Should restaurants take card numbers over the phone?
Key takeaways
- Spoken and written card numbers are easy to overhear or copy.
- Card data handling falls under PCI DSS rules.
- Payment links keep card details between the customer and the processor.
The risks of card numbers over the phone
- Other staff and guests can overhear numbers read aloud.
- Numbers written on paper tickets can be lost or copied.
- Mistyped numbers cause declines and callbacks.
- Handling card data brings PCI DSS compliance obligations.
The alternative: text a payment link
With a payment link, the customer opens a secure checkout page on their own phone and pays there. Processors like Square handle the card details. The restaurant gets confirmation that the order is paid.
How AYO for Restaurants handles payment
The AYO phone ordering agent never asks for card numbers. After confirming the order, it texts a secure Square payment link. The order goes to your kitchen once it's paid.
Talk to your processor
This article is general information, not legal or compliance advice. Ask your payment processor what's required for your business.
Frequently asked questions
Is it illegal to take card numbers over the phone?
Generally no, but card data must be handled under PCI DSS rules. Many restaurants avoid it by using payment links.
What is a Square payment link?
It's a secure checkout link from Square that a customer opens on their phone to pay.
Do AI phone agents take card numbers?
Some systems may. AYO for Restaurants does not; it only texts a Square payment link.
Want every call answered? AYO takes phone orders from your Square menu and texts a secure pay link. See how AYO works.
Start free