May 16, 2020

Natterbox: How safe is the data you give over the phone?

Neil Hammerton
Neil Hammerton
5 min
Neil Hammerton is the CEO of Natterbox. Here he shares the security risks of sharing personal data over the phone.

How safe is the data you give over...

Neil Hammerton is the CEO of Natterbox. Here he shares the security risks of sharing personal data over the phone.


How safe is the data you give over the phone?

Breaches of credit card details, passwords or bank account information have sadly been a common occurrence in recent years – 2018 alone saw several major airline companies suffer cyber-attacks leading to thousands of customers falling victim to the theft of their financial details. In an era of ever tighter regulations and increasing pressure, ensuring the safety of customers’ financial data is now a priority.

Incidents, such as (example above) serve to remind companies that just reacting to a cyberattack is dangerous to companies and the customers they serve. The priority must now be on anticipating them by putting in place security plans that will protect the financial information of their customers. At the same time, maintaining a seamless and hassle-free payment experience for the customer must not be overlooked, and although online platforms have mastered the art of connecting security and customer experience, companies remain guilty of forgetting another crucial communication channel – the phone. That’s a mistake, as the phone remains a preferred method of communication for many people, so ensuring a robust payment security strategy for the phone is compulsory.

The majority of phone calls to companies take place in contact centres, which means that they play a crucial role in shaping customers’ perception of a brand, as they are one of the first ports of call for customers to contact when they face issues. Contact centres need to be at the forefront of financial security strategies, implementing measures that will safeguard customers’ financial data.

Adding security systems to a contact centre’s arsenal

Online payment systems already benefit from a high level of security, where payments go through the financial service or bank directly without any input from the company receiving it. Payments made over the phone, on the other hand, are unfortunately lacking the same high level of transparency and security. When customers make payments over the phone, they run a significant risk of divulging their sensitive and personal financial information without knowing what happens to it, how it is used and who has access to it.

For most people, and particularly for older generations, making a payment over the phone is still their preference – so contact centres need a system similar to that used in online platforms to ensure total compliance to regulation and the safety of the personal data of their customers.

To offer the greatest possible level of compliance and to protect both their customers and themselves, it is crucial for companies to equip their contact centres with payment systems that are GDPR-friendly and that will allow customers to connect in a direct and seamless way to the card payment network, in order to make payments while on calls. For instance, such payment systems should enable the customer to type in their credit card details directly through the phone keypad and share that information with the financial service provider straightaway, allowing for the contact agent to be removed out of the equation altogether. At the same time, it is crucial that while they make the payment, customers stay connected with the contact agent through voice at all times to ensure they can flag any issues that arise and complete their payments securely and safely while staying on the call.

Empowering customers and staff with transparency, security and trust

With the recent introduction of GDPR (which imposes heavy fines to companies who do not upgrade their security to meet standards and fail to disclose breaches they fall victim to) and PCI DSS (an information security standard designed for organisations handling branded credit cards from the major card schemes with the goal to reduce fraud), coupled with high-profile hacks, consumers and companies alike are getting more and more concerned about the safety of their personal financial data.

There is not a week that goes by without consumers hearing on the news about a new data breach impacting them and putting their personal data at risk. They hear about those stories and know they might be next on the list of victims – which makes them increasingly worried about what happens to their financial data when they pass it on to companies to make payments over the phone. Consumer trust is now effectively the hardest thing for companies to gain and retain, in the wake of high-profile data breaches. If that trust is breached, customers will not think twice about moving to a competitor to get their services. This creates an imperative for companies to stop holding their customers’ credit card information, so they can remove the risk of it being compromised, and losing customers in the process.

On top of this, empowering companies with the ability to record the calls that take place between them and their customers will enable them to add an extra layer of security and compliance, as it will give companies full transparency and vision on what happens during calls with their customers, as well as how call agents handle the customers’ data that’s given to them over the phone.

Phone security - there’s a lot at stake

The GDPR era is putting on added pressure for companies to comply with good data security practices if they don’t want to suffer significant financial or reputational retributions. Heavy fines aren’t the only thing they need to worry about: they also run the risk of losing customers who decide to switch to rival businesses. Investing in robust and secure phone payment systems to match their online systems is no longer an option, it’s a necessity.  Only then will companies be able to be fully compliant and retain their customers’ trust.

Share article

Jun 16, 2021

BME and BBF Fintech to stage sustainable finance hackathon

2 min
BME and BBF Fintech launch the first international edition of Hack & Disrupt!

The first hackathon focused on the fintech and insurtech world at an international level, concentrating on sustainable finance, will be hosted in Bilbao.

The ‘Hack & Disrupt!’ event will take place on 25, 26 and 27 June, and is organised by BME and BBF Fintech. The event aims to bring together companies, entrepreneurs and startups to solve global technological challenges as a team. 

The event, which is sponsored by BBK, Plaza Financiera Bilbao and SIX's startup accelerator, F10, wants to connect entrepreneurs and businesses to re-imagine finance and insurance through digitalisation. The challenges that participants will be facing are geared towards innovation and sustainable finance. 

Due to the pandemic, the event will be held in a hybrid format, combining a face-to-face part, at the BBF Bilbao Berrikuntza Faktoria, and through a technological platform, which will feature different stands, chats and workrooms. The opening and closing ceremonies, as well as various panels related to the entrepreneurial world and the fintech and insurtech ecosystem, will be streamed from the platform.

What will happen at the event?


The opening will reflect on innovation in the securities markets and then afterwards there will be a panel discussion on sustainability. Challenges will be introduced on Friday evening, and the teams will start working on their resolution until Sunday 27th. Saturday 26th features presentations by several experts, including Berta Ares, General Manager of BME Inntech, and Manuel Ardanza, Chairman of the Bilbao stock exchange.

The winners, which will be announced on Sunday, will be eligible for three prizes: a prospection trip to Switzerland, where they will be able to get to know its fintech ecosystem in detail, the possibility of participating in the incubation Programme and in BBF Fintech’s II Open Innovation Programme, the public-private fintech incubator promoted by Bizkaia’s provincial council, Bilbao’s City Hall, the University of Mondragón and Dominion, as well as direct access to the final interview to participate in the F10 incubation and acceleration programme.

Javier Hernani, CEO of BME, believes that BME's presence at this event reaffirms the company's commitment to digitalisation, innovation and the promotion of SMEs and disruptive startups, which adds to other initiatives, such as the Pre-Market Environment. "Today's startups can be tomorrow's stock market blue chips," he stated. “We also reiterate our support for Bilbao as an innovative financial centre, where BME closely follows the entrepreneurial ecosystem”, he added.

Share article