That must be new in the regs then because everybody and their brother have taken credit cards over the phone for years. Either that or everybody is suddently concerned about their PCI orthodoxy, which admittedly isn’t totally out of the realm of the possible.