What Is a Keyed Transaction? Costs, PCI Rules, and Chargebacks

A keyed transaction is a credit card sale where the merchant types the card number, expiration date, security code, and billing ZIP into a terminal or virtual terminal by hand instead of reading the card through a chip, magnetic stripe, or contactless tap. Because nothing physical is verified, the payment networks treat every keyed sale as “card not present,” which means a higher processing fee and, if the charge is later disputed as fraud, liability that almost always lands on the merchant.1Square. What Is a Card-Not-Present (CNP) Transaction and Why It Costs More

When Merchants End Up Keying a Card

Three situations cover most keyed sales. Phone and mail orders, where the customer reads or writes the card details for the merchant to enter. In-person sales where the chip or magnetic stripe is too damaged or worn to read. And field service work, like plumbers or contractors closing out a job at a customer’s home without card-reading hardware on hand.2Stripe. What Are Card-Not-Present (CNP) Transactions? Here’s What Businesses Need to Know

From the processor’s point of view, all three carry the same elevated risk profile. Even if the customer is standing at your counter holding the card, keying the number rather than reading the chip strips the transaction of the electronic handshake that proves the card is real and present. That reclassifies the sale as card-not-present for both pricing and liability.

To key a sale you need the full 15- or 16-digit card number, expiration date, cardholder name, the three-digit CVV on the back (or four-digit code on the front of American Express), and the billing ZIP. The ZIP feeds into the Address Verification Service, which cross-checks against what the issuing bank has on file. A mismatch doesn’t kill the sale automatically, but skipping AVS throws away one of the only fraud-screening tools available in a card-not-present environment and weakens your standing if the charge is later disputed.

What a Keyed Transaction Actually Costs

Every card sale carries an interchange fee set by the card network plus a markup from the processor. Keyed sales sit in a higher interchange tier. On Visa debit, a standard card-present retail transaction runs 0.80% + $0.15 in interchange; the key-entered rate on the same card is 1.65% + $0.15.3Visa. Visa USA Interchange Reimbursement Fees Mastercard’s standard consumer credit interchange for keyed or card-not-present sales runs 3.15% + $0.10, with some tiers qualifying for less.4Mastercard. 2024-2025 U.S. Region Interchange Programs and Rates

What you pay on your monthly statement is interchange plus your processor’s markup. Square, for example, charges 2.6% + $0.10 for a tapped, dipped, or swiped sale and 3.5% + $0.15 for a keyed sale.5Square. Credit Card Processing Fees and Rates Explained

The gap adds up quickly. On a $1,000 sale that’s roughly $35.15 in fees keyed versus $26.10 through a card reader. A business keying $50,000 a month pays about $450 more per month than if the same sales went through a chip reader, or over $5,000 a year. Processing fees are deductible as ordinary business expenses under IRS Publication 535, so some of that comes back at tax time, but the deduction applies to card-present fees too and doesn’t close the gap.6Internal Revenue Service. Business Expenses (Publication 535)

Who Pays When a Keyed Sale Turns Into a Chargeback

This is where keyed transactions get expensive in a hurry. The EMV liability shift that took effect in October 2015 pushed fraud costs onto whichever party in the chain didn’t use chip technology. If a customer hands you a chip-enabled card and you key the number instead of dipping it, you own any resulting fraud.7U.S. Payments Forum. Understanding the U.S. EMV Liability Shifts

Phone and mail orders land in the same place from a different direction. The card was never present, so you accepted the sale without any physical verification. If the cardholder later says they never authorized the charge, you have limited evidence to contest the dispute. A matched AVS response and a matching CVV help but neither guarantees you’ll win a chargeback.

When a chargeback goes against you, you lose the sale amount, the goods or service you already delivered, and a chargeback fee that processors typically set between $15 and $100 per dispute. Merchants who accumulate a high chargeback rate can get reclassified as high-risk by their processor, which brings steeper fees or account termination. If you key a meaningful volume of sales, keep signed authorization forms, order confirmations, delivery receipts, and any correspondence showing the cardholder agreed to the charge.

PCI Rules That Bite Hardest on Keyed Sales

Any business that processes, stores, or transmits card data has to comply with the Payment Card Industry Data Security Standard (PCI DSS). Keyed transactions raise the stakes because a person is handling the raw card number instead of leaving it inside encrypted hardware.

You Cannot Store the CVV After Authorization

PCI DSS flatly prohibits storing the security code once the transaction is authorized. The same rule applies to full magnetic stripe data and chip data. Sensitive authentication data has to be gone the moment the sale is approved.8PCI Security Standards Council. PCI Data Storage Do’s and Don’ts

This catches out businesses that jot card details on paper during a phone order. A sticky note with the card number and CVV next to the register is a PCI violation the second the sale clears. If you take card details by phone, key them straight into the terminal and avoid writing them down at all. If paper is unavoidable, destroy it immediately after authorization by cross-cut shredding, incineration, or pulping so the data can’t be reconstructed.

Use a Virtual Terminal, Not a Spreadsheet

Most processors offer a virtual terminal, a web-based interface where you type card data directly into an encrypted connection. The data is masked in transit and never lands in a file on your computer. Using a virtual terminal instead of a standalone form or a spreadsheet is one of the simplest ways to stay inside PCI requirements for keyed sales.

PCI DSS is enforced through the card networks and acquiring banks rather than through government regulators. Networks impose monthly fines on acquiring banks for merchant non-compliance and those fines flow through to the merchant. Penalties escalate with how long the violation persists and how many transactions are involved, and a breach stemming from mishandled card data brings notification costs, forensic fees, and legal liability well beyond the fines themselves.

How to Key Fewer Transactions

Some keyed sales are unavoidable. The goal is to stop keying the ones that didn’t have to be keyed in the first place.

Tap to Pay on a Phone

Both Apple and Android devices now support tap-to-phone technology, where your own smartphone acts as a contactless reader. The customer taps their card or phone against your device and the sale processes at card-present rates with no separate hardware.9Visa. Visa Tap To Phone For a field service business that has been keying numbers off cards at the job site, this is the single biggest cost saver on the table. On Square, the same sale drops from 3.5% + $0.15 to 2.6% + $0.10 just by tapping instead of keying.5Square. Credit Card Processing Fees and Rates Explained

Payment Links for Phone Orders

Instead of writing down a card number and keying it, text or email the customer a secure payment link. They enter their own details into the processor’s encrypted checkout. You still pay card-not-present rates, so the interchange doesn’t drop, but you eliminate PCI exposure from handling raw card data, cut chargeback risk because the customer authenticated the payment themselves, and avoid data-entry errors.

A Cheap Card Reader

Bluetooth or plug-in readers that pair with a phone or tablet run anywhere from free (subsidized by the processor) up to about $50. If your keyed sales come from damaged cards or field jobs rather than phone orders, a $30 reader that handles chip and contactless can pay for itself within a handful of transactions on fee savings alone.

Cutting your keyed volume in half is often realistic and meaningfully reduces both monthly processing costs and chargeback exposure. Phone orders and legitimately card-not-present sales will still exist. The ones worth attacking are the sales you keyed only because you didn’t have the right tool in your hand.