Sure. Put the code for checking the IP address into the update_status() method of your payment module, and then it'll only show up when that IP address is used.

However, I would assert that if I were your customer and shopping online, I'd want to settle payment immediately and securely, not wait to tell you credit card info over the phone while you log in to my account as me.