DTMF Masking - stop cardholder data from being exposed
Dual Tone, Multi-Frequency (DTMF), is the technical term for the unique tones made by your phone when digits are pressed.
DTMF suppression and/or masking simply replaces the audio tone value with a single mono-tone preventing downstream systems from being exposed to this sensitive data. This technology is included in all of Eckoh's phone payment products.
CallGuard gives you the choice of using DTMF masking or tokenization to stop cardholder data from being exposed to the contact center environment. Both these methods greatly reduce the number of PCI DSS controls an organization needs to apply and the Payment Card Industry Security Standards Council (PCI SSC) recognizes them as comprehensive solutions for securing cardholder data and reducing the scope of the contact center for compliance purposes.
The benefits of compliance
PCI DSS Level 1 compliant payments
Caller and agent remain in constant contact
Better customer experiences
Reduce card entry errors and AHT scores
Keep your existing systems and call recording
Agents do not have to pause or resume the call
How DTMF masking works
Card Entry
Customers enter card details securely using their phone keypad during a live agent conversation.
Interception
DTMF tones are captured before reaching agents, recordings, or contact center systems.
Masking
Sensitive keypad tones are replaced with flat tones, preventing card data exposure or decoding.
Secured by Eckoh
Payment data is sent safely for authorization and is removed from PCI DSS compliance scope.
See it in under 2 minutes
Watch how Eckoh keeps payments secure across any contact center and why we are the right choice for you.
Why Eckoh
Protecting customer data everywhere
Trusted Globally
Global Enterprise customers:
200+
Securing at Scale
Over $1billion Secured Annually:
1bn+
Transforming PCI DSS
Years PCI DSS Level 1 Certified:
16Years
Trusted by world leading brands
Security You Can Trust
Eckoh’s security accreditations demonstrate a long-standing commitment to protecting customer data, maintaining regulatory compliance, and delivering enterprise-grade security.
- PCI DSS Level 1 certified since 2009.
- SOC 2 Type 2 cloud security controls.
- Cyber Essentials and Cyber Essenials Plus.
- Visa validated service provider.
- Mastercard SDP registered provider.
- Government-approved.
- GDPR compliant and HIPAA-aligned.