It is possible if you use eCart or DataAssist, but highly discouraged and in fact against most credit card company policies.
If you do decide to do that, make sure you never send credit card information in an email, and delete the card information once you have processed the order so you don't have a database filled with credit card numbers tempting would-be hackers.