What Is a Card-Not-Present Transaction? Risks and Rates
Learn what a card not present transaction is, why phone, online and keyed payments cost more, who pays for fraud, and how to lower both.
Photo: Pixabay
On this page 8 sections
Key takeaways
- Any sale where your terminal doesn't physically read the card is treated as card-not-present, including online, phone, keyed and recurring payments.
- CNP rates usually run higher than tapped or dipped payments because issuers can't verify the card or cardholder in person.
- Merchants generally absorb fraud chargebacks on CNP sales unless a tool like 3-D Secure shifts liability to the issuer.
- Taking payment in person when you can, plus AVS, CVV, tokenization and good records, lowers both cost and dispute risk.
A card not present transaction is any card payment where your terminal never reads the physical card. That includes a website checkout, a card number read over the phone, a number typed into a virtual terminal, or a subscription charge to a card on file. If you run a service business, much of your revenue may come in this way. This guide explains what counts as card-not-present (CNP), why these payments usually cost more to process, who pays when one turns out to be fraud, and how to lower both your fees and your risk.
What a Card-Not-Present Transaction Means
When a customer taps, dips or swipes a card at your terminal, the card itself takes part in the transaction. A chip or contactless payment generates data that is very hard to counterfeit, so the card-issuing bank has strong evidence that a real card was present.
In a CNP transaction, none of that happens. The issuer receives a card number, an expiration date and sometimes a security code and billing address. Anyone holding that information could have typed it in. The issuer has less proof that the real cardholder approved the purchase, and the card networks set pricing and liability with that in mind.
Common CNP channels include:
- Online checkout through an e-commerce platform and payment gateway
- Phone and mail orders keyed by staff
- Virtual terminal payments typed into a browser-based screen
- Recurring and card-on-file charges, such as memberships, retainers and installment plans
- Invoice and payment-link payments, where the customer enters card details on a hosted page
Card-Present vs. Card-Not-Present Examples
Whether a sale counts as card present or card not present depends on how the card data reaches your processor. It doesn't depend on whether the customer is standing in front of you.
| Scenario | Typically Treated As | Why |
|---|---|---|
| Customer taps a phone wallet at your counter | Card-present | Device creates secure, one-time payment data at the terminal |
| Technician dips a chip card on a handheld at the job site | Card-present | Terminal reads the chip |
| Customer reads a card number over the phone | Card-not-present | Only typed card data reaches the processor |
| Shopper checks out on your website | Card-not-present | Customer enters card details online |
| Monthly retainer charged to a stored card | Card-not-present | Charge runs from stored credentials with no card at a terminal |
| Card is in your hand, but the chip fails and you key it in | Often priced like keyed or CNP | No chip data, so you usually lose the protections and pricing of a chip read |
The last row surprises many owners. A keyed sale usually doesn't get chip or tap treatment, even when the customer is standing right there. For a deeper side-by-side, see our guide to card-present vs. card-not-present fees, fraud and rules.
Why CNP Rates Run Higher
Most of what you pay on a card sale is interchange, the fee set by the card networks and paid to the issuing bank. Interchange tables have separate categories for card-present and card-not-present sales, and the CNP categories are generally more expensive. Our explainer on how interchange fees are set covers the details.
Several factors push CNP rates higher:
- More fraud risk for the issuer. Without chip or tap data, issuers see more unauthorized use, and pricing reflects it.
- Missing data can cause downgrades. A CNP sale submitted without expected fields, such as address verification data, can land in a more expensive category.
- Card type matters more than many owners expect. Rewards and business cards already carry higher interchange, and that gap remains when they're keyed or used online.
- Processor pricing can add more. Some flat-rate and tiered plans charge a separate, higher rate for keyed or online sales on top of interchange differences.
Rates change periodically and differ by network, card type and merchant category, so confirm current figures with your processor. Your monthly statement should show which sales are priced as CNP. Our article on why online and keyed transactions cost more to process explains how to read those line items.
Who Is Liable for Card-Not-Present Fraud
Higher fees are only part of the cost. The bigger exposure is often card not present fraud liability.
The Default: The Merchant Usually Pays
When a cardholder says they didn't authorize a CNP charge, the issuer can file a chargeback. For most CNP sales, the merchant carries that loss by default. You lose the sale amount and any goods or labor you already delivered. You also usually pay a chargeback fee.
Card-present sales work differently. When your terminal reads a chip or contactless card correctly, you are generally in a much stronger position on counterfeit-fraud disputes than a merchant who keys card numbers. The exact rules vary by network, so confirm how they apply to your account.
When Liability Can Shift
- 3-D Secure authentication. When an online transaction is successfully authenticated through 3-D Secure, liability for many fraud-related disputes can shift to the issuer. Rules and exceptions vary by network, so confirm how this works for your account. Our guide to 3D Secure for online stores explains how to use it without adding unnecessary checkout friction.
- Strong evidence in a dispute. Without a liability shift, you can still win disputes with signed authorizations, matching billing details, delivery confirmation and communication records. See our chargeback representment guide for how that works.
Why Chargeback Volume Matters
Card networks monitor merchant dispute levels. Too many chargebacks can put you into a monitoring program, lead to added fees or reserves, or put your merchant account at risk. CNP-heavy businesses should treat fraud prevention as an account-health issue as well as a cost issue.
How CNP Risk Looks in Different Service Businesses
CNP exposure varies by business type.
- E-commerce stores face bots testing stolen card numbers at checkout, orders shipped to addresses that don't match the billing address, and "item not received" disputes. Address checks, security-code checks and fraud filters do most of the work here.
- Professional services firms, such as accountants, consultants and agencies, often key large invoices or charge retainers to stored cards. Disputes tend to come from clients who say the work wasn't delivered as agreed. Written engagement terms and clear invoices matter as much as fraud tools.
- Plumbing and home services businesses often take emergency jobs by phone, collect deposits before dispatch, and finish with a large balance at the customer's door. The phone deposit is the riskiest step.
- Telehealth and online pharmacy providers rely almost entirely on CNP payments: card on file for visit fees and no-show charges, online checkout for orders, and HSA/FSA cards. Many processors classify parts of this space as higher risk, and requirements vary by state and federal rules. Our guide to card on file for virtual visits and MannyPay's telehealth and online pharmacy payment solutions are good starting points.
Example: A Plumber Taking Payment Over the Phone
The following scenario and dollar amounts are illustrative only.
A homeowner calls a plumbing company at 7 a.m. about a leaking water heater. The dispatcher quotes a replacement at about $1,800 and asks for a $400 deposit to schedule the job that afternoon. The company could collect payment in one of three ways:
| Approach | Processing Cost | Fraud Exposure |
|---|---|---|
| Dispatcher writes the card number on a notepad and keys the full $1,800 after the job | Priced as keyed/CNP | High: merchant generally liable if disputed; paper card data creates a security problem |
| Dispatcher keys the $400 deposit into a virtual terminal with address and security-code checks, sends a written authorization and receipt, and keys the balance later | Priced as CNP | Moderate: better evidence, but liability still generally rests with the business |
| Dispatcher takes the deposit through a virtual terminal with AVS and CVV; technician collects the $1,400 balance by tap or chip at the job site | Deposit at CNP pricing; larger balance usually at card-present pricing | Lower: most of the dollars move to card-present, with a record of the customer on site |
The third approach limits CNP pricing to the smaller amount and moves the larger balance to a card-present payment. It also creates a clear record: a written estimate, a phone authorization with a matching address, and a chip or tap read at the customer's home. If the homeowner later disputes the charge, the company has much stronger evidence.
For the field side, see our roundup of the best credit card readers for plumbers and MannyPay's payment solutions for plumbing companies. For the office side, see how to take credit card payments over the phone safely.
Tools That Reduce CNP Risk and Cost
You can't eliminate CNP sales, but you can make each one cheaper and safer.
Move Payments to Card-Present When You Can
If you meet customers in person, a tap or chip read is usually the simplest way to lower both cost and fraud liability. Handheld terminals and mobile card readers let technicians, consultants and delivery staff take card-present payments away from a counter.
Send Complete Data on Every CNP Sale
- Turn on AVS and CVV checks in your gateway or virtual terminal, and decide which mismatches to decline. Our guide to AVS and CVV settings can help you set rules.
- Pass along invoice and tax details on business-to-business sales where your setup supports it. Some commercial card transactions may qualify for lower interchange categories when they include enhanced data. Ask your processor whether this applies to you.
Authenticate Online Payments
Adding 3-D Secure authentication to online checkout can shift liability for many fraud disputes. It also helps issuers approve legitimate customers with more confidence.
Store Cards Securely and With Consent
- Use tokenization so your systems store a token instead of the actual card number.
- Get clear, written consent for recurring or card-on-file charges, including the amount, frequency and how to cancel. Card networks have specific rules for stored credentials, so confirm the requirements with your processor.
- Never write card numbers on paper or keep them in email or spreadsheets. Doing so creates PCI DSS compliance problems on top of fraud risk.
Reduce Disputes Before They Start
- Use a billing descriptor customers will recognize on their statements.
- Email or text receipts right away with your business name, service details and contact number.
- Make refunds easy so customers contact you instead of their bank.
- Keep estimates, signed work orders and delivery or completion records for every job.
Look at Pricing and Cost Programs
Check whether your pricing model adds a markup to CNP sales on top of interchange. Our comparison of interchange-plus vs. flat-rate pricing explains how each model handles CNP sales. Some merchants also use compliant surcharging programs, cash discount or dual pricing to offset card costs. Rules differ by state and by card network, including which card types can be surcharged, so confirm current requirements before you change your pricing.
For large invoices, offering ACH as an alternative can also lower costs. ACH settles more slowly, however, and carries its own risks.
Next Steps
Card-not-present payments are essential for online stores, phone-dispatched trades, professional firms and telehealth providers. They cost more and carry more liability because the issuer can't verify the card in person. To lower both:
- Pull your last statement and identify which sales are priced as CNP or keyed.
- Move larger balances to card-present acceptance wherever customers are in person.
- Turn on AVS, CVV and 3-D Secure where they fit, and stop storing card numbers outside a tokenized system.
- Tighten your authorizations, receipts and records so disputes are easier to win.
For a second opinion on your CNP setup and pricing, request a free quote from MannyPay. A MannyPay specialist will respond within one business day to review your statement and discuss options for online, keyed and recurring payments.
This article is general information, not legal or compliance advice. Card network rules, surcharge laws and healthcare payment regulations change, so confirm current requirements with your processor and a qualified professional.
This article is for general educational purposes and is not legal, tax or financial advice. Card network rules and state laws change; confirm current requirements for your business.
