Voice AI for card payments, transfers, and bill pay in financial services
Payments voice AI in financial services lives or dies on architecture: PCI scope reduction via pause-and-resume DTMF, PSD2 strong customer authentication on every initiated payment, and dispute capture that does not create downstream rework. Get those three right and the unit economics are excellent.
55–75% on bill pay and intra-account transfers; lower on disputes by design
Integration touchpoints
- Payment processor with DTMF capture so cardholder data never enters the LLM context window
- Faster Payments / SEPA / ACH rails for transfers, with SCA challenges injected on every initiation
- Dispute and chargeback case management — the AI captures the structured dispute, a human decides
- CRM and reason-code taxonomy so the agent population can see what the AI did and why
Regulatory hooks
- PCI DSS 4.0 — the LLM must be outside scope by design, not by claim
- PSD2 SCA / FFIEC equivalents — multi-factor for every payment initiation, not just first enrolment
- FCA Consumer Duty (UK) — payment refusal or hardship signals route to a trained human
- UK Authorised Push Payment fraud reimbursement — disclosure scripts on initiating payments to new beneficiaries
What good looks like
An AI that explains the bill or transfer intent, hands the cardholder portion to a PCI-scoped DTMF flow, fires the SCA challenge, confirms the result, and writes back a reason-coded record. Disputes are captured to a structured schema the chargeback team consumes without rework. Hardship signals route to a specialist; the AI does not negotiate.
Watch-outs
- Letting a PAN, CVV, or full account number into the LLM context window — PCI scope expands the moment a digit is exposed to the model.
- Skipping APP fraud warnings on payments to new beneficiaries. The reimbursement rules in the UK make this a hard liability question.
- Treating dispute initiation as containment. A poorly captured dispute creates more downstream cost than it saves at the front door.
- Negotiating hardship arrangements from the AI. Consumer Duty makes that a human decision.
Frequently asked
How does the AI take a card payment without entering PCI scope?
Pause-and-resume DTMF: the AI captures intent and amount, hands the cardholder data portion to a PCI-scoped DTMF capture flow that tokenises against the processor, then resumes after the token is returned. The LLM never sees a PAN. The pattern is well-understood and is the only architecture that holds up under a QSA audit.
What does PSD2 SCA require on every payment?
Multi-factor authentication on each payment initiation, with the factors drawn from independent categories (something you know, something you have, something you are). Voice biometrics qualifies as inherence; the AI cannot satisfy SCA on its own without a second independent factor.