Natterbox: How safe is the data you give over the phone?
Neil Hammerton is the CEO of Natterbox. Here he shares the security risks of sharing personal data over the phone.
How safe is the data you give over the phone?
Breaches of credit card details, passwords or bank account information have sadly been a common occurrence in recent years – 2018 alone saw several major airline companies suffer cyber-attacks leading to thousands of customers falling victim to the theft of their financial details. In an era of ever tighter regulations and increasing pressure, ensuring the safety of customers’ financial data is now a priority.
Incidents, such as (example above) serve to remind companies that just reacting to a cyberattack is dangerous to companies and the customers they serve. The priority must now be on anticipating them by putting in place security plans that will protect the financial information of their customers. At the same time, maintaining a seamless and hassle-free payment experience for the customer must not be overlooked, and although online platforms have mastered the art of connecting security and customer experience, companies remain guilty of forgetting another crucial communication channel – the phone. That’s a mistake, as the phone remains a preferred method of communication for many people, so ensuring a robust payment security strategy for the phone is compulsory.
The majority of phone calls to companies take place in contact centres, which means that they play a crucial role in shaping customers’ perception of a brand, as they are one of the first ports of call for customers to contact when they face issues. Contact centres need to be at the forefront of financial security strategies, implementing measures that will safeguard customers’ financial data.
Adding security systems to a contact centre’s arsenal
Online payment systems already benefit from a high level of security, where payments go through the financial service or bank directly without any input from the company receiving it. Payments made over the phone, on the other hand, are unfortunately lacking the same high level of transparency and security. When customers make payments over the phone, they run a significant risk of divulging their sensitive and personal financial information without knowing what happens to it, how it is used and who has access to it.
For most people, and particularly for older generations, making a payment over the phone is still their preference – so contact centres need a system similar to that used in online platforms to ensure total compliance to regulation and the safety of the personal data of their customers.
To offer the greatest possible level of compliance and to protect both their customers and themselves, it is crucial for companies to equip their contact centres with payment systems that are GDPR-friendly and that will allow customers to connect in a direct and seamless way to the card payment network, in order to make payments while on calls. For instance, such payment systems should enable the customer to type in their credit card details directly through the phone keypad and share that information with the financial service provider straightaway, allowing for the contact agent to be removed out of the equation altogether. At the same time, it is crucial that while they make the payment, customers stay connected with the contact agent through voice at all times to ensure they can flag any issues that arise and complete their payments securely and safely while staying on the call.
Empowering customers and staff with transparency, security and trust
With the recent introduction of GDPR (which imposes heavy fines to companies who do not upgrade their security to meet standards and fail to disclose breaches they fall victim to) and PCI DSS (an information security standard designed for organisations handling branded credit cards from the major card schemes with the goal to reduce fraud), coupled with high-profile hacks, consumers and companies alike are getting more and more concerned about the safety of their personal financial data.
There is not a week that goes by without consumers hearing on the news about a new data breach impacting them and putting their personal data at risk. They hear about those stories and know they might be next on the list of victims – which makes them increasingly worried about what happens to their financial data when they pass it on to companies to make payments over the phone. Consumer trust is now effectively the hardest thing for companies to gain and retain, in the wake of high-profile data breaches. If that trust is breached, customers will not think twice about moving to a competitor to get their services. This creates an imperative for companies to stop holding their customers’ credit card information, so they can remove the risk of it being compromised, and losing customers in the process.
On top of this, empowering companies with the ability to record the calls that take place between them and their customers will enable them to add an extra layer of security and compliance, as it will give companies full transparency and vision on what happens during calls with their customers, as well as how call agents handle the customers’ data that’s given to them over the phone.
Phone security - there’s a lot at stake
The GDPR era is putting on added pressure for companies to comply with good data security practices if they don’t want to suffer significant financial or reputational retributions. Heavy fines aren’t the only thing they need to worry about: they also run the risk of losing customers who decide to switch to rival businesses. Investing in robust and secure phone payment systems to match their online systems is no longer an option, it’s a necessity. Only then will companies be able to be fully compliant and retain their customers’ trust.
