Phone Verification for Cards

Businesses who directly transmit card numbers to Stripe will need to verify their phone number for security purposes.

Why is phone verification required?

One or more of your API requests included a customer’s credit or debit card number.

All businesses are subject to PCI compliance, which specifies how credit card data should be securely stored, processed, and transmitted. Businesses could face stiff penalties for noncompliance or potential breaches.

To help you safely transact on Stripe, credit card numbers should be handled in a PCI-compliant environment. Assuming you satisfy these requirements, you can verify your phone number to continue directly transmitting credit card numbers to Stripe.

Alternatively, we recommend you use Elements or Checkout to securely collect and store your customers’ payment details with Stripe using client-side tokenization (See How to securely collect payment details below.) No sensitive data hits your servers, so these tools help you easily achieve PCI compliance.

Using a third-party plug-in or platform?

You can direct the owner or maintainer of your platform to this page: they can determine if they need to make changes to their integration.

You can also let us know which plug-in or platform you are using so we can help them ensure and verify their PCI compliance.

How to securely collect payment details

You should securely collect and transmit credit card data using client-side tokenization. Customers submit their personal information through their web browser or mobile app directly to Stripe, and in exchange a simple token will be provided to the business. This allows you to securely collect card details without sensitive data ever touching your server.

If you collect payments via a web browser, we recommend that you use either Stripe Elements or Checkout:

Elements provides prebuilt UI components and complete control over the look and feel of payment forms.
Checkout provides a complete checkout experience and can be quickly added to a business’ website.

Both Elements and Checkout provide client-side tokenization with minimal effort. Additional methods for collecting payment information can be found in our documentation, and you can ask for advice by reaching out for support.