Contents
Do PCI standards apply to paper transactions?
A: The PCI DSS applies to ANY organization, regardless of size or number of transactions, that accepts, transmits or stores any cardholder data.
Can you collect credit card information over the phone?
There are a number of ways that you can accept credit cards over the phone these days. You can: Manually enter the customer’s credit card information on your point of sale (POS) system or mobile payments device. Accept a payment online for the phone order using a virtual terminal.
How to stay in compliance with PCI regulations?
Fortunately, we have some tips to stay in compliance for telephone-based systems taking payment cards. 1. Understand Your Scope and Your Data Flow. Make sure you understand what the scope of compliance to PCI is. As mentioned, telephone transactions may traverse your network if you use an IP based phone system (which most are today).
What happens if you sell online without being PCI compliant?
Strictly speaking, if you’re into selling online without being PCI compliant, you need to prepare not only for the potential security risks, but also for penalties, such as monthly fines that could even reach $100,000. The fine amount depends on a company’s transaction volume, the number of PCI DSS requirements violated, etc.
Can a telephone call center be PCI compliant?
Depending on how much of the above you use, complying with PCI for telephone-based payments can be seriously challenging. Physical security of the call center/contact center is also within the scope of a PCI DSS assessment as are the Human Resources involved in taking payments over the phone.
Do you have to be PCI compliant with debit card?
A: If you accept credit or debit cards as a form of payment, then PCI compliance applies to you. The storage of card data is risky, so if you don’t store card data, then becoming secure and compliant may be easier. Q12: Are debit card transactions in scope for PCI?