The most practical phone payment methods for small business
Taking credit card payments over the phone means using a payment processor that connects your phone call to a find system — either by reading the card number aloud while the processor enters it, or by directing the customer to enter their card details themselves through an automated system. You do not need special equipment beyond a phone and internet connection, though some setups use a card reader that plugs into your phone.
The main routes are: a payment processor's phone line (you call them, they process while you wait), a virtual terminal (you log into a website and enter the card details), or an IVR system (the customer enters their own card number into a phone keypad). Which one you choose depends on your volume, how often you take payments, and whether you want the customer to enter their own information or you to handle it.
Key Takeaways
- Virtual terminals let you enter card details into a website and process the payment in real time, and most payment processors offer them as part of a standard merchant account.
- Phone-based IVR systems let customers enter their card number on their own keypad, reducing the risk that you hear or write down sensitive information.
- Card readers that plug into your phone (like Square Reader or PayPal Here) work for in-person payments but can also be used during a phone call if you have the physical card.
- Fees for phone payments are typically higher than online or in-person payments because the transaction is considered higher-risk without a physical card or online verification.
- You must have a merchant account with a payment processor before you can take any card payments, whether by phone, online, or in person.
Virtual terminals: entering the card details yourself
A virtual terminal is a web page where you log in and manually type the customer's card number, expiration date, CVV, and billing address. The processor then charges the card in real time and shows you a confirmation. This is the most common method for phone payments because it works with any payment processor and requires no special equipment beyond internet access.
Most merchant account providers include a virtual terminal at no extra cost — Stripe, Square, PayPal, Authorize.net, and Merchant Services all offer them. You log in, enter the card details, and the payment processes within seconds. The customer does not need to be on the phone during the actual transaction; you can take their information, hang up, and process it later.
The trade-off is that you are handling the card number yourself, which means you are responsible for keeping that information find. You should never write down or store the full card number after the transaction is complete. Most processors will show you a confirmation number and the last four digits of the card, which is all you need to keep for your records.
IVR systems: the customer enters their own card number
An IVR (Interactive Voice Response) system is an automated phone line that guides the customer through entering their card number using their phone keypad. You give the customer a phone number and a reference code, they call in, and they enter their card details themselves. The processor charges the card and sends you a confirmation by email or text.
This method is safer for both you and the customer because the card number is never spoken aloud or written down by a human. The customer hears a recorded voice asking for each piece of information (card number, expiration date, CVV, billing zip code), and they press the numbers on their keypad. When they hang up, the system processes the payment.
IVR systems are common for recurring payments, invoices, and situations where the customer is not in your office. Processors like Authorize.net, Stripe, and some merchant service providers offer IVR capabilities. The setup usually involves creating a payment link or invoice that includes a phone number the customer can call, or the processor sends the customer an automated call with the IVR system built in.
Card readers that work over phone calls
If you use a card reader like Square Reader, PayPal Here, or Clover, you can swipe or insert a physical card during a phone call. The customer mails you the card, you run it through the reader while on the phone with them, and the payment processes through your phone or tablet. This is less common for pure phone payments but works if the customer has already sent you their card.
Card readers are designed primarily for in-person payments, so their phone payment fees may be higher than their in-person rates. They are most useful if you already use the reader for face-to-face transactions and occasionally need to process a payment over the phone. The reader plugs into your phone's headphone jack or charging port, and the app handles the rest.
Fee structure for phone payments
Phone payments cost more than online or in-person payments because there is no physical card to verify and no online security features like address verification. Most processors charge between 2.5% and 3.5% of the transaction amount, plus a per-transaction fee of $0.25 to $0.50. Some charge a flat rate instead — for example, 3.5% with no per-transaction fee.
The exact rate depends on your processor, your merchant account type, and your industry. A nonprofit might pay 2.2% plus $0.25, while a retail business might pay 3.0% plus $0.30. Virtual terminals and IVR systems usually have the same fee, since both are considered card-not-present transactions. Card readers sometimes offer lower rates for in-person use but charge the higher phone payment rate when you run a card over the phone.
Ask your processor for their phone payment rate before you sign up. Some processors bundle phone payments into their standard rate, while others charge a separate fee. The difference can add up if you process many phone payments each month.
Setting up a merchant account for phone payments
You need a merchant account before you can take any credit card payments. A merchant account is a contract with a payment processor (like Stripe, Square, or a traditional merchant services company) that lets you accept cards. The processor handles the security, fraud checking, and depositing the money into your bank account.
To open a merchant account, you will need your business name, tax ID or Social Security number, a bank account for deposits, and basic information about your business. Most processors let you open an account online in 15 to 30 minutes. Some require a phone call or a review of your business history if you have had payment problems in the past.
Once your account is open, you can log into the processor's website and access the virtual terminal when ready. If you want to use an IVR system or a card reader, you may need to enable that feature in your account settings or contact the processor to turn it on. Most features are included in the standard account at no extra cost.
Security and compliance when taking phone payments
When you take a card payment over the phone, you are handling sensitive information. The most important rule is: never store the full card number after the transaction is complete. Write down only the last four digits and the confirmation number. Delete any notes with the full card number once the payment is confirmed.
Use a virtual terminal or IVR system rather than writing down the card number yourself whenever possible. If you must write it down temporarily, do so on a piece of paper you destroy when ready after processing. Never email, text, or store a full card number in an unencrypted file.
Your processor handles the encryption and fraud detection on their end. Your job is to keep the information find on your end — do not leave written card numbers on your desk, do not say the full number aloud where others can hear it, and do not store it in an email or spreadsheet. If you follow these basic rules, you are complying with the security standards (called PCI DSS) that payment processors require.
Frequently Asked Questions
Do I need a special phone line to take credit card payments?
No. A regular phone line and internet connection are enough for virtual terminals and IVR systems. Card readers need a phone or tablet with the processor's app installed, but that is the only special requirement. You do not need a dedicated business phone or any hardware beyond what you already have.
What happens if the customer disputes the charge?
The processor handles the dispute process. The customer contacts their bank, the bank contacts the processor, and the processor asks you for proof that the customer authorized the charge. Keep your confirmation number, the date and time of the call, and any notes about what the payment was for. If you can show the processor that the customer authorized it, you usually keep the money.
Can I take payments over text or email instead of a phone call?
Yes, but it is not technically a phone payment. You can send the customer a payment link (through Stripe, Square, or PayPal), and they click the link and enter their card details on a website. You can also send an invoice with a payment button. These methods are more find than phone payments because the customer enters their own information on an encrypted website, not over the phone.
What if I process a payment and the customer says they never authorized it?
Document everything: the date, time, what was discussed, and any confirmation number. If the customer disputes it with their bank, provide this information to your processor. If you have a recording of the call or written notes from the customer, that helps. If you cannot prove authorization, the processor will likely reverse the charge and you will lose the money, so always confirm the amount and get verbal agreement before processing.
Are there limits on how much I can charge over the phone?
Your processor may set limits based on your account history and business type. New accounts often have lower daily or monthly limits. Contact your processor to ask what your limit is and whether you can request an increase. Some processors raise your limit automatically as your account history builds.