Payment Gateway Integration Cost (Stripe/Adyen/PayPal)

Published by Bles Software, a custom software and AI company based in Yehud-Monoson, Israel, building web apps, AI agents and API integrations for clients in Israel, the US, the UK and the EU.

Stripe, Adyen and PayPal: the rate card, and the bill behind it

A payment integration has two prices. The first is printed on the provider's pricing page and you will be quoted it in every sales conversation. The second is the engineering no provider does for you: the webhook inbox, the idempotency keys, the reconciliation nobody automates and the PCI scope your checkout page decides. It is the same work whichever logo you pick, and teams compare the first price and get surprised by the second.

Everything below was read on 9 October 2026 from each provider's own published pages.

The card

Three things in that list are worth more than the headline percentages.

Adyen states it has no monthly, set-up, integration or closure fees, and in the same breath that it does have a minimum invoice depending on industry or business model, with no amount published, and it calls its own listed fees indicative [2]. For a low-volume merchant an unpublished monthly minimum can exceed the entire percentage saving, so it is the first question to ask, not the last.

Stripe states it charges no setup fees and no monthly fees [1], then prices the things most businesses discover they need separately: Billing at 0.7% of Billing volume on pay-as-you-go or from $620.00 a month on a one year contract, Radar from $0.05 per screened transaction or from $10.00 a month, Tax Basic at 0.5% per transaction with Tax Complete from $90.00 a month, standalone 3D Secure attempts at $0.12 each, and $15.00 for each dispute you receive [1]. Connect is included with Payments, with a 0.25% starting fee for platforms that deploy their own payments pricing [1].

Cross-border is where the three diverge most. Stripe adds 1.5% for an international card and another 1% to convert [1]. PayPal publishes currency conversion at 4.00% or 3.00% depending on which heading you read it under [3], and Braintree adds 1% for a non-USD currency and another 1% for a card issued outside the United States [4]. If a meaningful share of your volume is foreign, those lines move the comparison more than the base rate does.

Disputes land at a flat $15.00 on Stripe, PayPal and Braintree alike [1][3][4], which is one of the few places all three agree.

PCI scope, which is a code decision before it is a compliance one

How you collect the card number decides which self-assessment you fill in, and that decides months of work. The PCI Security Standards Council's own posts set the dates: the 51 future-dated requirements of PCI DSS v4.x took effect on 31 March 2025, v3.2.1 was retired on 31 March 2024, and v4.0.1 was a limited revision issued in June 2024 [5].

The council's January 2025 post is the one that changed the cheap path. The revised SAQ A removes requirements 6.4.3, 11.6.1 and 12.3.1, and adds a criterion that merchants confirm their site is not susceptible to attacks from scripts, effective 31 March 2025 [6]. In plain terms: using the provider's hosted fields no longer exempts you from caring about what else loads on your checkout page. The council published separate guidance on payment page security and e-skimming in March 2025 for exactly this [7].

The expensive path has a published size. Stripe's own security guide states that collecting card data on your own page might require you to meet more than 300 security controls [8]. That is the difference between a hosted field and a self-hosted card form, and it is the single largest fork in this entire estimate.

The engineering no provider does for you

This is the second bill, and it is identical across the three. Each item below is forced by the provider's own published behaviour, not by preference.

Idempotent writes. Stripe's idempotency keys run up to 255 characters and may be pruned once they are at least 24 hours old [9]. Your retry window is therefore fixed at 24 hours and your key design has to survive it.

A webhook inbox, not a webhook handler. Stripe retries for up to three days with exponential backoff in live mode, does not guarantee event order, and instructs you to log processed event IDs and return a 2xx before running complex logic [10]. Adyen expects a response within 10 seconds or the event enters the retry queue, then retries for up to 30 days at 30 seconds, 30 seconds, 1, 2, 5, 10, 15 and 30 minutes, then 1, 2, 4 and 8 hours [11]. Both contracts demand the same four things: persist first, acknowledge fast, dedupe on event ID, and never rely on arrival order. Teams that write a handler instead of an inbox rebuild this after the first outage.

Reconciliation you own. Stripe publishes that the payout reconciliation report is only for accounts with automatic payouts, and that for instant payouts you are responsible for reconciling against your transaction history [12]. There is no provider where the books reconcile themselves.

Dispute and refund flows. At $15.00 a dispute [1][3][4] the cost is not the fee, it is the operational path: evidence capture, a deadline nobody misses, and a state machine that agrees with your ledger.

What that second bill costs in hours

Use a published hourly rate so the figure is checkable rather than ours. The US Bureau of Labor Statistics puts software developers at a mean $71.20 per hour in its May 2025 occupational survey [13]. Price your own estimate against that: the webhook inbox, idempotency, reconciliation and dispute handling above are the four items that recur on every payment project we have seen, and they are the four most often missing from the estimate a buyer is holding when they call us.

How to choose, in the order the questions actually matter

  1. Will you ever touch a raw card number? If no, keep it that way, and read the new SAQ A script criterion before you add anything to the checkout page [6][7]. If yes, price 300 plus controls into the project [8].
  2. What share of volume is cross-border? That is where the three rate cards separate [1][3][4].
  3. Do you need subscriptions, marketplace payouts, tax or fraud screening? On Stripe each of those is a separate published line [1], so compare bundles rather than base rates.
  4. What is your monthly volume? Ask Adyen for its unpublished monthly minimum before comparing its percentage to anyone's [2].
  5. Who is on call for the webhook queue? That answer sets the real cost of this project.

Sources

More Costs and Timelines from Bles Software