AI Voice Agents
What AI Voice Agents Still Can't Do (2026)
Most pages about voice agents are written by someone selling one. This one is the limits list: where agents fail, how to design around each failure, and where we tell our own clients to keep a human.
Last updated October 13, 2026 · by Scott A. Weber, Constant Concepts AI
Key takeaways
- →An agent should never be the last stop for a distressed caller, a legal or medical judgment, or a negotiation. Design the hand-off first.
- →Taking card numbers by voice drags the whole call path into PCI scope. Send callers to a hosted payment link instead.
- →Any voice AI that touches health information needs a business associate agreement that covers the AI layer specifically, not just the old phone product.
- →AI-generated voices on outbound calls fall under the TCPA (FCC, February 2024), and several states require you to say a bot is a bot.
We run Maya, our AI voice worker, in production, and we would rather you hear the limits from us than discover them on a live call. Agents are very good at the repetitive middle of a phone line: answering, qualifying, booking, and answering the same twenty questions. They are not good at everything. For the full picture of what they do well, start with the AI voice agents playbook. For what they cost, read how much an AI voice agent really costs.
| Limit | Design around it | Keep a human |
|---|---|---|
| Raw emotion, crisis, grief | Detect distress, stop the script, transfer warm | Always |
| Regulated intake (health, legal) | Logistics only, no advice, BAA in place | Anything clinical or legal |
| Multi-party negotiation | Gather terms, never concede or commit | Always |
| Heavy accents, noise, lag | Confirm key facts, fall back to text or callback | After two failed confirmations |
| Card numbers by voice | Hosted payment link or pay-by-keypad handoff | Never let the agent hear the digits |
| Facts outside its knowledge base | Grounded answers only, say 'I don't know' | Whenever it would have to guess |
Can an AI voice agent handle an upset or grieving caller?
Not as the last stop. An agent can stay calm and polite, but it cannot truly read the weight of a moment, and a scripted "I understand how you feel" to someone in crisis lands badly.
What goes wrong: a caller reporting a death, an injury, a fire, or a safety problem gets a cheerful intake script, or gets asked to repeat themselves after a transfer. Design around it: build distress triggers (specific words, raised volume, repeated "I need a person") that stop the script immediately, acknowledge briefly, and transfer warm with a written summary. For emergencies, tell the caller to hang up and dial 911, then route the alert to staff. Keep a human: funeral homes, urgent care, crisis lines, and any line where the typical caller is having a bad day should treat the agent as an after-hours message taker at most.
Can a voice agent do HIPAA or legal intake?
It can handle the logistics, but only if the legal plumbing is right, and it should never give advice. Scheduling a visit is a very different job from telling a caller what their symptoms mean or whether they have a case.
On the HIPAA side, HHS's October 2016 cloud computing guidance (via Hunton) says a covered entity needs a HIPAA-compliant business associate agreement with a cloud provider that handles electronic protected health information, and that the provider cannot claim to be a mere conduit. A voice agent that hears a patient name and a reason for the visit is handling that information. What goes wrong: a vendor's agreement covers its older call-center product but not the new AI layer, or the speech, language-model, and telephony vendors underneath each need their own coverage. Design around it: get the agreement in writing, ask which subprocessors touch audio and transcripts, collect the minimum needed, and keep clinical questions out of scope. Keep a human for triage, symptoms, medication questions, legal strategy, and anything where the caller will act on what they hear. This is not legal advice; ask your own counsel.
Can an AI agent negotiate or run a call with several people?
No, not reliably. Negotiation depends on authority, leverage, and reading the room, and group calls break turn-taking assumptions that voice systems are built on.
What goes wrong: the agent concedes a discount it was never authorized to give, talks over a second speaker, or attributes one person's statement to another. Design around it: make the agent an information gatherer. It records what each side wants, repeats the terms back, and promises a decision from a named person by a named time. Give it no pricing discretion beyond published rules. Keep a human for contract terms, disputes, collections, and any call with a lawyer, an insurer, or two decision-makers.
Do accents, background noise, and lag still break voice agents?
Yes, they degrade it, and the failures are quiet: the agent confidently hears the wrong thing. The fix is to verify what matters, not to hope the transcript is right.
What goes wrong: names, street addresses, email addresses, and phone numbers are the hardest items to transcribe, especially on a cell connection in a truck, a kitchen, or a crowd. Network delay adds awkward pauses and makes callers talk over the agent. Design around it: read back every critical field, spell unusual names, offer to text a link for an email or address, and cap retries. After two failed confirmations, offer a callback or a person instead of looping. Test with real recordings of your own callers, not only clean demo audio. Keep a human for callers who clearly cannot get through, and measure how often that happens from your transcripts. We have no universal accuracy number to quote, because it depends on your line and your callers.
Can an AI voice agent take a credit card over the phone?
It can, but you usually should not let it. Every system that hears or records a card number becomes part of your PCI compliance scope, and a transcript is a very easy place to leave one behind.
The PCI Security Standards Council's telephone guidance (an information supplement released in 2011, per Speech Technology) covers cardholder data in call recordings and boils down to: if you do not need it, do not store it, and if you must, keep it as briefly as possible and render it unreadable. That guidance predates AI agents, but the logic applies to every audio recording, transcript, and log your voice stack keeps. Design around it: have the agent send a hosted payment link by text or email, or hand the caller to a pay-by-keypad flow that masks the digits, so the agent never hears or logs them. Keep a human for refunds, disputes, and chargebacks. Confirm your exact obligations with your payment processor.
Do voice agents make things up, and what stops it?
Yes, language models can state wrong things fluently, and on a phone call there is no page to re-read. Guardrails and a human hand-off reduce the risk; no prompt removes it.
What goes wrong: the agent invents a price, a policy, a warranty term, or an appointment slot that does not exist, and the caller relies on it. Under Utah's law, a business also cannot blame the AI for a deceptive statement (more on that below). Design around it: answer only from an approved knowledge base, give the agent a clear "I don't know, let me connect you" path, make bookings through your real calendar system instead of the model's memory, and restrict tools to the few actions it should take. Then watch it: read a sample of real transcripts every week and fix what you find. A voice agent is maintained, not installed. Keep a human whenever the honest answer would be a guess. See how to onboard an AI worker for the review cadence.
What are the disclosure and calling rules for AI voices?
Federal rules treat AI voices as artificial voices on outbound calls, and a growing list of states require you to be honest that the caller is talking to software. Default to disclosing up front.
Federal. On February 8, 2024 the FCC issued a unanimous declaratory ruling that calls made with AI-generated voices are "artificial" under the Telephone Consumer Protection Act (FCC, 2024). As summarized by Wiley (2024), that means prior express consent (or prior express written consent) for covered outbound calls, caller identification, and an opt-out mechanism. It does not ban AI calls. It puts them under rules that have produced very large penalties. If you run an inbound agent only, the bigger exposure is the state disclosure laws below, but any outbound use needs a lawyer first.
Utah. The amended AI Policy Act requires disclosure that a consumer is dealing with AI when they clearly ask, and prominent disclosure at the outset for high-risk interactions such as collecting health or financial data or giving advice people rely on. Per Davis Polk's summary, the repeal date was extended to July 2027. Maine. A law signed June 12, 2025 requires clear and conspicuous notice when an AI chatbot (text or audio) could lead a reasonable consumer to think they are talking to a person, enforced by the attorney general under the state's Unfair Trade Practices Act, per Hogan Lovells. California. The 2018 bot law (SB 1001) bars using a bot to mislead people about its artificial identity to incentivize a sale; it is written around online communication, so check with counsel on how it applies to voice (WilmerHale, 2018).
We have not verified every state, and the list changes. Our rule is simple: the agent says it is an AI assistant in its first sentence, answers honestly if asked, and offers a person. That posture satisfies the strictest laws above and costs almost nothing in conversion. This is general information, not legal advice.
FAQ
Can an AI voice agent give legal or medical advice?
It should not. Use it for logistics: who is calling, what they need, when they are available, and which person should call back. Giving advice that a caller will rely on is a human, licensed job, and in Utah an advice or sensitive-data interaction triggers an up-front AI disclosure requirement.
Is it legal to use an AI voice on outbound calls?
It is legal but regulated. The FCC ruled in February 2024 that AI-generated voices count as an artificial or prerecorded voice under the TCPA, which means prior express consent rules apply to AI voice calls to consumers. Talk to a telecom attorney before any outbound campaign.
Do I have to tell callers they are talking to an AI?
Increasingly, yes. Maine requires clear and conspicuous disclosure where a chatbot could mislead a reasonable consumer into thinking it is a person, and Utah requires disclosure when a consumer sincerely asks. Disclosing up front is the safe default everywhere, and it is how we build Maya.
Can an AI voice agent take credit card payments?
Technically yes, but we advise against letting the agent hear card digits. Voice recordings and transcripts that contain card data pull the call path into PCI DSS scope. The cleaner design sends a secure hosted payment link by text or email and keeps the card data out of the agent entirely.
How do I stop an agent from making things up?
Ground it in an approved knowledge base, forbid answers outside it, give it an explicit 'I don't know, let me get someone' path, and review real transcripts every week. You reduce hallucination risk with design and monitoring. You do not eliminate it with a better prompt.
What should always go to a human?
Distress or emergencies, anything clinical or legal, negotiations, disputes, and any caller who asks for a person. Make the hand-off warm: the human should receive the summary so the caller never repeats themselves.
Design the hand-off before the script
In a 30-minute AI Readiness Briefing we map which of your calls an agent should own, which it should only collect information on, and which always go to a person.
Book an AI Readiness BriefingKeep reading: AI voice agents for business, what an AI voice agent costs, AI receptionist vs answering service vs hiring, AI for customer service, and how to onboard an AI worker.
Ready to stop doing this manually?
We map your workflows, deploy the right AI Worker, and guarantee the math pencils out before you sign.