Skip to main content
Telephony integrations

PCI card payments on every CCaaS platform

Any contact centre platform can take PCI DSS compliant card payments, as long as the card number never enters it. Paytia sits on the SIP trunk next to the platform you already run. The customer keys their card on their own phone, the agent stays on the line, and the digits go straight to your payment gateway, so your platform, recordings and agents stay out of PCI scope.

Platforms we work with

Sixteen contact centre and phone platforms, cloud and on-premise. The method is the same on nearly all of them, which is the point: we don't need anything built inside your platform to keep card data out of it.

PlatformCoversHow Paytia connectsAgent stays on the call
GenesysGenesys Cloud CX, Genesys Engage and PureConnectSIP trunk alongside the platformYes
NICE CXoneNICE CXone cloud contact centreSIP trunk alongside the platformYes
Five9Five9 Intelligent Cloud Contact CenterSIP trunk alongside the platformYes
Amazon ConnectAmazon Connect on AWSSIP trunk alongside the platformYes
TalkdeskTalkdesk CX CloudSIP trunk alongside the platformYes
Microsoft TeamsTeams Phone via Direct RoutingDirect Routing SIP pathYes
RingCentralRingCX and RingEXSIP trunk alongside the platformYes
8x88x8 Contact Center and 8x8 WorkSIP trunk alongside the platformYes
VonageVonage Contact Center and Vonage Business CommunicationsSIP trunk alongside the platformYes
AvayaAvaya Aura, Avaya Experience Platform and on-premise estatesSIP trunk alongside the platformYes
MitelMiVoice Business, MiVoice Connect and MiContact CenterSIP trunk alongside the platformYes
CiscoCisco calling and contact centre estatesSIP trunk alongside the platformYes
ZoomZoom PhoneSIP trunk alongside the platformYes
AircallAircall cloud phone systemConference Pay (Paytia joins the call) or Paytia SIP above AircallYes
3CX3CX phone systemSIP trunk from a pre-built profile; agent dials 729 mid-callYes
ContactOneContactOne hosted contact centrePayment capture step alongside ContactOne call handlingYes

How a payment works on any platform

  1. Step 1

    Connect Paytia to your platform

    Paytia is added as a SIP trunk alongside the platform you already run. Your routing, dial plan and agent desktop don't change.

  2. Step 2

    Agent takes the call as normal

    Nothing changes for the agent until the customer is ready to pay.

  3. Step 3

    Start a secure capture

    The agent starts a Paytia capture session mid-call and stays on the line the whole time.

  4. Step 4

    Customer keys the card on their phone

    DTMF masking replaces the keypad tones in real time, so the card number never reaches the agent, the desktop or the call recording.

  5. Step 5

    Payment confirmed

    The digits go straight to your payment gateway. The agent sees the result and carries on with the conversation.

Why masking beats pausing the recording

Pause and resume stops the recording while the customer reads their card number out. It keeps the number out of the recording, but the agent still hears it and still types it, so the agent, their desktop and the network all stay in PCI scope, and it relies on someone remembering to press pause every time. With DTMF masking the customer keys the number instead of saying it, and it never reaches your side of the call at all. There's more on the difference on our pause and resume alternative and DTMF masking pages.

What it does to your PCI scope

Most contact centres that take cards on the phone today fill in SAQ D, which runs to 329 controls. Once card data is captured off your network, most drop to SAQ A, with 22. That's the same whichever platform you run, because the platform never sees a card number to protect.

What going live involves

We set up the SIP connection and run a configuration session with your team. You set up a sandbox merchant account on your payment gateway and let a few agents test it before it goes live for everyone. Nothing in your platform needs rebuilding, so there's no project on the contact centre side beyond that testing. Timings vary by platform and gateway, so we'll give you a date for your own setup on the first call.

If your phone system isn't listed

We can usually still connect. There are three ways in, and one of them fits almost any phone system.

SIP interconnect

A direct SIP connection at carrier level. The agent's experience stays the same and Paytia handles the card capture in the background.

Call forwarding

Calls are forwarded to Paytia numbers, with no rip-and-replace of the telephony you already have.

Conference call

Paytia joins the live call as a third party to take the payment, which suits PABX systems where a SIP change isn't practical.

Questions contact centre teams ask

Which CCaaS platforms support PCI DSS compliant payment capture?+

Any of them can, as long as the card number never enters the platform. Paytia works alongside Genesys, NICE CXone, Five9, Amazon Connect, Talkdesk, Microsoft Teams, RingCentral, 8x8, Vonage, Avaya, Mitel, Cisco, Zoom, Aircall, 3CX and ContactOne. On most of them we connect as a SIP trunk next to the platform, so card data is captured before it reaches your agents, recordings or network.

Do agents have to leave the contact centre platform to take a payment?+

No. The agent stays on the call in the same desktop they use today. They start the capture, the customer keys their card on their own phone, and the agent picks the conversation straight back up once the payment's authorised.

What happens to our call recordings?+

Card numbers never land in them. The keypad tones are masked before they reach the recording layer, so you don't need to pause the recording or scrub it afterwards, and your retention policy doesn't have to change.

Do we need to install an app from the platform's marketplace?+

No. Paytia connects at the telephony layer, on the SIP trunk, rather than as a plug-in inside the platform. That's why the same approach works across so many different contact centre systems, cloud or on-premise.

How much PCI scope does this take away?+

Because card data is captured off your network, most contact centres move from SAQ D, with 329 controls, to SAQ A, with 22. Your agents, desktops, network segment and recording stack fall outside the cardholder data environment.

What's involved in going live?+

Our side is the SIP connection and a configuration session with your team. Your side is a sandbox merchant account on your payment gateway and some agent testing before you switch it on. How long that takes depends on your platform and your gateway, so we'll give you a date for your setup on the first call.

Ready to take secure payments?

Book a demo with our team. We'll show you DTMF masking live, talk through PCI DSS scope reduction, and put together pricing based on your call volume.

PCI DSS Level 1
Cyber Essentials Plus

Trusted by law firms, insurers, healthcare providers and regulated businesses worldwide. Learn more about Paytia