Key takeaways
- Online invoice payments trigger PCI obligations the moment card data is involved.
- PCI scope grows the closer raw card data gets to your servers.
- Flux's origin-isolated iframes keep card data off your domain and shrink your scope.
- Offering cards, ACH, and stablecoins keeps you collecting through any single rail's issue.
- QuickBooks sync and webhooks remove manual reconciliation after payments land.
The promise and the catch of getting paid online
The pitch for online invoicing is appealing: send invoices and get paid online, skip the paper checks, and watch cash arrive faster. The catch that no one leads with is compliance. The moment your invoice collects a card number, you have stepped into the world of PCI DSS, and how you handle that determines whether online payments are a relief or a liability.
The good news is that the compliance headache is mostly avoidable if the card data never touches your systems in the first place.
Where the compliance burden comes from
PCI scope grows with exposure to raw card data. If card numbers pass through your website or servers, even briefly, you inherit a much larger set of obligations. Many businesses do not realize this until an audit or a security questionnaire lands on their desk. The size of the burden is a direct function of how close the card data gets to your infrastructure.
This is why the technical design of your payment collection matters as much as the invoicing features around it.
How does Flux let you get paid online safely?
Flux captures card data inside origin-isolated iframes hosted on payments.fluxpayments.com. Because the fields live on Flux's domain, the card number never touches your servers or your website's domain, which keeps your PCI scope smaller. Flux is SAQ-D Level 2 PCI DSS certified, and uses tokenization so stored payment references are tokens, not raw numbers.
For you, that means you can send invoices and get paid online with drop-in hosted fields, without personally becoming the custodian of sensitive card data.
More than cards
Getting paid online should not mean cards only. Flux accepts cards, ACH bank transfers, and stablecoins in one platform, so an invoice can offer the method that suits the buyer. Cards settle in 1-2 business days, ACH in 1-3 business days, and stablecoins arrives in your wallet instantly.
Multiple methods do more than please buyers. They keep you collecting even if one rail has an issue on a given day.
Keeping the books straight automatically
Speed on the payment is wasted if reconciliation drags. Flux integrates with QuickBooks to sync transactions to your books and provides webhooks so your systems know the instant an invoice is paid. The aim is to remove the manual matching that usually follows a wave of online payments.
A full REST API and tokenization mean you can build this into your own tools if you would rather not work in a dashboard.
Getting started
If you want to send invoices and get paid online without inheriting a compliance project, the setup is straightforward: use hosted fields so card data stays off your servers, offer cards and ACH so buyers can choose, and connect payments to your accounting.
Card pricing is a flat 2.9% plus 30 cents per transaction with no setup fees, monthly fees, minimums, or contracts. Reach Flux at sales@fluxpayments.com or (813) 402-8244, or apply at /apply.html.
Frequently asked questions
Do I have to be PCI compliant to get paid online?
If you accept cards, PCI DSS applies. Using hosted fields that capture card data off your servers, as Flux does, keeps your scope smaller and the compliance work lighter.
Can I get paid by bank transfer, not just card?
Yes. Flux accepts ACH and stablecoins alongside cards, so invoices can offer whichever method the buyer prefers. ACH settles in 1-3 business days.
How does card data stay off my servers?
Flux captures it inside origin-isolated iframes on payments.fluxpayments.com, so the card number never touches your website or servers. Flux is SAQ-D Level 2 PCI DSS certified.
Related reading
Ready to get set up with Flux?
Cards, ACH, and stablecoins in one platform, with volume-based pricing. No setup fees or contracts.
Get Started