Credit Card Acceptance Over the Phone

[vlape at me.com (Vincent Lape)]

one thing to note is that most processors will charge a higher rate  
for transactions done over the phone. Your client needs to do the  
following:

1. Establish a training and awareness policy regarding the appropriate  
handling of CC#
2. Establish and enforce a "clean desk" policy. this means no paper,  
pens, PDA's cell phones, purses (you get the point) at the workstation  
that will process the payment. if the telephone center is shared you  
should segregate it from other business functions.
3. Remove unnecessary internet access services such as IM, email,  
webmail.

If the client is processing CC data they need to (depending with the  
amount of transactions) conform to PCI regulations. As long as they  
have the policies and procedures in place to educate the employees and  
restrict temptation thats all they can really do. The company can not  
really defend much against the one employee who really wants to get  
that information.

Hope this helps. Let me know if you need more information. I have a  
good bit of experience with payment processing in a call center  
environment so feel free to give me a shout if you need more info.

Vinny.


On Aug 11, 2009, at 6:42 AM, Kevin Shortt wrote:

> Hi Everyone,
>
> I have a client interested in accepting credit cards over the phone  
> for purchases. (as an alternative to the current ecommerce in  
> place).    I'm interested in feedback on the risks to an  
> organization when an employee of that organization handles the  
> credit card data from the customer.  What type of measures are  
> typically taken prior to implementing this process?
>
> For example, since the employee/agent is capable of skimming data,  
> then what can the organization do to protect itself?   (I.e. policy,  
> NDA, etc..)
>
> I'm looking to for the best practice and norms..  Links of sites to  
> read would be great too...
>
> Thanks.
>
> -Kevin
>
> _______________________________________________
> Pauldotcom mailing list
> Pauldotcom at mail.pauldotcom.com
> http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> Main Web Site: http://pauldotcom.com