MOTO stands for Mail Order / Telephone Order — and if those words describe how any of your customers pay you, you need to understand what kind of merchant account you actually have. Using the wrong account type for MOTO transactions is one of the most common compliance errors merchants make, and it's one that can get your account terminated without warning.

The good news is that MOTO accounts are straightforward once you understand the underlying logic. This guide explains what they are, who needs one, how they differ from retail and ecommerce accounts, and what you need to get set up correctly.

The Card-Not-Present Foundation

All merchant accounts fall into two fundamental categories based on whether a physical credit card is present at the time of the transaction.

Card-present (CP) transactions are what happen at a retail point of sale — the customer hands you their card, you swipe, dip, or tap it, and the terminal reads the chip or magnetic stripe directly. Because the physical card is present and you can verify it, fraud risk is lower and interchange rates are cheaper.

Card-not-present (CNP) transactions are everything else — online orders, phone orders, mail orders, fax orders, or any situation where you're manually entering card details that the customer provided without being physically in front of you. Because you can't verify the physical card, fraud risk is higher and interchange rates reflect that.

A retail merchant account is specifically authorized for card-present transactions. A MOTO account — also called an internet or CNP merchant account — is specifically authorized for card-not-present transactions. Using a retail account to process a phone order is a violation of your merchant agreement, and processors who discover it will terminate the account. The card networks take this seriously because the risk profile of the transaction is genuinely different from what the retail account was underwritten to handle.

What MOTO Actually Covers

The MOTO designation is broader than many merchants realize. It covers all of the following:

• Telephone orders — a customer calls your business and reads their card number to a staff member who manually enters it
• Mail orders — a customer sends a written order form with card details by post
• Fax orders — a customer faxes an order form with card details
• Email orders — a customer emails card details (though this is also a significant security risk and not recommended)
• Online orders — customers entering card details through your website checkout
• Recurring billing — charging a stored card on a scheduled basis without the cardholder actively initiating each transaction

The unifying thread is that in every case, the physical card is not present and you're working from card data that the customer provided verbally, in writing, or through a web form. All of these are card-not-present transactions that require a MOTO / internet merchant account.

How a MOTO Account Works in Practice

The primary tool for processing MOTO transactions is a virtual terminal — a secure web-based interface where you enter the customer's card number, expiration date, CVV, and billing information to manually process the charge. It looks like a simple online form, but behind it is your merchant account and payment gateway handling the authorization and settlement just like any other transaction.

A virtual terminal is what makes a phone order possible without a physical card reader. Your customer calls, you open the virtual terminal in your browser, enter their details, and process the charge in real time while they're on the phone. Approval or decline comes back immediately and you can confirm the transaction result before the call ends.

For online orders, the customer-facing checkout form on your website connects to your payment gateway, which handles the transaction automatically without staff involvement. The gateway and virtual terminal are two interfaces to the same underlying MOTO merchant account — one customer-initiated, one staff-initiated.

MOTO vs. Retail: Can You Have Both?

Many businesses operate in both environments — a physical storefront that also takes phone orders, for example, or a service business that sees customers in person but invoices others remotely. The question of whether you need one account or two comes up frequently.

The practical answer is that most businesses in this situation have a single MOTO / internet merchant account that covers all their transaction types, and use a card terminal connected to it for in-person transactions. The MOTO account can handle both card-present and card-not-present transactions — it's the retail-only account that can't handle card-not-present.

The rate implication is worth understanding: card-present transactions processed through a MOTO account qualify for card-present interchange rates (the cheaper ones), while card-not-present transactions are priced at CNP interchange rates (the higher ones). Your effective blended rate will reflect the mix of your transaction types — and your processor should be able to show you exactly how each transaction type is priced.

MOTO and PCI Compliance

MOTO transactions that involve staff manually entering card details have specific PCI DSS implications that pure-ecommerce merchants don't face. When a customer reads their card number over the phone to a staff member, that staff member is handling cardholder data — and PCI DSS has specific requirements about how that data is handled, stored, and protected.

The most important rule: card numbers collected verbally must never be written down on paper or stored in unsecured systems. Staff who take phone orders should enter the card details directly into the virtual terminal during the call rather than writing them down to enter later. If your business takes any orders by paper form — mail order, fax order — those forms must be stored securely and destroyed appropriately after processing.

CyoGate's PCI compliance certification tool walks merchants through the specific requirements for their transaction environment — including MOTO-specific controls — which simplifies what can otherwise be a confusing annual process.

Rates: What to Expect for MOTO Processing

MOTO / card-not-present rates are higher than card-present rates — typically by 0.3–0.5 percentage points on the interchange component, with the processor markup on top. This is the cost of the higher fraud risk that comes with not having the physical card present.

Within the card-not-present category, there are further distinctions. A manually keyed transaction (a phone order entered through the virtual terminal) may be priced slightly differently from an automated online transaction, and recurring billing transactions have their own interchange categories. If you process a mix of these transaction types, understanding how each one is priced helps you evaluate whether your overall rate structure is competitive.

If you're currently processing MOTO transactions and haven't reviewed your rates recently, CyoGate's free merchant account audit will do a line-by-line analysis of what you're paying versus what's available — no obligation and no cost to find out where you stand.

Who Needs a MOTO Account: The Quick Checklist

You need a MOTO merchant account if any of the following describe your business:

• You take payment by phone and manually enter card details
• You accept mail orders or fax orders with card information
• You sell products or services through a website checkout
• You bill customers on a recurring basis using stored card credentials
• You invoice customers and they pay online or by phone
• You have a retail location but also take orders remotely

If you currently have only a retail swipe account and any of these apply, you should talk to your processor about your account type — or apply for the right account before a compliance issue forces the conversation.

CyoGate's MOTO merchant accounts include a virtual terminal, gateway access with shopping cart integrations, recurring billing support, and fraud screening — everything you need to process card-not-present transactions properly. Apply for a merchant account or contact us to discuss what your specific business needs.