UK payment processing: complete guide for SMEs in 2026

Navigating payment processing as a UK SME in 2026 means dealing with more choices and complexity than ever before. Online transactions dominate. Customer expectations are rising. And the fees, regulations, and provider options that support it all can be genuinely difficult to unpick.

This guide cuts through the noise. Whether you’re setting up payment processing for the first time, reviewing your present setup, or considering switching providers, you’ll find everything you need here: the types of payment processing available, a straightforward breakdown of what you’re actually paying and why, how to choose the right provider, what switching involves, and how open banking compares to traditional card payments.

What is payment processing, and why does it matter for SMEs?

Payment processing is the infrastructure that sits between your customer and your bank account. When a customer pays by card, online, or via bank transfer, a chain of technology and financial institutions handles the process: from authorisation and verification to transaction settlement.

For SMEs, getting this right has a direct impact on cash flow, customer experience, and operational cost. A clunky checkout drives abandoned purchases. Delayed settlement creates pressure. The right payment processing setup addresses all the issues, but the wrong one makes it all worse.

In 2026, the UK payment processing landscape is determined by various key forces: the continued decline of cash, the rapid rise of open banking, post-Brexit regulatory changes, and a growing customer expectation that payments should be instant, flexible, and frictionless.

Types of payment processing available to UK SMEs

Understanding your options is the starting point for any payment processing decision. Here are the main types UK SMEs use in 2026.

Card-machine payments (in-person)

Card machines, also called POS terminals or card readers, accept payments via chip and PIN, contactless, and digital wallets such as Apple Pay and Google Pay. Contactless payments now account for most in-person UK card transactions, and consumer expectations around tap-to-pay are firmly set. For any business with a physical presence, a reliable card machine is mandatory.

Online payments (payment gateways)

A payment gateway is the technology layer that processes card payments taken online. It encrypts the customer’s card data, communicates with the card networks and the issuing bank, and returns an authorisation, typically within a few seconds.

For SMEs selling online, a good gateway should support multiple card types, integrate cleanly with your e-commerce system, and offer a smooth checkout experience that minimises drop-off. Hosted checkout pages (payment pages) can get an SME up and running without bespoke development work.

Virtual terminal (payments over the phone)

A virtual terminal is a browser-based feature that allows your team to process card payments taken over the phone. The customer reads out their card details; your team enters them securely into the ‘terminal’. It’s a workable solution for service businesses, B2B companies, and any operation where remote card-not-present payments are common. All transactions are processed in a PCI-compliant environment, with a full audit trail.

Paylinks

Paylinks are secure one-off payment links sent directly to a customer by email or SMS. The customer clicks the link and pays in seconds — no login required, no portal to navigate. They’re increasingly popular for invoice collection, one-time charges, and any situation where you’d otherwise chase payments manually. Each link is trackable, and automatic reminders can be set to reduce the necessity for manual follow-up.

Direct Debit and recurring payments

For businesses with predictable, recurring revenue — subscriptions, retainers, regular service charges — Direct Debit remains the most reliable collection method in the UK. Once a customer has authorised a mandate, payments are collected automatically on the agreed schedule. Repeat payment tools on card rails offer a similar function, storing card details securely for future charges.

Open banking (Pay by Bank)

Open banking payments allow customers to pay directly from their bank account via a secure API connection, without entering card details. The customer authenticates in their banking app using Face ID, fingerprint, or passcode, and the payment settles almost instantly through the Faster Payments system.

Batch payments

For high-volume businesses processing multiple transactions simultaneously, batch payment tools enable large numbers of transactions to be processed in a single operation, saving significant time compared to processing them individually.

Understanding the cost of payment processing: interchange, scheme fees, and acquiring margin

This is the area where many SMEs have the least visibility, and where the most money is quietly lost. Every card payment you accept carries a Merchant Service Charge (MSC) made up of three distinct layers, each paid to a different party.

Layer 1: Interchange

Interchange is the fee paid to the customer’s card-issuing bank. In the UK, consumer interchange is regulated and capped under the UK Interchange Fee Regulation (UK IFR): 0.2% for consumer debit cards and 0.3% for consumer credit cards. These caps apply to domestic UK transactions.

The important caveat is that these caps only apply to consumer cards. Commercial and corporate cards fall entirely outside the regulation, with interchange running from 1.30% to 2.50% depending on the specific card type, network, and tier. International credit cards, including cards issued in the EEA paying a UK merchant since Brexit, can attract an interchange of around 1.5%, compared to the 0.3% domestic credit card cap. If your business takes a significant volume of corporate or international card payments, your effective interchange cost will be materially higher than headline rates suggest.

Layer 2: Scheme fees

Scheme fees are charged by the card networks (Visa and Mastercard), for using their infrastructure. Unlike interchange, scheme fees are not capped by regulation. The Payment Systems Regulator (PSR) found that Visa and Mastercard raised their core scheme and processing fees by more than 25% in real terms between 2017 and 2023. The PSR’s final report concluded that these hikes added at least £170 million per year in extra costs across UK businesses. These increases are passed directly to merchants.

Scheme fees are rarely itemised on SME statements, making them one of the hardest costs to track.

Layer 3: Acquiring margin

The acquiring margin is what your payment processor charges for providing the terminal, gateway, and settlement service. This is the only layer that is negotiable. It’s also where pricing models diverge, and where the right decision depends on your transaction volume and card mix.

Pricing models explained

• Blended-rates (flat-rate) pricing bundles all three layers into a single percentage, such as 1.4% per transaction. It’s simple and predictable, which suits lower-volume businesses. The downside: you’re effectively subsidising expensive card types (international, corporate) through the same rate applied to cheap ones (UK debit).

• Interchange++ pricing shows each fee separately: interchange, scheme fees, and the acquirer’s margin are all visible on your statement. It’s more complex, but at higher volumes it’s significantly cheaper because you pay the actual wholesale cost rather than a blended average.

• Tiered pricing groups transactions into categories (qualified, mid-qualified, non-qualified) with different rates for each. It can appear attractively priced at first glance, but often obscures where the expensive transactions land.

How to choose a payment processing provider

With dozens of providers in the UK market, the decision comes down to matching your specific needs against what each provider offers. Here’s what to look at.

1. Payment methods supported. Does the provider support all the channels you need — in-person, online, over the phone, paylinks, Direct Debit, open banking? A platform that handles all of these in one place reduces admin, simplifies reconciliation, and gives you a single point of support.
2. Pricing model and transparency. Ask providers to quote against your real transaction data: volume, average transaction value, card mix (debit vs credit, domestic vs international).
3. Integration with your existing systems. Does the provider integrate with your accounting software (Xero, QuickBooks, Sage)? Does it connect with your online store or business management software? Native integrations eliminate manual reconciliation and reduce the risk of errors.
4. Settlement speed. Next-day settlement is standard among modern UK processors. Some still operate on a T+2 or T+3 basis — worth clarifying upfront, as settlement timing directly affects your cash flow.
5. Security and compliance. PCI DSS compliance is a must. Also look for 3D Secure support, Strong Customer Authentication, and transparent fraud monitoring tools.
6. Support quality. Look for UK-based support that’s accessible by phone, live chat, or email with reasonable response times. Average call answer time is a useful benchmark.
7. Contract terms. Watch for long lock-in periods, early termination fees, and auto-renewal clauses. More flexible, rolling contracts are increasingly common among modern providers.

How to switch payment processing providers

Switching payment providers is less disruptive than most SMEs expect. For many businesses, it’s one of the quickest ways to reduce costs and improve cash flow. However, a 2024 FSB survey found that 31% of UK SMEs had never compared their card processing costs with those of another provider.

Here’s how to approach it without downtime or disruption.

• Step 1: Audit your current costs. Pull three months of processing statements. Calculate your effective rate (total fees ÷ total card turnover). Note the split between debit and credit, domestic and international, in-person and card-not-present. This is the data you need to get meaningful like-for-like quotes.
• Step 2: Get comparative quotes. Approach at least two or three providers with your real transaction data. Ask each to quote on an interchange++ basis if your monthly volume exceeds £30,000. Compare not just the rates but settlement speed, contract terms, and what’s included in the platform.
• Step 3: Check your current contract. Identify your notice period and any early termination fee. Many SME contracts require 30 to 90 days’ written notice. Factor this into your timeline.
• Step 4: Set up the new provider in parallel. Most new merchant accounts can be approved within five working days. Where possible, run the new setup alongside your existing one for a short period, process a few test transactions, confirm settlement is landing correctly, and check that reporting and reconciliation work as expected.
• Step 5: Migrate any recurring payments or stored credentials. If you have customers on Direct Debit or repeat card payments, plan the migration carefully. Some providers offer tools to migrate mandates; others require customers to re-authorise.
• Step 6: Cancel your old account in writing. Send a written cancellation within your notice period and keep a copy. Confirm in writing that the account is closed and no further fees will be charged.

If you’re currently on a legacy platform facing a forced migration, such as the Barclays ePDQ retirement that affected many UK merchants in early 2026, the same steps apply, and in some cases, you can retain your existing merchant ID during the transition.

Security and compliance in payment processing

Security in payment processing is a baseline. Here’s what UK SMEs need to understand in 2026.

PCI DSS compliance

The Payment Card Industry Data Security Standard (PCI DSS) sets out the security requirements for any business that stores, processes, or transmits cardholder data. Non-compliance doesn’t just create security risk; it can result in fines from your acquirer and, in the event of a breach, full liability for fraudulent transactions.

Most SMEs don’t store card data themselves; they use a compliant payment provider that handles all data storage and processing. In this model, your compliance obligation is reduced to an annual self-assessment questionnaire (SAQ) and guaranteeing the protection of your payment systems against unauthorised interference.

Strong Customer Authentication (SCA)

SCA is a regulatory requirement under the UK’s Payment Services Regulations, mandating that online card payments are authenticated using at least two of three factors: something the customer knows (password/PIN), something they have (phone/device), or something they are (biometric). In practice, this is delivered through 3D Secure 2 (3DS2), which handles the authentication step during checkout, often invisibly via risk-based analysis, only prompting the customer when the transaction flags as higher risk.

SCA reduces fraud and adds a step to the checkout process. A well-implemented 3DS2 integration minimises friction while meeting the regulatory requirements.

Fraud detection and prevention

Modern payment platforms layer multiple fraud controls on top of each other: transaction monitoring, risk scoring, velocity checks, and real-time alerts for suspicious activity. The key principle is proactive prevention instead of reactive response.

This is particularly useful for businesses that have experienced fraud on card-not-present transactions.

Encryption and tokenisation

Data encryption guarantees that card information is not readable in transit. Tokenisation replaces actual card numbers with unique tokens for storage, so even if your systems were compromised, there are no usable card details to steal.

For a deeper look at what to look for, our guide to the five essential features every secure payment system should have covers each of these areas in more detail.

Integrating payment processing with your business systems

A payment platform that doesn’t talk to the rest of your business set-up creates work.

The right integrations eliminate this. Key ones to look for:

• Accounting software. Native integrations with Xero, QuickBooks, and Sage mean payment data flows directly into your accounts in real time. Transactions match against invoices, month-end closes faster, and you always have an accurate view.
• E-commerce platforms. WooCommerce and Magento plugins embed your payment provider directly into your online checkout. Customers get an effortless experience; you get centralised transaction data.
• Business management software. Within industries such as property management, legal services, or field services, integrations with sector-specific platforms allow payment data to sync directly into job or client records, eliminating double entry.

We explore this in more detail in our piece on how embedded payment technology is helping SMEs stay competitive.

Frequently asked questions

What is a payment gateway, and do I need one?

A payment gateway is the technology that processes online card payments, encrypts data, communicates with card networks, and returns an authorisation to your website. If you take any payments online, you need one. Many modern platforms bundle the gateway into a single monthly or per-transaction fee rather than charging separately.

What’s the difference between a payment processor and a payment gateway?

A payment processor manages the movement of funds between your customer’s bank and yours. A payment gateway is the secure front-end layer that captures and encrypts the payment data before it reaches the processor.

What payment processing fees should UK SMEs expect to pay?

On domestic UK consumer cards with a blended rate, typical SME fees range from 1.3% to 1.8% per transaction. Businesses with higher proportions of commercial or international cards can see effective rates of 2.5% to 3.5%. Interchange-plus pricing can reduce costs for businesses processing above £30,000 per month.

Is open banking safe for business payments?

Yes. Open banking payments use bank-level Strong Customer Authentication and are regulated by the FCA. There are no card details involved, no chargeback risk, and payments settle via Faster Payments. In many respects, the fraud profile is lower than that of card-not-present transactions.

How long does it take to switch payment providers?

Most new merchant accounts are approved within five working days. The full transition, including running parallel systems, migrating any recurring payments, and serving your notice period with your old provider, typically takes four to eight weeks end-to-end.

What is PCI DSS compliance, and do I need it?

PCI DSS is the security standard for any business that handles cardholder data. Most SMEs using a compliant payment platform meet the standard through a simplified self-assessment process. Your payment provider should be able to guide you through what’s required for your exact setup.

Building a payment strategy fit for 2026

The payment processing landscape is moving – costs are changing, open banking is maturing, and customer expectations around convenience and security are rising.

For UK SMEs, the priorities are clear:

• understand what you’re actually paying and why
• choose a platform that covers all the payment methods your customers need
• make sure your systems talk to each other, so reconciliation doesn’t become a manual burden
• and stay on top of security and compliance requirements before they become a problem, rather than after

The businesses that get this right aren’t just reducing fees, they’re improving cash flow, reducing admin, and building a payment experience that customers trust.

Want to see how Blink Payment helps UK SMEs take payments more efficiently? Explore our platform or get in touch with the team to talk through your requirements.