Live data from Hacker News

Ask HN: How are lean startups easily accepting CC payments?

news.ycombinator.com

11–20 of 125 posts

Re: Ask HN: How are lean startups easily accepting CC payments?

#11
Are any of the solutions out there comparable to BrainTree? It's easy to process CC's, even recurring, but it's a pain to do PCI compliance. If the CC info hits your server, you're in PCI scope. BrainTree has the browser send the info direct to them, then redirects with a token you can use to check information and perform charges.

Anything else out there like that? That is, all the flexibility of being able to run charges programmatically, without the overhead of being PCI compliant?

Re: Ask HN: How are lean startups easily accepting CC payments?

#13
If you want something simple without writing much code, go with PayPal. You'd expect some "horror stories" from a payment processor with 232 million accounts. Virtually all of them involve someone doing something that'd raise flags at any merchant account provider or bank, it's just that people think PayPal isn't a bank so they should be able to get away with anything. 10,000 horror stories still leaves 99.99% of users happy.

If you want to accept credit cards on your own site, you need to learn about PCIDSS compliance, you need to apply for a merchant account, and you need to a payment gateway that works with that merchant account.

It's well within reach of a lean startup. The application is usually a page or two long, you'll get approval from the underwriting bank within a week or so, and most MAPs also resell the payment gateway accounts so they set that up for you and you get everything at once. The fixed costs will be a statement fee and a gateway fee, $20-30 a month total.

It's terribly difficult to understand the fees you'll be paying with a merchant account. They're far more complex than whatever you get quoted will lead you to expect, and it's absolutely common for providers to change the fees on a monthly basis such that after a year you have no idea what you're paying. There can be dozens of classes of credit cards each with different rates when you charge them. My only advice for dealing with that is to try not to tie your code to your processor so that, when you grow enough for the fees to matter, you can shop around for a better deal.

You don't get to take shortcuts with the PCI stuff. The fine for a credit card being compromised from your server because you weren't PCIDSS compliant start at $500,000 per incident (paid to Visa/MC) plus legal fees and costs to provide credit monitoring to the victims.

If you accept credit cards directly on your site, you'll be required to fill out a self-assessment questionnaire and have a compliance scan against your server run on some basis. For most ecommerce setups, it'll be quarterly. What that costs depends on your merchant account provider; some contract with and pay a compliance company for you, others you have to pay some or all of the costs yourself, which can be a couple hundred dollars a year. SecurityMetrics seems to be the most popular service for the scans.

The technical part is easy. An Authorize.net integration will take you a couple hours at most. There are libraries for the popular payment gateways in every programming language known to man, and prebuilt shopping carts will have plugins/modules/whatever written by people already.

It's just like any other API. You POST some data to some server to make a charge/authorization/refund/etc and get a response to parse. If your app integrates with Twitter, you've already done much harder work than integrating a form with a payment gateway.

Re: Ask HN: How are lean startups easily accepting CC payments?

#14

assuming you already have a merchant account and gateway (which takes like a day to get approved, assuming you don't have your social security card on hand)... you can get integrated with Recurly in two days of intense concentration. but if you just want to start taking customers' cash ASAP, you can do that with a paypal hosted button in about 5 minutes. WPP lets you accept credit cards w/ paypal - no paypal acct nec…

>> which takes like a day to get approved

Which bank did you use? My experience has been that if you're doing ANYTHING other than e-commerce, it's a long uphill struggle. I've tried Chase, B of A, and Wachovia.

Re: Ask HN: How are lean startups easily accepting CC payments?

#15

I'm using Paypal Pro payments + Recurly. Between the ease of opening an account and ease of integration it made the slightly higher charges well worth it. Recurly doesn't have drop in django integration, but I'll eventually clean up and open source the subscription/registration app I'm using.

I too would be very interested in seeing your Django app!

Re: Ask HN: How are lean startups easily accepting CC payments?

#19
I don't have much real world experience with card processing, but the last time I looked, RBS worldpay offered a nice subscription models. I was planing to delve into that, but the project I was involved in fell apart, and there was no need for me to pursue more info.

I believe that since they would handle everything transaction wise, you don't have to worry about being PCIDSS compliant.

Re: Ask HN: How are lean startups easily accepting CC payments?

#20
post #9

I'm using Braintree combo-ed with Recurly. Makes it simple to start accepting subscriptions. I'm a big fan of recurly and if I ever feel like coding my own, I can use Braintrees. I built my own subscription payments for Paypal before and to be honest I'd never want to use that code again. Subscriptions have a lot more headaches then appear at first glance.

Braintree has their own system for recurring payments too; what made you decide to use Recurly instead?
Post reply on HN