---
title: Beware third party payment processing services for your contact centre…
description: Here are some checks that will help you protect your organisation from the consequences of being responsible for the loss of customers’ payment information.
image: https://blog.ultracomms.com/hubfs/beware.jpg
---

[![Ultracomms](https://blog.ultracomms.com/hubfs/raw_assets/public/Ultracomms_April_2020/images/logo.svg "Ultracomms")](https://www.ultracomms.com/)

- [Solutions](https://www.ultracomms.com/solutions/)
  
  
  
    - [Omnichannel](https://www.ultracomms.com/solutions/omnichannel)
    - [Inbound](https://www.ultracomms.com/solutions/inbound)
    - [Outbound](https://www.ultracomms.com/solutions/outbound)
    - [Secure Payments](https://www.ultracomms.com/solutions/secure-payments)
    - [Speech Analytics](https://www.ultracomms.com/solutions/speech-analytics)
- [Support](https://www.ultracomms.com/support/)
- [About](https://www.ultracomms.com/about/)
  
  
  
    - [Accreditations](https://www.ultracomms.com/accreditations)
    - [Partners](https://www.ultracomms.com/partners)
    - [Meet the Team](https://www.ultracomms.com/team)
- [Blog](https://blog.ultracomms.com/)
- [Testimonials](https://www.ultracomms.com/testimonials/)
- [Contact](https://www.ultracomms.com/contact/)

![Open search form](https://blog.ultracomms.com/hubfs/raw_assets/public/Ultracomms_April_2020/images/search.svg "Open search form")

[Book a Consultation](https://www.ultracomms.com/book-a-consultation)

![Open Menu](https://blog.ultracomms.com/hubfs/raw_assets/public/Ultracomms_April_2020/images/menu.svg "Open Menu")

×

![ultracomms](https://blog.ultracomms.com/hubfs/raw_assets/public/Ultracomms_April_2020/images/ultracomms-white-logo.svg "ultracomms")

- [Solutions](https://www.ultracomms.com/solutions/)
  
  
  
    - [Omnichannel](https://www.ultracomms.com/solutions/omnichannel)
    - [Inbound](https://www.ultracomms.com/solutions/inbound)
    - [Outbound](https://www.ultracomms.com/solutions/outbound)
    - [Secure Payments](https://www.ultracomms.com/solutions/secure-payments)
    - [Speech Analytics](https://www.ultracomms.com/solutions/speech-analytics)
- [Support](https://www.ultracomms.com/support/)
- [About](https://www.ultracomms.com/about/)
  
  
  
    - [Accreditations](https://www.ultracomms.com/accreditations)
    - [Partners](https://www.ultracomms.com/partners)
    - [Meet the Team](https://www.ultracomms.com/team)
- [Blog](https://blog.ultracomms.com/)
- [Testimonials](https://www.ultracomms.com/testimonials/)
- [Contact](https://www.ultracomms.com/contact/)

[Book a Consultation](https://www.ultracomms.com/book-a-consultation)

# Beware third party payment processing services for your contact centre…

![](https://blog.ultracomms.com/hubfs/beware.jpg)

Contact centres need to pay close attention to the guidance from the PCI Security Council as MOTO (mail order telephone order) transactions become a target for fraud.  Choosing a payment processing solution carefully is more important than ever as merchants are ultimately liable for any breach of their account.  
 A common solution is to outsource the payment processing function to a compliant third party, to remove card holder data from the contact centre environment altogether, either by intercepting calls outside of the network or transferring calls at the point of payment. Job done? It can be – however, there are some gotchas that may in fact bring your organisation into scope of PCI DSS compliance and therefore in the firing line if the worst happens….

Here are some checks that will help you make the right choices and protect your organisation from the devastating consequences of being responsible for the loss of your customers’ payment information:

1. Review your call flow and identify the mechanism by which calls are routed via your third party supplier. If this is within your infrastructure or under your control, it is within scope of the PCI DSS and must be secured accordingly to achieve compliance. This may be your phone system, a desktop application or some third party equipment installed on your premises. If anything or anyone, within your organisation, can effect the call flow in any way then it is your responsibility if that facility becomes compromised and your business is in scope of PCI DSS and must therefore meet the standard to avoid liability.
2. Review your contracts to ensure that your supplier is accepting responsibility for the security of card holder data, and that you are aware of your responsibilities for system components within your infrastructure or under your control.
3. Regulary check that the solution is working as expected by reviewing call recordings, call flows and business processes. Especially important when onboarding new campaigns, moving premises or deploying new software – bake this into your processes!
4. Finally, ensure that your backup and disaster recovery processes are fully compliant in the event that your supplier becomes unavailable.

For more information, click [here](https://www.pcisecuritystandards.org/documents/Protecting_Telephone_Based_Payment_Card_Data_v3-0_nov_2018.pdf).

![](https://blog.ultracomms.com/hs-fs/hubfs/Imported_Blog_Media/headshot-6-300x200.jpg?width=300&height=200&name=headshot-6-300x200.jpg)  
 Tom Davies  
 Technical Director, Ultracomms

*Tom currently heads up Research and Development at Ultracomms and has a seat on the Contact Centres Council for the Direct Marketing Association in the UK. With a background in Electronic and Software Engineering, Tom co-founded Ultracomms in 2004, building the first cloud contact centre service offering in Europe. In 2007, Tom led the team that developed the Ultracomms PaySure product portfolio in response to the emerging PCI standards, and has since worked with Ultracomms’ customers and QSA partners to secure their contact centre payment processes. Tom helped Ultracomms achieve their own PCI DSS Level 1 Service Provider status for delivering contact centre services from the cloud in 2016. To contact Tom, email [tom.davies@ultracomms.com](mailto:Tom.Davies@ultracomms.com). *

[Back to all news](https://blog.ultracomms.com)

[![](https://blog.ultracomms.com/hs-fs/hubfs/UC_Future_compliance_blog_graphic2-1.jpg?width=720&name=UC_Future_compliance_blog_graphic2-1.jpg)](https://blog.ultracomms.com/moving-towards-the-future-state-of-quality-and-compliance-with-speech-analytics)

## [Moving towards the future state of quality and compliance with Speech Analytics](https://blog.ultracomms.com/moving-towards-the-future-state-of-quality-and-compliance-with-speech-analytics)

### **The current state of QA for most contact centres**

When it comes to quality assurance practices, the average business contact centre monitors between as little as 1-2% of their overall volume of calls. 

[Read article](https://blog.ultracomms.com/moving-towards-the-future-state-of-quality-and-compliance-with-speech-analytics)

[![](https://blog.ultracomms.com/hs-fs/hubfs/Transcending_pandemic_Linked_in_graphic.jpg?width=720&name=Transcending_pandemic_Linked_in_graphic.jpg)](https://blog.ultracomms.com/transitioning-contact-centre-challenges-during-the-pandemic-with-the-aid-of-speech-analytics)

## [Transitioning Contact Centre Challenges during the Pandemic with the aid of Speech Analytics](https://blog.ultracomms.com/transitioning-contact-centre-challenges-during-the-pandemic-with-the-aid-of-speech-analytics)

COVID-19 has been an unexpected event that has caused significant impact on contact centres across the country.

[Read article](https://blog.ultracomms.com/transitioning-contact-centre-challenges-during-the-pandemic-with-the-aid-of-speech-analytics)

[![Why compliance can make or break your CX strategy](https://blog.ultracomms.com/hs-fs/hubfs/UC_Compliance_blog_graphic.jpg?width=720&name=UC_Compliance_blog_graphic.jpg)](https://blog.ultracomms.com/whycompliancecanmakeorbreakyourcxstrategy)

## [Why Compliance Can Make Or Break Your CX Strategy](https://blog.ultracomms.com/whycompliancecanmakeorbreakyourcxstrategy)

It’s no secret that most businesses are heavily investing their time, money and energy into CX. 

[Read article](https://blog.ultracomms.com/whycompliancecanmakeorbreakyourcxstrategy)

![call-performance](https://blog.ultracomms.com/hubfs/Ultracomms_April_2020%20Theme/Images/00_call-performance.jpg)

### Take advantage of Ultracomms solutions

[Let's chat](https://www.ultracomms.com/contact)

- Solutions 
    - [Omnichannel](https://www.ultracomms.com/solutions/omnichannel)
    - [Inbound Contact Centre](https://www.ultracomms.com/solutions/inbound)
    - [Outbound Contact Centre](https://www.ultracomms.com/solutions/outbound)
    - [Secure Payments](https://www.ultracomms.com/solutions/secure-payments)
    - [Speech Analytics](https://www.ultracomms.com/solutions/speech-analytics)
- Support 
    - [Support](https://www.ultracomms.com/support/)
- About 
    - [About](https://www.ultracomms.com/about/)
    - [Accreditations](https://www.ultracomms.com/about/accreditations/)
    - [Partners](https://www.ultracomms.com/about/partners/)
    - [Team](https://www.ultracomms.com/about/team/)
- Resources 
    - [Testimonials](https://www.ultracomms.com/testimonials/)
    - [Blog](https://blog.ultracomms.com/)
    - [Modern Slavery Act Statement](https://www.ultracomms.com/modern-slavery-act/)
    - [Acceptable Use Policy](https://www.ultracomms.com/acceptable-use-policy/)
    - [Terms and Conditions](https://www.ultracomms.com/terms-conditions/)
    - [Privacy Policy](https://www.ultracomms.com/privacy-policy/)

![Ultracomms](https://blog.ultracomms.com/hubfs/raw_assets/public/Ultracomms_April_2020/images/ultracomms-white-logo.svg "Ultracomms")

Contact us

[![Phone](https://blog.ultracomms.com/hubfs/raw_assets/public/Ultracomms_April_2020/images/phone.svg "Phone") +44 (0) 207 965 0207](tel:02079650207)

[![email](https://blog.ultracomms.com/hubfs/raw_assets/public/Ultracomms_April_2020/images/email.svg "email") sales@ultracomms.com](mailto:sales@ultracomms.com)

[![contact](https://blog.ultracomms.com/hubfs/raw_assets/public/Ultracomms_April_2020/images/contact-icon.svg "contact") Contact us](https://www.ultracomms.com/contact)

- [![linkedin](https://blog.ultracomms.com/hubfs/raw_assets/public/Ultracomms_April_2020/images/linkedin.svg "linkedin")](https://www.linkedin.com/company/ultracomms/)
- [![twitter](https://blog.ultracomms.com/hubfs/raw_assets/public/Ultracomms_April_2020/images/twitter.svg "twitter")](https://twitter.com/UltraComms)

[Client Login](https://client.ultraasp.net/Ultra.Client/Default.aspx)

Copyright © 2020 Ultracomms