Virtual Terminals and Payment Links for Charter Desks: Setup Guide
Set up a virtual terminal for private jet charter bookings: payment links, e-signed contracts, 3DS and AVS settings that help charter desks win disputes.
Photo: Pixabay
On this page 7 sections
- Why Keyed Card Entry Is the Riskiest Way to Take Charter Payments
- Virtual Terminal for Private Jet Charter Desks vs. Emailed Payment Links
- Pair Every Charter Quote Payment Link With an E-Signed Agreement
- AVS and 3D Secure Settings for Five- and Six-Figure Tickets
- Permissions and Transaction Caps for the Charter Sales Desk
- Keep Card Data Out of Email and CRM Notes for PCI
- Audit Your Keyed Bookings Before the Next Quote Goes Out
Key takeaways
- Make a hosted payment link, sent right after the client e-signs the charter agreement, your default way to collect. Keyed entry is the exception, and each one gets a written reason.
- 3D Secure can shift liability for "I didn't authorize this" disputes. It does nothing for cancellation claims, so your signed terms still carry those cases.
- When an assistant or family office books on a principal's card, address the payment link to the cardholder, because the authentication challenge goes to them.
- Let sales reps send links but not key cards or issue refunds, and never refund to a card other than the one charged.
A charter desk should take most card payments through a secure payment link that the client opens right after e-signing the charter agreement. Keyed entry is for the rare client who can't complete a link. That split is the core of setting up a virtual terminal for private jet charter work. A link produces authentication results and address checks tied to the same person who signed the contract. A card number read over the phone late at night produces almost none of that. You learn how little it proves when the dispute arrives weeks after the aircraft has landed.
Why Keyed Card Entry Is the Riskiest Way to Take Charter Payments
Charter sales run on speed. An operator can usually hold an aircraft only briefly, and the client wants the trip locked in before someone else books the tail. The fastest path is "just read me the card." That habit is why keyed card payments on charter bookings attract fraud.
When a rep types a card number into a virtual terminal during a phone call, the sale is card-not-present and has almost no proof attached. You don't know who was on the line. Address verification only helps if the caller supplies a billing address and the issuer supports the check. Nothing authenticates the cardholder, so a fraud dispute generally falls on you. Your contract evidence, meanwhile, sits in an email thread that may never connect cleanly to the card.
Charter desks see a familiar fraud pattern. A new client wants an urgent booking and offers several cards in different names. Sometimes that client later "overpays" and asks for the difference back by wire or on another card. Stolen cards suit high-value services that are delivered fast. A flight is consumed in a few hours, and nobody can repossess it.
Keyed transactions can also be priced differently from authenticated online ones, depending on your processor and how the sale is categorized. Check your statement to see how your keyed volume shows up. Our breakdown of jet charter credit card fees explains what to look for.
Virtual Terminal for Private Jet Charter Desks vs. Emailed Payment Links
A virtual terminal is a browser screen where your staff type in card details. A payment link sends the client to a hosted checkout page where they enter their own card. Both tools often come from the same gateway, yet they leave very different records behind.
| Situation | Better tool | Why |
|---|---|---|
| New client, first booking | Payment link | Client authenticates; you never see the card number |
| Repeat client booking a new trip | Payment link | Same evidence standard every time |
| Post-flight incidentals on a card the agreement already covers | Virtual terminal or stored-credential charge | Only if the signed agreement authorized incidentals |
| Client can't open links (rare, documented) | Virtual terminal | Last resort, manager-approved |
| Corporate client paying against a PO | Link or invoice with Level 3 data | Depends on your gateway setup |
Set up this way, the virtual terminal handles a narrow slice of volume, mostly charges added after the trip. Those charges follow their own rules, covered in our piece on billing post-flight incidentals like catering and de-icing. For the booking itself, make the link the default. Require a written reason in the notes whenever someone keys a card instead.
MannyPay offers virtual terminals and payment gateways for card-not-present businesses. Payment links and text-to-pay are part of the merchant platform MannyPay is building out, so ask which link and invoicing options your gateway supports today.
Pair Every Charter Quote Payment Link With an E-Signed Agreement
The strongest setup lets the client e-sign the contract and complete payment in one session. The quote number should carry through both. A workable sequence:
- Issue the quote under a unique trip number. Write out the full price, including federal excise tax where it applies, and spell out the cancellation schedule.
- Have the client e-sign the charter agreement. A good e-signature platform keeps the signed PDF with an audit trail that records the signer's email and IP address.
- Route the client to the payment link right after signing, or email it to them. Put the same trip number in the link's description or reference field.
- Let the client pay and pass 3D Secure if it's triggered. Their receipt should restate the trip number and point to the cancellation terms.
- Confirm the trip to the same email address used for signing.
Every record in that chain carries the same identifiers. When an issuer reviews a dispute, it sees one person agree to specific terms and pay for that specific trip from one email address, often from the same device. A signed PDF form on its own carries less weight than many desks assume, as our guide to what a charter credit card authorization form proves explains.
Write the cancellation terms into the agreement itself rather than a linked webpage the client never opened. Cancellations for weather or maintenance are common triggers for charter disputes, and the signed terms are what you'll submit. For structure, see our article on tiered private jet charter cancellation fees.
Two Dispute Files Side by Side
This case is illustrative, not real. Assume a first-time client books a one-way charter from Teterboro to Aspen priced in the high five figures. Three weeks after the flight, the cardholder files an "unauthorized transaction" dispute.
Desk A keyed the card from a phone call. Its file holds a call log and the emailed quote. It also has an authorization form signed with a typed name and an AVS response showing only the ZIP code matched. Nothing shows the cardholder authenticated, so the issuer has little reason to side with the merchant.
Desk B used a signed agreement and a link. Its file starts with the e-signature audit trail and a 3D Secure authentication result, backed by full AVS and CVV matches. One email address appears on every document, and the passenger manifest shows who flew. Because the payment was authenticated, card network rules can shift liability for a fraud dispute like this one to the issuer. Ask your processor how that applies to your transactions.
Desk B still isn't guaranteed to win every dispute. Suppose the client had instead claimed the flight was canceled and never refunded. 3D Secure wouldn't help there. The signed cancellation terms and flight records would carry that case.
AVS and 3D Secure Settings for Five- and Six-Figure Tickets
Default fraud filters are typically tuned for small online orders. Charter tickets call for tighter rules, and what you can set depends on your gateway. These starting points suit most desks:
- CVV mismatch: decline automatically. A real cardholder typing their own card into a link has no reason to get it wrong.
- AVS: require a full street-and-ZIP match for U.S. cards, and send partial matches to manager review rather than declining them. Many issuers outside the U.S. support address checks only partly or not at all, so give international cards their own rule instead of blocking them.
- 3D Secure: turn it on for link payments. Some setups trigger it by risk score or amount, but for charter bookings, authenticating every booking payment is a sensible default.
- Velocity: flag repeated attempts on one link. Also flag any booking where several cards are tried in a short window, especially cards from different countries.
Big tickets also run into card limits. A client may legitimately want to split payment across two of their own cards. Send each card its own authenticated link, and agree on the approach with your processor first. Several cards in different names on a new client is a warning sign, not a convenience. Our article on credit card limits on a private jet charter covers declines and holds.
When the Assistant Isn't the Cardholder
Charter bookings often come from an executive assistant or a family office paying with the principal's card. The 3D Secure challenge goes to the cardholder's bank app or phone, not to the assistant. If the assistant clicks the link, the payment can stall in the middle of the night before an early-morning departure.
Plan for it. At booking, ask who holds the card. Address the payment link to the cardholder and copy the assistant on the agreement. When the principal signs and pays, your evidence chain stays intact. Corporate cards issued to a company with authorized users are a different case. Clients paying on account often fit better with net terms and Level 3 data for corporate charter clients.
Permissions and Transaction Caps for the Charter Sales Desk
Outside fraud gets most of the attention, but internal controls matter too. Controls on charter sales desk payments start with user roles in your gateway, so each person can do only what the job requires.
| Role | Can do | Can't do |
|---|---|---|
| Sales rep | Create and send payment links; view own transactions | Key cards or issue refunds |
| Sales manager | Approve keyed entry; void same-day errors | Change settlement bank details |
| Finance or owner | Issue refunds; manage fraud rules and user access | Refund to a card other than the one charged |
Add per-user transaction caps where your gateway supports them. A cap on keyed entry can sit well below your typical ticket, so any keyed booking needs a manager's sign-off. Refunds go to the original card only, with no exceptions. The "I overpaid, please refund to this other card" request is one of the oldest scams in high-ticket card-not-present sales. Turn on email alerts for refunds and keyed transactions so the owner sees each one the same day.
Offboarding matters as much as setup. Remove a departing rep's gateway login on the same day you shut off their email.
Keep Card Data Out of Email and CRM Notes for PCI
Your processor will expect you to follow the card industry's data security standard, known as PCI DSS. Charter desks tend to fall short in a few predictable places.
Clients will email card numbers no matter what you ask. Don't key them from the email. Reply asking the client to use the secure link, then delete the message from the inbox and from trash. Card security standards prohibit keeping the security code after authorization, and full card numbers sitting in a shared inbox are a breach waiting to happen. Confirm the specifics with your processor.
Call recordings are a blind spot particular to charter. Desks that record calls to settle quote disagreements also capture every card number read aloud, and those numbers then live in the recording archive. Pause recording whenever a card comes up. Better yet, stop taking cards over the phone.
CRM notes and trip sheets should hold only the last four digits and the card brand. Run one search of your CRM for long strings of digits and clean out what turns up. If the CRM supports field-level rules, add one that blocks full card numbers from being saved.
Payment links help here as well. Because the client enters the card on the processor's hosted page, the number never touches your systems, which can shrink the part of your business the standard applies to. Ask your processor which self-assessment questionnaire fits your setup. This section is general information, not compliance advice, so confirm your obligations with your processor or a qualified PCI assessor.
Audit Your Keyed Bookings Before the Next Quote Goes Out
Pull the last three months of transactions and count how many bookings were keyed. Then run the next five new-client bookings through the full chain. The client signs the agreement first, then pays through an authenticated link and gets a receipt, with the same trip number on every document. If your current gateway can't send links or cap users, that's the gap to close. MannyPay has a dedicated page for jet and charter businesses and offers high-risk merchant accounts. You can request a free quote and hear back from a MannyPay specialist within one business day.
This article is for general educational purposes and is not legal, tax or financial advice. Card network rules and state laws change; confirm current requirements for your business.
