Customer fraud is being fuelled by organisations that pride themselves on their online security but are leaving their contact centres wide open to potential fraudsters, according to a leading industry expert.
Following recent reports that Shildon in County Durham has become an internet crime hotspot, Derek Bishop, the MD of customer service and outsourcing consultancy Abeo Consulting has claimed that security breaches inside customer contact centres are more common than people think and has called into question just how serious many businesses actually are when it comes to protecting their customer data from everyday fraud opportunities.
“Chip and PIN was a move in the right direction to clamp down on opportunities for card fraud on the high street, but there are vast numbers of instances when full card details need to be provided over the phone, such as paying for car insurance or making a payment on a credit or store card for example. In these cases, without the right security measures in place, businesses could essentially be placing their customers’ right into the hands of a fraudster without even realising it,” reveals Bishop.
Bishop believes that whilst businesses may be providing all the assurances online, behind the scenes there could be some significant breaches going undiscovered. Over the past eighteen months a number of contact centres have been found guilty of this. Back in March, a study of Scottish call centres concluded the industry posed a “serious threat” to data privacy after researchers, who interviewed dozens of call centre staff in the Glasgow area, uncovered evidence of workers secretly collecting customers’ data, forgetting to ask basic security questions of callers, and being regularly offered bribes by criminals to hand over confidential data.
The investigation, carried out by the University of Strathclyde, established that mobile phone cameras, e-mails and even crossword puzzles were some of the techniques used by workers to try to smuggle out sensitive customer data. Bishop believes that such revelations not only question the value of implementing online processing guarantees which are then not reflected offline, but also puts many businesses at serious danger of losing valuable customers and damaging their reputation.
Bishop says:
“A focus on security protocols for the web has meant that all too often some of the basics within the internal operational areas are simply forgotten. Or what many are finding (which is just as bad) is that policies and procedures were implemented but they have not been sustained so the scope for a breach against industry standards and the risk of fraud re-appears again and again.
I wouldn’t be surprised if much of the customer data used fraudulently in Shildon originally came from a contact centre somewhere and this latest revelation just goes to remind businesses that ignoring question marks over their data security won’t make the problem go away.”
Payment Card Industry Data Security Standards (PCI DSS) have been established to enhance payment account data security and Bishop suggests all operations which accept card payments should review their current systems and processes, or those of your outsourcers, to see how the business measures up.
ENDS
Recent Comments