You can accept credit card payments in person without a machine by writing down the card details and processing them later, or by using your phone as a reader.
The two main routes are manual card entry (also called "card not present" or keyed entry) and phone-based readers that plug into your mobile device. Manual entry means you write or type the cardholder's name, card number, expiration date, and CVV, then submit it through a payment processor later. Phone readers like Square Reader, PayPal Here, or Clover Mini turn your smartphone into a functioning register in seconds. Which one you choose depends on how often you take payments, whether you have internet access, and how much fraud risk you're willing to accept.
Key Takeaways
- Manual card entry requires you to record the card number, expiration date, CVV, and cardholder name, then process the transaction through a payment processor—it's slower and carries higher fraud risk than swiping or inserting.
- Phone-based card readers (Square, PayPal, Clover) cost $20 to $300 upfront and charge per-transaction fees of 2.6% to 3.5% plus $0.10 to $0.30, but they're faster and more secure than manual entry.
- Manual entry transactions are often flagged as higher-risk by banks and may be declined or held for review more frequently than card-present transactions.
- If you take payments regularly, a phone reader pays for itself within weeks and protects you from chargebacks better than manual entry does.
Manual Card Entry: How It Works and Why It's Risky
When you manually enter a card, you're asking the cardholder to read you their information out loud or show you the card, and you type it into a payment processor's website or app. The processor needs the card number (all 16 digits for Visa or Mastercard), the expiration date, the CVV (the three-digit code on the back), and the cardholder's name and billing address. You then submit the transaction, and the processor sends it to the card issuer for approval.
The problem is that manual entry is classified as "card not present" by the payment industry, which means the card issuer can't verify that the cardholder is actually there. This makes the transaction higher-risk. If the cardholder later disputes the charge, the burden of proof falls on you—you have to show that the cardholder authorized it. Without a signature, PIN, or chip verification, that's harder to prove. Banks also decline manual-entry transactions more often than they decline swiped or inserted ones, and some processors charge higher fees for them.
Manual entry also exposes you to data security liability. If you're writing down card numbers on paper, you're responsible for storing that paper securely and destroying it properly. If someone steals it, you could face liability. If you're typing numbers into an unsecured system, the same applies. Most payment processors that allow manual entry require you to be PCI compliant (Payment Card Industry Data Security Standard), which means your systems have to meet security standards set by the card networks. Non-compliance can result in fines.
Phone-Based Card Readers: Speed and Security
A phone-based card reader is a small device that plugs into your phone's headphone jack or charging port and lets you swipe, insert, or tap a card just like a traditional register. Popular options include Square Reader (free hardware, 2.6% + $0.10 per transaction), PayPal Here (similar pricing), Clover Mini ($300 upfront, 2.6% + $0.10), and Block's Cash App for Business (2.5% + $0.15). The device encrypts the card data as soon as it's read, so you never see the full card number. The transaction is processed in real time, and you get instant confirmation.
Because the card is physically present and read by the device, the transaction is classified as "card present," which means lower fraud risk and higher approval rates. If a cardholder disputes the charge, you have a record of the swipe or insertion, which is stronger proof of authorization than a manual entry. You also avoid PCI compliance headaches because the reader handles encryption—you don't store card data at all.
The trade-off is upfront cost and per-transaction fees. A Square Reader costs nothing, but you pay 2.6% plus $0.10 on every transaction. A Clover Mini costs $300 but may offer lower fees if you process high volume. For occasional payments, the free reader makes sense. For regular business, the math usually favors a phone reader over manual entry within a few weeks.
When Manual Entry Is Your Only Option
There are situations where you genuinely can't use a card reader. If the cardholder is paying over the phone, by mail, or online and you're entering their information on their behalf, manual entry is the standard method. If you're in a location with no internet and no way to charge a phone, manual entry on paper is better than nothing. If you're taking a one-time payment and don't want to buy hardware, manual entry through a processor like Stripe or Square's online dashboard works.
In these cases, minimize risk by asking for the cardholder's full billing address and phone number, not just the card number. Process the transaction immediately rather than batching them later. Use a processor that offers fraud detection and chargeback protection. Keep records of the authorization (a note of the time, amount, and cardholder's verbal or written consent). Never store the card number after the transaction is complete—delete it from your notes or system within 24 hours.
Comparing Costs: Manual Entry vs. Phone Readers
| Method | Upfront Cost | Per-Transaction Fee | Processing Time | Fraud Risk |
|---|---|---|---|---|
| Manual entry (online processor) | $0 | 2.9% + $0.30 (typical) | Minutes to hours | Higher |
| Square Reader | $0 | 2.6% + $0.10 | Seconds | Lower |
| PayPal Here | $0 | 2.7% + $0.10 | Seconds | Lower |
| Clover Mini | $300 | 2.6% + $0.10 | Seconds | Lower |
On a $100 transaction, manual entry costs you $3.30 in fees. A phone reader costs $2.70. On 10 transactions a day, that's $6 a day in savings—enough to pay for a Clover Mini in 50 days. If you're taking payments regularly, a phone reader is almost always cheaper over time and protects you better against disputes.
What Happens If a Cardholder Disputes a Manual Entry Payment
When a cardholder disputes a manual-entry transaction, the card issuer initiates a chargeback. The issuer asks you for proof that the cardholder authorized the transaction. With manual entry, your proof is limited: you might have an email, a phone record, or a note. The issuer will likely side with the cardholder because you can't prove the card was physically present or that the cardholder verified their identity in real time.
If you lose the chargeback, the card issuer reverses the transaction and charges you a chargeback fee (usually $15 to $100). Your processor may also flag your account as high-risk and raise your fees or freeze your account if chargebacks happen repeatedly. With a phone reader, you have a record of the card being swiped or inserted, which is much stronger proof. Chargebacks still happen, but you're more likely to win the dispute.
Setting Up Manual Entry Through a Payment Processor
If you decide to use manual entry, you'll need a payment processor account. Popular options include Stripe, Square Online, PayPal, and Authorize.net. Sign up for an account, verify your identity and bank information, and you'll get access to a dashboard where you can enter card details and process transactions. Some processors let you create a payment link that you send to the cardholder, and they enter their own card information—this reduces your liability because you never handle the card data.
Before you start taking payments, read the processor's terms about manual entry. Some charge higher fees for it. Some require you to be PCI compliant. Some limit the number of manual transactions you can process per month. Square, for example, allows manual entry but flags accounts that rely on it heavily. If you're planning to take most of your payments manually, ask the processor upfront whether they support that volume.
Frequently Asked Questions
Can I write down a credit card number and process it later?
Yes, but it's risky. You're responsible for storing the card number securely and destroying it after processing. If the cardholder disputes the charge, you have weak proof of authorization. If someone steals the written number, you could face liability. Process manual entries as soon as possible, ideally within hours, not days.
What's the difference between swiping and inserting a card?
Swiping reads the magnetic stripe on the back of the card. Inserting reads the chip, which is more secure and harder to counterfeit. Both are classified as "card present" by the payment industry, so both give you stronger fraud protection than manual entry. Most modern readers support both.
Do I need a business license to take credit card payments?
That depends on your location and what you're selling. Most payment processors require you to have a legitimate business, but they don't verify your license. Check your local regulations. If you're operating without proper registration, the processor may close your account if they find out.
What if the cardholder's card is declined?
Ask them to contact their bank—the issuer may have flagged the transaction as suspicious or the account may not have sufficient funds. Don't retry the same card multiple times in a row; each attempt is a separate transaction and multiple declines can trigger fraud alerts. If the card is declined, offer an alternative payment method or ask them to call their bank first.
Is it legal to ask a customer for their card number over the phone?
Yes, as long as you're a legitimate business and the cardholder consents. But it's riskier than in-person payment because you have no way to verify their identity. Use a processor that offers fraud detection, ask for the billing address and CVV to confirm identity, and keep records of the authorization. Never store the card number after the transaction.