Skip to content

How it works

Learn about PXP's Virtual Terminal solution.

Overview

Virtual Terminal is a secure MOTO (Mail Order/Telephone Order) payment interface natively integrated within Unity Portal. It enables you to process card-not-present transactions without external payment systems or context switching — whether for call centre order processing, customer service payment recovery, or manual B2B transactions.

The intuitive two-section layout is optimised for fast data entry: customer and order information on the left, payment method selection on the right. Operators can search for existing customers, select from saved cards, or enter new payment details with real-time validation.

Key benefits

With Virtual Terminal, you can benefit from:

  • Native integration: Process MOTO transactions directly in Unity Portal using your existing credentials, with all data flowing automatically into Unity reporting.
  • Card on File: Securely store tokenised cards with customer consent, reducing repeat transaction time by up to 70%.
  • Smart workflows: Pre-populate customer data for repeat orders or quickly reset for new customers — optimised for high-volume environments.
  • Customer search: Locate existing customers, view their last transaction, and auto-populate details to reduce errors.
  • AVS protection: Optional address verification at the site level for additional fraud protection.
  • Instant receipts: Generate PDF receipts immediately with direct links to transaction details in Unity reporting.

Card-on-file

Securely store customer payment information for faster repeat transactions while maintaining PCI-DSS compliance through tokenisation.

  • Cards are tokenised immediately and original card data is never stored in plain text.
  • Operators can view saved cards, select them for one-click payments, edit expiry dates, or delete cards.
  • Reduces repeat customer processing time by up to 70%.

Card lifecycle management

Virtual Terminal helps you manage stored cards throughout their lifecycle.

Expiration handling:

  • Visual indicators highlight cards expiring within 30 days.
  • Operators are prompted to update expiring cards proactively.
  • Reduces failed transactions from expired cards.

Card validation:

  • Periodic token validation with card networks to verify account status.
  • Monitoring for unusual card usage patterns (velocity checks).
  • Integration with fraud detection systems.

Supported transaction intents

The following table describes the possible intents that you can set when you initiate a MOTO transaction in the Virtual Terminal.

IntentDescription
AuthorisationReserve funds on the customer's payment method.
Estimated authorisationReserve funds on the customer's payment method, based on an estimated amount. This method is particularly useful in environments such as hotels, car rental agencies, and fuel stations, where the final charge may vary based on additional services or usage.
Purchase (default)Capture funds immediately after authorisation.

Reporting

All Virtual Terminal transactions are logged in Unity's Report & Search section with full audit trails. Each transaction is tagged with:

  • Source: Identified as "Virtual Terminal" for easy filtering.
  • Entry method: Marked as "Manual" to distinguish from other channels.
  • Operator ID: The login ID of the processing operator.

Transaction receipts include a direct link to the detail page, providing instant access to complete logs, gateway communications, and related transactions without searching.

To learn more about reports, see our comprehensive Reporting section.

Access control

Virtual Terminal uses role-based access aligned with the Unity Portal's authentication.

RoleAccess
Merchant AdministratorFull access including service configuration, AVS settings, and transaction processing.
Merchant OperatorTransaction processing, customer search, receipt generation, and card-on-file usage.

All actions are logged with operator identification for compliance, dispute resolution, and performance monitoring.

Security and compliance

PCI DSS compliance

  • Tokenisation: Card data is immediately tokenised and never stored in plain text.
  • Encrypted transmission: All data is transmitted via HTTPS.
  • Access controls: Role-based permissions restrict card data access.

Fraud protection

  • AVS: Optional billing address verification against card issuer records.
  • Real-time validation: Comprehensive field validation prevents processing errors.
  • Audit logging: Complete transaction and operator activity tracking.