--- title: Are you Taking Credit Card Details the Legal Way?  description: Your business needs to take credit card details a certain way under the PCI DSS regulation. Find out if you are collecting this important information the correct way and what you an do to ensure you are. VTSL is a leading provider of unified communications and IP business telephony solutions. image: https://blog.vtsl.net/hubfs/best%20ip%20business%20phone%20system%20provider%20uk%20pci%20card%20details.jpg --- ## NEWS & BLOG ## Are you Taking Credit Card Details the Legal Way?  - ** Tom Goldsworthy - ** 05-Apr-2018 12:36:46 - ** [Telecoms](https://blog.vtsl.net/vtsl-blog/topic/telecoms), [Industry News](https://blog.vtsl.net/vtsl-blog/topic/industry-news) ![best ip business phone system provider uk pci card details](https://blog.vtsl.net/hs-fs/hubfs/best%20ip%20business%20phone%20system%20provider%20uk%20pci%20card%20details.jpg?width=700&height=365&name=best%20ip%20business%20phone%20system%20provider%20uk%20pci%20card%20details.jpg) Businesses that take card payments over the phone are **required **to adhere to the Payment Card Industry Data Security standard ([PCI DSS](http://www.theukcardsassociation.org.uk/security/what_is_PCI%20DSS.asp)) compliance regulations. Businesses that don’t may be liable for non-compliance fines, and may be forced to stop accepting payments by card. PCI DSS was created to prevent credit card fraud in 2004. The legislation puts the responsibility for avoiding fraud onto the merchant. Therefore it is essential that businesses are following the regulations. There are 4 different ‘[merchant levels](https://www.pcicomplianceguide.org/faq/#2)’ based on how many credit card transactions your organisation does per year.  These levels determine exactly what you must do to be compliant.  Regardless of your level, no business is exempt from PCI DSS regulations. To be successful in fraudulent activities the perpetrator must have both the card number and the CV2 number, along with key information such as the name and full address. Because of this, it is advised that CV2 numbers are not recorded during calls. For businesses that take credit card payments over the phone, this has historically proved a difficult task, especially for companies that use call recording. Most businesses use one of the following solutions. - Pause and resume the phone call recording while the customer gives their credit card details - Mute or mask the CV2 number - Use keypad payments, in which card details are entered into the keypad, therefore there is no need to pause the phone call at any point Unfortunately, methods one and two are not entirely reliable. Most of these types of solutions rely on the agent pausing or muting the audio (or the call recording), and as with any manual activity there is always the risk of human error. The third option is the most secure, and VTSL partner, Syntec, offer a simple and effective solution for businesses wishing to go this route. The [CardEasy service](https://www.syntec.co.uk/pci-dss-solutions/cardeasy/), [which is available to all VTSL customers](https://blog.vtsl.net/hubfs/CardEasy%20Secure%20Card%20Payments.pdf), captures the card number and CV2 entered by the customer using their telephone keypad, with the agent remaining in conversation throughout. [CardEasy automatically blocks the audio in the direction of the agent](https://blog.vtsl.net/hubfs/CardEasy%20Secure%20Card%20Payments.pdf) for the middle six digits of the card number and the CV2, which prevents your agents and call recording system from capturing these sensitive details should the customer read them out as they are entering them using their telephone keypad. This data is then conveyed to the Syntec CardEasy Core that collates this information and forwards it to the PSP for processing, returning the result to the agent. With the upcoming General Data Protection Regulation taking effect next month, ensuring credit card details are secure is of paramount importance.  Not only will businesses be breaching the PCI regulation if details are hacked, but they will also be liable for data loss under GDPR.   --- **About VTSL** VTSL is a leading provider of [business telephony to organisations across the UK and Ireland](https://www.vtsl.net/product-overview/voip-telephony/).  VTSL’s hosted VoIP business phone service offers organisations a powerful, easy to use telephony system that they can control, all at a [low per user cost.](https://blog.vtsl.net/hubfs/CardEasy%20Secure%20Card%20Payments.pdf) With integrations for CRM systems, web browsers, mobiles and more, VTSL’s technology can bring your business to the forefront of communications technology and empower your staff to do more.  Get a free quote or consultation today by calling 020 7078 3200 or emailing [info@vtsl.net](mailto:info@vtsl.net).   Topics: [Telecoms](https://blog.vtsl.net/vtsl-blog/topic/telecoms), [Industry News](https://blog.vtsl.net/vtsl-blog/topic/industry-news) - [Tweet](https://twitter.com/share) ### Welcome to our blog! The latest news, info and ideas on cloud telephony, unified communications and all things technology-related.  ### Subscribe to Email Updates ### Recent Posts ### News Posts by Topic - [VTSL News (28)](https://blog.vtsl.net/vtsl-news/topic/vtsl-news) - [Industry News (3)](https://blog.vtsl.net/vtsl-news/topic/industry-news) - [Interesting (2)](https://blog.vtsl.net/vtsl-news/topic/interesting) - [New technology (1)](https://blog.vtsl.net/vtsl-news/topic/new-technology) - [Products (1)](https://blog.vtsl.net/vtsl-news/topic/products) - [Telecoms (1)](https://blog.vtsl.net/vtsl-news/topic/telecoms) ### Blog Posts by Topic - [Telecoms (86)](https://blog.vtsl.net/vtsl-blog/topic/telecoms) - [Interesting (63)](https://blog.vtsl.net/vtsl-blog/topic/interesting) - [New technology (49)](https://blog.vtsl.net/vtsl-blog/topic/new-technology) - [Products (41)](https://blog.vtsl.net/vtsl-blog/topic/products) - [Industry News (26)](https://blog.vtsl.net/vtsl-blog/topic/industry-news) - [VTSL News (5)](https://blog.vtsl.net/vtsl-blog/topic/vtsl-news) ### Blog Archive - [October 2022 (1)](https://blog.vtsl.net/vtsl-blog/archive/2022/10) - [September 2022 (1)](https://blog.vtsl.net/vtsl-blog/archive/2022/09) - [August 2022 (1)](https://blog.vtsl.net/vtsl-blog/archive/2022/08) - [July 2022 (2)](https://blog.vtsl.net/vtsl-blog/archive/2022/07) - [June 2022 (2)](https://blog.vtsl.net/vtsl-blog/archive/2022/06) - [May 2022 (2)](https://blog.vtsl.net/vtsl-blog/archive/2022/05) - [April 2022 (1)](https://blog.vtsl.net/vtsl-blog/archive/2022/04) - [March 2022 (2)](https://blog.vtsl.net/vtsl-blog/archive/2022/03) - [February 2022 (1)](https://blog.vtsl.net/vtsl-blog/archive/2022/02) - [January 2022 (1)](https://blog.vtsl.net/vtsl-blog/archive/2022/01) - [December 2021 (1)](https://blog.vtsl.net/vtsl-blog/archive/2021/12) - [November 2021 (2)](https://blog.vtsl.net/vtsl-blog/archive/2021/11) - [October 2021 (1)](https://blog.vtsl.net/vtsl-blog/archive/2021/10) - [September 2021 (3)](https://blog.vtsl.net/vtsl-blog/archive/2021/09) - [July 2021 (1)](https://blog.vtsl.net/vtsl-blog/archive/2021/07) - [**](https://www.facebook.com/vtslltd/) - [**](https://twitter.com/vtslltd?lang=en/) - [**](https://www.linkedin.com/company/vtsl-ltd/) - [**](https://plus.google.com/share?url=) Newsletter sign up form - it’s fast and easy ### ABOUT US: VTSL is a leading cloud communications provider specialising in voice and data solutions to the UK & Ireland. ### MAIN OFFICES: 5 Nickols Walk, London, SW18 1BZ, UK Republic of Work, 12 South Mall, Cork T12 RD43  Ireland ### CALL US: UK +44 (0) 20 7078 3200 IRE +353 21 237 0202   ![Website Footer Association Logos VTSL](https://blog.vtsl.net/hs-fs/hubfs/Website%20Footer%20Association%20Logos%20VTSL.png?width=1008&name=Website%20Footer%20Association%20Logos%20VTSL.png)   © 2024 VTSL Ltd [Data Protection Policy](https://blog.vtsl.net/hubfs/VTSL%20Ltd%20Data%20Protection%20Policy%20%26%20GDPR%20Compliance%20v1.pdf?t=1526054) | [Privacy Notice](https://www.vtsl.net/privacy-notice) **