You can accept credit card payments by phone through a payment processor, a virtual terminal, or a mobile app — each with different costs and security requirements
Accepting credit cards over the phone means you take the card details verbally or read them from a written form, then process the payment through a system that securely handles the information. You do not type the card number into a website or email it to yourself. Instead, you use a tool designed specifically for phone payments — a virtual terminal, a mobile app, or a payment processor's phone line — that encrypts the data before it reaches the payment network.
The reason this matters: credit card numbers transmitted insecurely (email, text, unencrypted forms) expose you to fraud liability and violate payment card industry rules. Using the right tool protects both you and your customer, and it also determines what you pay in fees.
Key Takeaways
- A virtual terminal is a web-based tool where you enter card details securely; it works on any device with internet and is the most common option for small businesses.
- Mobile payment apps like Square, PayPal, or Toast let you swipe or manually enter cards on a phone or tablet, with fees typically 2.6% to 3.5% per transaction plus a per-swipe fee.
- Phone-based processing through your bank or processor means the customer reads their card details to you over the phone, and you enter them into a secure system.
- Keyed-in transactions (manually entered, not swiped) cost more in fees than swiped transactions because the processor assumes higher fraud risk.
- You are liable for fraudulent charges if you do not follow PCI compliance rules, so using an encrypted system is not optional — it is a legal requirement.
Virtual Terminals: The Standard Option for Phone Payments
A virtual terminal is a web page, usually provided by your payment processor or bank, where you log in and manually enter a customer's card details. The system encrypts the information before sending it to the payment network. You can access it from any computer or tablet with internet, and it works for phone payments, mail orders, or in-person situations where you cannot swipe the card.
Most payment processors — Stripe, Square, PayPal, Authorize.net, and others — include a virtual terminal as part of their standard account. You typically do not pay extra to use it, though you still pay the standard transaction fee (usually 2.9% plus $0.30 per transaction, though rates vary by processor and your agreement). The setup takes minutes: you log in, enter the card number, expiration date, CVV, and billing address, then submit.
The main limitation is that keyed-in transactions (manually entered, not swiped) carry a higher fraud risk in the processor's eyes, so some processors charge a slightly higher fee for them — sometimes an extra 0.5% to 1%. Ask your processor what they charge for keyed transactions before you commit. This difference adds up quickly if you are processing dozens of phone payments each month.
Mobile Payment Apps for Payments on the Go
If you take payments outside an office — at a customer's home, a market, a job site — a mobile app on your phone or tablet is faster than logging into a virtual terminal. Apps like Square, PayPal Here, Toast, and Clover let you swipe a card using a small reader that plugs into your phone, or manually key in the details if the customer does not have their card present.
Fees for mobile apps typically run 2.6% to 3.5% per transaction, plus a per-transaction fee of $0.10 to $0.30. Some apps charge a monthly subscription ($10 to $50) instead of or in addition to per-transaction fees. The advantage is convenience and speed; the disadvantage is that you are paying more per transaction than you would through a virtual terminal with a traditional processor.
Mobile apps also handle the encryption for you automatically — you do not have to think about PCI compliance because the app is built to meet those standards. This makes them popular with service providers and small retailers who do not have a fixed location. If you process fewer than 20 transactions per month, the higher per-transaction fee may not matter; if you process 100 per month, the difference between a virtual terminal and a mobile app can be $50 to $100 monthly.
Phone-Based Processing Through Your Bank or Processor
Some banks and processors let you call a phone number, give the customer's card details to a representative, and have them process the payment on your behalf. This is less common now than it was ten years ago, but it still exists, especially through traditional banks.
The advantage is simplicity: you do not need to learn a new system or log into anything. The disadvantage is that you are paying a representative's time, so fees are usually higher — often 3% to 4% per transaction, sometimes with a monthly minimum. You also have no record of the transaction until the bank sends you a statement, which makes reconciliation slower and creates a gap between when you took the payment and when you know it cleared.
If your bank offers this service, ask what the fee is and whether you can use a virtual terminal instead. In most cases, the virtual terminal will be cheaper and faster.
What You Need Before You Start Taking Phone Payments
Before you process your first phone payment, you need a merchant account — an agreement between you, your bank, and a payment processor that lets you accept credit cards. You can open one through your existing bank, through a payment processor like Stripe or Square, or through a specialized merchant services company.
The application usually takes 24 to 48 hours. You will need your Social Security number or EIN, a business license if you have one, and basic information about your business (what you sell, how long you have been operating, your expected monthly volume). Some processors ask for a voided check or bank statement to verify your account. Once approved, you receive login credentials for your virtual terminal or a link to download the mobile app.
Test a transaction with a test card number (your processor will give you one) before you take a real payment. This takes five minutes and catches any setup problems before a customer is waiting. Your processor's support team can walk you through the test if you get stuck.
PCI Compliance: Why You Cannot Just Email Card Numbers
The Payment Card Industry Data Security Standard (PCI DSS) is a set of rules that all businesses accepting credit cards must follow. The core rule for phone payments is this: you cannot store, email, or write down a full credit card number. You can only handle card details through a system that encrypts them before they leave your device.
If you violate this rule and a customer's card is fraudulently used, you are liable for the charge — not the customer, not the card network. You could also face fines from the payment processor or the card networks themselves, ranging from hundreds to thousands of dollars per violation. This is not a suggestion; it is a legal requirement that applies to every business that touches a credit card number.
Using a virtual terminal, mobile app, or phone-based processor automatically puts you in compliance because these systems are built to encrypt data. If you are tempted to write down a card number or email it to yourself, do not. It costs you nothing to use the right tool, and it costs you everything if you do not.
Comparing Costs: Virtual Terminal vs. Mobile App vs. Phone Processing
| Method | Setup Cost | Per-Transaction Fee | Monthly Fee | Best For |
|---|---|---|---|---|
| Virtual Terminal | Free (included with merchant account) | 2.9% + $0.30 (varies by processor) | Usually none | Office-based, low volume, lowest cost |
| Mobile App | Free to download | 2.6% to 3.5% + $0.10 to $0.30 | $10 to $50 (some apps) | On-the-go payments, field service, convenience |
| Phone-Based Processor | Free | 3% to 4% | Sometimes $25 to $50 | Very low volume, simplicity over cost |
The virtual terminal is almost always the cheapest option if you are processing from an office or home. Mobile apps cost more per transaction but save time if you are constantly moving. Phone-based processing is the slowest and most expensive, but it requires the least technical knowledge.
To choose between them, calculate your expected monthly volume and multiply it by the per-transaction fee for each method. If you process 50 transactions per month at an average of $100 each, the difference between a virtual terminal (2.9% + $0.30 = $1.79 per transaction) and a mobile app (3.2% + $0.25 = $3.45 per transaction) is about $83 per month. That math changes your decision.
Frequently Asked Questions
Can I take credit card payments over the phone without a merchant account?
No. A merchant account is required by law to accept credit cards. You can open one through your bank, a payment processor like Stripe or Square, or a merchant services company. The application takes 24 to 48 hours and is free.
What if a customer disputes a phone payment I processed?
The customer can file a chargeback with their card issuer, claiming they did not authorize the charge. If you have a record of the transaction in your processor's system and the customer's billing address matches, you can dispute the chargeback. If you have no record (because you emailed the card number or wrote it down), you will lose and have to refund the charge plus a chargeback fee.
Do I need to ask for the CVV when taking a phone payment?
Yes. The CVV (the three-digit code on the back of the card) is part of the standard information you enter into a virtual terminal or mobile app. It helps verify that the person giving you the number actually has the card in hand.
Can I use a virtual terminal on my phone?
Yes. Most virtual terminals are web-based, so you can log in from any device with a browser — phone, tablet, or computer. However, if you are taking many payments on a phone, a mobile app designed for that purpose (like Square or PayPal Here) is usually faster and easier to use.
What happens if my internet goes down while I am processing a payment?
The transaction will not go through. You will need to wait for your internet to come back, then process the payment again. This is why mobile apps with offline mode (like Square) can be useful if you are in an area with spotty internet — they can store the transaction and send it once you reconnect.