Payment technology and security
What is a virtual terminal?
Direct answer
A virtual terminal is a secure, browser-based interface that authorized staff use to enter payments without a physical card reader, often for phone, mail, invoice, or remote-service transactions. It commonly connects through a payment gateway. Because manually entered transactions have greater fraud and dispute exposure than many in-person transactions, access controls, verification, records, and pricing deserve special attention.
- Author
- AMP Payment Systems
- Review status
- Primary sources checked; no named AMP subject-matter reviewer is claimed.
- Published
- Modified
Key facts
- It is designed for staff-entered payments.
- Keyed transactions commonly cost more than card-present transactions.
- Card data must not be stored in notes, email, or ordinary forms.
Appropriate workflows
Virtual terminals can support deposits, invoices, and occasional phone orders when the merchant has a documented authorization process. Some also support recurring schedules and payment links.
Control access and evidence
Use individual accounts, least-privilege permissions, multifactor authentication where available, and reliable order records. Review AVS, card-verification, receipt, refund, and recurring-consent options.
When the answer changes
- Provider features and card-not-present rules vary.
- High-ticket or future-delivery transactions may receive additional review.
Common mistakes
- Sharing one staff login.
- Typing card details received through insecure email into the terminal.
What to verify
- Confirm user controls, logs, tokenization, fraud tools, and fees.
- Document authorization and record-retention procedures.
Primary sources
- PCI SSC Document LibraryPCI Security Standards Council
- Protecting Personal Information: A Guide for BusinessFederal Trade Commission
Apply the answer to your business
AMP can help organize your payment, POS, or statement questions. Any recommendation, availability, pricing, or approval depends on the final written configuration and provider terms.
Contact AMP