Processing Card-Not-Present Donations
Securely accept phone and mail order gifts with iDonate.
Nonprofits frequently use phone-a-thon events where donors call in to make contributions over the phone. The iDonate Platform enables organizations to accept these card-not-present donations securely while maintaining PCI compliance through Mail Order/Telephone Order (MOTO) transactions.
How MOTO Transactions Work
During a phone-a-thon, volunteers or staff members take donation information directly from donors over the phone. Using the iDonate giving embed as a virtual terminal, they can process these transactions by entering the donor's card information and gift amount in real time.
Maintaining PCI Compliance
PCI compliance protects donor card information during transactions. To ensure your MOTO transactions remain PCI-compliant, follow this critical rule:
Card information must be entered directly into the iDonate system immediately upon receipt. Never write it down or store it elsewhere first.
What Breaks PCI Compliance
Writing card information on paper, sticky notes, or any other medium before entering it into iDonate constitutes "storage" and violates PCI compliance standards. This applies even if you plan to enter the information into the system moments later.
The Compliant Process
- Donor provides card information over the phone.
- Staff member or volunteer enters information directly into the iDonate Giving Form.
- Transaction is processed immediately
Setting Up Your Virtual Terminal
To process card-not-present donations, you'll need to embed a giving form on a dedicated webpage that your team can access during phone-a-thons. This form serves as your virtual terminal for entering donor payment information.
For step-by-step instructions on embedding a giving form, refer to our guide Add a Giving Form to Your Website.
Questions?
Contact the iDonate Support Team for assistance with MOTO transactions or any other questions about processing donations.