How to Fill Out and Submit the Hilton Credit Card Authorization Form

To pay for someone else’s stay with your credit card at a Hilton hotel, you complete that property’s credit card authorization form, a document that gives the specific hotel written permission to charge your card when you won’t be present at check-in. Hilton’s default policy requires the card on file to match the name on the reservation, so this form is the sanctioned workaround.1Hilton. Payment for Hilton Reservations There is no single Hilton-wide version of the form. Each property issues its own, so the process starts with a call to the hotel where the guest will stay.

Getting the Form From the Property

Call the front desk or reservations line at the specific Hilton hotel and ask for a third-party credit card authorization form. The hotel will typically email you a PDF or send a link to complete the form electronically through Sertifi, which is Hilton’s brand-standard authorization platform.2Sertifi. Credit Card Authorization, Payment, e-Signature Software for Hotels

Have the reservation confirmation number ready when you call. If the booking hasn’t been made yet, the hotel can usually walk you through it first and issue the form afterward. Some properties handle everything by phone; others require the signed form before they’ll finalize the reservation.

What to Gather Before You Fill It Out

Missing or mismatched information is the most common reason these forms get rejected, so pull everything together before you start:

  • The guest’s full legal name, mailing address, and phone number.
  • The reservation confirmation number and the check-in and check-out dates.
  • Your card number, expiration date, CVV, and the billing address your card issuer has on file.
  • A clear scan or photo of your government-issued ID. Most properties require this to confirm the person signing matches the name on the card.

Every blank must be completed. The sample form used by the Hilton Virginia Beach Oceanfront states outright that the hotel cannot process the authorization until all fields are filled in.3Department of General Services. Credit Card Authorization Form Hilton A misspelled guest name, a wrong date, or a billing address that doesn’t match your card issuer’s records can each trigger a decline when the hotel runs its pre-authorization.

Filling Out the Form

The top of the form covers the reservation. Enter the guest’s name exactly as it appears on the confirmation, along with the confirmation number and stay dates. Some forms also ask for the guest’s phone number and address.

The middle section is for your payment information: full card number, expiration date, CVV, cardholder name as printed on the card, and the billing address tied to the account. Check this against your statement. Even a small discrepancy in the billing address can cause the pre-authorization to fail.

Choosing Which Charges to Cover

The form asks you to select the categories of charges you’re authorizing. Typical checkboxes include:

  • Room and tax, which covers only the nightly rate and applicable taxes.
  • Incidental charges, which covers extras like room service, minibar purchases, parking, and spa fees.
  • Catered food and beverage, for event or meeting bookings.
  • Meeting room rental, for conference or banquet space.

The Hilton Virginia Beach Oceanfront form lists all four as separate options.3Department of General Services. Credit Card Authorization Form Hilton Other properties may simplify the choice to room-and-tax versus all charges. Be precise. If you check “incidentals,” you’re on the hook for the guest’s restaurant tabs and minibar. If you’re unsure what a category covers, call the hotel before signing.

Signing

Your signature at the bottom makes the form enforceable. If the hotel uses Sertifi or a similar platform, an electronic signature carries the same legal weight as a handwritten one under the federal E-Sign Act, which states that a signature or contract cannot be denied legal effect solely because it is in electronic form.4Office of the Law Revision Counsel. 15 US Code 7001 – General Rule of Validity For a PDF, print, sign by hand, and scan or photograph the completed form for return.

Submitting the Form Securely

Most Hilton properties prefer digital submission. Through Sertifi, you fill in the card details, sign, and submit online. The platform tokenizes your card number and expiration so hotel staff only see masked digits, and it runs an automatic fraud check at the time of submission.2Sertifi. Credit Card Authorization, Payment, e-Signature Software for Hotels

If the hotel only sends a PDF, return it through the secure method the property specifies, such as a dedicated accounting email address or a verified fax number. Do not send an unencrypted email with your full card number visible in an attachment. If the property has no secure portal, ask whether you can call in the card number separately so the full details never sit in an inbox. Merchants that handle card data are subject to the Payment Card Industry Data Security Standard, which requires stored card information to be encrypted and security codes to be destroyed after the transaction is authorized.5PCI Security Standards Council. PCI DSS Quick Reference Guide A hotel that asks you to text or email your CVV in plain text is not following those rules.

Submit early. There’s no Hilton-wide deadline, but the accounting team needs time to verify the card and place a pre-authorization hold before the guest arrives. A few days of lead time is practical. Sending the form the morning of check-in risks leaving the guest at the front desk while staff hunt for your paperwork.

What Happens After You Submit

The hotel’s accounting or revenue team reviews the form, confirms every field is complete, and runs a pre-authorization on your card. A pre-authorization is a temporary hold, not a charge. It confirms the card is active and has enough available credit to cover the estimated stay. The hold amount typically reflects room-and-tax plus an incidental buffer if you authorized incidentals.

If the pre-authorization succeeds, the hotel links your card to the guest’s folio so charges post to your account instead of theirs. You should receive a confirmation email or call. If the card is declined because available credit is too low, the billing address doesn’t match, or the issuer flags the out-of-pattern charge, the hotel will contact you before the guest arrives. Calling your card issuer in advance to warn them about an upcoming hotel charge can prevent a fraud hold from causing the decline.

What the Guest Needs at Check-In

The guest must present a valid government-issued photo ID with a name matching what you wrote on the form. The front desk uses the ID to confirm the person checking in is the authorized guest.

Even with a third-party card fully authorized, most Hilton properties still ask the guest for their own credit or debit card to cover incidental charges, unless your authorization explicitly included incidentals. The hotel places a temporary hold on the guest’s card for potential extras like parking, room service, or damages. Hold amounts vary by property and location, running roughly $25 to $300 per night depending on the hotel’s tier and market. When the guest checks out, the hold is released, though the bank can take 72 hours or longer to free the funds depending on the card issuer.6Hilton. Hilton Payment FAQs

If your form covers all charges including incidentals, the guest may not need to present a personal card at all. Confirm this with the hotel when you submit the form so the guest knows what to expect.

Changing or Canceling the Authorization

If plans change, contact the hotel directly and in writing. A phone call can start the process, but follow up with email so there is a paper trail, and ask the hotel to confirm cancellation or modification in writing. Until you formally revoke the authorization, the hotel has the right to charge your card for expenses within the categories you approved.

For date changes or a guest name change, the hotel will likely ask for a new form rather than an amendment. Fill it out the same way: every field completed, signed, and returned through the same secure channel.

Your Liability for the Guest’s Charges

By signing, you agree to pay for whichever charge categories you selected. If you authorized incidentals and the guest orders room service, those charges are yours. The signed form is the hotel’s proof that you consented.

Federal law limits your exposure only for charges you did not approve. Under Regulation Z, “unauthorized use” means someone without actual, implied, or apparent authority used the card and the cardholder received no benefit. Liability for genuinely unauthorized charges is capped at $50 or the amount charged before you notified your card issuer, whichever is less.7eCFR. 12 CFR 1026.12 – Special Credit Card Provisions Charges made by the guest within the scope of your authorization are not unauthorized. The $50 cap would only apply if, for example, the hotel charged your card for a different guest’s stay or for categories you didn’t check on the form.

If charges on your statement exceed what you authorized, contact the hotel’s billing department first. Most disputes stem from the guest incurring charges in a category the cardholder thought was excluded. If the hotel can’t resolve it, file a billing dispute with your card issuer. Credit cards have no strict statutory deadline for reporting unauthorized charges under Regulation Z, though acting quickly strengthens your case.7eCFR. 12 CFR 1026.12 – Special Credit Card Provisions

How the Hotel Handles Your Card Data Afterward

Your card details don’t disappear once the stay ends. Hotels storing authorization forms, paper or digital, must follow PCI DSS rules. The CVV must be destroyed after the transaction is authorized and cannot be retained in any form. Card numbers on paper forms must be masked or redacted, and physical documents kept in a locked, access-controlled location. When the hotel no longer has a business reason to keep the form, PCI DSS requires it to be shredded, incinerated, or pulped so the data cannot be reconstructed.5PCI Security Standards Council. PCI DSS Quick Reference Guide

Sertifi submissions are tokenized, so even staff with system access see only masked digits. Paper submissions give you less control. If you’re uneasy about how a property handles your financial information, ask the front desk what their retention policy is and when the form will be destroyed.