Every card an agent keys in or a recording captures drags your whole contact center into PCI scope. Pulse lets customers pay by keypad, text, or portal so agents never see the card number and aren’t on the line while it’s entered — helping you shrink PCI scope while getting paid on the call, with card data tokenized by a PCI DSS Level 1 processor.
Automated, agent-assisted, or by text — each keeps the card number away from your agents.
Callers pay by keypad with a Pulse AI voice agent or pay-by-phone line — no person on the call. The AI agent never asks anyone to read a card number aloud, and card numbers are redacted from its transcripts.
In PulseConnect, the agent stays on the call for service. When it’s time to pay, the agent (and any supervisor listening) is put on hold, the caller is muted to the conversation, and the recording pauses while the card is keyed in. The agent sees only approved or declined.
Send a secure pay link by SMS during the call. The customer taps and checks out on a hosted, tokenized page while you stay on the phone — and it works alongside any phone system.
No cold transfer — the agent triggers card capture from the Agent Console with the amount.
The agent and any listening supervisor are held, the caller is muted to the conversation, and the call recording pauses.
The caller enters card number, expiry, and security code on their keypad; the digits go to the payment gateway for tokenization.
Audio and recording resume. The agent sees only a success or decline — never the card — and wraps up the call.
Agents never see the card number and are off the line while it’s entered, and the recording is paused — the pattern that helps keep agent desktops and recordings out of your PCI scope.
If the agent can’t be taken off the line or the recording can’t be paused, card capture is refused rather than taken unprotected.
Card numbers are tokenized by our PCI DSS Level 1 payment processor. Pulse does not store full card numbers.
Collect by keypad, text, or portal while the customer is on the phone, instead of chasing mailed invoices.
Save a card as a token once and run recurring or scheduled charges without re-capturing details.
Text-to-pay links work with any phone system today. Agent-assisted capture runs in PulseConnect; if you’re on another contact-center platform, talk to us about your options.
Related: pay by phone & text-to-pay, the payments product, the PCI security model, or resell it with white-label payments. On cost specifically, see what PCI DSS compliance really costs in 2026 and what PCI DSS v4.0.1’s 51 new requirements mean for you.
Descoping means reducing which systems and people fall under PCI DSS by making sure they never store, process, or transmit cardholder data. When customers enter card details by keypad or on a hosted payment page instead of reading them to an agent, agent desktops and call recordings can often be kept out of scope. Your QSA or acquirer makes the final scope determination for your environment.
The agent starts the payment from the Agent Console. While the caller keys in their card, the agent and any supervisor listening are put on hold, the caller is muted to the conversation, and the call recording pauses. The digits go to the payment gateway, and the agent sees only approved or declined. If any of those protections can’t be applied, the capture is refused.
On agent-assisted PulseConnect payments, the recording is paused while the card is entered. On automated AI voice agent payments, card numbers are redacted from transcripts and callers are never asked to say a card number aloud.
Text-to-pay works alongside any phone system. Agent-assisted card capture runs in PulseConnect, Pulse’s contact center. If you run another contact-center platform, book a call and we’ll walk through what’s possible for your setup.
Both are available and often used together. Automated keypad payments handle routine balances with no agent; agent-assisted keeps a person on the call for complex conversations while taking them off the line for the card entry itself.
Card data is tokenized by our PCI DSS Level 1 payment processor, and Pulse does not store full card numbers. Pulse completes its own PCI DSS assessment as a service provider; ask us for our current attestation status.
Direct costs (QSA assessment, scans, remediation) typically run from a few thousand dollars a year for a small operation to well into six figures for a large contact center with many in-scope systems — before counting internal audit time. Reducing scope is what moves the needle: the fewer systems and people that touch card data, the fewer that have to be assessed. See our full 2026 PCI DSS compliance cost breakdown below.
Book a walkthrough and we’ll map secure payments onto your contact-center setup.