Accepting credit card payments over the phone

This directive from the UBC PCI Compliance Working Committee applies only to those who accept credit card payments over the phone.

The acceptance of credit card payments over the phone is deemed to be a transmission of cardholder data. If a Voice over internet protocol (VoIP) telephone is used as a means of transmission, both the credit card process and UBC VoIP system must comply to the Payment Card Industry Data Security Standard. The VoIP audit applies to the entire UBC VoIP system and not per merchant. It can be costly and subject to the highest Payment Card Industry (PCI) audit as a SAQ D level.

For more information on achieving PCI compliance for telephone (voice services), visit the "Accepting Credit Card Payments Over the Phone" page.