Skip to content
Voice AgentBible

AI voice agents for banking, lending and collections: top 5 use cases

The five phone jobs banks, lenders and collections teams hand to AI voice agents, the systems they must write into, and FDCPA, FCA CONC, RBI and TCCCPR notes.

By · 4 min read

Last verified 01 Oct 2026v1.0Published 01 Oct 2026

Small business says AI calling agent for a lender or collections team. Enterprise says voice agent for collections, onboarding and account servicing (BFSI).

The top 5 use cases

  1. 01
    Collections payment reminders

    Places consented, hour-limited, frequency-capped collections calls, verifies the right party before any debt is mentioned, captures a promise to pay with read-back, and stops on dispute or cease.

    US FEDERALFDCPA REG FUK
  2. 02
    KYC onboarding verification

    Follows up stalled applications, captures missing details with read-back, flags mismatches, and books video KYC or a branch visit; it never completes an identity decision alone.

    INDIASINGAPOREMAS OUTSOURCING
  3. 03
    Card and account servicing

    Answers balance, transaction and instalment questions from core banking after identity verification, blocks a card behind a confirmation, and never hears a card number, PIN or passcode.

    US FEDERALGLBAUK
  4. 04
    Fraud alert confirmation

    Calls the customer minutes after a suspicious transaction, verifies the right party without asking for a secret, takes a confirm or deny, blocks the card on a deny and warns about spoofing.

    US FEDERALUKINDIA
  5. 05
    Loan lead qualification and EMI reminders

    Places EMI reminders on the service number series and loan-enquiry follow-ups on the promotional series, inside the 9 a.m. to 9 p.m. window with DND scrubbing, in English, Hindi or Hinglish.

    INDIARBI FPCUS FEDERAL

Who buys this and what they call it

A lender, a collections agency or a credit union searches for an AI calling agent for a lender or collections team: something that dials the overdue list inside the rules, verifies the right party, captures a promise to pay and stops when told to. A bank or a non-bank financial company talks about a voice agent for collections, onboarding and account servicing, often under a BFSI or contact-centre automation heading. Both want the same two guarantees: nothing about an account is spoken before identity is verified, and nothing that money or compliance depends on is written without a spoken read-back and a plain yes that code, not the model, has checked.

A useful way to see the whole surface is the five jobs a bank does on the phone: acquire and onboard, serve and transact, lend and collect, protect and comply, operate and learn. The five use cases below cover the first four. The fifth, post-call summaries and quality scoring, is where most banks start because it has no caller.

What the phone traffic looks like

Financial services is a large share of all contact-centre spend; one investor newsletter puts it at about a quarter of global contact-centre spend and more than $100 billion a year in outsourcing. Treat that as scale, not as your number. Inbound traffic is dominated by lookups: balance, last transactions, card block, instalment date, application status. Outbound is reminders, collections, fraud confirmations and onboarding follow-ups, and almost all of it is regulated as automated calling.

Collections is the most regulated voice task there is. In the United States, Regulation F presumes a violation above seven call attempts per debt in seven consecutive days, or within seven days after a telephone conversation about that debt; it presumes times before 8 a.m. and after 9 p.m. at the consumer's location are inconvenient; and the FDCPA requires the collector to disclose in the initial communication that it is attempting to collect a debt. India's regulator says recovery agents shall not call before 8 a.m. or after 7 p.m. Australia's guideline recommends no more than three contacts a week or ten a month. Every one of these is a number the dialler must check before it rings, not a sentence the agent must remember to say.

Inbound needs speed, identity before disclosure and a reflex to stop a caller who starts reading a card number or a one-time passcode. Outbound needs pre-dial checks in data, right-party verification, read-backs on anything with a date and an amount, and a clean exit on wrong numbers, disputes, cease requests and vulnerability.

Systems that matter

Core banking is the system of record for balances, transactions and card status: Finacle, Temenos and Thought Machine are common. The agent reads from it live and writes only reversible actions behind a confirmation; a transfer is never spoken into existence. Loan origination and management (Encompass, nCino, Pennant) hold the application, the instalment schedule and the overdue amount. Collections platforms (C&R Software, FICO Debt Manager) own the contact history, the seven-day attempt count, consent and cease flags, dispute status and the promise-to-pay record. A CRM or dialler consent store holds consent type per number, DND and suppression lists, preferred language and time zone, and in India the DLT registrations that every commercial call depends on.

Two integration questions decide the project. Does the pre-dial check read the live attempt count and consent flag, or a nightly extract? And is the confirmation of a promise, a block or a KYC detail checked in code against the transcript, or inferred by the model from a conversation that may have contained a "yes" to something else?

Compliance notes

In the United States, third-party collection sits under the FDCPA and Regulation F as published: the seven-in-seven call-frequency presumption, the 8 a.m. to 9 p.m. presumption of inconvenient times, the debt-collector disclosure in the initial communication, limits on third-party contact, and a written cease request that stops further communication. Outbound AI calls are artificial-voice calls under the TCPA and need prior express consent; the FCC confirmed this in February 2024. GLBA's Safeguards Rule covers the financial information the agent hears, and card numbers belong in a PCI-scoped flow, never in the audio. In the United Kingdom, FCA CONC 7 requires forbearance and due consideration for customers in arrears and prohibits contact at unreasonable times, and the Consumer Duty adds outcome evidence and vulnerability handling. In India, RBI's Fair Practices Code and recovery-agent circular set the 8 a.m. to 7 p.m. hours and the no-harassment rule, TCCCPR sets the number series, DLT registration, DND scrubbing and the 9 a.m. to 9 p.m. window, and the DPDP Act governs the recording. In the Philippines, BSP Circular 1160 prohibits abusive collection, and recording needs all-party consent. In Singapore, the vendor is an outsourcing arrangement under MAS rules. In Australia, RG 96 sets contact frequency and hours for collections, and the ACMA standard sets narrower hours for telemarketing. All of this is informational, not legal advice; the compliance matrix carries the sources and verified dates.

Regional deltas

The jobs are the same; the numbers and the vocabulary are not. In the United States, "collector", "Reg F" and "mini-Miranda". In the United Kingdom, "arrears", "forbearance" and "vulnerability". In India, "EMI", "recovery agent", "140 series" and "1600 series", with callers switching between English and Hindi or a regional language mid-sentence and amounts spoken in local number words. In the Philippines and Indonesia, Taglish and Bahasa code-switching and bank-led distribution. In Singapore, an outsourcing register and data-residency clauses. In Australia, "hardship" is a defined process with its own rules. Each use-case page lists the compliance rows for the regions you select.

How to run the demo

Bring your own audio and your own sandbox. For collections, set one account's contact log to seven attempts in the last seven days and ask the vendor to attempt it; the correct result is no call and a logged reason. Record five realistic calls with your own staff: a clean right-party promise to pay, a wrong number, a dispute that turns into "stop calling me", a spouse who insists they are on the account, and a caller who starts reading a card number. Insist that the promise, the block and the flags land in a sandbox you can see during the call. The collections script gives you the full protocol, turn by turn, with pass and fail lines for each trap. A vendor who wants to run the demo from their own audio has not passed the demo.

Systems that matter

SystemThe agent readsThe agent writesIntegration maturity
Collections platforms (C&R Software, FICO Debt Manager)Delinquent accounts, contact history and seven-day attempt counts, consent and cease flags, dispute status, hardship markers, strategy and treatment pathAttempt records with reason codes, promises to pay with date, amount and channel, disputes, cease and wrong-number flags, callbacksmature
Core banking (Finacle, Temenos, Thought Machine)Balances, recent transactions, card status, standing instructions, customer identifiers and authorised-contact recordsCard block and unblock behind a confirmation, address and contact changes, service requests; never a transfer without a code-enforced confirmationmature
CRM and dialler consent storeConsent type per number, DND and suppression lists, preferred language, time zone, DLT header and template registrations in IndiaCall outcomes, opt-outs, callback preferences, complaint flagsemerging
Loan origination and management (Encompass, nCino, Pennant)Application status and missing items, instalment schedule and overdue amount, late-fee rules, payment channelsApplication notes and document-received markers, callback tasks, promise-to-pay records where the LMS owns themmature

What changes by region

  • United States

    Third-party collections sit under the FDCPA and Regulation F: the seven-in-seven call-frequency presumption, the 8 a.m. to 9 p.m. presumption of inconvenient times, the debt-collector disclosure in the initial communication, and the written cease rule. Outbound AI calls are artificial-voice calls under the TCPA and need prior express consent. GLBA's Safeguards Rule covers the customer financial information the agent hears.

  • United Kingdom

    FCA CONC 7 requires firms to treat customers in or approaching arrears with forbearance and due consideration (7.3.4R) and not to contact them at unreasonable times (7.9.4R); the Consumer Duty adds outcome evidence and vulnerability handling. Automated marketing calls need specific prior consent under PECR.

  • India

    RBI's Fair Practices Code and its August 2022 circular on recovery agents say agents shall not call borrowers before 8 a.m. or after 7 p.m. and shall not resort to intimidation or harassment; the September 2022 digital-lending guidelines add disclosure and grievance duties. TRAI's TCCCPR puts promotional calls on the 140 series and service calls on the 1600 series with DLT registration, DND scrubbing and a 9 a.m. to 9 p.m. window; the DPDP Act governs the recording.

  • Southeast Asia

    In the Philippines, BSP Circular 1160 (28 November 2022) implements the Financial Consumer Protection Act and prohibits abusive collection practices; the Anti-Wiretapping Act makes recording without all-party consent a crime. In Singapore, a voice-AI vendor is an outsourcing arrangement under MAS rules, and the 2016 Guidelines on Outsourcing were cancelled on 10 December 2024 in favour of newer instruments, so check which applies to your licence.

  • Australia and New Zealand

    The ASIC and ACCC debt collection guideline (RG 96, April 2021) recommends no more than three contacts per week or ten per month, phone contact Monday to Friday 7.30 a.m. to 9 p.m. and weekends 9 a.m. to 9 p.m., and none on national public holidays. Telemarketing calls sit inside the narrower ACMA hours and the Do Not Call Register.

Matrix rows that apply

Rows from the global compliance matrix that apply to this page. Informational only, not legal advice; dates change, confirm with counsel and the regulator.

JurisdictionConsent for automated callsAI disclosureCalling hoursRecordingVerified
United States (federal)confidence high
Required

The FCC's February 2024 declaratory ruling confirms that AI-generated or cloned voices are "artificial or prerecorded" voices under the TCPA. Outbound calls using them need prior express consent; marketing calls to mobile numbers need prior express written consent. Inbound calls initiated by the consumer are outside this consent rule.

Conditional

No federal statute yet requires an agent to announce that it is AI. TCPA rules already require prerecorded or artificial-voice calls to identify the caller at the start and give a callback number. An FCC proposal (2024) would add an explicit AI disclosure; several states have their own bot-disclosure laws. Disclose by default.

Required

Telephone solicitations only between 8 a.m. and 9 p.m. in the called party's local time (47 CFR 64.1200(c)(1)).

Conditional

Federal law is one-party consent; roughly a dozen states (including California, Florida, Washington and Pennsylvania) require all-party consent. Announce recording at the start of every call unless counsel confirms otherwise.

2026-09-30
United Kingdomconfidence medium
Required

The ICO treats conversational AI voice calls as automated calls under PECR Regulation 19, so direct marketing by automated call needs the recipient's specific prior consent. Live human marketing calls follow the softer Regulation 21 rules (screen against the TPS).

Recommended

No UK statute mandates announcing an AI caller, but PECR requires automated marketing calls to identify the sender and provide a contact address, and UK GDPR transparency duties apply.

Recommended

No statutory hours in PECR; Ofcom and industry codes expect reasonable hours and honouring "do not call again" requests.

Required

Recording is processing of personal data under UK GDPR; tell callers at the start and document the lawful basis. Financial firms have additional FCA recording duties.

2026-09-30
European Unionconfidence medium
Required

Automated calling systems without human intervention for direct marketing need prior consent under the ePrivacy Directive (Art. 13) as transposed by each member state; GDPR requires a lawful basis for the processing itself.

Required

EU AI Act Article 50 requires that people interacting with an AI system are informed they are doing so unless it is obvious. Transparency obligations apply from 2 August 2026. Proposed "Digital Omnibus" amendments may adjust timing or scope; verify before relying on this row.

Conditional

Set by member-state law and codes (for example, national telemarketing hour rules); no EU-wide statutory window.

Required

Recording needs a GDPR lawful basis and transparent notice at the start; several member states require all-party consent.

2026-09-30
Indiaconfidence medium
Required

Commercial communication is governed by TRAI's TCCCPR framework: senders and telemarketers register on the Distributed Ledger Technology (DLT) platform, promotional calls go out on the 140-number series and transactional or service calls on the 1600 series, and recipients' DND preferences must be scrubbed. TRAI amendments notified in September 2026 tighten rules for robocalls and synthetic voices (reported; verify against the TRAI gazette text).

Conditional

A draft TRAI requirement to declare AI or synthetic voice at the start of a call has been reported; treat disclosure as required by default.

Required

Promotional calls only between 9 a.m. and 9 p.m. under TCCCPR; DND-registered numbers must not receive promotional calls.

Recommended

No standalone all-party consent statute; the DPDP Act treats voice recordings as personal data requiring notice and a lawful purpose.

2026-09-30
Philippinesconfidence medium
Required

The Data Privacy Act of 2012 requires a lawful basis (usually consent or legitimate interest) for processing; the National Privacy Commission expects clear notice for marketing calls.

Not required

No statute requires announcing an AI caller. Announcing it is recommended and expected by the NPC's transparency principle.

Recommended

No statutory window; BSP consumer-protection rules for financial institutions prohibit harassment and unreasonable hours in collections.

Required

The Anti-Wiretapping Act (RA 4200) makes recording a private communication without the consent of all parties a crime; announce and obtain consent at the start of every call.

2026-09-30
Singaporeconfidence medium
Required

Telemarketing voice calls to Singapore numbers must be checked against the Do Not Call Registry unless the organisation has clear and unambiguous consent (PDPA Part 9).

Not required

No statutory AI-caller disclosure; the PDPC's Model AI Governance Framework recommends transparency.

Recommended

No statutory hours; PDPC guidance and industry codes expect reasonable hours.

Recommended

Recording is personal-data collection under the PDPA and requires notification of purpose; no all-party consent statute.

2026-09-30
Australiaconfidence medium
Required

Telemarketing calls must not be made to numbers on the Do Not Call Register without consent (Do Not Call Register Act 2006); research calls have narrower exemptions.

Conditional

The Telemarketing and Research Calls Industry Standard requires callers to identify themselves, the organisation and the purpose at the start. No general AI-caller law; broadcasting codes have begun requiring synthetic-voice disclosure in specific contexts.

Required

Telemarketing calls only Monday to Friday 9 a.m. to 8 p.m. and Saturday 9 a.m. to 5 p.m. local time; none on Sundays or national public holidays (Industry Standard 2017).

Conditional

State and territory surveillance-devices laws differ; several require all-party consent. Announce recording at the start.

2026-09-30
Japanconfidence low
Conditional

The Act on Specified Commercial Transactions regulates telemarketing: the caller must state the business name, the person's name and the purpose up front, and must not re-solicit after a refusal. No general opt-in register.

Not required

No AI-caller disclosure statute; identification duties above apply regardless of who or what is speaking.

Recommended

No statutory hours; industry guidance discourages early-morning and late-evening calls.

Recommended

Recordings are personal information under the APPI; specify the purpose of use and notify the caller.

2026-09-30
  • HIPAA (health data) (United States (federal)): A voice agent that hears protected health information is a business associate; a signed BAA with every vendor in the audio path is table stakes.
  • FDCPA and Regulation F (debt collection) (United States (federal)): Regulation F presumes a violation above seven call attempts per debt in seven days, and within seven days after a conversation; time-and-place restrictions apply.
  • GLBA (financial data) (United States (federal)): Safeguards Rule applies to customer financial information handled by the agent.
  • FCA Consumer Duty and CONC (collections) (United Kingdom): Collections calls must be fair and not excessive; vulnerability handling is scrutinised.
  • AI Act high-risk classification (European Union): Agents used for credit scoring, essential-service eligibility or employment decisions may fall under high-risk obligations beyond disclosure.
  • RBI Fair Practices Code and digital-lending directions (collections) (India): Collections calls must avoid harassment, respect hours and identify the lender and recovery agent.
  • BSP Financial Consumer Protection (collections and servicing) (Philippines): Prohibits abusive collection practices and requires fair treatment; applies to banks and their agents.
  • MAS outsourcing and technology risk guidelines (Singapore): Banks and insurers must assess and control third-party voice-AI vendors as outsourcing arrangements.
  • ASIC and ACCC debt collection guideline (Australia): Sets contact frequency and conduct expectations for collections calls.

Questions to ask vendors

  1. 01

    Show me the pre-dial check for a collections account: consent, local time against the window, and the seven-day attempt count. Then set the count to seven and show me that no call is placed.

    A good answer: A log line per attempt with the three checks and a reason code on refusal. A check that exists only as a prompt instruction is not a check.

  2. 02

    What does the agent say before the account holder is verified, and what does it say to a spouse who claims to be on the account?

    A good answer: The automated-assistant disclosure and a request for the account holder by name; nothing about the account, the amount or the creditor until the configured identifiers match. To the spouse, nothing confirmed or denied, and a callback offer.

  3. 03

    Show me a promise to pay, a card block and a KYC detail being written to a sandbox of our systems after a spoken read-back and a plain yes.

    A good answer: Records you can see appear in the sandbox during the call with the fields exactly as spoken; the confirmation is checked in code against the transcript, not inferred by the model.

  4. 04

    What happens when the caller disputes the debt, asks you to stop calling, or mentions a bereavement, an illness or a job loss?

    A good answer: Collection activity stops, the dispute or cease request is recorded and confirmed in words, the vulnerability signal is flagged and routed to a person, and the agent does not ask for payment again.

  5. 05

    How does the agent make sure it never hears a full card number, a PIN or a one-time passcode, and what does it do when a caller starts to read one?

    A good answer: It interrupts, explains that it will never ask for those, and routes to keypad capture or a PCI-scoped flow; the transcript shows the redaction.

  6. 06

    What is the all-in cost per connected minute at 40,000 outbound calls a month, including telephony, speech and the language model, and how does unanswered-call time get billed?

    A good answer: A line-item breakdown, the treatment of ringing and voicemail time, and the monthly total at double the volume.

Frequently asked

Can an AI voice agent legally make debt collection calls?

In the United States a third-party collector using an AI agent is still bound by the FDCPA and Regulation F as published: the seven-in-seven call-frequency presumption, the 8 a.m. to 9 p.m. inconvenient-times presumption, the debt-collector disclosure and the written cease rule, plus TCPA consent for artificial-voice calls. Equivalent conduct rules exist in the United Kingdom (FCA CONC 7), India (RBI Fair Practices Code), the Philippines (BSP Circular 1160) and Australia (ASIC and ACCC RG 96). The agent must enforce these in code; a prompt instruction is not a control. This is informational, not legal advice.

What is the difference between an AI calling agent for a lender and a bank's servicing voice agent?

The calling agent is outbound: reminders, collections, fraud confirmations and onboarding follow-ups, where the hard parts are consent, hours, frequency and right-party verification. The servicing agent is inbound: balances, transactions, card blocks and instalment dates, where the hard parts are identity before disclosure and never hearing card numbers or passcodes. Many deployments need both, and the demo traps differ.

Can the agent complete KYC or approve a loan on its own?

It should not. The pattern that works is an agent that captures and reads back details and documents, flags mismatches and hands the identity decision to a video-KYC step, a branch or a person. In the European Union, systems that evaluate creditworthiness are listed as high-risk under the AI Act, which is one more reason to keep decisions out of the voice layer.