Is it safe to give card details over the phone?

With various secure payment methods available online, it may feel strange to be asked for card details over the phone. And that instinct might be right because phone scams are on the rise.

In 2023, 68.4 million Americans lost money to phone fraud — up 23% from 2022.¹

While it’s legal for businesses to take payment via phone, there are valid security concerns around giving these details on a call.

It's more important than ever to practice due diligence to keep credit card details and other payment information safe. Learn what to consider before sharing payment information over the phone in this article.

When would card details need to be shared over the phone?

While online payments are common, there are scenarios in which an individual can make a payment over the phone. For example, someone may have a bill due but no access to an online payment portal. They may opt to call the company to ensure payment is made on time and avoid potential late fees.

Some service providers might outright ask for payment over the phone if they don’t have the necessary online payment methods set up to take credit card details. This might be the case for a local contractor, for example.

But it’s best to only make a payment over the phone if the payer is the one who initiates it — by directly calling a merchant and paying a bill, for instance.

Potential risks of sharing card details over the phone

While it’s possible for a scammer to intercept card details shared with a legitimate company, a major risk is from phishing attempts. Phishing commonly refers to the emails sent by criminals to trick a person into giving out personal information. This may happen over the phone, too, and is often called vishing.

These calls will seem to come from a legitimate company and the caller might even have a little bit of information that makes them seem trustworthy. The scammer might encourage the individual to make a payment over the phone or transfer money to a “safe” account to avoid fraud.

Another risk when making a payment over the phone is human error. Even when paying a legitimate company, card details could be overheard, written down, or input into a non-secure system.

Protecting against scams

Despite the vulnerabilities when talking about sensitive information on the phone, there are ways to securely share credit card information during a call.

While many genuine businesses accept phone payments — such as utility companies and service providers — the main piece of guidance is to always initiate the call directly.

Phone scammers will make a call as a phishing attempt to steal information. So, it’s important to verify the company’s phone number through a trusted source and then call back.

Here are some tips to help minimize the risk of phone scams and create a safer environment for sharing card details on a call:

Call the vendor’s registered phone number

When receiving a call about paying by credit card over the phone, it’s good practice to hang up and call back on the vendor’s registered phone number. Any reputable provider will allow this.

Even if the caller’s number seems correct, there’s a chance it could be spoofed to appear legitimate. Look for trusted sources for the company’s phone number — their official website is a good place to start. Don’t rely on information given during the call or sent via email.

Confirm the amount being charged before ending the call

To avoid credit card fraud, be very clear about what the payment is for and confirm the exact amount before giving credit card details by phone. This gives the payer a chance to query anything that seems suspicious.

Monitor bank accounts for unusual charges

It’s good practice to monitor bank account activity immediately to identify any issues. The quicker a potentially fraudulent transaction is spotted, the more likely the credit card provider or bank will be able to resolve it.

Take time to go through bank and card statements to ensure there are no unauthorized charges from credit card numbers being leaked, especially after making a phone transaction.

Enable card alerts and security features

Many banks and financial institutions offer features for increased credit card number security. Enabling push notifications for transactions can give visibility into day-to-day spending and help flag unexpected charges to protect against fraud.

It’s also possible to set spending limits to ensure no big purchases are made that could be linked to leaked card details. Some providers also offer settings to turn off contactless and online payments (or “card not present” transactions), generate single-use card details, and prevent cash withdrawals.

Alternatives to phone payments

While it’s possible to make a legitimate payment over the phone, secure online payments present an alternative option. If the vendor allows, buyers should prioritize online card payments. It’s also important to be wary of any payment links sent via email or text as these could still come from someone trying to steal credit card numbers.

Purchasing through a reputable third party may also add an extra layer of protection against fraud. For example, PayPal offers robust buyer protection, making it a good option for online payments.

Learn about PayPal’s security measures.