Meta description: Merchant services virtual terminals let service businesses accept phone and email orders — but Square, Stripe, and PayPal charge 3.4–3.5% for keyed transactions. Here's what you're actually paying and what interchange-plus costs instead.
TL;DR: A merchant services virtual terminal lets you accept card payments from any phone or email order without hardware. Square, Stripe, and PayPal charge 3.4–3.5% for keyed transactions because card-not-present fraud risk is priced into their flat rate. Interchange-plus accounts expose the actual interchange cost (1.29–2.50% for most consumer cards) and charge a small markup on top. For service businesses processing $20,000+ per month in virtual terminal volume, the annual difference commonly runs $3,000–$5,000.
If you process phone and email orders, you're using a virtual terminal. You log in, type in the card number, and charge. The transaction runs.
What most service businesses miss is the fee structure underneath that convenience. Square charges 3.5% plus $0.15 for every keyed entry. Stripe charges 3.4% plus $0.30. PayPal charges 3.39% plus $0.29. Those rates aren't the same as what you pay for a swiped transaction. And the gap between flat-rate keyed pricing and actual interchange cost is where most of the savings live for merchants who run significant virtual terminal volume.
This post breaks down how virtual terminal pricing works: why the keyed rate is higher, what the underlying interchange actually costs, and whether switching your merchant account makes financial sense at your volume.
What is a merchant services virtual terminal, and who actually needs one?
A virtual terminal is a browser interface that lets you manually key in card details to process a payment. No card reader. No POS system. No app required. You log in, enter the 16-digit card number, expiration date, CVV, and billing zip, and the charge runs through your merchant account.
The transactions virtual terminals process are classified as mail order / telephone order (MOTO) by Visa and Mastercard. The cardholder is not physically presenting their card. The merchant is entering details provided over the phone, by email, or through another remote channel. That classification determines the interchange rate tier, the chargeback rules, and the PCI compliance category that applies.
Who uses virtual terminals day-to-day:
Consultants billing a project after delivery. Contractors taking a deposit over the phone before showing up on-site. B2B service businesses where a purchasing manager emails card details for a purchase order. Professional service firms that invoice but also take one-off card payments by request. Healthcare practices with patients who call to pay a balance. Any merchant whose customers don't always initiate payment through a checkout flow.
The appeal is straightforward: you don't need the customer in front of you, you don't need to send a payment link, and you don't need extra hardware. The terminal is a browser tab.
The issue isn't access. Square, Stripe, and PayPal all include virtual terminal access in their standard accounts. The issue is what you pay per transaction when you use it, and whether that rate is appropriate for your volume.
Why does Square charge 3.5% for keyed transactions when swiped cards cost 2.6%?
Square's swiped rate is 2.6% + $0.10. Their keyed or virtual terminal rate is 3.5% + $0.15. The 90-basis-point gap between those two rates isn't arbitrary pricing.
When a card is physically tapped or swiped, the chip or magnetic stripe communicates with the terminal and the card network in real time. The network can verify the physical card exists and that chip data matches what the issuing bank holds on file. A fraudster with a stolen card number but no physical card cannot produce that exchange. Card-present transactions have significantly lower fraud and chargeback rates as a result.
Virtual terminal transactions have none of that verification. The cardholder isn't present. The merchant is typing in data provided verbally or in writing. There's no way to confirm the person authorizing the charge is holding the actual card. That gap in verification raises fraud rates, raises chargeback rates, and raises the cost to every processor absorbing that risk at scale.
Flat-rate processors absorb the entire cost structure — interchange, assessment fees, fraud loss reserves, and their own margin — blended into a single percentage. The keyed rate is higher because the fraud-adjusted cost is higher. For Square, the 3.5% rate covers a card mix where some percentage of keyed transactions will dispute, some card details are compromised, and some merchants are processing card-not-present volume in categories with above-average chargeback rates.
For comparison, the three major flat-rate processors as of 2026:
- Square: 3.5% + $0.15 per keyed transaction (squareup.com)
- PayPal: 3.39% + $0.29 per virtual terminal transaction (paypal.com merchant fees)
- Stripe: 3.4% + $0.30 per manually entered transaction — their standard 2.9% + $0.30 plus a 0.5% card-not-present surcharge (stripe.com/pricing)
These are published rates. Actual effective rates on these accounts vary by card mix, but the published keyed rate is what you'll see on the majority of your virtual terminal transactions.
What does a keyed card transaction actually cost at the interchange level?
Interchange is the fee your customer's card-issuing bank charges when you accept their card. Visa and Mastercard publish interchange schedules. The schedules have dozens of rate tiers based on card type, transaction type, and how data is submitted.
For card-not-present transactions (the category virtual terminal transactions fall into), Visa's published interchange for standard consumer credit cards runs approximately 1.29% + $0.10 to 2.50% + $0.10 depending on the card tier. Premium rewards cards and business credit cards run higher — non-qualified CNP transactions can reach 3.15% + $0.10. (Source: Visa interchange schedule, chargebacks911.com, 2026.)
A transaction on a standard Visa consumer credit card processes at around 1.65% + $0.10 at interchange. Add the card network's assessment fee (roughly 0.13–0.15%) and a processor markup on an interchange-plus account, and the total lands around 1.85–2.10% for that card type.
Square's 3.5% rate on the same transaction prices the underlying cost at roughly 2x the actual interchange. The spread subsidizes Square's fraud reserve, their margin, and the cost of merchants whose customers pay with premium rewards or business cards that carry higher interchange rates.
The card mix problem with flat-rate pricing:
Every card your customer uses carries a different interchange cost. A regulated Visa debit card might have interchange of 0.05% + $0.22. A premium Visa Infinite rewards card might carry interchange above 2%. Under a flat-rate account, both transactions charge at 3.5%. Under interchange-plus, the debit card transaction runs close to cost, and the rewards card transaction runs at its actual interchange tier plus a markup.
If your customers pay primarily with standard consumer credit cards, your actual interchange cost is well below Square's 3.5% rate. If your customers pay mostly with corporate or premium rewards cards, the gap between flat-rate and interchange-plus narrows but doesn't close.
For a full explanation of how interchange-plus pricing works across all transaction types — not just virtual terminal — see interchange-plus pricing explained.
How much does flat-rate virtual terminal pricing cost per month versus interchange-plus?
Run the math on $20,000 per month in virtual terminal transactions. Assume a typical service business card mix: mostly standard consumer Visa and Mastercard credit, some debit, around 200 transactions per month.
Flat-rate (Square at 3.5% + $0.15):
- Processing fees: $20,000 × 0.035 = $700
- Per-transaction fees: 200 × $0.15 = $30
- Monthly total: $730
Interchange-plus (estimated effective rate ~1.85% on a standard consumer card mix, $0.10/transaction):
- Processing fees: $20,000 × 0.0185 = $370
- Per-transaction fees: 200 × $0.10 = $20
- Monthly total: $390
Monthly difference: $340. Annual difference: $4,080.
Those numbers shift based on your actual card mix. If your customers pay primarily with debit cards, the interchange-plus effective rate drops further. If they pay mostly with premium rewards cards, the gap narrows toward 1 point instead of 1.6.
The way to know where you actually land: pull your last three processing statements, add up total fees, and divide by total volume. That's your effective rate. Compare it to what interchange-plus accounts would have cost on the same volume.
Merchants who switch from flat-rate processing to interchange-plus accounts typically see effective rates drop 15–40% depending on card mix. One merchant who came off a 2.9% + $0.30 flat-rate account saw their effective rate fall to 1.6% after the switch — a 44% reduction on the same transaction volume, without changing their billing process at all.
Virtual terminal access is included in every ClickWerxs merchant account at no extra cost. The savings come entirely from the pricing structure on those transactions, not from paying for a new tool.
What PCI compliance requirements apply to virtual terminal merchants?
Virtual terminal merchants fall under a specific PCI DSS self-assessment category: SAQ C-VT.
SAQ C-VT (Self-Assessment Questionnaire C-VT) applies to merchants who manually enter single transactions through a virtual terminal in a web browser and store no electronic cardholder data. Under PCI DSS v4.0.1, the current standard published by the PCI Security Standards Council, SAQ C-VT applies when: the virtual terminal is accessed from a device used only for payment processing, no cardholder data is stored electronically after the transaction is processed, and the virtual terminal solution is provided by a PCI-validated third-party service provider.
The core SAQ C-VT requirements in practice:
The device requirement is where most small merchants fail. SAQ C-VT requires the device used to access the virtual terminal to be an isolated payment-only device. If you're keying in card transactions on the same laptop you use for email, file storage, and general business operations, that device must be hardened against malware and cannot be connected to systems that store cardholder data.
The practical solution: a dedicated tablet or browser-only device used exclusively for payment entry, with antivirus software running and a documented access policy. A refurbished laptop configured solely for virtual terminal access satisfies the isolation requirement without overhauling your existing infrastructure.
Card data retention is the other high-failure area. MOTO merchants often receive card details by phone and write them down or save them in notes to process later. Cardholder data written on paper, stored in email, or saved in a notes app falls outside PCI scope unless the entire storage environment is PCI-compliant. The safe workflow: receive card details, process immediately, destroy or delete the record. No batch entry from a list of card numbers collected earlier in the day.
An Approved Scanning Vendor (ASV) quarterly external scan is required. Annual SAQ completion is required. Your processor's PCI compliance program covers their infrastructure. Your compliance covers your environment.
If you're unsure whether your current setup satisfies SAQ C-VT, your processor's compliance team or a Qualified Security Assessor (QSA) can review the specific requirements against your actual setup.
What should you look for in a virtual terminal provider beyond the rate?
The rate matters. It's not the only factor.
Monthly fee structure. Square and Stripe include virtual terminal access in their base accounts with no separate monthly platform fee. PayPal's virtual terminal requires a Payments Pro subscription at $30/month in addition to per-transaction fees. That fee changes the effective rate comparison for lower-volume merchants. A merchant processing 80 virtual terminal transactions per month on PayPal's Payments Pro is paying $0.375/transaction in platform cost before any per-transaction fees.
Card-on-file and recurring billing. If you bill the same clients on a schedule, you want a provider that supports stored card data with customer-authorized recurring transaction flags, not just keyed MOTO entry. Recurring billing on properly stored, consent-backed card files runs at recurring billing interchange rates, which are lower than standard MOTO rates. The difference between providers is in how they handle the authorization flow at enrollment and whether they support vault-to-vault token migration when you switch.
Chargeback documentation tools. Card-not-present chargebacks are more common than card-present chargebacks, and the dispute window is tight. Look for a provider that logs timestamp, authorization approval code, IP address where available, and order metadata automatically. When a dispute comes in, you have 7–10 days to respond with documentation. If your virtual terminal doesn't log transaction details automatically, you're assembling that documentation manually under deadline pressure.
Interchange passthrough. Flat-rate accounts (Square, Stripe, PayPal) give you no visibility into interchange tiers. If a transaction qualifies for a lower-cost debit tier, you pay the same 3.4–3.5% regardless. Interchange-plus accounts pass through the actual interchange cost, so debit transactions run significantly cheaper than rewards card transactions. For businesses with a mixed card input, that passthrough is where most of the savings materialize.
How do you switch virtual terminal providers without disrupting your billing operations?
The process takes 5–10 business days for most service businesses. Nothing about the transition requires taking your billing offline.
Step 1 — Apply with the old account still active. Submit your merchant account application while your current processor is still running. For service businesses with standard SIC codes and clean processing history, approval takes 3–5 business days. Cancel nothing before approval comes through.
Step 2 — Process a test transaction on the new account. Log into the new virtual terminal. Key in a card you control. Verify the transaction settles correctly and appears in your reporting. This confirms the account is properly funded before you start using it for real transactions.
Step 3 — Run both accounts in parallel for 30 days. Process new transactions through the new account. Keep the old account active for recurring billing tied to stored card tokens until migration is complete. Mark which account each client record is attached to in your billing system so nothing gets charged twice.
Step 4 — Migrate stored card tokens. If your current processor holds card-on-file data for recurring clients, request a PCI-compliant vault migration to the new processor. Most major processors support this. Plan 2–3 weeks for accounts with 50+ stored cards. Smaller vaults often migrate in days.
Step 5 — Cancel the old account after the last transaction migrates. Confirm every recurring client has been transferred. Pull a final statement from the old account and submit the cancellation in writing. Verbal cancellations are rarely documented correctly by processors.
The most common disruption point isn't the switch itself — it's running the parallel period without auditing both accounts. Set a weekly billing reconciliation for those 30 days. Confirm every expected charge came from the right account. One duplicate charge during the parallel period is easier to refund than a client who notices double billing two months later.
If you're running $10,000 or more in monthly virtual terminal volume on Square, Stripe, or PayPal, get a merchant account quote from ClickWerxs. We compare your last three processing statements against interchange-plus pricing before you commit to anything.
Frequently Asked Questions
Does using a virtual terminal increase my chargeback risk compared to in-person payments?
Yes. Card-not-present transactions have higher dispute rates than card-present transactions across all card networks because the physical card is not verified at point of sale. For virtual terminal merchants, the most effective chargeback mitigation is documentation built at time of transaction: log the timestamp, authorization approval code, any written communication from the customer confirming the payment (email, text, invoice acceptance), and the billing address match result. Processors require dispute response documentation within 7–10 days of a chargeback notification. Without pre-built documentation, you're assembling a response under deadline pressure on a transaction that may be weeks old. For a full dispute prevention framework that applies to all card types, see the chargeback prevention guide.
Does interchange-plus pricing work the same way for virtual terminal transactions as for in-person transactions?
No. In-person transactions and virtual terminal transactions run at different interchange tiers because the card networks price fraud risk into the interchange rate itself. Card-present transactions qualify for card-present interchange rates, which are lower than card-not-present rates because physical card verification reduces fraud exposure. Virtual terminal transactions run at card-not-present interchange rates, which are higher. On an interchange-plus account, both transaction types are priced at their actual interchange cost plus a fixed markup — but the interchange cost itself is different. Your virtual terminal effective rate will be higher than your card-present effective rate even on the same interchange-plus account, because the underlying interchange categories are priced differently by Visa and Mastercard.
What is the difference between a virtual terminal and a payment gateway?
A virtual terminal is the browser interface a merchant uses to manually enter card details. A payment gateway is the backend infrastructure that processes the authorization: it routes the transaction to the acquiring bank, communicates with the card network, and returns an approval or decline code. Virtual terminals sit on top of payment gateways. When you log into Square or Stripe's virtual terminal, you're using their virtual terminal UI on top of their payment gateway. On standalone merchant accounts with a separate payment gateway, gateway fees — typically $0.05–$0.15 per transaction — are a separate line item on your monthly statement, not included in the interchange-plus processor markup.
Can I surcharge virtual terminal transactions to recover processing costs?
Surcharging card-not-present transactions is permitted in most US states under Visa and Mastercard's surcharging rules, but with restrictions: the surcharge must be disclosed before the transaction, it cannot exceed the actual processing cost, and it must apply only to credit transactions (not debit or prepaid). Several states prohibit credit card surcharging regardless of transaction type as of 2026, including California, Connecticut, Kansas, Maine, Massachusetts, Oklahoma, Texas, and Utah. For service businesses taking phone orders from customers across multiple states, implementing surcharging on virtual terminal transactions requires checking the rules for each customer's billing state, not just your own. For the full state-by-state breakdown and the cash discount alternative, see credit card surcharging laws in 2026.
Disclaimer: Processing rates, interchange schedules, and state surcharging rules change. All rates cited reflect publicly available pricing and Visa interchange documentation as of June 2026. Verify current rates directly with each processor before making a switching decision. PCI DSS compliance requirements depend on your specific payment environment; consult a Qualified Security Assessor for guidance on your setup. ClickWerxs is a registered ISO. We earn revenue from merchant accounts we place. This does not affect the rates or terms merchants receive; those are set by acquiring banks.
Kaleb Dickhaut — Founder, ClickWerxs. Kaleb builds payment infrastructure and merchant accounts for service businesses, B2B sellers, and agencies. linkedin.com/in/kaleb-dickhaut
Sources
- Competitor and platform pricing referenced in this post is taken from each company's published pricing or legal pages as of the date noted in text, and is subject to change without notice. ClickWerxs does not link to competitor websites; references are given in text so they remain verifiable. No affiliation is implied.
- Processing rates, fee ranges and effective-rate figures in this post are industry-typical ranges compiled from published network schedules and from accounts reviewed in the ClickWerxs ISO portfolio. They are not quoted rates. Interchange itself is set by Visa and Mastercard on published schedules that change twice yearly; your actual cost depends on card mix, MCC, ticket size and volume.
- ClickWerxs ISO portfolio, aggregate observation — patterns described from merchant accounts under ClickWerxs management. Anonymized and reported in aggregate; individual account terms vary. Operator data.
ClickWerxs facilitates merchant account applications and provides ongoing account management as an authorized representative of our banking and processing partners. Approval, rates, and terms are determined by the issuing processor and acquiring bank — ClickWerxs does not guarantee approval for any merchant account application. Processing rates and fee structures cited in this post reflect publicly available industry data and general ranges; your actual rate depends on your industry, volume, and card mix. This post is not legal or financial advice. For a custom quote, see clickwerxs.com/payments/get-a-quote.