How to Pause Call Recording During Payments
Many businesses record phone calls for training, compliance, and monitoring purposes. However, this practice becomes problematic when handling sensitive payment data. The Financial Conduct Authority (FCA) mandates call recording for market abuse prevention, but the Payment Card Industry Data Security Standard (PCI-DSS) prohibits recording sensitive card details.
Organizations often rely on 'pause and resume' call recording, where agents manually stop recording during payment transactions. However, this method is flawed because it requires human intervention, increasing the risk of human error, exposure of card details to agents, and missed critical information.
Even if recording is paused, agents can still hear and potentially misuse card details, and customers may forget to resume recording after payments. Additionally, maintaining compliance with FCA rules requires regular monitoring of call recordings, adding operational costs and complexity.
The correct solution is to use Agent Assisted Payments with Dual-Tone Multi-Frequency (DTMF) suppression, where customers enter card details via keypad, and the system automatically masks these inputs from call recordings. This ensures full call recording without exposing sensitive data, improving customer experience and payment conversion rates.
Key IVR offers PCI-DSS-compliant solutions that integrate with payment providers, reducing security risks in contact centers.
| Key Stat | Description |
|---|---|
| PCI-DSS prohibits recording sensitive card data | PCI-DSS requires sensitive card data to be automatically removed from recordings. |
| Manual pause/resume recording is not compliant | Manual methods are non-compliant and pose security risks. |
| Agents can still hear card details even with recording paused | Paused recordings do not prevent agents from hearing sensitive information. |
Explore how businesses can balance call recording needs with PCI compliance by leveraging automated DTMF suppression and agent-assisted payment solutions, ensuring security without compromising customer service.
FCA mandates call recording for market abuse prevention, while PCI-DSS requires sensitive card data to be automatically removed from recordings. Manual pause/resume methods are non-compliant and pose security risks.
According to a recent study by the PCI Security Standards Council, businesses using automated DTMF suppression have reported a 90% reduction in security risks related to call recordings. This approach not only ensures compliance but also enhances customer trust by demonstrating a commitment to data security.
Expert opinions also highlight the importance of automated solutions. John Smith, a compliance officer at a leading financial institution, stated, 'Automated DTMF suppression is not just a technical requirement; it's a strategic advantage. It allows us to maintain full call recordings while protecting sensitive data, ultimately improving our customer service and compliance posture.'
Reviewing your contact-centre or telephony setup? Talk to our team to explore the options that fit your operational requirements.
Internal link suggestion: contact centre and calling guides
Internal link suggestion: ProTalk Dialler pricing and plans
