Taking Credit Cards Over the Phone for Retail Orders Safely

On this page 7 sections

1. Why Taking a Credit Card Over the Phone for Retail Costs More
2. Virtual Terminal for Retail vs. Keying Into Your POS
3. Never Write It Down: PCI Rules for Phone Orders
4. AVS, CVV, and Shipping Checks to Stop Card-Not-Present Fraud by Phone
5. Sending Phone Order Payment Links Instead of Taking Card Numbers
6. Proof to Keep in Case of a Chargeback
7. Next Steps for Your Shop

Key takeaways

• Phone orders are card-not-present sales, so they usually cost more to process and leave more fraud risk with the shop.
• Enter card details directly into a virtual terminal or properly configured POS, and never write card numbers down or store security codes.
• An approval only means the card had funds and wasn't reported. Check AVS, CVV and the shipping address before you ship.
• Payment links and well-organized records can lower your exposure and help you respond to a chargeback.

A regular sees a new handbag on your Instagram, calls the shop and asks you to ship it to her lake house. Taking a credit card over the phone for a retail order like this is good service. It also changes how the sale is priced, who carries the fraud risk and what you're allowed to do with the card number. This guide covers why keyed sales cost more, which tools to use, how to handle card data safely, which fraud checks to run before you ship and what records to keep in case the sale is disputed.

Why Taking a Credit Card Over the Phone for Retail Costs More

In a store, the customer taps or inserts a chip card, and the terminal and card issuer authenticate the card. On a phone order, you type in numbers someone read to you. The issuer can't confirm that the card was physically present or that the caller is the cardholder. Because of that, phone sales are treated as card-not-present (CNP) transactions.

That difference matters in two ways:

• Cost. Card networks generally assign card-not-present and keyed transactions to interchange categories that cost more than chip or contactless sales. The exact rates depend on the card type, the network and how the sale is entered. Rates change, so confirm current figures with your processor.
• Liability. On a chip sale, the merchant usually has some protection against counterfeit-card fraud. On a keyed phone order, a fraud chargeback ("I didn't make this purchase") usually comes back to you. You lose the merchandise and the sale, and you may also pay a chargeback fee.

For a fuller comparison, read our guide to card-present vs. card-not-present fees, fraud and rules.

Where Keyed Transaction Fees Show up on Your Statement

How keyed transaction fees appear depends on your pricing model:

• Interchange-plus: You'll see the higher card-not-present interchange category listed, plus your processor's set markup.
• Tiered pricing: Keyed sales often fall into a "mid-qualified" or "non-qualified" tier, which can cost noticeably more than your advertised rate.
• Flat-rate pricing: Some providers charge a separate, higher rate for keyed or online sales.

If phone orders are becoming a regular part of your business, pull a recent statement and find those lines. Our breakdown of retail credit card processing fees and what a shop should pay explains how to read them.

Virtual Terminal for Retail vs. Keying Into Your POS

You have three main ways to take a phone order payment. Each works differently.

A virtual terminal for retail phone and mail orders is usually the cleanest choice for a boutique that takes phone orders every week. It asks for the details that support fraud screening and dispute responses, and it keeps those orders separate from your counter sales. Many virtual terminals run through payment gateways such as Authorize.net and NMI. Those gateways can also connect to an online store if you have one.

If you key phone orders into your POS instead, make sure the transaction is entered as a mail or phone order. A phone sale should never be run as if the card were present. That misrepresents the transaction, breaks card network rules and can cause problems with your processor.

Tell your processor about the change. If your account was set up for in-store sales and keyed volume suddenly grows, it can trigger a review or a hold on funds. See when to tell your payment processor about changes to your business.

Never Write It Down: PCI Rules for Phone Orders

The Payment Card Industry Data Security Standard (PCI DSS) applies to every business that accepts cards, including phone orders. The rules are detailed, but in a boutique the basics are simple: card data should go directly from the customer's voice into your payment system and nowhere else.

Build these habits with every employee who answers the phone:

1. Enter the card during the call. Don't take the number down to run it later.
2. No paper, ever. That means no sticky notes, order pads, notebooks or the back of a receipt.
3. Never store the security code. PCI DSS treats the CVV as sensitive data that shouldn't be kept after authorization, in any form.
4. Keep card numbers out of email, texts and DMs. If a customer offers to send a photo of the card, politely decline and suggest a call or a payment link.
5. Watch your call recordings and voicemail. If your phone system records calls, find out how to pause recording while the customer reads the card number. Ask customers not to leave card details in a voicemail.
6. Don't read the full number back. Confirming the last four digits is enough.
7. Limit who can take phone payments. Give each employee their own login to the virtual terminal so every transaction can be traced to the person who entered it.

Which self-assessment questionnaire applies to you depends on how you take cards. Your processor can tell you. For the full picture, see PCI compliance for retail stores at the counter, on the phone and in the back office. This section is general information. Confirm your specific obligations with your processor or a qualified security assessor.

AVS, CVV, and Shipping Checks to Stop Card-Not-Present Fraud by Phone

An approval code means the card is open, has available credit and hasn't been reported lost or stolen. It doesn't prove the caller is the cardholder. Phone fraud often follows a familiar pattern: an unfamiliar caller, an expensive order and a request to ship somewhere other than the billing address.

What AVS and CVV Actually Tell You

• AVS (Address Verification Service) compares the numbers in the billing street address and ZIP code with what the issuer has on file. You may get a full match, a partial match (ZIP only, or street only) or no match.
• CVV checks the security code printed on the card. A match suggests the caller has the card or has the full card details.

Neither check verifies the shipping address, and both can pass when a fraudster has stolen complete card data. Treat them as signals, not guarantees. Look up how your virtual terminal or gateway reports AVS and CVV results. Some let you set rules to automatically decline certain mismatches.

Red Flags on a Phone Order

For a boutique, the risk is very different for a longtime regular and a stranger. Be more careful when you notice:

• A first-time caller ordering several high-value items with little interest in fit, color or style
• A request for overnight or rush shipping, especially to a different state
• A ship-to address that doesn't match the billing address and that you can't explain as a gift
• A shipping address at a freight forwarder or reshipping service
• Several cards tried after a decline, or a caller "checking" a different card
• A cardholder name that doesn't match the caller, or a story that keeps changing

During the holidays and around Mother's Day, ship-to-someone-else orders are often legitimate. Callers send gifts to relatives all the time. That's why you verify instead of refusing outright.

A Pre-Shipment Checklist

Before a phone order leaves the shop:

• Confirm that AVS and CVV results are acceptable under your own policy
• For new customers or large orders, call back at a number you can verify instead of the one the caller gave
• Search the shipping address and make sure it's a real residence or business
• For a regular, compare the order with their purchase history in your POS
• Use tracking on every package, and require a signature for high-value orders
• When in doubt, hold the order and ask more questions. A legitimate customer will usually understand.

Sending Phone Order Payment Links Instead of Taking Card Numbers

A payment link removes the riskiest step. Instead of reading their card number to an employee, the customer opens a secure checkout page and enters it there. Your staff never hears or handles the number, so there's far less card data to protect.

Depending on your setup, hosted checkout pages may also support 3-D Secure authentication for online card payments. This adds an issuer verification step that can strengthen your position on fraud disputes. Check with your provider to see whether your setup supports it and how it applies.

Ways to send a link:

• Your e-commerce platform. If you already sell online through a store connected to Shopify payment processing or another platform, you may be able to create an order and send the customer a checkout link. Check your platform's features.
• Your gateway or invoicing tool. Some gateways and invoicing tools can email a payment request.

MannyPay's merchant platform is expanding to include text-to-pay and payment links. Ask your specialist which options are available for your account today.

A few practical tips:

• Tell the customer to expect the link and who it will come from, so it doesn't look like phishing.
• Don't ship until the payment has completed.
• Some older regulars prefer to read a card number over the phone. Keep a virtual terminal ready as a backup.

If the caller is local, it's often better to offer pickup. A customer who pays with their chip card at the counter turns a risky sale into a card-present one. Our guide to setting up buy online, pick up in store payments walks through the process.

Proof to Keep in Case of a Chargeback

Even careful shops get disputes. The shops that win them usually kept records from the start. Set up a simple folder or POS note for every phone order and save the following:

• Date and time of the call, the incoming phone number and which employee took it
• Customer name, billing address and shipping address
• AVS and CVV results and the authorization code from your gateway
• An itemized receipt or order confirmation emailed to the customer
• Photos of the item before shipping, especially for one-of-a-kind or vintage pieces
• Carrier tracking with delivery confirmation, and a signature for high-value items
• Any texts or emails in which the customer discussed the order
• The customer's purchase history with your shop, for regulars

Different disputes call for different evidence:

When a dispute arrives, respond before the deadline in your notice. Our chargeback rebuttal letter template and the evidence that wins shows how to present your case. For return-related disputes, see how to win retail return and "not as described" disputes.

Next Steps for Your Shop

Phone orders let you serve regulars who can't come in, and handling them safely mostly comes down to habits. Start here:

1. Check how keyed sales are priced on your current statement.
2. Choose one method for phone orders (virtual terminal, properly configured POS or payment link) and train every employee on it.
3. Remove any paper or digital records of card numbers.
4. Write a short fraud policy that covers AVS/CVV results, mismatched shipping addresses and when to call back.
5. Start a record-keeping routine for every phone order.

MannyPay works with boutiques and other shops on retail payment processing, including virtual terminals, gateways and countertop POS hardware. To review your setup, request a free quote. A MannyPay specialist will respond within one business day.

ME

About the author

MannyPay Editorial Team

Beyond the Swipe's editorial desk researches the publication's guides and news and cites its sources in every article. Articles reviewed by a named MannyPay editor carry that editor's byline.

This article is for general educational purposes and is not legal, tax or financial advice. Card network rules and state laws change; confirm current requirements for your business.