While all legal payments require obtaining permission from the customer, a card authorization form is not always necessary. Customer permission can be obtained in various ways, and in many cases, a customer's signature is considered sufficient authorization for a transaction. However, using a card authorization form can provide an extra layer of protection for merchants against unauthorized transactions, especially when it comes to recurring payments or transactions where the customer is not physically present.