A method and system for placing an order charged to a credit card, over an unsecured network. The customer completing an order for goods or services enters information required for the order, such as the shipping and billing addresses and identification of the goods, but enters only a subset of the credit card account number to which the order is to be charged. The order is transmitted over the Internet or other network to a remote merchant location (32) from a customer's location (10). A computer (38) at the remote merchant location processes the order to extract the data provided by the customer for storage in a database (40). During a subsequent telephone call to the remote merchant location, the customer enters the complete credit card number, preferably on a touch-tone keypad (28). The touch-tone signals are processed by an automated attendant system (44) for input of the complete credit card number into the computer. Using the portion of the complete credit card number that corresponds to the subset entered by the customer on the order form, the computer identifies the order previously placed and inserts the complete credit card number in the order data stored on the database to finalize the order.