How to organize the acceptance of payments for content from the personal account of a mobile operator when you click a button on the site?

Question

API

Hello.
The question is technical and partly legal.
I have a smartphone (can you imagine? .. :) ), mobile Internet is connected, I follow the link in the browser and money is withdrawn from my personal account with the mobile operator. There is such a thing - content-providing.
I want to sell subscriptions. How can I create a service so that my customers can pay for services in this way, simply by clicking on a link?
Technical difficulties that I foresee.
When connecting to an operator, a personal account is created in the operator's billing system. Access to this personal account, of course, is limited. In order to make any financial transactions with this account, there is a payment gateway, API. Data exchange with this gateway is arranged in a classical way using the secret component in the request. Obviously, otherwise any Vasya Pupkin could withdraw or deposit money into this account. So, in order for me to withdraw money from the account of any operator, I need to conclude an agreement with them so that my server can access their API to make transactions, of course, the operator must first give me a password (register me) and API documentation .
When I click on the link in the browser, money is taken from me. I call the operator, they tell me that we do not know who it is and what it is. But if an agreement is to be concluded with such content providers, then the operator must have information on them. And she is not. So... it turns out that the money is withdrawn in some way unknown to me.
Tell me - a stupid person - how to technically implement payment from the operator's personal account by simply clicking on a link on the Internet? Without authorization in the operator's personal account, without going to a secure page, without any consent, confirmation, without agreements with the operator?
As far as I know, it is legally and technically impossible. Or is it some kind of vulnerability in the operator's payment gateway.
How, when you click on some link on some site in the browser, the identifier of a particular user is transmitted in a particular billing system of a particular telecom operator (you need to know where and where to send money - logic)? Determined by IP - a request is sent to the Pentagon and George W. Bush issues data. How?
Pseudocode.
An example of the payment gateway.
The operator's payment gateway address is operator.com/payment.php
An example request for an operation looks like this:

POST[
"action" => "pay", // Necessary action
"account" => "111", // Subscriber's account number
"amount" => 50, // Amount to be paid
"recipient" => "mycompany", // My company ID for a specific operator
"secret" => md5(action.account.amount.recipient.crazyamazingsecretpassword) // Secret password
]

I want the subscriber to pay for my subscription service when clicking on the link. I create a form that sends data using the POST method to the operator's API and that's it. But... how can I find out on my website by the usual fact of visiting the subscriber's account number in the operator's network, ... okay, I know my ID, but it must be registered with the operator. Well, and most importantly, how can I find out the SECRET password and, in general, the request structure?
Once again, maybe there's something I don't know. Maybe they passed some kind of law on the sale of content, according to which the provider creates some kind of open API and allows them to be used without a contract. Maybe there are some technical features that I don't know about? I really want to start a service like this.

Answer 1

One-click subscription is called wap-click.
You will not be able to work directly with operators, because without a very large number of subscriptions/premium sms, it will simply be unprofitable. Renting a short number is expensive, and subscriptions also need a short number (the user simply does not see this number).
Work with content providers. There are many schemes, often very gray, when the user may not even realize that he has already subscribed. But for the wap click, I did not see a single gray scheme. Show an example of a site where a subscription occurs with a simple click of a button. This is possible only on a site that belongs to the operator, since the average person does not have the opportunity to automatically find out the subscriber's phone number.
Next, about the support service. Yes, they may not know "for what" the money was debited from you. But they cannot but know in whose favor this money has gone. But, in 99% of cases, if this is not the operator’s website, then the money goes to the aggregator, which rented a short number (usually not one, but a bunch of numbers) and distributes them for money to smaller aggregators (using prefixes). Further, these smaller aggregators can use these numbers on their websites, or they can further rent them. Therefore, it is often much faster to look at the support contacts on the site where you paid.