How Virtual Terminal Payment Processing Works and When to Use It
What a virtual terminal does and who needs one
A virtual terminal is software that lets you accept card payments without a physical card reader. You log into a secure website or app, type in the customer's card details (or they enter them themselves), and the payment processes through your merchant account. It works over any internet connection—computer, tablet, or phone—and the transaction settles the same way a swipe or chip reader would.
Virtual terminals are built for businesses that don't run a traditional point-of-sale system: service providers who bill after the work is done, nonprofits taking donations, contractors invoicing clients, or anyone processing payments over the phone or by email. They're also a backup when your regular card reader breaks or your internet goes down temporarily.
The key difference from a payment link or invoice tool is that you control the entry. You're the one typing in the card number, not sending a link for the customer to click. That matters for security, speed, and which fees you pay.
Key Takeaways
- A virtual terminal lets you process card payments by logging into a website or app and entering card details manually, without needing a physical card reader.
- You pay a higher per-transaction fee (usually 2.5% to 3.5% plus a flat fee) than you would with a card reader, because manually entered cards carry more fraud risk.
- The customer's card data never touches your computer—it goes encrypted directly to the payment processor—but you still need to follow security rules like PCI compliance.
- Virtual terminals work best for low-volume, high-value transactions like service invoices or donations, not for retail checkout lines.
- Most merchant account providers offer a virtual terminal as part of their service, though some charge a monthly fee on top of transaction costs.
How the payment actually moves from card to your account
When you enter a card number into a virtual terminal, the software encrypts it immediately. That encrypted data travels to your payment processor (the company that holds your merchant account), not to your computer's hard drive. The processor checks the card with the issuing bank, holds the funds if approved, and sends you a confirmation on screen.
The money doesn't land in your bank account right away. Most virtual terminal transactions settle in one to two business days, depending on your processor and your bank. Some processors batch transactions once per day; others settle in real time. Check your merchant agreement to see which applies to you.
If a customer disputes the charge later, the processor pulls the transaction record from their system, not from your files. That's why the encryption matters—your business never actually "sees" the full card number after the transaction completes. The processor stores it in a secure vault.
Why virtual terminal fees are higher than card reader fees
A card swiped or dipped through a reader is verified by the physical card itself. A manually entered card number could be stolen, guessed, or typed wrong. Payment networks charge processors more to accept that risk, and processors pass that cost to you.
Typical virtual terminal rates run 2.5% to 3.5% of the transaction amount, plus a flat fee per transaction (often $0.25 to $0.50). A card reader transaction might cost 1.5% to 2.3% plus a smaller flat fee. The difference adds up fast on high-volume days, which is why virtual terminals work best for occasional or large transactions, not daily retail sales.
Some processors charge a monthly fee to use the virtual terminal at all—$10 to $50 per month—on top of per-transaction costs. Others include it free with your merchant account. Ask before you sign up, because that fee can make a low-volume business uneconomical.
Security rules you have to follow
PCI compliance (Payment Card Industry Data Security Standard) applies to any business that handles card data, even if you're using a virtual terminal. The standard has multiple levels depending on your transaction volume. Most small businesses fall into Level 3 or 4, which require less documentation than larger merchants, but you still have obligations.
The core rule: never store a full card number on your own computer or in your email. The virtual terminal handles that for you. If you write down a card number, photograph it, or save it in a spreadsheet, you've broken PCI compliance and exposed yourself to fines and liability. Use the virtual terminal's built-in record-keeping instead.
You also need to keep your login credentials private, use a strong password, and log out when you're done. If your account gets hacked and fraudulent transactions run through it, you're responsible for the chargebacks and the processor may suspend your account. Some processors offer fraud monitoring and dispute resolution as part of the service; others charge extra.
Virtual terminal vs. payment links and invoicing tools
A payment link is a URL you send to the customer. They click it, enter their own card details, and pay. You never see the card number. A virtual terminal is software you log into and use to enter the card number yourself. The customer doesn't need to do anything except authorize the charge.
Payment links are better for remote transactions where you want the customer to move at their own pace—online orders, donations, or invoices sent by email. Virtual terminals are better when you're on the phone with the customer and need to process the payment immediately, or when you're taking payment in person but don't have a card reader handy.
Fees usually favor payment links for small transactions and virtual terminals for large ones. A payment link might cost 2.9% plus $0.30 per transaction; a virtual terminal might cost 3.0% plus $0.50. On a $20 donation, the link is cheaper. On a $500 service invoice, the difference is negligible and the virtual terminal is faster.
Setting up a virtual terminal with your processor
If you already have a merchant account, ask your processor whether a virtual terminal is included. Most major processors—Square, Stripe, PayPal, Clover, Toast—offer one as part of their standard service. Some include it free; others charge a monthly fee. The processor will give you login credentials and walk you through the first transaction.
If you don't have a merchant account yet, you'll need to open one before you can use a virtual terminal. That process usually takes one to three business days. You'll provide your business license, tax ID, and bank account information. The processor will verify your identity and run a background check, then issue you a merchant ID and login.
Once you're set up, the virtual terminal is usually available immediately in your account dashboard. Test it with a small transaction first—many processors let you run test charges that don't actually debit a card. Make sure you understand how to view transaction history, run reports, and handle refunds before you process a real payment.
Common problems and how to avoid them
The most common mistake is typing a card number wrong. If you miskey a digit, the transaction will decline and the customer will have to give you the number again. Always read the number back to the customer before you hit submit, or ask them to verify it on screen if your virtual terminal has that option.
The second mistake is not keeping records. The virtual terminal stores transaction history on the processor's server, but you should also keep your own records—a spreadsheet or accounting software—so you can match deposits to invoices. If a customer disputes a charge six months later, you'll need to prove what they bought and when.
The third mistake is processing the same transaction twice by accident. If the page seems to freeze or takes a long time to load, don't click submit again. Wait 30 seconds and refresh the page. Check your transaction history to see if the charge went through. Duplicate charges are easy to refund, but they confuse your accounting and frustrate customers.
Frequently Asked Questions
Can I use a virtual terminal on my phone?
Yes. Most processors offer a mobile app that works like a virtual terminal. You log in, enter the card details, and process the payment. The security and fees are the same as the desktop version. Mobile apps are useful if you're meeting a client on site or taking payments at an event, but they use your phone's data connection, so make sure you have reliable internet before you start.
What happens if the customer's card is declined?
The virtual terminal will show a decline message on screen with a reason code—insufficient funds, expired card, fraud block, or other. Tell the customer the decline reason and ask them to contact their bank or try a different card. Do not charge them again without their permission, and do not store the declined card number.
Can I refund a virtual terminal transaction?
Yes. Log back into your virtual terminal, find the original transaction in your history, and click refund. The money goes back to the customer's card in one to three business days. Most processors let you refund the full amount or a partial amount. Keep a note of why you refunded it in case the customer or your processor asks later.
Do I need a separate virtual terminal account, or does it come with my merchant account?
It comes with your merchant account. You don't sign up for a virtual terminal separately. When you open a merchant account with a processor, the virtual terminal is usually included in your login dashboard. Some processors charge a monthly fee to use it; others don't. Check your pricing agreement or call your processor to confirm.
What if I process a payment and the customer says they never authorized it?
That's a chargeback. The customer's bank will contact your processor and ask for proof that the customer authorized the charge. You'll need to provide the transaction record, any email or written authorization, and proof of delivery if you shipped something. If you can't prove authorization, you lose the money and pay a chargeback fee (usually $15 to $100). Always get verbal or written consent before processing a virtual terminal payment.