Choose a payment gateway by working out what your customers want to pay with, how your site is built, and how much responsibility for security and fraud you want to carry. Most Australian websites are best served by a hosted payment provider that handles card data on its own pages, supports cards and common local methods, and connects cleanly to the platform you already use. Fees vary and change, so this article does not quote them: compare current published pricing from each provider.
The main categories
| Category | How it works | Typical fit |
|---|---|---|
| Hosted checkout or payment link | Customer is sent to the provider’s page, or a provider-hosted form is shown | Small stores, services, quick launch |
| Embedded payment form from a provider | Provider’s components appear inside your page, with card data going straight to the provider | Brands wanting a seamless look with lower security burden |
| Platform-native payments | Payments built into your ecommerce platform | Stores on a single platform wanting simplicity |
| Bank or acquirer gateways | Direct arrangement with a bank or acquirer, often with more setup | Larger or established merchants |
| Wallets and buy now pay later | Added methods such as Apple Pay, Google Pay or instalment services | Extra choice on top of a core gateway |
These categories overlap, and many providers offer several. Use them as a way to structure your shortlist, not as a ranking.
Local payment methods to check
Customers in different countries pay differently. Stripe’s documentation groups methods into families such as cards, bank debits, bank redirects, bank transfers, buy now pay later, real-time payments, wallets and vouchers. For Asia Pacific, it lists examples relevant to Australia: eftpos cards, AU BECS Direct Debit, PayTo for real-time payments, wallets such as Apple Pay and Google Pay, and the buy now pay later providers Afterpay, Klarna and Zip (Stripe documentation). That is one provider’s list, used here only to illustrate the categories; other providers support different sets, and availability depends on your business type and account. Check each method against your chosen provider before planning around it.
Ask for each method:
- Is it available to my business type and my provider?
- How long does confirmation take? Stripe notes that bank debits can take several working days to confirm, which matters for fulfilment.
- Does it suit my average order value and customer base?
For international sales, see payment methods by market and international pricing and currency.
Surcharges: check the current ACCC position
The ACCC states that from 1 October 2026 businesses can no longer add a surcharge for payments made with Visa, Mastercard, American Express or eftpos credit, debit or prepaid cards. Other fees may still be charged, businesses can still raise prices to cover acceptance costs provided they do not mislead consumers about why prices changed, and payment-method discounts are allowed if the full price is clearly disclosed (ACCC). Because the rule is new at the time of writing (November 2026), confirm the current position on the ACCC page before configuring any checkout fee. This is general information, not legal advice.
Security and fraud considerations
- Card data scope. The PCI Security Standards Council describes PCI DSS as intended for entities that store, process or transmit payment account data. It does not enforce compliance itself; payment brands and acquirers decide who must validate (PCI Security Standards Council). Using a provider whose hosted fields or pages handle card details generally reduces what touches your own systems, but confirm your obligations with your acquirer or provider rather than assuming.
- Fraud tools. Ask what the provider offers: card verification, address checks, risk scoring, rules you can set and dispute support. Understand who bears the cost of chargebacks under your agreement.
- Authentication. Ask how the provider handles strong customer authentication for online card payments and what it means for conversion.
- Account protection. Use unique admin credentials, multi-factor sign-in and limited staff access to the payments dashboard.
- Data protection. Review how customer and payment data is stored and where.
Questions to ask each provider
- Which payment methods are available to a business like mine in Australia?
- How do payouts work, and how long until funds reach my account?
- How are refunds, partial refunds and disputes handled?
- What is the full cost structure? Ask for the current published pricing in writing.
- Does it integrate with my website platform, accounting software and any subscription or invoicing needs?
- What are the contract terms, and how easy is it to leave?
- What support is available and in what hours?
- How is checkout customised, including on mobile?
Choosing in five steps
- List the payment methods your customers use or request.
- Check platform compatibility before looking at features.
- Shortlist two or three providers and compare current pricing and terms.
- Run a test purchase and refund end to end, including on a phone.
- Review after a few months against completion rate and support issues.
Checkout design affects results as much as gateway choice. For the wider picture, see business website conversion.
Limits
Provider capabilities, fees and rules change often. This article describes categories and questions, not a recommendation of a specific product.
Where Radiance Impact fits
Radiance Impact’s Digital Technology and AI Solutions division builds business websites and can integrate checkout and payment flows with the provider you choose. See the Technology page or contact us.
Sources
- Add payment methods, Stripe documentation
- Payment surcharges, ACCC
- About us, PCI Security Standards Council
