Payment methods are the last step between a customer’s interest and your revenue. UK shoppers expect at least one card option and most expect PayPal or Apple Pay too. This guide covers the three payment choices that matter — Stripe, PayPal and bank transfer for B2B — plus the PCI DSS, Strong Customer Authentication and 3-D Secure requirements that affect how payment forms appear on the SmartXHosting-hosted checkout.
How Magento payment methods work • Stripe — the default recommendation • PayPal — Express Checkout as secondary • Apple Pay and Google Pay • Bank transfer for B2B • Cash on delivery — and why few UK stores enable it • SCA and 3-D Secure compliance • FAQ
Under Stores › Configuration › Sales › Payment Methods, Magento lists every installed payment gateway — core methods (Check/Money Order, Bank Transfer, Cash on Delivery, Zero Subtotal, Purchase Order) plus any extensions you install. Each gateway has its own configuration block with Enabled/Disabled, Title (customer-facing label), Sort Order and country/currency restrictions.
The payment methods visible at checkout depend on four things combined: the gateway being Enabled, the cart total passing the gateway’s minimum/maximum, the shipping country being within the gateway’s allowed set, and the customer group being allowed. Debug a “method missing at checkout” issue by going through these four in order.
Stripe is the payment gateway most UK Magento stores start with. Reasons: quick setup, transparent UK pricing (1.5% + 20p for UK cards), full Apple Pay and Google Pay integration out of the box, and a mature Magento 2 extension.
Setup workflow:
composer require stripe/stripe-payments via SSH, then bin/magento setup:upgrade.https://yourdomain.co.uk/stripe/webhooks4242 4242 4242 4242, any future expiry, any CVC.Stripe in Live Mode is invoiced in GBP to your UK business. Payouts settle to your UK bank account on Stripe’s standard two-day schedule; Stripe Instant Payouts (for a fee) move money faster.
PayPal remains important in the UK for two reasons: a meaningful slice of shoppers prefer using their PayPal balance, and PayPal’s Buyer Protection is trusted brand equity that reduces checkout hesitation.
Magento ships with PayPal Express Checkout integration. Set it up under Stores › Configuration › Sales › Payment Methods › PayPal:
PayPal fees in the UK are 2.9% + 30p for standard domestic card payments, higher for international. This is generally more expensive than Stripe; enable PayPal for coverage not cost optimisation.
Mobile wallets now account for 20–40% of UK mobile checkout volume. Both come “for free” when you enable Stripe Payments — nothing extra to install.
One-off configuration for Apple Pay: Stripe asks you to verify your domain. Stripe provides a verification file; upload it to pub/.well-known/apple-developer-merchantid-domain-association and confirm domain in Stripe Dashboard. Once verified, Apple Pay buttons appear on the checkout for iOS/Safari customers and on product pages for Express checkout.
Google Pay requires no separate domain verification — buttons appear automatically for Chrome/Android users.
Many UK trade and wholesale customers prefer to pay by bank transfer against an invoice rather than by card. Enable under Bank Transfer Payment in the payment methods list:
UK BACS/Faster Payments are free to receive; the cashflow advantage of no gateway fees is meaningful on large invoices. Staff reconcile manually: check the bank, match the reference, invoice the Magento order manually.
Cash on delivery (COD) is rarely used in UK online retail. Royal Mail and major couriers charge surcharges for COD service and the logistics are messy. For completeness, Magento supports it under Cash On Delivery Payment, but most UK merchants leave it disabled.
The exception: local-only stores with their own delivery drivers (hyperlocal grocery, florists) sometimes enable COD because the driver can take cash or a card reader to the door.
Strong Customer Authentication (SCA) is the UK rule derived from the EU PSD2 directive requiring two-factor authentication for most online card transactions. Practically, this means 3-D Secure 2 on cards — a one-time code or biometric approval on the cardholder’s banking app.
Stripe and PayPal handle SCA transparently; their payment flows present 3-D Secure challenges when required by the card issuer. No Magento-side configuration is needed other than using a current version of the Stripe extension. Custom integrations (your own acquirer, legacy gateway) need SCA explicitly built in or they will start failing on a meaningful share of transactions.
Exceptions to SCA include low-value transactions (under £30 for the first cumulative £100 then step-up), business-to-business corporate card payments, and merchant-initiated transactions like subscriptions. Stripe’s SCA engine decides whether to request authentication per transaction.
Magento hosting with Stripe and PayPal modules ready
SmartXHosting Magento plans come with the Stripe Payments extension pre-installed, TLS 1.3 for PCI-friendly traffic and UK-based support for payment gateway troubleshooting.
View Magento plansQ: Do I need PCI DSS certification with Stripe or PayPal?
A: For most UK merchants using hosted payment forms (Stripe Elements or PayPal redirect), PCI DSS Self-Assessment Questionnaire A (SAQ-A) is the lowest-complexity tier and applies. Sensitive card data never touches your Magento server. Full PCI DSS Level 1 applies only if you process over 6 million card transactions per year.
Q: Why did my test payment in Stripe Test Mode appear to succeed but no order was created?
A: Check the webhook endpoint. Stripe sends payment_intent.succeeded webhooks that the Magento extension listens for. If the webhook signing secret is wrong or the URL unreachable, the front-end will complete but the order is never persisted. Confirm under Stripe Dashboard › Developers › Webhooks that events are being delivered with 2xx responses.
Q: Can I offer a discount for bank transfer payers?
A: Not via the payment method config directly, but via a Cart Price Rule. Create a rule in Marketing › Cart Price Rules with condition “Payment Method = Bank Transfer” and action “3% discount”. Trade customers appreciate the recognition of the lower fee-side cost.
Q: What do I do about American Express?
A: Stripe accepts Amex in the UK at a slightly higher rate (2.5% typical). It is included automatically when Stripe is enabled. PayPal accepts Amex too. No special configuration needed.
Q: How do I handle subscriptions or recurring payments?
A: Stripe supports subscriptions but the Magento integration is limited by default. For real subscription commerce (coffee subscriptions, box schemes), use the Subscription commerce pattern via Stripe Billing or extensions like Aheadworks Subscription. SmartXHosting can recommend UK developers who specialise in Magento subscription setup.
Q: My checkout asks for 3-D Secure every time — can I reduce friction?
A: 3-D Secure is requested by the card issuer’s bank, not by Stripe. If every transaction is flagging it, the most likely cause is the issuer treating your merchant category as high-risk, or a new-account pattern where the issuer is learning your baseline. Stripe Radar (built-in fraud prevention) helps build a low-risk profile over time, reducing 3DS frequency for returning customers.
Q: Are gateway fees deductible against VAT?
A: Gateway fees are input VAT on a business expense — reclaimable if you are VAT-registered. Stripe and PayPal issue monthly VAT invoices for their fees (Stripe from Ireland, PayPal from Luxembourg). Reverse-charge VAT rules apply for EU B2B services.