Virtual Terminal: How to Take Card Payments Over the Phone

Not every sale happens on a website or in front of a card reader. Deposits taken by phone, invoices settled on a service call, B2B orders placed by email — these are keyed transactions, and how you handle them decides what you pay and how much risk you carry.

What a virtual terminal is

A virtual terminal is a secure web page inside your payment gateway where an authorized employee types in a card number to take a payment — no physical hardware, no customer checkout. It turns any laptop or phone into a point of sale for orders that arrive by phone, mail, or email. These are known as MOTO transactions: mail order / telephone order.

When it earns its place

• Deposits and booking fees taken while the customer is on the phone.
• Field service and trades — collect on completion without carrying hardware.
• B2B invoices where the buyer wants to pay by card over the phone.
• Rebilling a failed subscription card after a customer calls in with new details.
• Backup for downtime when your terminal or checkout is unavailable.

Why keyed transactions cost more

When a card is swiped, dipped, or tapped, the network gets cryptographic proof the card was physically present. A typed-in number offers no such proof, so the transaction is priced as card-not-present and carries a higher interchange rate — a real cost difference on every sale. Always enter the billing ZIP and CVV: matching them lowers the risk profile, and on some processors it lowers the rate you’re billed too.

Taking a card by phone without creating a compliance problem

1. Never write the full card number down. Not on a notepad, not in a CRM note, not in a support ticket. Key it straight into the terminal while the customer reads it.
2. Never store the CVV after the authorization. Storing it is prohibited outright, and it’s the fastest way to fail a security review.
3. Pause your call recording during the card read, or use a system that automatically mutes that portion.
4. Send a receipt immediately with a clear business name. A customer who can’t recognize the charge two weeks later is a dispute waiting to happen — and disputes are the expensive part of MOTO.

Payment links: the better default

For most phone orders, the stronger option is to text or email a secure payment link while the customer is still on the line. The card data never passes through your staff or your systems, your compliance scope stays small, and the customer keeps a confirmation they authorized the charge — which is exactly the evidence that wins a dispute later. Keep the virtual terminal for the cases where a link genuinely won’t work.

For larger invoices, skip the card

On a five-figure B2B invoice, card fees are simply the wrong tool. ACH and eCheck settle bank to bank at a fraction of the cost, and for recurring B2B billing they eliminate the expired-card failures that quietly churn customers — the pattern we covered in recurring billing for high-risk businesses.

One account, every way your customers pay

At Creditcard Payment Services, a single application covers the merchant account, virtual terminal, online gateway, and ACH/eCheck — underwritten for how your business actually sells, including phone and mail orders that mainstream processors treat as a red flag. Most approvals in 2–3 business days.

Taking cards by phone — or been told your MOTO volume is too high? Apply online or call 1-800-475-6011. No cost to apply.