Taking Card Payments Over the Phone

A customer calls to reorder, pay an invoice or book a service, and reads out sixteen digits while you scribble them on whatever paper is nearby. It works, which is why so many businesses still do it, and it is also how card numbers end up on sticky notes, in email drafts and in desk drawers.

Phone payments are legitimate and common, but they sit in a category with its own costs and risks. Because the card is not physically presented, the sale is a keyed, card-not-present transaction. Handling it well comes down to a proper tool, a short routine for each call and a clear rule about what happens to the card details afterward.

What a virtual terminal does

A virtual terminal is a secure web page that works like a card machine without the machine. You log in from a computer, type the card number, expiration date, security code and billing details, and send the transaction for authorization just as a countertop terminal would. The approval or decline comes back in seconds and the sale joins your normal batch.

Many virtual terminals also let you send a receipt by email, save a card for later with the customer's permission, issue refunds and run reports. If you already have a merchant account, adding one is usually straightforward, and it can sit alongside your in-person and online sales so everything settles together.

How the cost compares with in-person sales

Keyed transactions are generally assessed at higher interchange than chip or tap payments, because the issuer cannot confirm the physical card was present. You can narrow the gap by supplying the billing postal code and security code on every call, which lets the address verification service and the code check run. Transactions that pass those checks tend to qualify for better categories than those that skip them.

Say you take $8,000 a month by phone. If those sales are priced even half a percentage point higher than your in-person sales, that is a $40 difference every month, hypothetically speaking. It adds up, and it is worth seeing separately on your statement rather than blended into one total.

A routine for every call

Consistency prevents most mistakes. Use the same sequence each time so staff do not improvise.

1. State the total amount, what it is for and your refund policy before asking for the card.
2. Enter the card number directly into the virtual terminal, not onto paper.
3. Collect the expiration date, security code, billing postal code and the cardholder's name.
4. Read back the amount and confirm the customer agrees before submitting.
5. Send an emailed receipt or confirmation so the charge is recognizable on their statement.
6. Note an authorization reference in your own records, never the card number.

Keeping card data safe

The biggest phone-payment risk is not the call itself but what is left behind. Card data written on paper, saved in a spreadsheet or typed into notes is stored in a way that falls squarely under PCI rules and creates real exposure if lost. Establish a firm rule: numbers go into the payment system only. If a number is written during a connection problem, it is shredded as soon as the transaction is entered.

Call recording deserves a careful look too. If your phone system records calls, it may capture spoken card numbers and security codes, which the card industry does not permit you to store after authorization. Pause recording during payment, use a system that redacts it, or consider sending a payment link instead so the customer enters the card themselves.

Alternatives that reduce risk

Several options keep card numbers out of your hands entirely.

• Send a secure payment link by text or email while the customer is still on the line.
• Store a tokenized card on file with permission for repeat customers, so later orders need no spoken digits.
• Use a terminal or software that supports pay-by-phone entry on the customer's own keypad.
• Offer ACH for larger, repeat business payments where bank transfers cost less than cards.

Protecting yourself from fraud and disputes

Phone orders attract fraud because the buyer is unseen. Be cautious about large first-time orders shipped to a different address, rush requests with unusual quantities and callers who offer several cards after declines. When a charge is disputed, your evidence is the paper trail: the order details, the authorization, the receipt, delivery confirmation and any written agreement. Keep them for the period your processor and card network rules require.

MCCPS can add a virtual terminal to your account, help you choose a safer approach for card storage and review your statements to see exactly what keyed sales cost you. Call 844.826.6227 to talk it through, and ask about the free savings analysis while you are at it.

This article is general information, not legal, tax or compliance advice. Card-network and state rules change — confirm current requirements before acting. Savings depend on your individual statement analysis.