombudsman Service (FOS). Please note that due to FSCS and FOS eligibility criteria not all business customers will be covered.

While all reasonable care has been taken to ensure that the information provided is correct, no liability is accepted by Lloyds Bank for any loss or damage caused to any person relying on any statement or omission. This is for information only and should not be relied upon as offering advice for any set of circumstances. Specific advice should always be sought in each instance.