How to Accept Credit Card Payments Without a Machine
You don't need a terminal, a reader, or any hardware at all to take cards. You need the right kind of merchant account — and a clear-eyed view of what going hardware-free costs.
The 30-second answer
The workhorse is a virtual terminal — a secure webpage where you key in the customer's card from any browser, no hardware involved. It's the standard tool for phone orders, invoices, and any business that gets paid remotely.
Around it sit four more zero-hardware options: payment links sent by email or text, online checkout on your website, tap to phone (your smartphone accepts contactless cards directly), andrecurring billing from a securely stored card.
The honest tradeoff: keyed and online transactions are card-not-present, and the networks price them higher than swiped or tapped ones because the fraud risk is real. The cost section below explains why — and how to keep those rates as low as they can go.
Five Ways to Take Cards With Zero Hardware
These aren't competing products — most hardware-free businesses end up using two or three of them together, usually from one account.
Virtual terminal
The anchor answerA secure webpage where you key in the card number yourself — from any browser, on any computer or phone. Customer reads the card over the phone or hands it to you, you type it in, the charge runs. No hardware, no app, nothing to install. This is how phone-order and invoice-based businesses have taken cards for years.
Payment links & invoicing
Customer keys it in, not youSend a secure payment link by email or text; the customer enters their own card on a hosted page. Because the cardholder types their own details, you never handle the number at all — and an emailed invoice with a pay-now link often gets settled faster than one that says "mail a check."
Online checkout
For anything sold from a websiteA payment gateway on your website takes cards around the clock with no terminal anywhere in the flow. If a meaningful share of your sales could happen online, this is its own project with its own best practices — see our ecommerce processing page.
Tap to phone
Your phone becomes the readerA standard smartphone with NFC accepts contactless cards and digital wallets directly — no dongle, no separate reader. The one zero-hardware method that still counts as card-present, because the card (or wallet) is physically tapped. Platform requirements below.
Recurring billing
Enter the card onceFor subscriptions, retainers, and installment plans: the card is stored in tokenized form after the first entry, and billing runs automatically on schedule. No machine, and after setup, no keying either.
Two neighbors worth knowing about: if your customers are other businesses that still live in the checkbook world, eCheck payment processing collects from a bank account with no card in the picture at all. And if online sales are a real part of your plan, our ecommerce credit card processing page covers the checkout side properly.
Tap to Phone: What Actually Works Today
Tap to phone deserves its own section because it's the odd one out: no hardware beyond the phone you already own, yet the transaction is still a physical tap — a contactless card, an Apple Pay phone, a watch — so it processes as card-present rather than keyed.
On iPhone, Apple's Tap to Pay requires an iPhone XS or later, a supported payment app, and a current version of iOS; Apple notes it isn't available in every market, and the U.S. is among the supported ones. It works through the payment app, not as a standalone Apple service.
On Android, there's no single Apple-style program from Google — acceptance comes through payment apps running on NFC-equipped phones, and each app sets its own floor. Square, for example, requires Android 9 or higher with NFC enabled, and notes that compatibility still varies by manufacturer and region.
The practical caveat: tap to phone handles contactless only. A customer with a worn card, no tap chip, or a card that prompts for a dip has to fall back to something else — which in a hardware-free setup means keying it into the virtual terminal. That fallback pairing is exactly why the two belong on the same account. Platform details above are sourced and dated in the Sources section, since both platforms revise their requirements.
What Going Hardware-Free Really Costs
Every keyed, linked, or online transaction is card-not-present, and the card networks price card-not-present interchange higher than card-present. That's not a processor markup trick — it's the networks pricing risk. When a chip is dipped or a card is tapped, the card generates a one-time cryptogram proving the genuine card was physically there. A keyed transaction carries no such proof: anyone with a stolen number can read it over a phone.
The same logic shows up in disputes. Card-present fraud liability largely shifted to whoever skipped chip technology; in card-not-present disputes, the burden of proof sits mostly with the merchant. More fraud exposure, more chargebacks, higher rates — the three travel together.
What you can control is how well each keyed transaction is qualified. The networks reserve their better card-not-present categories for transactions submitted with verification data, and their worst ones for transactions submitted bare:
Always collect and submit AVS data
The Address Verification Service checks the billing ZIP and street number you enter against what the issuing bank has on file. Keyed transactions that pass AVS generally qualify for better interchange categories than ones submitted bare — and a mismatch is an early fraud signal worth heeding before you ship anything.
Ask for the CVV, use it, never store it
The 3- or 4-digit security code proves the buyer is holding the physical card, not a stolen number. Enter it with every keyed sale. But storing it after authorization is prohibited under PCI DSS — a virtual terminal with tokenized card storage handles repeat billing the compliant way.
Keep evidence for every card-not-present sale
Signed work orders, delivery confirmations, email threads authorizing the charge. In a card-present dispute the chip data speaks for you; in a keyed dispute your paper trail is most of your defense.
Get underwritten for how you actually take cards
A merchant account approved for retail swiping but used 90% for keyed phone orders is a mismatch the processor will eventually notice — sometimes via a hold on your funds at the worst moment. If most of your volume is keyed, say so up front and get a MOTO account built for it.
To see what a difference in rate means in dollars on your own volume, run your numbers through our processing fee calculator — it makes the card-present vs. keyed gap concrete instead of abstract.
Who Should Skip the Machine — and Who Shouldn't
Going hardware-free fits businesses where the card is rarely in the room:service businesses collecting after the work is done, contractors invoicing by phone or email, phone and mail order operations, professional offices collecting retainers and balances, and mobile pros who'd rather send a payment link from the driveway than carry a reader. For them, hardware would be a gadget in a drawer.
But if customers regularly stand in front of you with a card in hand, the math flips. Entry-level countertop terminals are a modest one-time cost, and every transaction they touch runs at card-present rates with chip-level fraud protection. At steady in-person volume, the rate savings pay for the device quickly — a machine you use daily is cheap; "no machine" on in-person volume is the expensive option dressed as the frugal one. Our guide to credit card machine costs puts real prices on each device class so you can run that comparison honestly.
Most real businesses land in between: mostly-remote with occasional in-person sales (virtual terminal plus tap to phone covers it), or mostly-in-person with a side of invoicing (a terminal plus payment links). The point isn't purity — it's matching each transaction to the cheapest safe way to run it.
A Merchant Account Built for Card-Not-Present
The mistake we see most often isn't choosing the wrong tool — it's running keyed volume through a retail account that was never underwritten for it. Payment USA's MOTO merchant accounts are built for exactly this: secure virtual terminal access from any browser, payment links by email or text, invoice processing, tokenized card storage for repeat customers, and recurring billing — with underwriting that matches how you actually take payments, and no long-term contracts.
Because the account is structured for card-not-present from day one, the AVS and CVV practices above aren't an afterthought — they're how the terminal is configured to work. Tell us how your payments actually arrive, and we'll structure the account around it rather than forcing a retail setup to fit.
Taking Cards Without a Machine, Answered
Can I accept credit card payments with just my phone?+
Yes, two ways. Tap to phone turns an NFC-equipped smartphone into a contactless reader: on iPhone, Apple’s Tap to Pay requires an iPhone XS or later, a supported payment app, and a current version of iOS; on Android, acceptance comes through payment apps on NFC-capable phones, with minimum OS versions set by each app. And separately, a virtual terminal works in any phone browser — you can key in a card from the cab of a truck.
Are processing rates higher without a card machine?+
Usually, yes — but it depends on the method, not the missing hardware. Keyed, linked, and online payments are card-not-present transactions, which the card networks price higher because the fraud risk is higher. Tap to phone is the exception: the card is physically tapped, so it processes as card-present. No machine required for that distinction — just the tap.
What is the cheapest way to take cards with no hardware?+
There is no one answer, because the cost is mostly in the rate, not the tool. A virtual terminal, payment links, and recurring billing are all included with a Payment USA MOTO merchant account rather than sold as add-ons. From there, qualifying your keyed transactions properly — AVS on every sale, CVV at entry — is what keeps individual transactions from downgrading to the most expensive categories.
Is it safe to key in customer card numbers myself?+
Done properly, yes. Enter the number directly into the virtual terminal while the customer is on the phone — never write it down, never let it sit in an email or a voicemail, and never store the CVV anywhere. If you charge the same customer repeatedly, store the card as a token in the terminal’s vault, not in a spreadsheet.
At what point should I just buy a card machine?+
When in-person sales become routine rather than occasional. A countertop terminal is a modest one-time cost, and every sale it touches processes at card-present rates with chip-level fraud protection — across a year of steady walk-in volume, that rate difference typically dwarfs the hardware price. Our credit card machine cost guide breaks down what each device class actually runs.
Sources
Tap-to-phone platform requirements change; the claims on this page were checked against these pages on the dates noted.
- Apple — Tap to Pay on iPhone (developer overview) — Supported payment app plus a current version of iOS required; not available in all markets (observed September 3, 2026).
- Apple — Tap to Pay on iPhone for business — iPhone XS or later; list of supported payment apps (observed September 3, 2026).
- Square — Get started with Tap to Pay on Android — Android 9 or higher with NFC enabled; compatibility varies by manufacturer (observed September 3, 2026).
Spot something outdated? Email us and we'll fix it.
Ready to Take Cards Without Buying a Thing?
Tell us how your payments actually arrive — phone, invoice, link, online — and we'll structure a MOTO account around it: virtual terminal, payment links, and recurring billing included, underwritten for card-not-present from the start.