Secure payments over the phone

A charity collects donations over the phone. If the call is recorded, card numbers may be stored on the recording and fall under PCI DSS scope.

The PCI Security Standards Council warns that storing CVV and full PAN is prohibited. Many organisations inadvertently record sensitive data.

DTMF Masking

CCL’s secure telephony payments service ensures compliance. We implement DTMF masking solutions: callers input card numbers via their keypad; the tones are masked.

Alternatively, we send secure links via SMS so customers can enter details on a PCI-compliant portal. We configure software to automatically pause recording.

Taking payments out of the audio stream and into secure channels.

Audits and Training

We conduct PCI audits and train agents on compliance. Agents learn not to repeat card numbers aloud. We ensure CCaaS platforms support secure payment integrations.

CCL helps clients maintain trust and compliance while building convenient payment journeys.