Should small businesses accept both credit cards and ACH?

Yes. To offer flexibility in your small business payment options, your company should offer credit card and ACH payments. Both options are encouraged to give customers more choice when they pay. And while credit cards are popular with consumers, ACH merchant fees are considerably lower, creating a savings opportunity for your company.

Which payment method is fastest for small businesses?

Card payment options for small business usually have a faster funding time than ACH. While same-day ACH funding is an option, it can come with some restrictions: Must maintain a low chargeback rate. Cannot qualify if your company belongs to a high-risk industry like collections. May be asked to provide an 8%-10% hold of daily processing funds.

Why is an online payment portal important?

An online payment portal is an important online payment option for small businesses because it gives customers a fast, convenient way to pay without interacting with an employee. Online portals are central to taking self-serve payments from customers 24/7. If your company isn’t offering online payments by now, you’re behind your competitors and losing out on revenue.

How do email payment links help businesses get paid faster?

Email links help businesses get paid faster because they deliver a payment link directly to the customer’s inbox. They are one of the most effective payment options for small business because they are: Fast: No waiting for a bill to get delivered by mail Convenient: Most customers prefer an email to a paper statement or phone call.

Can live chat help collect payments?

Yes. If your company uses live web chats to talk to customers, you should have a plan for getting paid through chat, too. By providing a secure, in-chat payment link, you make it quick and easy for customers to pay as soon as they are ready.

What are the most common ways to take payments over the phone?

The most common methods for how to take a card payment over the phone are: Virtual terminal Physical terminal Payment links IVR

How to reduce risk in agent-assisted phone payments?

When taking credit card payments over the phone, regulations like PCI DSS help companies reduce risk and stay secure. Here are some tips to stay compliant and keep data safe: Take payments via secure link: Customers can type their card number, and agents don’t need to be exposed to sensitive information. Pause recordings: If you must have customers read card numbers, pause call recordings to prevent payment data from being recorded or stored in audio files. Strict access controls: Limit access to sensitive information to authorized personnel only.

Can businesses legally take credit card payments over the phone?

Yes. It is legal to take card payments over the phone. However, card-not-present transactions may be subject to higher processing fees and still require merchants to follow PCI compliance.

Is it PCI compliant to accept card payments over the phone?

Yes. It is PCI compliant to take card payments over the phone as long as your business follows PCI compliance standards.

How can businesses reduce fraud when taking payments over the phone?

Companies can reduce fraud in payments over the phone through these measures: Secure email and SMS: Use PDCflow secure requests to capture payments. Card Verify and ACH Verify technology: Verify payment data through a payment gateway like PDCflow before processing a payment.

Can you outsource PCI compliance?

Yes, companies can outsource PCI compliance responsibilities as an alternative to managing them in-house. This process typically involves using a payment processor like PDCflow to capture and store payment data on your behalf.

Who is required to do PCI compliance?

PCI compliance is required for all companies that accept, process, or store credit card information. This standard applies to any entity that wishes to provide credit card payment options to its customers.

Do small businesses need to be PCI compliant?

Yes. All companies that accept, process, or store credit card information must maintain a secure environment and meet PCI compliance standards. Businesses are not exempt based on size or transaction volume if they handle credit card data. While small businesses don't need an on-site QSA audit required for Level 1 compliance, they must still perform the Self Assessment Questionnaire and may need quarterly network scans.

What is an Attestation of Compliance?

An Attestation of Compliance (AoC) is a standardized document used to communicate and prove your PCI compliance across all card brands. PDCflow’s PCI attestation is available upon request to any of our customers.

Can businesses store credit card information?

Yes. Businesses can store credit card information for transactions like recurring payments, invoicing, or charging repeat customers without asking for card data every time. Companies that store data must comply with PCI DSS standards.

Is it safe to store cards in a standard database?

No. Organizations should never store raw card numbers in a database, spreadsheet or CRM. Card numbers should be encrypted and tokenized to keep information safe.

How long can I legally keep a customer’s card on file?

PCI rules say you can keep data on file for the “minimum time required for legal, regulatory, or business needs.” Companies can keep data as long as is necessary for recurring billing, future payments, or processing refunds. Certain state laws may require you to delete customer data upon request. Always consult your company’s legal counsel or compliance department to stay informed.

Do I need PCI compliance if I use a payment processor?

Yes. Even when using a Level 1 PCI-compliant payment processor like PDCflow, every company that takes credit cards must still complete a Self-Assessment Questionnaire (SAQ).

What is tokenization and why does it help?

Tokenization replaces a credit card number with a non-sensitive identifier (a token). If a security breach occurs, hackers can’t see real payment details or use a payment token. PDCflow tokenizes payment data to keep payments safe and reduce PCI compliance scope for businesses.

Do small businesses need lawyers for every contract?

Not every routine agreement requires a lawyer. However, legal counsel should review types of contracts your organization isn’t familiar with to prevent costly disputes. For standard transactions, many small businesses use verified templates. This ensures basic protections are in place without the expense of a full legal review.

How to store and manage contracts over time

Effective contract management involves using digital tools to organize and store your documents in a secure, searchable location. Keeping a digital trail of all types of contracts in business ensures you can easily track expiration dates, renewal terms, and historical agreements.

How contracts support invoicing and payment collection

Contracts serve as the foundation for your billing process by clearly outlining payment schedules and late fees. When these terms are documented in examples of contracts between a consumer and a business, it provides the legal leverage needed to ensure timely collection and steady cash flow.

How to choose the right contract type for your business

The right contract depends on the nature of the relationship and the level of risk involved. You should evaluate whether the agreement is for a one-time sale, ongoing services, or a long-term partnership to determine which different types of contracts in business will offer the best protection.

Are non-disclosure agreements required for small businesses?

NDAs are not legally required for every business, but they are highly recommended if you share proprietary information or trade secrets. Using these types of contracts in business is a critical step in maintaining your competitive advantage when working with outside parties.

Do small businesses need legal review for every contract they use?

Not necessarily for every minor transaction, but a legal review is vital for high-value deals or long-term commitments. A quick professional check can help identify "fine print" issues in different types of contracts that might otherwise lead to operational or financial liability.

What is Regulation F and how does it affect digital collections?

Regulation F, issued by the CFPB, clarifies the Fair Debt Collection Practices Act (FDCPA). It includes guidance for digital tools like email and text to communicate with consumers.

How do we handle consumer opt-outs for digital messages?

Close monitoring of opt-ins and opt-outs is essential for staying compliant with Regulation F and phone carrier rules. Solutions like PDCflow manage opt-outs and unsubscribes to prevent agencies from using a channel customers don’t want used.

Why should we switch to digital channels if we already use phone calls?

Traditional phone calls are increasingly ineffective for debt collection efforts. Most consumers ignore calls from an unknown number, and your number may even be blocked or labelled as spam. Digital channels like SMS and email have high open rates, are less intrusive, and may allow for custom branding that builds trust.

Can digital tools really improve our recovery rates?

Yes. By reducing payment friction and reaching customers through their preferred channels, agencies have seen significant results. For example, one agency nearly doubled its card payments after implementing digital requests through PDCflow.

What are some examples of digital outbound strategies?

You can send payment requests via email or text, which can include direct links to pay, esignature requests, up to five documents, or photo or file upload requests in a single message. Doing more tasks in one message increases the chances that customers will complete your request.

How can we manage older accounts or unresponsive customers more efficiently?

Instead of manually calling accounts that ignore you, you can use bulk messaging to reach up to 5,000 recipients at once via a simple spreadsheet upload.

What kind of automation is available for debt collection?

Agencies can use automated reminders to nudge customers before a payment request expires, which has been shown to quadruple response rates. You can also automate recurring payment schedules and receive event notifications when a request is opened or completed.

Will new digital tools integrate with our existing systems?

Many modern solutions like PDCflow offer open APIs for custom integration or have existing partnerships with popular debt collection platforms, ensuring your payment and communication records stay synced in your system of record.

What are the two types of ACH payments (ACH Credit vs. ACH Debit)?

An ACH credit is when a sender (the merchant) initiates a payment from their account to another. This is most typical for payroll or vendor payments. An ACH debit is when a business initiates a withdrawal, or processes a customer payment. Debits can be one-time or recurring, and must have the proper customer authorization.

How long do ACH transfers take to clear?

Standard ACH processing services use a four-day hold system before funds are available in a merchant account. This only includes business days, so funds are typically available within a calendar week of the transaction.

What specific banking information is needed to set up an ACH transaction?

To successfully process an ACH payment, you will need the customer’s name, routing number, account number, and the payment amount.

Can an ACH payment be voided or reversed once it has been initiated?

It is possible to stop an ACH payment if it is done before the batch is sent and processed for that day. If an ACH batch has already been sent, the transaction must be reversed, which will take additional days to move through the ACH network.

What is an ACH payment gateway?

ACH payment gateways facilitate moving funds from one party to another. An ACH payment gateway is typically the payment processing software vendor that lets a company initiate ACH transactions. PDCflow combines signature, payment, and compliance in one platform. Verify recipients, route multi-signers, collect card or ACH, and export audit-ready records. Book a demo today.

Is the CCPA the same as the California Consumer Protection Act?

No, while often confused, the correct name is the California Consumer Privacy Act.

What Does the California Consumer Privacy Act Do?

The CCPA creates new consumer rights and imposes obligations on businesses regarding the collection, use, and sharing of personal data. Key consumer rights include the right to limit use, opt out, correct, know, receive equal treatment, and delete information. Businesses must offer: Transparency: Companies must provide clear notice at or before the point of collection about what data is being gathered and for what purpose. Security: Businesses must implement reasonable security practices to protect personal information from unauthorized access or breaches.

Who Does the California Consumer Privacy Act Apply To?

The CCPA applies to for-profit businesses that do business in California and meet at least one of the following three thresholds: annual revenue above $25 million, deal with more than 100,000 households’ data, or derive 50% of revenue from data. Note: The law also applies to entities that control or are controlled by a covered business and share common branding. It generally does not apply to non-profit organizations or government agencies.

Does the CCPA apply to businesses outside of California?

Yes. If you collect or process the data of California residents, the law likely applies to you regardless of where your business is located.

What counts as "Personal Information"?

The CCPA defines it broadly as information that "identifies, relates to, describes, or could reasonably be linked, directly or indirectly, with a particular consumer or household."

What is web chat for accounts receivable?

Web chat for AR is a tool that lets agents communicate with customers in real time online. Paired with the right payment processor, you can use it to support payment capture directly through chat.

How does in-chat payment handling improve cash flow?

By enabling customers to pay while chatting, friction is reduced, and conversion rates increase.

Is web chat secure for payment collection?

Yes. PDCflow’s secure payment links use encryption and tokenization to protect card and ACH data, and help maintain PCI compliance.

What training do chat agents need for AR?

Agents should be trained on compliance rules, positive language usage, and your company’s payment workflow procedures.

Hannah Huerta, Author at PDCflow

7 Small Business Payment Options to Keep Customers Happy

February 24, 2026

Two people work at a desk, one using a calculator and papers, the other holding a tablet with charts, surrounded by documents.

Summary: Choosing the right small business payment options is essential to your company’s health and survival. Many small organizations suffer from late or unpaid invoices, which impacts cash on hand and other basic company operations. Many companies are diversifying their payment channels and methods for more choice and faster payment capture. Common online payment options for small business include: Both …

How To Take Secure Payments Over the Phone Safely Without PCI Compliance Risk

February 20, 2026

Man wearing a headset smiles while working at a computer, with another headset user typing at a laptop in a bright office background.

Summary: Learning how to take credit card payments over the phone is vital for modern businesses. This guide covers steps to take payments over the phone, ensuring your process remains secure, user-friendly, and professional. By following these best practices for card payments over the phone, you can: minimize the risk of fraud reduce chargebacks provide a secure, seamless transaction experience …

Benefits of Outsourcing PCI DSS Compliance Services

February 9, 2026

Summary: There are many benefits of outsourcing PCI DSS compliance services. Most important among them is reducing the costs and effort required to meet security standards. PCI DSS outsourcing lets businesses use a compliant payment processor for tokenization and secure data storage. Replacing sensitive data with codes (tokens) and outsourcing data management protects against hackers and significantly reduces compliance burden. …

Storing Credit Card Information: Risks and Best Practices

February 6, 2026

Summary: Storing credit card information is essential for recurring payments and future invoicing, but it requires strict security to mitigate risks like data breaches. Securely store customer credit card information by using a Level 1 PCI-compliant vendor like PDCflow. Avoid storing sensitive authentication data like CVV codes. To remain PCI compliant when storing customer credit card information, ensure primary account …

Common Contract Types for Small Business

January 22, 2026

Summary: This article emphasizes the importance of using diverse business contracts (like sales agreements, service agreements, and employment agreements) to protect small businesses and define professional obligations. It outlines: Common types of business contracts Essential contract pricing models Common contract mistakes You will also learn how to use PDCflow for esignatures and integrated payments to reduce costs and accelerate cash …

Digital Debt Collection: How Consumer Preference Can Drive Higher Revenue

January 15, 2026

People holding smartphones close together while social media icons and notification bubbles float around their hands and screens.

Summary: Digital debt collection enhances revenue by using consumer-preferred channels (SMS and email) to minimize payment friction. By adopting a customer-centric, digital-first strategy, agencies can: Double payments received Improve customer experience Stay compliant with rules like Regulation F Digital debt collection is the use of digital channels like email and SMS to communicate with customers and take payments. Digital collection …

Learn How to Set Up ACH Payments and Boost Your Business Now

January 5, 2026

Smiling woman in a blazer uses a tablet at a desk with an open laptop, stacked papers, and shelves and a plant in the background.

Summary: This article explains how businesses can use ACH payments to reduce costs and improve reconciliation. Learn how setting up ACH payments offers a flexible, cost-effective payment processing option. See the step-by-step process for how to set up ACH payments, starting with establishing a merchant account. The guide also emphasizes compliance with Nacha rules and Regulation E. ACH payments are …

California Consumer Privacy Act Overview

December 31, 2025

California Consumer Privacy Act (CCPA) Overview

Summary: Data protection and privacy is no longer just a luxury; it’s a legal mandate. This California Consumer Privacy Act summary provides a comprehensive overview of the California Consumer Privacy Act (CCPA), covering topics like: “What is the California Consumer Privacy Act?” Why does the CCPA matter to the debt collection industry? How can businesses ensure compliance while protecting consumer …

Secure Web Chat for AR Payments: Never Miss an Opportunity

December 18, 2025

Article Summary: This article explains how integrating secure web chat and real-time payment links into your accounts receivable process increases payment capture rates, improves customer satisfaction, and strengthens compliance outcomes.Offering accounts receivable web chats can be your collection department or agency’s differentiating factor between an abandoned payment and a closed account. Many companies use web chats to: Help with customer …

Improving Call Center Operations With Technology

December 10, 2025

For office managers, improving call center operations is an ongoing goal. You want to provide the best customer experiences possible, but it’s a challenge to coordinate teams and create repeatable processes. From agreements and down payments to customer service to billing, there are many steps where the system can break down. Investing in call center software and improving training will …

Customer Service Improvement Strategies for Call Centers

December 4, 2025

Best Practices, Tools, and Strategies to Improve Customer Service Quality

Problems can occur anywhere along the customer journey. Customer service improvement strategies are the best way to ensure your call center or collection team is prepared for any issue that may arise. Striving for excellent customer service with high-quality standards will help your company build trust and brand loyalty.Ways to Improve Customer Service Skills Before making changes to your internal …

Digital Accounts Receivable Solutions, More Revenue

November 20, 2025

Whether it’s an in-house department or a third-party agency, every team needs modern accounts receivable solutions to collect more payments and keep revenue flowing. Although traditional approaches have worked in the past, technology and changing consumer habits have forced a shift in debt collection practices. It’s time to embrace digital receivable solutions to keep your business moving forward.Digital Accounts Receivable …

7 Small Business Payment Options to Keep Customers Happy

How To Take Secure Payments Over the Phone Safely Without PCI Compliance Risk

Benefits of Outsourcing PCI DSS Compliance Services

Storing Credit Card Information: Risks and Best Practices

Common Contract Types for Small Business

Digital Debt Collection: How Consumer Preference Can Drive Higher Revenue

Learn How to Set Up ACH Payments and Boost Your Business Now

California Consumer Privacy Act Overview

Secure Web Chat for AR Payments: Never Miss an Opportunity

Improving Call Center Operations With Technology

Customer Service Improvement Strategies for Call Centers

Digital Accounts Receivable Solutions, More Revenue

No long term contracts. No cancellation fees.

$9

Talk with an expert

Questions? Let’s Talk.

Questions? Let’s Talk.

Products

Plans and Pricing

APIs

Features

Industries

Resources

Compare PDCflow

Need Help?

Company