One single platform
Multiple ways to take secure payments over the phone.
Pay by Call provides a secure, IVR-based telephone payment platform, certified to PCI DSS Level 1 and aligned with the Spanish ENS High category.
On top of this core, each client can activate different operating modes and optionally add PBC 3DS to bring PSD2 / 3D Secure strong customer authentication into the voice channel, without taking users out of the call.
A secure, certified and configurable IVR payment platform
Pay by Call offers a single product: a secure telephone payment platform designed so that the voice channel can operate with the same level of security, traceability and integration as more mature payment channels.
The platform captures card data inside a PCI DSS Level 1 certified environment, prevents that data from ever being exposed to agents or unauthorized systems, and integrates with the PSP and contact center architecture the client already uses.
It is not a different product for each use case, but one common technology core with several operating modes.
All modes share the same security, compliance and integration framework, and only differ in the payment entry point and the level of human involvement.
Activation of PBC 3DS is optional and configurable by mode, service type, ticket size or risk level.
PCI DSS Level 1–certified IVR.
Built to fit ENS High-category environments.
Integrates with existing PSPs and telephony platforms.
Agent-assisted and fully automated modes.
Optional PBC 3DS for PSD2 / 3D Secure in the voice channel.
Two main ways to use the platform
The platform adapts to different billing contexts and client-specific integrations, but we explain it in a simple way
When the payment needs to be closed within the live conversation
Pay by Agent modes are designed for calls with high commercial, operational or reputational value, where it is important to keep human assistance during the process.
The customer pays over the phone without the agent ever seeing or hearing card data, because capture happens inside Pay by Call’s secure IVR environment.
PBC TFA – Transfer From Agent
In PBC TFA, the agent handles the call and, at the time of payment, transfers the user into Pay by Call’s secure IVR.
From that point on, the agent is completely isolated from card data capture.
Once the transaction is complete, the flow can be configured to end the call, return it to a specific agent, send it back into a queue or behave differently depending on whether the payment result is OK or KO.
PBC LAA – Live Agent-Assisted
En PBC LAA, el agente permanece en línea durante todo el proceso y guía al usuario, pero sin oír ni ver los datos de la tarjeta. Los tonos DTMF son sustituidos por un monotono que impide interpretar los dígitos pulsados, y el agente dispone de un panel de control que le permite seguir el flujo, detectar errores y pedir la reintroducción de datos sin comprometer la seguridad. Esta modalidad combina acompañamiento, control del proceso y cumplimiento PCI DSS estricto, permitiendo además la grabación continua sin exponer datos sensibles.
Pay by Agent is the natural choice when the goal is to close the payment within the same call, with lower channel friction, full human support and higher operational control.
Full automation: secure payments with no human intervention
When the use case allows the agent to be removed, the Pay by Call platform offers fully automated modes that reduce operating costs, extend availability and maintain the same level of security and compliance.
They are especially useful for recurring payments, large-volume operations, regularizations, reminders and scenarios where self-service is more efficient than human assistance.
PBC Outbound Call
Via API, the platform generates fully automated outbound calls proposing that the user completes payment during the call itself.
No human agents are involved, which optimizes recovery, regularization or reminder campaigns with maximum reach and minimal operating cost.
PBC Pay by Web
The platform can be integrated as an additional payment method in the client’s own website via API.
Instead of entering card details in a traditional checkout, the user provides their phone number and receives an automatic call from the secure IVR to complete the payment.
This combines the convenience of the web channel with the security and simplicity of voice.
PBC Pay by Link
In this mode, the user receives a link via SMS, email, WhatsApp or another channel.
When they tap it, they are not taken to a web payment page; instead, it triggers an automatic call to complete the payment via Pay by Call’s secure IVR.
This is particularly useful for follow-up campaigns, payment reminders, regularizations or scenarios where temporary convenience is needed without sending the user to a web form.
PBC Pay by Number
The user calls a specific number, authenticates, and the system retrieves the outstanding balance from the client’s systems.
Payment is processed fully unattended, with 24x7x365 availability, eliminating staffing costs and reducing wait times.
This mode is particularly effective for taxes, fees, invoices, premiums, debt regularization and other recurring or low-ticket payments.
Agentless modes turn the phone into an automated, scalable, 24x7 collection channel, always powered by the same security core.
PBC 3DS
Native PSD2 / 3D Secure strong authentication in the voice channel
PBC 3DS is Pay by Call’s optional strong-authentication layer that brings PSD2 / 3D Secure 2.x to the telephone channel without forcing the user to leave the call.
During the process, card data is captured inside the secure IVR environment, the platform connects with the 3DS ecosystem through the integrated PSP, and the user validates the authentication using their usual bank channel, such as a banking app, SMS OTP or push notification.
The call remains active and the system communicates status updates until authorization is complete.
Unlike the standard market approach—typically handling 3D Secure by redirecting the user to an external web link—the patent-pending PBC 3DS method keeps voice as the primary channel, so the user does not have to switch from phone to web.
This reduces abandonment caused by channel switching, preserves operational continuity and gives the telephone channel the same level of evidence and traceability expected in e-commerce when SCA applies.
PBC 3DS activation can be configured by mode, amount, service, transaction type or risk level.
This allows a single client to combine operations with strong authentication where required and others in MOTO mode under applicable exemptions, always within Pay by Call’s PCI DSS environment.
PBC 3DS is a proprietary development by Pay by Call whose specific strong authentication method for the telephone channel is currently in the process of international patent protection.
Why PBC 3DS is different
- Unique in the market in bringing PSD2 / 3D Secure to the voice channel
- Keeps the user on the call and in conversation with the agent
- Reduces friction and abandonment due to channel switching
- Strengthens evidence, traceability and operational control
- Can be activated selectively according to risk and use case
Pay by Link vs Pay by Agent
In this comparison, Pay by Link refers to the traditional market standard: the customer receives a link, leaves the call and completes a web or app checkout.
It should not be confused with Pay by Call’s PBC Pay by Link mode, where the link triggers an automatic call and payment still happens in voice.
When the payment starts from a high-intent call, the real difference lies in channel friction.
In the traditional Pay by Link model, the user must change context: receive the link, find it, open it, trust it and complete a checkout outside the phone conversation.
In Pay by Agent from Pay by Call—especially with PBC LAA and PBC TFA—the payment is closed within the voice flow itself, with guided or assisted support, no exposure of sensitive data to the agent, and the option to enable PBC 3DS to add strong authentication without breaking the call.
|
Aspect
|
Pay by Link
|
Pay by Agent
|
|---|---|---|
|
Channel
|
Voice → link → web/app
|
Voice → secure IVR within the same call
|
|
Perceived friction
|
Higher
|
Lower
|
|
Human assistance
|
Partial
|
Full
|
|
Abandonment risk
|
Higher
|
Lower
|
|
Perceived security
|
Depends on the link and checkout page
|
User stays on the call and never reads card data to the agent
|
|
PCI DSS
|
Handled outside the contact center
|
Handled inside Pay by Call’s certified PCI DSS environment
|
|
3D Secure / SCA
|
Standard web flow
|
PBC 3DS native in voice, no channel switching
|
|
Best suited for
|
Digitally initiated contacts (web, email, chat)
|
Phone-initiated contacts in the contact center
|
The strategic takeaway is clear: Pay by Link is an excellent complement for natively digital journeys, but when the payment starts with a phone call and the goal is to maximize conversion, control and continuity, Pay by Agent delivers a much more coherent voice-channel experience.
With PBC 3DS, that experience can also align with PSD2 / 3D Secure strong authentication requirements without taking the user out of the call.
Certified Institutional Level Security
PCI DSS Level 1:
The most demanding standard in the global payments industry
ENS High Category:
Essential certification for working with the Spanish Public Administration
Telecom Operator:
Optional enhanced call security guarantee
Resilience:
Cloud architecture on Google Cloud with 99.9% availability