It's not so hard with gateways like braintree or stripe actually. If you have the experience, you can do it in hours / minutes. The other part is fraud prevention, which IMO is a more complicated problem per se.