Can this be signed electronically?

Yes. Electronic signatures are legally enforceable under the ESIGN Act (15 U.S.C. §7001) and by UETA in most states, provided the signature demonstrates intent, consent to transact electronically, attribution, and record retention.

Is notarization required for validity?

Not usually for private card authorizations. Notarization is required only when state law or a contracting party specifically demands it; check applicable state rules before adding a notary requirement.

Can I store CVV or full PAN?

No. PCI DSS prohibits storing CVV and requires strict controls for PAN. Use a PCI-compliant payment gateway and tokenization to avoid storing sensitive card data directly.

How long should I retain authorizations?

Retain records to support dispute defense and tax reporting: at least three years for IRS purposes (IRC §6501(a)), and six years when PHI applies (45 CFR §164.530(j)); extend retention as litigation risk dictates.

How can a consumer revoke authorization?

Provide clear revocation procedures in the disclosure. Consumers must be able to withdraw consent; include steps and contact info. Maintain evidence of revocation and stop billing promptly.

Who may sign on behalf of a cardholder?

An authorized agent may sign if authority is documented (power of attorney or corporate authorization). Maintain written evidence of agency to defend against unauthorized charge claims.

Electronic Signature
Templates
Miscellaneous
Payment Card Authorization Form

Payment Card Authorization Form

This template is fully customizable. Edit the text, fill out the fields, and send it for signature. Give it a try!

PAYMENT CARD AUTHORIZATION FORM

Recitals

WHEREAS, Merchant Name: (the "Merchant") provides goods and/or services and requires written authorization to charge payment cards; and

WHEREAS, Cardholder Name: (the "Cardholder") is the authorized holder of the payment card identified below and agrees to the terms of this authorization; and

WHEREAS, Effective Date: , the parties enter into this authorization for the purpose of enabling Merchant to process card payments in accordance with the terms set forth herein.

Scope of Work

Describe goods or services to be paid by card. This description must correspond to actual invoices or statements that shall accompany any charge.

Cardholder Billing Information

Billing Address Contact Phone Contact Email

Card Details & Authorization

Card Type: Visa MasterCard American Express Discover

Card Number

Expiration Month: Expiration Year: CVV:

Payment Terms

Amount Authorized: $

Payment Schedule:

Late Fee:

Billing Descriptor / Invoice Reference:

Authorization Type: One-time Recurring — Frequency:

Term and Termination

Term Commencement Date: Term End Date (if any):

Termination Notice Requirement: written notice required to cancel recurring authorizations.

Confidentiality

The parties acknowledge that card numbers, CVV codes, billing addresses, and related payment information constitute Confidential Information. Merchant shall store, process, and transmit such information only in compliance with applicable card network rules and shall not disclose Confidential Information except to processors, acquirers, and as required by law. Merchant will implement reasonable administrative and technical safeguards to protect cardholder data.

Representations and Consent

By signing below, Cardholder represents that they are an authorized signer on the card, that the card information provided is true and correct, and expressly authorizes Merchant to charge the card in accordance with the amount(s) and schedule set forth above. Cardholder authorizes Merchant to store card information for future authorized charges consistent with this form.

Governing Law; Entire Agreement

This authorization and any dispute arising under or relating to it shall be governed by the laws of the State of , without regard to conflict of laws principles. This document constitutes the entire agreement between Merchant and Cardholder with respect to the subject matter and supersedes all prior agreements, understandings and representations, whether written or oral.

Miscellaneous Provisions

If any provision of this authorization is found unenforceable, the remaining provisions will remain in full force and effect. Neither party may assign its rights or obligations under this authorization without the prior written consent of the other party, except that Merchant may assign to payment processors, acquirers, or successors in interest.

Additional Instructions

Special Instructions for Charges

Cardholder Printed Name:

By (Signature):

Date:

Merchant Printed Name:

By (Authorized Rep.):

Date:

What a Payment Card Authorization Form Is

A Payment Card Authorization Form is a signed record that permits a merchant, service provider, or payment processor to charge a cardholder's payment card for a specified transaction or ongoing payments. The form records essential details such as cardholder identity, billing address, masked card data, the authorization amount or range, frequency, and explicit consent or cancellation instructions. In electronic workflows the document is preserved with an audit trail that captures signer identity, timestamp, and authentication method to support dispute resolution, processor requirements, and regulatory compliance.

Why a Clear Authorization Form Matters

A Payment Card Authorization Form creates auditable consent that reduces chargeback risk, documents payment terms and cancellation rights, and helps merchants meet PCI and e-signature requirements under ESIGN and UETA.

Common Users and Roles

Typical users of a Payment Card Authorization Form include merchants, payment processors, and service providers collecting card-based payments.

E-commerce merchants: document one-time and recurring charges for online orders and customer accounts.
Subscription businesses: capture ongoing consent, renewal terms, and cancellation instructions for recurring billing.
Healthcare and financial services: collect card authorizations while applying PCI and PHI-handling considerations where applicable.

High-volume billing teams, collections departments, and accounts receivable also rely on standardized authorizations to speed reconciliation and handle disputes efficiently.

Core Elements of a Professional Authorization Form

A robust Payment Card Authorization Form combines clear consent language, essential cardholder data fields, verification steps, and retention and audit details so merchants can validate charges and respond to disputes.

Authorization Clause

A plain-language statement authorizing charges that specifies exact amounts, frequency, and termination or cancellation instructions to create unambiguous consent.

Cardholder Details

Fields for full name, billing address, phone, and email to support AVS checks, identity verification, and dispute correspondence.

Payment Details

Specify card type, masked PAN (last four digits), expiration date, and any preauthorization hold amounts or variable-charge ranges.

Consumer Disclosure

For consumer-facing recurring payments include an ESIGN-compliant disclosure describing the right to paper copies and procedures to withdraw consent.

Verification Steps

Document required authentication (OTP, ID check, or KBA) and how signer identity is linked to the authorization.

Audit & Retention

Record timestamps, signer IP, document versioning, and the retention schedule used for dispute defense and regulatory needs.

Four Steps to Complete and Preserve Authorization

Follow these steps to capture valid consent, authenticate the signer, and retain the authorization for processing and disputes.

01

Gather Information: Collect cardholder ID, card, billing, and contact details.
02

Verify Identity: Use ID check, AVS, or two-factor authentication.
03

Complete Fields: Enter authorization type, amounts, dates, and signer details.
04

Store Record: Save signed copy plus audit trail and retention metadata.

Typical Authorization-to-Settlement Flow

A signed authorization links to tokenization, authorization request, and settlement steps while the audit trail provides evidence for reconciliation and disputes.

Capture: Obtain signature and record consent with timestamp.
Tokenization: Send card to gateway for token storage, not local storage.
Charge: Processor submits authorization to card network and issuer.
Reconciliation: Match settled transactions to authorizations and retain evidence.

Recommended Digital Workflow Settings

Configure these settings when collecting authorizations electronically to reduce friction while preserving legal evidence and PCI scope reduction.

Field	Configuration
Authentication Method	Email link, SMS OTP, or KBA per risk level.
Signature Type	Click-to-sign or drawn signature; PKI for high assurance.
Card Handling	Tokenize card via PCI-compliant gateway; avoid storing PAN.
Retention Policy	Automate PDF storage with audit trail and access controls.

Platform Capabilities to Check Before Collecting Cards

Ensure your e-signature platform supports payment integrations, secure data handling, and the file types you need to collect authorizations electronically.

Integrations: Salesforce, NetSuite, Google Workspace integrations.
File Formats: PDF, DOCX, HTML, Excel supported.
Security: TLS/AES encryption and PCI DSS compliance.

Security and Compliance Essentials

Encryption: TLS 1.2/1.3 in transit; AES-256 at rest.

PCI DSS: Compliant card handling and tokenization.

HIPAA BAA: BAA available for healthcare workflows.

Audit Trail: Timestamps, IP, and action log retained.

Access Controls: Role-based access and MFA for users.

Tokenization: Store tokens, not PANs, to reduce scope.

Common Preparation Mistakes to Avoid

Using vague or missing consent language creates ambiguity and increases chargeback probability and difficulty meeting network dispute standards.
Storing CVV or full PAN locally violates PCI DSS and greatly increases liability in the event of a data breach; use tokenization instead.
Omitting cancellation or end-date terms leads to recurring billing disputes and possible regulatory complaints for consumer-facing services.
Relying on weak authentication (email-only) for high-value or recurring charges may fail to prove intent and attribution under ESIGN/UETA.

Consequences of Incorrect or Incomplete Authorizations

Chargebacks: Higher dispute and reversal fees.

PCI Fines: Civil penalties and remediation costs.

Data Breach Liability: Class-action and regulatory exposure.

Operational Delays: Payment holds and delayed settlement.

Tax Reporting: Recordkeeping gaps can trigger audit.

Contract Risk: Unauthorized charges risk breach claims.

eSignature Plan Pricing and Feature Snapshot

Compare baseline plan pricing and select features that matter for Payment Card Authorization Forms, such as bulk send, audit trail, HIPAA support, and envelope caps.

	signNow	DocuSign	Adobe Sign	PandaDoc	HelloSign
Starting Price	$8/user/mo	$15/user/mo	$14/user/mo	$19/user/mo	$15/user/mo
Free Trial	7-day free trial	Varies	Varies	Varies	Varies
Bulk Send	Yes	Yes	Yes	Yes	No
Audit Trail	Yes	Yes	Yes	Yes	Yes
HIPAA Compliant	Yes	Yes	Yes	No	No
Envelope Cap	No cap	100 envelopes/user/year	Varies	Varies	Varies

Frequently Asked Questions

Answers to common legal, security, and operational questions about Payment Card Authorization Forms, e-signature validity, and records management.

Need help? Contact support

Can this be signed electronically?
Yes. Electronic signatures are legally enforceable under the ESIGN Act (15 U.S.C. §7001) and by UETA in most states, provided the signature demonstrates intent, consent to transact electronically, attribution, and record retention.
Is notarization required for validity?
Not usually for private card authorizations. Notarization is required only when state law or a contracting party specifically demands it; check applicable state rules before adding a notary requirement.
Can I store CVV or full PAN?
No. PCI DSS prohibits storing CVV and requires strict controls for PAN. Use a PCI-compliant payment gateway and tokenization to avoid storing sensitive card data directly.
How long should I retain authorizations?
Retain records to support dispute defense and tax reporting: at least three years for IRS purposes (IRC §6501(a)), and six years when PHI applies (45 CFR §164.530(j)); extend retention as litigation risk dictates.
How can a consumer revoke authorization?
Provide clear revocation procedures in the disclosure. Consumers must be able to withdraw consent; include steps and contact info. Maintain evidence of revocation and stop billing promptly.
Who may sign on behalf of a cardholder?
An authorized agent may sign if authority is documented (power of attorney or corporate authorization). Maintain written evidence of agency to defend against unauthorized charge claims.

be ready to get more

Join over 28 million airSlate SignNow users

Sign Now