A card not present (CNP) transaction system includes a transaction control device for scanning a barcode to obtain transaction information and an address of a middleware and to send a connection message to the address of the middleware according to the transaction information, the middleware for establishing a connection with a transaction control device according to the connection message received, to obtain a transaction token and a transaction amount from the transaction control device through the connection and to send a transaction message according to the transaction token and the transaction amount, and an acquirer server for receiving the transaction message to establish a connection with the middleware and to generate a transaction confirmation message to the middleware according to the transaction message after verifying the transaction token.