---
title: Online payments
description: Take card-not-present payments with the virtual terminal and hosted checkout, and lower fraud and dispute risk on phone, email, and online orders.
url: https://thepoints.io/docs/merchants/online-payments
audience: [merchants]
status: Live
---

# Online payments

Online payments cover any sale where the card is not in front of you: phone and email orders, website checkout, and invoices. Points Business supports them through a virtual terminal, hosted checkout, [Payment Links](/docs/merchants/payment-links), and [recurring billing](/docs/merchants/recurring-billing).

## Virtual terminal

The virtual terminal lets you type in a card payment from a computer. Use it for phone and email orders.

1. In the [Merchant Dashboard](/docs/merchants/merchant-dashboard), open **Transactions** and start a new sale, or open **Customers** and charge a saved customer.
2. Enter the amount and the card details the customer gives you.
3. Include the billing address and security code. These help confirm the card belongs to the customer.
4. Submit and save the receipt.

Never write down or store card numbers on paper, in email, or in a spreadsheet.

Depending on your setup, the dashboard may also support bank (ACH) payments. Ask support whether they are part of your account.

## Website checkout

If you sell on a website, you can send customers to a secure hosted checkout page instead of collecting card details yourself. A hosted page keeps card data off your site, which usually makes [PCI compliance](/docs/merchants/pci-and-security) simpler.

Merchants with developers can connect their own software using API keys and webhooks from the dashboard. Contact support before you start so we can confirm what your account supports and help you test safely. Treat API keys like passwords. Never put them in a public website, an app, or shared code.

Store plugins may be available depending on your setup. Contact support to ask.

## Card-not-present payments carry more risk

When the card is not present, fraud and disputes are more likely. To lower your risk:

- **Check the address and security code** on every online or keyed payment.
- **Use a recognizable business name** on customer statements. See [Merchant Dashboard](/docs/merchants/merchant-dashboard#branding-and-customer-facing-details).
- **Post clear policies** for refunds, returns, cancellations, and shipping.
- **Keep records**: invoices, proof of delivery, and customer messages.
- **Be careful with rushed or unusual orders,** such as large first orders, mismatched shipping and billing addresses, or requests to ship somewhere unexpected.
- **Stay within your approved processing limits.** Sales well above them can be held for review. See [Deposits and batches](/docs/merchants/deposits-and-batches#approved-processing-limits).

## Need help?

Email info@thepoints.io or call (833) 374-1518.