Key takeaways
- Card-present payments happen with the physical card or device at the point of sale; card-not-present payments happen online, by phone or by invoice.
- Chip and contactless payments generate strong security data that's hard to fake.
- Card-not-present payments usually carry higher fraud risk and often higher interchange.
- Layered tools such as tokenization, fraud screening and authentication protect online sales.
The definitions
- Card-present (CP): the card or a mobile wallet device is physically at the point of sale, tapped, dipped or swiped on a terminal.
- Card-not-present (CNP): the card isn’t physically there. Ecommerce checkouts, in-app purchases, phone orders keyed into a virtual terminal, payment links and invoices are all CNP.
Why card-present is harder to fake
Chip cards and contactless payments generate a unique, one-time code for every transaction. Even if someone captured that data, they couldn’t reuse it. Mobile wallets add device-level authentication such as a fingerprint, face or passcode. All of this gives the issuing bank strong confidence that the real card and its owner are present.
Why card-not-present carries more risk
Online, the issuer can’t see the card. It relies on information that can be stolen: card number, expiry, CVV and billing address. That’s why CNP transactions are the main target for fraudsters testing stolen card data, and why they tend to see more disputes. Because of that higher risk, card networks typically set higher interchange for CNP transactions.
Protecting card-present sales
- Use modern terminals that accept chip and contactless
- Avoid falling back to magnetic stripe or manual entry where possible
- Train staff on refunds and suspicious behaviour
- Keep terminals physically secure
Protecting card-not-present sales
- Tokenization so card data never sits in your systems
- Real-time fraud screening using device data, velocity, geography and behaviour
- Address and CVV checks on every transaction
- 3-D Secure authentication where appropriate. See 3-D Secure explained
- Digital wallets, which bring device-level authentication online
- Clear policies and descriptors to reduce “friendly fraud” disputes
Our payment fraud prevention guide goes deeper on building layered protection.
Running both channels
Many businesses sell in person and online. The key is seeing both in one place, with unified reporting, consistent fraud settings and one payout. Cirqle supports terminal solutions alongside online checkout, with every sale flowing into the same dashboard.
The bottom line
Card-present payments are naturally well protected; card-not-present payments need more help. Understanding the difference explains your fees, your dispute risk and where to focus your security efforts, so you can grow in every channel with confidence.
Frequently asked questions
Is a phone order card-present or card-not-present?
Card-not-present, because the physical card isn't at the point of sale, even if you key it into a terminal or virtual terminal.
Are Apple Pay payments card-present?
When tapped on a terminal in person, they're treated as card-present. In apps and online they're card-not-present, but carry strong tokenized authentication.
Why are online transaction fees higher?
Card-not-present transactions carry higher fraud risk, so card networks typically set higher interchange for them.
Payments that never stop moving.
Talk to a Cirqle payment specialist about stable processing, fast onboarding and payouts that keep cash flowing.
Get approved