Live data from Hacker News

Stripe Integration for Twilio Pay

stripe.com

11–20 of 32 posts

Re: Stripe Integration for Twilio Pay

#11
post #5

I worked on a very similar product a few years ago. There were a few companies battling over patent rights for similar implementations of DTMF tone suppression in the payment space. Not sure what happened with that but looks like essentially the same idea here. Always thought it was pretty niche now everyone has a browser in their pocket.

Interestingly, this might be in response to the new PCI requirements. In the past, if you iframe'd a payment processor site, you didn't need to be PCI compliant while the new spec requires everyone who is involved in the process to be compliant. I wonder if this will be the future of payment processing, just outsourcing to Twilio and Stripe.

[deleted]

Re: Stripe Integration for Twilio Pay

#12
This is very cool. One problem I see though is that most phone payment transactions happen over a regular phone call vs a dedicated session started over some IVR system. It would be very cool for businesses to be able to, say, have a payment bot join the call and then leave once the transaction is done.

Re: Stripe Integration for Twilio Pay

#13
post #10

Earlier quoted context omitted.

> the abuse potential It's kinda hard to abuse recently. You can do heavy geo locking in order to not get fucked over by abuse to other countries.

Do you have to do it yourself or Twilio takes care of that?

Geo-locks are enabled for everything minus US and UK.

If you don't buy UK numbers, I think UK is locked down as well.

Re: Stripe Integration for Twilio Pay

#14
post #12

This is very cool. One problem I see though is that most phone payment transactions happen over a regular phone call vs a dedicated session started over some IVR system. It would be very cool for businesses to be able to, say, have a payment bot join the call and then leave once the transaction is done.

Sounds like they addressed this.

" For a more personalized experience, employees can also walk customers through an order over the phone: when it’s time to collect the payment, the agent activates Twilio "

Of course, larger places have their own non-Twilio Voice PBX and lines, so I'm not sure if this approach only works if the call originally came in via Twilio.

Re: Stripe Integration for Twilio Pay

#15
I understand the part where an agent/operator won't be able to see my details but when I digit my credit card details into my phone, who's handling them? Are they going to Stripe directly or is Twilio forwarding the "tones" to Stripe? Kinda confused?!

Re: Stripe Integration for Twilio Pay

#17
post #4

It’s not 100% clear from the documentation but it appears the card details have to be keyed in and there’s no voice recognition mode. It would be great to hear a demo of what sounds like, particularly the error handling. I absolutely get the benefit of insulating your agents from the billing data. Not so keen on an abrupt switch to touch-tone inputs during a call though.

They demo'd it a few hours ago. Essentially you key in the card info and press pound once your done for each piece of info. The agent on the line can't hear the tones. The agent see's the data filled in (sensitive data hidden). It didn't work a few times and there was a delay so they have a little work to do.

Re: Stripe Integration for Twilio Pay

#18
post #5

I worked on a very similar product a few years ago. There were a few companies battling over patent rights for similar implementations of DTMF tone suppression in the payment space. Not sure what happened with that but looks like essentially the same idea here. Always thought it was pretty niche now everyone has a browser in their pocket.

Interestingly, this might be in response to the new PCI requirements. In the past, if you iframe'd a payment processor site, you didn't need to be PCI compliant while the new spec requires everyone who is involved in the process to be compliant. I wonder if this will be the future of payment processing, just outsourcing to Twilio and Stripe.

Which new requirements are you referring to?

Re: Stripe Integration for Twilio Pay

#19

I understand the part where an agent/operator won't be able to see my details but when I digit my credit card details into my phone, who's handling them? Are they going to Stripe directly or is Twilio forwarding the "tones" to Stripe? Kinda confused?!

The card information is passing through Twilio to Stripe, and they've built a version of/path through their systems that's PCI compliant for this purpose. Tutorial shows that you have to turn on PCI Mode in your account in order to use this.

https://www.twilio.com/docs/voice/tutorials/how-capture-your...

Re: Stripe Integration for Twilio Pay

#20
post #5

I worked on a very similar product a few years ago. There were a few companies battling over patent rights for similar implementations of DTMF tone suppression in the payment space. Not sure what happened with that but looks like essentially the same idea here. Always thought it was pretty niche now everyone has a browser in their pocket.

Interestingly, this might be in response to the new PCI requirements. In the past, if you iframe'd a payment processor site, you didn't need to be PCI compliant while the new spec requires everyone who is involved in the process to be compliant. I wonder if this will be the future of payment processing, just outsourcing to Twilio and Stripe.

I've heard rumors about new PCI requirements for service providers mandating end to end encryption of phone calls with credit card data. This would certainly be an off the shelf solution
Post reply on HN