What is a MOTO payment? Taking card payments by phone or mail

By SendPay Business · · 2 min read

What is a MOTO payment? Taking card payments by phone or mail

MOTO stands for mail order and telephone order. A MOTO payment is when a customer gives their card details over the phone or in writing, and the business keys them in to take the payment.

How a MOTO payment worksWhy the risk is higherKeeping card details safe

How a MOTO payment works

  1. The customer reads out or writes down their card number, expiry date and security code.
  2. The business types the details into a virtual terminal or card machine.
  3. The payment is sent for approval without the customer being present.
  4. The business sends a receipt, and must not store the security code afterwards.

Why the risk is higher

Because the customer is not there to insert their card or complete an extra check such as 3D Secure, MOTO payments are more open to fraud. If a real cardholder disputes the payment, the business usually bears the chargeback.

Keeping card details safe

Card details heard or written down must be handled under the PCI DSS security standard: never write them on paper you keep, never store the security code, and limit who can hear or see them.

Where SendPay fits

SendPay does not provide card machines or virtual terminals. SendPay platforms include payment links and invoicing under your own brand, powered by licensed partners, so customers can enter their own card details securely. SendPay tells you in writing which licences apply to your platform before you pay.

Build it

Create your own financial platform.

Pick a template, name it, brand it, preview every page before you pay. Your brand, your users, your fees.

Build my platform →

Questions people ask

Virtual terminal or payment links: which costs less?

Compare the monthly cost of each.

Virtual terminal cost calculator →
What does a card payment cost?

See the fee on a payment and what to charge.

Card fee calculator →
Virtual terminal vs payment links

Two ways to take remote payments.

Compare them →
What is PCI DSS?

The card data security standard.

PCI DSS →
Card-not-present payments

Payments without the physical card.

Card not present →

Read next

This guide is general information, not legal or financial advice. SendPay Business is a technology company, not a bank, and does not take deposits; regulated services on the platforms are provided by licensed partners. PayPal, Patreon and Substack are named as reference points only and are not affiliated with SendPay Business.