Notice of non-liability:
PayPal, Inc. is providing the information i n this document t o you “AS-IS” with all faults. PayPal, Inc. makes no warranties of any kind (whether express,
implied or statutory) with respect to the information co ntained herein. PayPal, Inc. assumes no liability for damages (whether direct or indirect), caused
by errors or omissions, or resulting from the use of this document or the information co ntained in this d ocument or resultin g from the application or use
of the product or service described herein. PayPal, Inc. reserves the right to make changes to any information herein without further notice.
Example American Express Phoenix Level 3 Transaction Parameter String . . . . . .108
First Data Merchant Services (FDMS) Nashville Purchasing Card Transaction Processing.108
First Data Merchant Services (FDMS) North Purchasing Card Transaction Processing . .110
This guide describes Payflow Pro, a high performance TCP/IP-based Internet payment
solution and how to use it to process credit card. Payflow Pro is pre-integrated with leading ecommerce solutions and is also available as a downloadable software development kit (SDK).
This guide explains how to integrate Payflow Pro into your website or application to process
credit card transactions over the Payflow payments gateway. It includes information and
special requirements for all supported processors. To process Express Checkout transactions
over the Payflow gateway, see the following Payflow guide: Express Checkout for Payflow Pro.
Intended Audience
This guide assumes that its readers:
z Are experienced web or application developers
z Have a background in payments services
Related Documentation
For additional Payflow information,
z See the Payflow documentation set on PayPal Developer Central. Go to
https://www.paypal.com/developer and click the Documentation link on the Library tab.
z For more examples and very current information, see the Payflow developer forums.
For additional help, see the Help Center at the following URL:
bin/helpweb?cmd=help.
How to Contact Customer Support
https://www.paypal.com/us/cgi-
For problems with transaction processing or your connection to the server, contact Customer
Support by opening a ticket on the under Contact Support tab at
Payflow Pro Developer’s Guide9
http://www.paypal.com/mts.
Revision History
Revision History
Revision history for Payflow Pro Developer’s Guide.
TABLE 1.1 Revision history
DateDescription
October 2009
z Added COMPANYNAME to reporting parameters.
z Added new appendix on additional processor informaion. Currently includes Moneris
processor information.
z Added Account Verification as a type of transaction that uses TRXTYPE=A and
AMT=0 to verify credit card information.
z Updated length of PARTNER, USER, and VENDOR to 64 characters.
June 2009 FDMS supports unreferenced credits.
April 2009Minor corrections for technical accuracy and clarification.
November 2008
z Moved coverage of Express Checkout to a separate new document, Express Checkout
for Payflow Pro.
z Removed coverage of the version 3 Payflow SDK, including test and live URLs.
z Changed Paymentech New Hampshire to Paymentech Salem (New Hampshire)
z Updated name of Nova processor to Elavon.
z Corrected format of TSYS ORDERDATE field
z Added more clarification to description of RESULT value 25
z Added more clarification of AMEX CAPN parameters in Appendix A
z Updated Table 4.1 , “Credit card transaction request parameters,” to reflect credit card
parameter descriptions only and moved the non-credit card parameter descriptions to
new tables in applicable sections of the chapter
z Minor corrections for technical accuracy and clarification
June 2008
Updated live and test URLs to reflect PayPal only: payflowpro.paypal.com live URL and
pilot-payflowpro.paypal.com test URL
Added Help Center URL to Preface.
Added Paymentech New Hampshire processor specification updates, including:
z CAPN requirements
z Support of card security code for American Express and Discover cards
z Support of Switch/Solo Maestro card
z Full authorization reversals
March 2008
Added PayPal processor responses.
Updated RESULT value 0 to include information about PayPal processor success with warning
message
February 2008Removed note that PayPal processor does not support non-referenced credits. It supports them now.
Updated test and live host URLs.
Added BILLTOCOUNTRY to Paymentech additional parameters.
Combined Telecheck transactions content into one appendix.
10Payflow Pro Developer’s Guide
T
ABLE 1.1 Revision history
DateDescription
Revision History
November 2007
Explains how merchant can determine what SDK version they are using.
Provides guidelines to merchant to determine if merchant is following American Express CAPN
requirements.
Explains more about VERBOSITY parameter.
Combines appendixes on performing Telecheck transactions with Telecheck responses.
Adds BIN ranges.
Explains how to eliminate TRANSSTATE 106 results.
Updates Index to include an alphabetical listing of all Payflow parameters cited in the guide.
Adds new transaction type N.
Includes other minor edits for technical accuracy.
Payflow Pro Developer’s Guide11
Revision History
12Payflow Pro Developer’s Guide
Introduction
1
About Payflow Pro
Payflow Pro is a high performance TCP/IP-based internet payment solution that resides on
your computer system. You can download it in the following forms from the SDKs and
Downloads page on PayPal Developer Central:
z .NET library
z Java library
z HTTPS interface
Using the HTTPS interface, you can build your own API by posting directly to the Payflow
servers via HTTPS.
NOTE:If you prefer to have Payflow Pro integration performed for you, you can obtain
Payflow Pro pre-integrated with leading e-commerce solutions. For a list of preintegrated solutions, see the Partner Solutions>Shopping Carts page on PayPal
Developer Central.
Payflow Pro Documentation
Payflow Pro is described in the Payflow Pro documentation set on PayPal Developer Central.
If you are implementing PayPal as a solution into your website, use this guide for general
guidelines and guidelines on integrating credit card processing. If you are also implementing
PayPal Express Checkout as a payment solution, see the Express Checkout for Payflow Pro
guide for integration details.
Host Addresses
Use the following host addresses for the Payflow V4 SDK:
z For live transactions, use payflowpro.paypal.com
z For testing purposes, use pilot-payflowpro.paypal.com
How Payflow Pro Works
Payflow Pro uses a client/server architecture to transfer transaction data from you to the
processing networks, and then returns the authorization results to you. Payflow Pro can
process real-time credit card transactions and other transaction types to most of the financial
processing centers in the United States.
Payflow Pro Developer’s Guide13
Introduction
Supported Processing Platforms
1. The Payflow client encrypts each transaction request using the latest Secure Sockets Layer
(SSL) encryption and establishes a secure link with the Payflow server over the internet.
2. The Payflow server, a multi-threaded processing environment, receives the request and
transmits it (over a secure private network) to the appropriate financial processing network
for real-time payment authorization.
3. The response (approved/declined, and so on) is received from the financial network and is
returned in the same session to the Payflow client.
4. The Payflow client completes each transaction session by transparently sending a
transaction receipt to the server before disconnecting the session.
The entire process is a real-time synchronous transaction. Once connected, the transaction is
immediately processed and the answer returned in about three seconds. Processing
transactions through the Payflow service does not affect or define the time periods of
authorizations, nor does it influence the approval or denial of a transaction by the issuer.
When integrating with Payflow Pro, you need only be concerned with passing all the required
data for transaction authorization. For transactions that you want to be settled (close batch),
the operation is handled by PayPal.
Supported Processing Platforms
Payflow Pro supports the following processing platforms:
z PayPal
z American Express Phoenix
z American Express Brighton
z First Data Merchant Services (FDMS) Nashville
z First Data Merchant Services (FDMS) North
z First Data Merchant Services (FDMS) South
z First Data TeleCheck
z Global Payments Central
z Global Payments East
z Merchant e-Solutions
z Elavon (Formerly Nova)
z Paymentech Salem (New Hampshire)
z Paymentech Tampa
z TSYS Acquiring Solutions (Formerly Vital Processing Services)
z Moneris Solutions
14Payflow Pro Developer’s Guide
Supported Payment Types
Payflow Pro supports multiple payment types in a single installation, including:
z Credit cards
z PayPal (supported by PayPal’s Express Checkout product)
z Pinless debit cards
z Electronic checks
z Check cards
z Purchasing cards (also referred to as commercial cards, corporate cards, procurement
cards, or business cards) Level II and Level III
z Automated Clearing House (ACH). For information on performing ACH transactions,
contact your PayPal Sales Representative at paymentsales@PayPal.com
Introduction
Supported Payment Types
Payflow Pro Recurring Billing Service
The Recurring Billing Service is a scheduled payment solution that enables you to
automatically bill your customers at regular intervals—for example, a monthly fee of $42 for
36 months with an initial fee of $129.
You enroll separately for the Payflow Pro Recurring Billing Service. Using Payflow Pro to
define and manage recurring transactions programmatically is described in Payflow Pro – Recurring Billing Service User’s Guide. You can manage Recurring Billing tasks in PayPal
Manager. See the online help for details.
About Security
It is your responsibility to protect your passwords and other confidential data and to
implement security safeguards on your website and in your organization, or to ensure that your
hosting company or internal web operations team is implementing them on your behalf.
IMPORTANT: To enable testing of Payflow Pro, PayPal pr ovides sample transaction scripts
that you customize with your Payflow Pro account information and
password. Because the password is initially stored in the text of the program,
it is vulnerable.
Do not use the test scripts in your production environment. To minimize
fraud, machine passwords should always be encrypted. You must write a
program that encrypts and decrypts your Payflow Pro account password.
Payflow Pro Developer’s Guide15
Introduction
About Security
16Payflow Pro Developer’s Guide
Downloading, Installing, and
2
Activating
The Payflow Software Development Kit (SDK) is a set of APIs to allow you to integrate
Payflow Pro with your application or website.
IMPORTANT: Full API documentation is included with each SDK.
Supported Platforms
Payflow Pro is available on all major web server platforms in a variety of formats to support
your integration requirements. Payflow Pro is available as a .NET or Java library, or you can
build your own API by posting directly to the Payflow servers via HTTPS.
Preparing the Payflow Client Application
Unless you are building your own API and using HTTPS to post to the servers, you will need
to obtain the Payflow SDK. Follow these steps.
1. Download the Payflow SDK.
From the SDKs and Downloads page linked to the Library tab on PayPal Developer
Central, download the Payflow SDK appropriate for your platform.
2. Extract the files to a local directory.
3. Configure your firewall.
If you have a stateful firewall, enable outbound traffic for SSL (port 443). The firewall
keeps state on the connection, and automatically permits the inbound response from
PayPal.
If you do not have a stateful firewall, enable inbound and outbound traffic for SSL (port
443). Outbound traffic permits the initial request by Payflow Pro, while inbound permits
the response from PayPal.
4. Read the Readme.txt file.
The Readme.txt file includes integration information and samples that illustrate how to use
the Payflow client application in your development environment.
Website Payments Pro Payflow Edition Developer’s Guide17
Downloading, Installing, and Activating
2
Activating Your Payflow Pro Account
Activating Your Payflow Pro Account
When you are ready to activate your Payflow Pro account to begin submitting live
transactions, follow these steps:
1. Log in to PayPal Manager at
2. Click ActivateYour Account and follow the on-screen instructions.
3. Change the URL within your web or desktop application to point to the live Payflow
servers. For details on Payflow server URLs, see “Host Addresses” on page 13.
https://manager.paypal.com.
18Website Payments Pro Payflow Edition Developer’s Guide
Simple Payflow Transaction
3
All Payflow transactions include a common set of required parameters. Additional parameters
are required depending on the transaction type.You can also provide many optional
parameters, depending on the results you want returned. For example, you can set the
VERBOSITY parameter to return PayPal processor-specific details rather than normalized
information if you are looking for this kind of information. VERBOSITY is described in detail
in Appendix D, “VERBOSITY: Viewing Processor-Specific Transaction Results.”
Transaction Requests
Request Contents
A transaction request includes:
z Connection parameters
z User parameters
z Parameters specific to the type of the transaction, such as a sale or an authorization
Data Modes for Sending
You can send parameter data in the transaction request to the Payflow server in either of two
modes:
z Name-value pair
z XMLPay
The examples in this guide are presented in name-value pair format. Name-value pair syntax
guidelines are described in “PARMLIST Syntax Guidelines” on page 20.
XMLPay is an XML syntax for payment requests and associated responses in a paymentprocessing network. Instead of using name-value pairs, you can send XML documents to the
Payflow server based on the XMLPay 2.0 schema. For details on XMLPay, see XMLPay Developer’s Guide in the Payflow Pro documentation on Developer Central.
Website Payments Pro Payflow Edition Developer’s Guide19
Simple Payflow Transaction
3
Transaction Requests
Connection Parameters
The connection parameters are described below. Pass them in the format and syntax required
by the Payflow SDK and programming language that you are using. See your integration
documentation for details.
TABLE 3.1 Connection para me ters
ParameterDescription
HOSTADDRESS(Required) Payflow host name. See “Host Addresses” on page 13 fo r details on host
addresses.
HOSTPORT(Required) Use port 443.
PARMLIST(Required) List of parameters that specify the payment information for the transaction.
The quotation marks “ ” at the beginning and end are required. The following is an
example:
The content of the PARMLIST varies by the type of transaction being processed. For
example, a Void transaction requires a different set of parameters than a Sale.
TIMEOUT(Required) Time-out period for the transaction. The minimum recommended time-out
value is 30 seconds. The client begins tracking from the time that it sends the
transaction request to the server.
PROXYADDRESS(Optional) Proxy server address. Use the PROXY parameters for servers behind a
firewall. Your network administrator can provide the val ues.
PROXYPORT(Optional) Proxy server port.
PROXYLOGON(Optional) Proxy server logon ID.
PROXYPASSWORD(Optional) Proxy server logon password.
PARMLIST Syntax Guidelines
Follow these guidelines when creating the PARMLIST:
z Spaces are allowed in values.
z Enclose the PARMLIST in quotation marks (“”).
z Do not place quotation marks (“”) within the body of the PARMLIST.
z Separate all name-value pairs in the PARMLIST using an ampersand (&).
z Set the VERBOSITY transaction parameter to MEDIUM (default is LOW) if you want the
response to return more detailed information. For details, see Appendix A, “Verbosity:
Viewing Processor-Specific Transaction Results.”
Using Special Characters in Values
Because the ampersand (&) and equal sign (=) characters have special meanings in the
PARMLIST, name-value pairs like the following examples are not valid:
20Website Payments Pro Payflow Edition Developer’s Guide
Simple Payflow Transaction
Sale Transaction Example
NAME=Ruff & Johnson
COMMENT1=Level=5
To use special characters in the value of a name-value pair, use a length tag. The length tag
specifies the exact number of characters and spaces that appear in the value. The following
name-value pairs are valid.
NAME[14]=Ruff & Johnson
COMMENT1[7]=Level=5
NOTE:Quotation marks (“ ”) are not allowed even if you use a length tag.
User Parameters
All Payflow Pro transactions require the user parameters described below.
TABLE 3.2 User parame ters
ParameterDescription
USER(Required) If you set up one or more additional users on the account, this value is the ID
of the user authorized to process transactions. If, however, you have not set up additional
users on the account, USER has the same value as VENDOR.
PARTNER(Required) The ID provided to you by the authorized PayPal Reseller who registered you
for the Payflow SDK. If you purchased your account directly from PayPal, use PayPal.
Limitations: Sixty-four alphanumeric, case-sensitive characters.
PWD(Required) The password that you defined while registering for the account.
Limitations: Six- to thirty-two alphanumeric, case-sensitive characters.
Sale Transaction Example
In addition to the connection and user parameters, each transaction type has additional
parameter requirements and can include a number of optional parameters as well. The
transaction parameters common to all processors are described in detail in Table 4.1 on
page 26.
To perform a credit card Sale transaction, you are required to pass the following parameters:
z TRXTYPE - The type of the transaction, such as S for Sale
z TENDER - The method of payment, such as C for credit card
z ACCT - The buyer’s credit card number
z AMT - The amount of the sale
Website Payments Pro Payflow Edition Developer’s Guide21
Simple Payflow Transaction
3
Formatting Transactions
z EXPDATE - The expiration date of the credit card
Typical Sale Transaction
The following is a typical request transaction string for a Sale transaction.
TRXTYPE=S&TENDER=C&USER=SuperM erchant&PWD=SuperU serPassword&PARTNER=P ayPal&
ACCT=5105105105105100&EXPDATE= 1209&AMT=99.06&COM MENT1=Reservation&FIR STNAME
=John&LASTNAME=Jones&STREET=12 3 Main St.&CITY=Sa n
Jose&STATE=CA&ZIP=123451234&BI LLTOCOUNTRY=US&CVV 2=123&CUSTIP=0.0.0.0
Note that, besides the required Sale transaction parameters, the above string includes other
Payflow Pro parameters typically included in a credit card Sale transaction request.
When the transaction completes, the Payflow server returns a response string made up of
name-value pair response parameters. If the transaction is successful, a RESULT value of 0 is
returned. The value of PNREF identifies the transaction in future requests, and RESPMSG is a
string indicating whether the transaction was approved. This is an example response to a credit
card Sale transaction request:
For details on how to format a transaction based on the above information, see the examples
and the supporting documentation provided with your SDK.
22Website Payments Pro Payflow Edition Developer’s Guide
Credit Card Transactions
4
This chapter describes how to plan for implementing credit card processing, presents the core
set of parameters used by all credit card processors, explains how to submit a transaction for
each transaction type supported, and describes other credit card features such as card security.
Credit Card Features
Payflow Pro supports the following transaction types for credit card processing:
z Sale
z Authorization (including Account Verification)
z Voice Authorization
z Delayed Capture
z Credit
z Void
z Inquiry
Payflow Pro also supports the following credit card features:
z Recharging to the same credit card (also called reference transactions)
z Securing credit card transactions by means of the Address Verification Service and card
security code validation
About Credit Card Processing
Credit card processing occurs in two steps — a real-time Authorization and a capture
(settlement) of the funds that were authorized. As discussed below, you perform these two
steps either as a single transaction or as two transactions, depending on your business model
For an Authorization, the server sends the transaction information to a credit card processor
who routes the transaction through the financial networks to the cardholder’s issuing bank.
The issuing bank checks whether the card is valid, evaluates whether sufficient credit exists,
checks values such as address verification service and card security codes (discussed below),
and returns a response: Approved, Declined, Referral, or other response values.
You receive the response a few seconds after you submit the transaction to the server. If an
Authorization is approved, the bank temporarily reserves the credit for the amount of the
transaction to prepare to capture (fulfill) the transaction. The hold on funds typically lasts for
about a week.
Payflow Pro Developer’s Guide23
Credit Card Transactions
About Credit Card Processing
NOTE:You cannot remove a hold on funds through the processing networks—you must
contact the card issuing bank to lift a hold early.
Capturing a transaction actually transfers the funds to your bank. At least once a day, PayPal
gathers all transactions that are flagged to be settled and sends them in a batch file to the
processor. The processor then char ges the issuing bank and transfers the funds to your bank. It
typically takes a few days before the money is actually available in your account, depending
on your bank.
Obtaining an Internet Merchant Account
T o accept credit cards over the internet, you need a special account called an Internet Merchant
Account. Your account provider or merchant (acquiring) bank works with a PayPal-supported
credit card processor, such as First Data, TSYS Acquiring Solutions (formerly Vital
Processing Services), or Paymentech. T o use Payflow Pro to accept live cred it cards, you must
provide certain details about your account to PayPal during the “Go Live” part of the
enrollment process.
NOTE:An Internet Merchant Account is a different type of merchant account than a merchant
account used for face-to-face (in-person) retail transactions. It has additional risks
associated with card-not-present (e-commerce) transactions. You need to obtain an
Internet Merchant Account even if you already accept credit cards at your location.
To apply for an Internet Merchant Account, contact your merchant (acquiring) bank.
Planning Your Payflow Pro Integration
In designing your Payflow Pro integration, you should evaluate the following:
z Whether to use a one-step or two-step transaction process. One-step: Submit a Sale
transaction, which performs the Authorization and (if successful) then flags the transaction
for settlement. T wo-step: P erform an Authorization-only transaction and then later perform
a Delayed Capture transaction. The Delayed Capture transaction can be for the same
amount as the original transaction or for a lower amount. (In the case of a split shipment,
you can perform a Delayed Capture transaction for the initial shipment and a reference
transaction for the final payment. These transaction types, plus the details of performing a
Delayed Capture for an amount higher than the original, are described in “Delayed Capture
Transaction: Capturing Transactions for Higher Amounts” on page 32.
According to card association rules, most physical goods merchants should use a two-step
process, since settlement should occur when the goods are fulfilled or shipped. A two-step
process is also useful if you want to evaluate information in the response, such as whether
the issuer verifies the billing address, and so on. Electronic goods merchants, who fulfill
the order immediately, can use the one-step process. Check with your Internet Merchant
Account provider for suggestions on the best method for you.
z Whether or how to use risk management tools such as address verification service and card
security code. For address verification service, if the data is submitted with the initial
transaction, the issuer checks the street address and/or the zip (postal) code against the
24Payflow Pro Developer’s Guide
Credit Card Transactions
About Credit Card Processing
billing address on file for the consumer. Address verification service is described on page
“Using Address Verification Service” on page 44.
Card security code refers to a 3- or 4-digit number that appears on the back of most credit
cards. On American Express, the number appears above and to the right of the embossed
card number. Card security code is known by other names, such as CVV2, depending on
the type of card. If card security code data is submitted, the issuer can notify you whether
the number matches the number assigned to the card. Card security code is described on
page “Card Security Code Validation” on page 46.
It may also be possible to implement additional safeguards yourself or to use a fraud
service. You might want to discuss risk management with your Internet Merchant Account
provider.
z Store information in your local database or use PayPal Manager report s to manage the data.
You may want to store shipping information in your system, or you may prefer to send the
information to PayPal with the transaction and report on it later.
NOTE:PayPal recommends that you do not store credit card numbers. If you must store
numbers, encrypt and store them behind properly configured firewalls. You should
also consider whether and how to use the merchant-defined fields COMMENT1 and
COMMENT2 to help tie reports to your orders/customers or to report on other
information about the transaction.
z If or how you want to integrate with other systems, such as order fulfillment, customer
service, and so on. You may wish to connect these systems directly to Payflow Pro for
capturing funds, issuing refunds/credits, and so on. Alternatively, you may prefer to
perform these steps manually using PayPal Manager. Either way, PayPal recommends that
you monitor transaction activity using PayPal Manager.
z You may want to discuss, with your Internet Merchant Acquirer, practices that help you to
obtain the most advantageous rates.
Complying With the E-commerce Indicator (ECI)
Some processors support a software flag called E-commerce Indicator (ECI) that indicates that
the associated transaction is an internet transaction. Payflow Pro complies with ECI basic
requirements for all supported processors.
If you use the Buyer Authentication Service, then the ECI values reflects the Authentication
status. See Payflow Pro Fraud Protection Servic e User’s Guide on Developer Central.
Handling Credit Card Type Information
The Payflow SDK does not check the credit card types that you are accepting. If a customer
uses a card type that you are not signed up to accept, the Payflow SDK responds with RESULT
value 23, “Invalid account number,” or the processor returns a message that the customer is
not signed up for the card type. For details on RESULT values and response messages, see
“RESULT Values and RESPMSG Text” on page 56. Optionally, you can provide your
Payflow Pro Developer’s Guide25
Credit Card Transactions
Parameters Used in Credit Card Transactions
customer with a list of the card types that you accept (in a drop-down list or menu, for
example).
To accept additional credit card types, you must contact your acquiring bank (the merchant
that holds your Internet Merchant Account) and ask them to add the card type to your acco unt.
Upon notification from your Acquirer that you can start accepting the card type, you must add
the card to your Payflow Pro account through PayPal Manager. See PayPal Manager online
help for details.
Parameters Used in Credit Card Transactions
All credit card processors accept the basic parameters described in the table below with one
exception: the PayPal processor does not support SWIPE.
Some processors require additional parameters described in the following sections:
z “Processors Requiring Additional Transaction Parameters” on page 65.
z “Additional Reporting Parameters” on page 143
TABLE 4.1 Credit card transaction request p arameters
ParameterDescription
TENDER(Required) The method of payment. Values are:
z A = Automated clearinghouse
z C = Credit card
z D = Pinless debit
z K = Telecheck
z P = PayPal
See the Payflow ACH Payment Service Guide for details on the Automated
clearinghouse tender type.
TRXTYPE(Required) Indicates the type of transaction to perform. Values are:
z S = Sale transaction
z C = Credit
z A = Authorization
z D = Delayed Capture
z V = Void
z F = Voice Authorization
z I = Inquiry
z N = Duplicate transaction
NOTE:A type N transaction represents a duplicate transaction (version 4 SDK or
HTTPS interface only) with a PNREF the same as the original. It appears only
in the PayPal Manager user interface and will never settle.
26Payflow Pro Developer’s Guide
Credit Card Transactions
Parameters Used in Credit Card Transactions
T
ABLE 4.1 Credit card transaction requ est parameters
ParameterDescription
ACCT(Required for credit cards) Credit card or purchase card number. For the Pinless debit
TENDER type, ACCT can be the bank account number.
Limitations: This value may not contain spaces, non-numeric characters, or dashes.
For example, ACCT=5555555555554444
EXPDATE(Required) Expiration date of the credi t card.
Limitations: mmyy format. For example, 1008 represents N ovember 2008.
AMT(Required) Amount (Default: U.S. based currency).
Limitations: Specify the exact amount to the cent using a decimal point—use 34.00,
not 34. Do not include comma separators—use 1199.95 not 1,199.95. Your processor
and/or Internet Merchant Account provider may stipulate a maximum amount.
10 numeric characters plus decimal.
COMMENT1(Optional) Merchant-defined value for reporting and auditing purposes.
Limitations: 128 alphanumeric characters.
COMMENT2(Optional) Merchant-defined value for reporting and auditing purposes.
Limitations: 128 alphanumeric characters.
CVV2(Optional) A code that is printed (not imprinted) on the back of a credit card. Used as
partial assurance that the card is in the buyer’s possession.
Limitations: 3 or 4 digits.
FIRSTNAME(Optional) Account holder's first name.
Limitations: 30 alphanumeric characters.
LASTNAME(Optional but recommended) Account holder's last name.
Limitations: 30 alphanumeric characters.
STREET(Optional) The cardholder’s street address (number and street name).
The STREET address is verified by the address verification service.
Limitations: 30 alphanumeric characters.
ZIP(Optional) Account holder’s 5- to 9-digit zip (postal) code.
Limitations: Nine characters maximum. Do not use spaces, dashes, or non-numeric
characters.
Payflow Pro Developer’s Guide27
Credit Card Transactions
Submitting Sale Transactions
T
ABLE 4.1 Credit card transaction requ est parameters
ParameterDescription
SWIPE(Required for card-pr esent transactions only) Used to pass the T rack 1 or Tr ack 2 data
(card’s magnetic stripe information) for card-present transactions. Include either
Track 1 or Track 2 data—not both. If T rack 1 is physically damaged, the point-of-sale
(POS) application can send Track 2 data inst ead .
The track data includes the disallowed = (equal sign) character. To enable you to use
the data, the SWIPE parameter must include a length tag specifying the number of
characters in the track data. For this reason, in addition to passing the track data, the
POS application must count the characters in the track data and pass that number.
Length tags are described in “Using Special Characters in Values” on page 20.
NOTE:SWIPE (card-present transactions) are not supported by the PayPal processor..
Limitations: Alphanumeric characters.
Submitting Sale Transactions
The Sale transaction (TRXTYPE=S) charges the specified amount against the account, and
marks the transaction for immediate fund transfer during the next settlement period. PayPal
submits each merchant’s transactions for settlement on a daily basis.
When To Use a Sale Transaction
A Sale transaction is best suited to businesses that provide immediate fulfillment for their
products or services. If your business does not provide immediate fulfillment, then credit card
association rules recommend that you use an Authorization and a Delayed Capture transaction.
For details, see “Submitting Authorization/Delayed Capture Transactions” on page 29. If you
need to recharge a credit card and you are not storing the credit card information in your local
database, you can perform a new reference transaction based on a Sale transaction.
Additional Parameters For Sale Transactions
To perform a Sale transaction, you are required to pass the following parameters:
z ACCT
z AMT
z EXPDATE
NOTE:The pinless debit tender type requires essentially the same parameters as a credit card
transaction. In addition to the values required by all transactions, you must pass values
for the ACCT and AMT parameters. The First Data Merchant Services (FDMS) South
processing platform supports Sale and Credit transactions only.
Note that, besides the required parameters that you pass in a Sale transaction, this string
includes other typical parameters. The COMMENT1 (and COMMENT2) fields help to track
transaction information. The customer’s street address (STREET) and zip should be passed to
use address verification service. CVV2 is needed for card security code validation. For details
on address verification service and card security code, see the following sections:
z “Submitting Card-Present (SWIPE) Transactions” on page 42
z “Card Security Code Validation” on page 46
An Authorization (TRXTYPE=A) transaction places a hold on the cardholder’s open-to-buy
limit, lowering the cardholder’s limit by the amount of the transaction. It does not transfer
funds.
A Delayed Capture (TRXTYPE=D) transaction is performed after an Authorization to capture
the original Authorization amount. The Delayed Capture is scheduled for settlement during the
next settlement period.
Because Visa and MasterCard regul ations prohibit capturing credit card transaction funds until
a product or service has shipped to the buyer, most processing networks implement an
Authorization transaction followed by a Delayed Capture transaction.
When To Use Authorization/Delayed Capture Transactions
If your business does not provide immediate fulfillment of products or services, you should
use this two-stage transaction solution, also known as Delayed Capture processing, because it
enables you to capture credit card transaction funds when your are ready to collect them.
NOTE:If you signed up for the PayPal processor with Fraud Protection Services, you must use
delayed capture processing for all sale transactions.
If your business provides immediate fulfillment and you are not using the PayPal processor
with Fraud Protection Services, you can use a simple Sale transaction instead. For details, see
“Submitting Sale Transactions” on page 28. If you need to recharge a credit card and you are
not storing the credit card information in your local database, you can perform a new reference
transaction based on a Sale. For details, see “Submitting Authorization/Delayed Capture
A typical parameter string passed in an Authorization transaction is the same as a Sale
transaction string. The only difference is that the TRXTYPE value is A in an Authorization.
TRXTYPE=A&TENDER=C&USER=SuperU ser&PWD=SuperUserP assword&VENDOR=SuperU ser&PA
RTNER=PayPal&ACCT=510510510510 5100&EXPDATE=1209& CVV2=123&AMT=99.00&
FIRSTNAME=John&LASTNAME=Smith& STREET=123 Main St.&CITY=S an Jose
&STATE=CA&ZIP=12345&COMMENT1=R eservation&INVNUM= 1234567890&PONUM=C123 45&CVV
2=567&VERBOSITY=MEDIUM
Required Delayed Capture Transaction Parameters
To perform a Delayed Capture transaction, you are required to pass the following parameter:
ORIGID
TABLE 4.2 Delayed Capture required parameter
ParameterDescription
ORIGID(Required by some transaction types) ID of the original transaction that is being
referenced. This ID is returned by the PNREF parameter and appears as the
Transaction ID in PayPal Manager reports.
Set ORIGID to the PNREF (T ransaction ID in PayPal Manager reports) value returned from the
original transaction. In addition, if the amount of the capture differs from the amount of the
Authorization, you also must pass a value for AMT.
Fields Copied From the Authorization Transaction into the Delayed Capture
Transaction
The following fields are copied from the Authorization transaction into the Delayed Capture
transaction (if they exist in the original transaction). If you provide a new value for any of
these parameters when submitting the Delayed Capture transaction, then the new value is
used. (Exceptions are ACCT, EXPDATE, and SWIPE. These parameters retain their original
values.)
T
ABLE 4.3 Fields copied from Autho rizatio n to Delay ed Captu re transac tion
ACCTAMTCITYCOMMENT1
COMMENT2COMPANYNAMEBILLTOCOUNTRYCUSTCODE
CUSTIPDUTYAM TEMAILEXPDATE
FIRSTNAMEMIDDLENAMELASTNAMEFREIGHTAMT
INVNUMPONUMSHIPTOCITYSHIPTOCOUNTRY
SHIPTOFIRSTNAMESHIPTOMIDDLENAMESHIPTOLASTNAMESHIPTOSTATE
SHIPTOSTREETSHIPTOZIPSTATESTREE T
SWIPETAXAMTPHONENUMTAXEXEMPT
ZIP
To perform the Delayed Capture:
1. Perform the Authorization transaction.
The Authorization transaction uses the same parameters as Sale transactions, except that
the transaction type is A.
The return data for an Authorization transaction is the same as for a Sale transaction. To
capture the authorized funds, perform a Delayed Capture transaction that includes the value
returned for PNREF, as described in Step 2 below.
Set ORIGID to the PNREF value returned in the original Authorization transaction response
string. (There is no need to retransmit the credit card or billing address information—it is
stored at PayPal.)
If the capture succeeds, the amount of the Capture is transferred to the merchant’s account
during the daily settlement process. If the capture does not succeed, the hold on the
cardholder’s open-to-buy is still in effect.
Delayed Capture Transaction: Capturing Transactions for Lower Amounts
You can perform a Delayed Capture transaction for an amount lower than the original
Authorization amount (useful, for example, when you make a partial shipment).
Delayed Capture Transaction: Capturing Transactions for Higher Amounts
You can perform a Delayed Capture transaction for an amount higher than the original
Authorization amount. The cardholder’s open-to-buy could be reduced by the sum of the
original Authorization-only amount and the final Delayed Cap ture amount.
Delayed Capture Transaction: Error Handling and Retransmittal
If an error occurs while processing a Delayed Capture transaction, it is safe to retry the capture
with values that allow the Payflow server to successfully process it. Conversely, if a capture
for a previous Authorization succeeds, subsequent attempts to capture it again will return an
error.
Submitting Account Verifications With TRXTYPE=A
Account Verification, also known as zero dollar Authorization (TRXTYPE=A), verifies credit
card information. While Account Verification and normal Authorization transactions are
submitted using TRXTYPE=A, Account Verification differs from Authorization in the following
ways:
z The AMT value is always 0. If any other amount is submitted, the transaction as a normal
Authorization that places a hold on the cardholder’s open-to-buy limit.
z Although the RESULT value returned is 0 (Approved), the RESPMSG value is Verified
instead of Approved.
32Payflow Pro Developer’s Guide
z The TRANSSTATE is set to 0 to prevent these types of transactions from being credited,
voided, or captured.
See “VERBOSITY: Viewing Processor-Specific Transaction Results” on page 139 for
details on TRANSSTATE.
NOTE:RESULT value 4, Invalid Amount, is returned if the processor does not support
Account Verifications.
When To Use Account Verification
Use an Account Verification to validate account numbers and other authentication elements
such as CVV2 and AVS. You can also use an Account Verification as a Reference T ransaction.
See “Recharging to the Same Credit Card (Reference Transactions)” on page 40.
A Voice Authorization (TRXTYPE=F) transaction is a transaction that is authorized over the
telephone from the processing network.
NOTE:The PayPal processor does not support Voice Authorization transactions.
When to Use a Voice Authorization Transaction
Some transactions cannot be authorized over the internet (for example, high dollar amounts)
and require manual authorization. These transactions generate RESULT value 13 and are called
Referral transactions.
In these situations, you contact the customer service department of your merchant bank and
provide the payment information as requested. If the transaction is approved, the bank
provides you with a voice Authorization code (AUTHCODE) for the transaction..
Once a Voice Authorization transaction has been approved, it is treated like a Sale transaction
and is settled with no further action on your part.
Payflow Pro Developer’s Guide33
Credit Card Transactions
Submitting Credit Transactions
Like Sale transactions, approved Voice Authorization transactions can be voided before
settlement occurs.
The Credit transaction (TRXTYP E=C) refunds the specified amount to the cardholder.
Required Credit Transaction Parameters
The required parameter data for a Credit transaction depends on the Allow non-referenced
credits security setting for your Payflow Pro account. A non-referenced credit is a Credit
transaction that does not use the credit card information from an existing transaction. Credit
card information must be supplied. As an example, Sally Smith calls you on the telephone to
cancel an order from your business. To refund her money, you credit her credit card by
submitting a non-referenced Credit transaction.
Guidelines and parameter requirements for Credit transactions differ depending on whether or
not non-referenced credits are allowed.
Non-Referenced Credits Not Allowed
When non-referenced credits are not allowed (the setting recommended by PayPal), then
Credit transactions are permitted only against existing Sale, Delayed Capture, and Voice
Authorization transactions. T o submit a Credit transa ction when non-re ferenced credits are not
allowed, you must pass the following parameter:
34Payflow Pro Developer’s Guide
Credit Card Transactions
Submitting Credit Transactions
ORIGID
TABLE 4.5 Credit required parameter
ParameterDescription
ORIGID(Required by some transaction types) ID of the original transaction that is being
referenced. This ID is returned by the PNREF parameter and appears as the
Transaction ID in PayPal Manager reports.
Set the value of ORIGID to the PNREF value returned for the original transaction. (PNREF is
displayed as the Transaction ID in PayPal Manager reports.) If you do not specify an amount,
then the amount of the original transaction is credited to the cardholder.
Non-Referenced Credits Allowed
When non-referenced credits are allowed, then Credit transactions are permitted in any
amount up to the transaction limit for the credit card account that you specify. To submit a
Credit transaction when non-referenced credits are allowed, you must pass values for the
following parameters:
z ACCT
z EXPDATE
z AMT
IMPORTANT: The default security setting for Payflow Pro accounts is Allow
non-referenced credits = No, so sending the ORIGID is the preferred method
for performing Credit transactions. Using the ACCT, EXPDATE, or AMT
parameters for such accounts leads to RESULT value 117 (failed the security
check). For information on setting the security settings, see PayPal Manager
online help.
Fields Copied From the Original Transaction into the Credit Transaction
The following fields are copied from the original transaction into the Credit transaction (if
they exist in the original transaction). If you provide a new value for any of these parameters
when submitting the Credit transaction, then the new value is used. (Exceptions are ACCT, EXPDATE, and SWIPE. These parameters retain their original values).
NOTE:These fields are not copied for referenced credits: TAXAMT, TAXEXEMPT, DUTYAMT,
FREIGHTAMT, and (for American Express only) DESC4.
NOTE:For processors that use the RECURRING parameter: If the RECURRING parameter was
set to Y for the original transaction, then the setting is ignored when forming the Credit
transaction.
T
ABLE 4.6 Fields copied from original to Credit trans action
ACCTAMTCITYCOMMENT1
Payflow Pro Developer’s Guide35
Credit Card Transactions
Submitting Void Transactions
T
ABLE 4.6 Fields copied from original to Credit trans action
COMMENT2COMPANYNAMEBILLTOCOUNTRYCUSTCODE
CUSTIPEMAILEXPDATEFIRSTNAME
MIDDLENAMELASTNAMEINVNUMPONUM
SHIPTOCITYSHIPTOCOUNTRYSHIPTOFIRSTNAMESHIPTOMIDDLENAME
SHIPTOLASTNAMESHIPTOSTREETSHIPTOSTATESHIPTOZIP
STATESTREETSWIPEPHONENUM
ZIP
Credit Transaction Parameter Strings
This is an example Credit transaction string (non-referenced credits not allowed):
The Void transaction (TRXTYPE=V) prevents a transaction from being settled.
As part of its internal process, PayPal makes reasonable effort to process authorization
reversals for void transactions for debit and credit cards if the processor supports it for a given
card type. Because the honoring of authorization reversals is ultimately decided by the bank or
issuer, there is no accurate way to determine if an individual bank or issuer has honored an
authorization reversal request.
NOTE:For more information on authorization reversals, see
http://en.wikipedia.org/wiki/Authorization_hold.
When To Use a Void Transaction
Follow these guidelines:
z You can void Delayed Capture, Sale, Credit, Authorization, and Voice Authorization
transactions. You cann ot void a Void transaction.
z You can only use a Void transaction on a transaction that has not yet settled. To refund a
customer’s money for a settled transaction, you must submit a Credit transaction.
36Payflow Pro Developer’s Guide
Credit Card Transactions
Submitting Void Transactions
Required Void Transaction Parameters
To submit a Void transaction, you must pass the following parameter:
ORIGID
TABLE 4.7 Void required parameter
ParameterDescription
ORIGID(Required by some transaction types) ID of the original transaction that is being
referenced. This ID is returned by the PNREF parameter and appears as the
Transaction ID in PayPal Manager reports.
Set ORIGID to the PNREF (Transaction ID in PayPal Manager reports) value returned for the
original transaction.
Fields Copied From the Original Transaction into the Void Transaction
The following fields are copied from the original transaction into the Void transaction (if they
exist in the original transaction). If you provide a new value for any of these parameters when
submitting the Void transaction, then the new value is used. (Exceptions are ACCT , EXPDATE,
and SWIPE. These parameters retain their original values).
NOTE:For processors that use the RECURRING parameter: If the RECURRING parameter was
set to Y for the original transaction, then the setting is ignored when forming the Void
transaction.
T
ABLE 4.8 Fields copied from orig inal Void transaction
ACCTAMTCITYCOMMENT1
COMMENT2COMPANYNAMEBILLTOCOUNTRYCUSTCODE
CUSTIPDUTYAM TEMAILEXPDATE
FIRSTNAMEMIDDLENAMELASTNAMEFREIGHTAMT
INVNUMPONUMSHIPTOCITYSHIPTOCOUNTRY
SHIPTOFIRSTNAMESHIPTOMIDDLENAMESHIPTOLASTNAMESHIPTOSTATE
SHIPTOSTREETSHIPTOZIPSTATESTREE T
SWIPETAXAMTPHONENUMTAXEXEMPT
ZIP
Example Void Transaction Parameter String
This is an example Void transaction parameter string:
An Inquiry transaction (TRXTYPE=I) returns the result and status of a transaction.
When To Use an Inquiry Transaction
You perform an inquiry using a reference to an original transaction—either the PNREF value
returned for the original transaction or the CUSTREF value that you specified for the original
transaction.
While the amount of information returned in an Inquiry transaction depends upon the
VERBOSITY setting, Inquiry responses mimic the verbosity level of the original transaction as
much as possible. For details on VERBOSITY, see “VERBOSITY: Viewing Processor -Specific
Transaction Results” on page 137.
Required Parameters When Using the PNREF
To submit an Inquiry transaction when using the PNREF, you must pass the following
parameter:
ORIGID
ABLE 4.9 Inquiry request required parameter when using the PNREF
T
ParameterDescription
ORIGID(Required by some transaction types) ID of the original transaction that is being
referenced. This ID is returned by the PNREF parameter.
Limitations: 12 case-sensitive alphanumeric characters.
Set ORIGID to the PNREF (Transaction ID in PayPal Manager reports) value returned for the
original transaction.
Inquiry Transaction Parameter Strin g Using the PNREF
This is an example Inquiry transaction parameter string using the ORIGID parameter set to the
PNREF value:
To submit an Inquiry transaction when using the CUSTREF, you must pass the following
parameter:
CUSTREF
Optionally , specify the STARTTIME and ENDTI ME parameters. The Inquiry transaction request
parameters are described below.
TABLE 4.10 Inquiry transa ction re quest p arameters when using the CUSTREF
ParameterDescription
CUSTREF(Required) Merchant-defined identifier for reporting and auditing purposes. Fo r
example, you can set CUSTREF to the invoice number.
You can use CUSTREF when performing Inquiry transactions. To ensure that you
can always access the correct transaction when performing an Inquiry , you must
provide a unique CUSTREF when submitting any transaction, including retries.
Limitations: 12 alphanumeric characters.
STARTTIME(Optional) For Inquiry transactions when using CUSTREF to specify the
transaction.
ENDTIME specifies the end of the time period during which the transaction
specified by the CUSTREF occurred. See STARTTIME. ENDTIME must be less than 30 days after STARTTIM E. An inquiry cannot be
performed across a date range greater than 30 days.
If you set ENDTIME, and not STARTTIME, then STARTTIME is defaulted to 30 days
before ENDTIME.
If neither STARTTIME nor ENDTIME is specified, then the system searches the last
30 days.
Limitations: 14 numeric characters in the format yyyymmddhhmmss.
ENDTIME(Optional) For Inquiry transactions when using CUSTREF to specify the
transaction.
ENDTIME specifies the end of the time period during which the transaction
specified by the CUSTREF occurred. See STARTTIME.
Limitations: 14 numeric characters.
IMPORTANT: If there are multiple transactions with a particular CUSTREF value, then the
Inquiry transaction returns only the last transaction with the specified
CUSTREF. So, to ensure that you can always access the correct transaction,
you must use a unique CUSTREF when submitting any transaction, including
retries.
Inquiry Transaction Parameter String Using the CUSTREF
This is an example Inquiry transaction parameter string using the CUSTREF:
Payflow Pro Developer’s Guide39
Credit Card Transactions
Recharging to the Same Credit Card (Reference Transactions)
Recharging to the Same Credit Card (Reference Transactions)
If you need to recharge a credit card and you are not storing the credit card information in your
local database, you can perform a reference transaction. A reference transaction takes the
existing credit card information that is on file and reuses it.
NOTE:The PNREF returned in the original transaction is valid for use in reference transactions
for a period of 12 months. A PNREF returned by Account Verification also can be used
in a reference transaction.
When To Use a Referen ce Transaction
Say that Joe Smith purchases a holiday gift from your web site store and requests that it be sent
by UPS ground service. That evening, Joe becomes concerned that the item might not arrive in
time for the holiday. So he calls you to upgrade shipping to second-day air. You obtain his
approval for charging an e xtra $10 for the upgr ade. In this situation, you can create a reference
transaction based on the original Authorization and charge an additional $10 to Joe’s credit
card without having to ask him again for his credit card information.
IMPORTANT: As a security measure, reference transactions are disallowed by default. Only
your account administrator can enable reference transactions for your
account. If you attempt to perform a reference transaction in an account for
which reference transactions are disallowed, RESULT value 117 is returned.
See PayPal Manager online help for instructions on setting reference
transactions and other security features.
Sale and Authorization transactions can make use of a reference transaction as a source of
transaction data. PayPal looks up the reference transaction and copies its transaction data into
the new Sale or Authorization transaction. With the exception of dollar amount data, which
triggers a filter if out of range, reference transactions are not screened by Fraud Protection
Services filters.
IMPORTANT: When PayPal looks up the reference transaction, neither the transaction being
referenced nor any other transaction in the database is changed in any way.
That is, a reference transaction is a read-only operation—only the new
transaction is populated with data and acted upon. No linkage is maintained
between the reference transaction and the new transaction.
You can also initiate reference transactions from PayPal Manager. See PayPal Manager online help for details.
40Payflow Pro Developer’s Guide
Credit Card Transactions
Recharging to the Same Credit Card (Referen ce Transactions)
Transaction Types that Can Be Used as the Original Transaction
You can reference the following transaction types to supply data for a new Sale or
Authorization transaction:
z Authorization (To capture the funds for an approved Authorization transaction, be sure to
perform a Delayed Capture transaction—not a Reference transaction.)
z Credit
z Delayed Capture
z Sale
z Voice Authorization (The Voice Authorization code is not copied to the new transaction)
z Void
Fields Copied From Reference Transactions
The following fields are copied from the reference transaction into the new Sale or
Authorization transaction (if they exist in the original transaction). If you provide a value for
any of these parameters when submitting the new transaction, then the new value is used.
TABLE 4.11 Fields copied from refere nce tra nsaction s
In this example, you authorize an amount of $100 for a shipment and charge $66 for the first
partial shipment using a normal Delayed Capture transaction. You charge the $34 for the final
part of the shipment using a reference transaction to draw credit card and shipping address
information from the initial Authorization transaction.
This example procedure creates a reference transaction:
Payflow Pro Developer’s Guide41
Credit Card Transactions
Submitting Card-Present (SWIPE) Transactions
1. Submit the initial transaction, such as an Authorization.
You use an Authorization transaction for the full amount of the purchase of $100 as shown
in this transaction request:
NOTE:The PNREF returned in the original transaction is valid for use in reference
transactions for a period of 12 months.
2. Capture the authorized funds for a partial shipment of $66.
When you deliver the first $66 worth of product, you use a normal Delayed Capture
transaction to collect the $66. Set ORIGID to the value of PNREF in the original
Authorization as in this transaction request (See “Required Delayed Capture Transaction
3. Submit a new Sale transaction or Authorization/Delayed Capture tr ansaction of $34 for the
rest of the shipment.
Once you have shipped the remainder of the product, you can collect the remaining $34 in
a Sale transaction that uses the initial Authorization as a reference transaction. (This is a
Sale transaction because only one Delayed Capture transaction is allowed per
Authorization.) This is the Sale transaction request:
Payflow Pro supports card-present transactions (face-to-face purchases).
NOTE:SWIPE (card-present) transactions are not supported by the PayPal processor.
Follow these guidelines to take advantage of the lower card-present transaction rate:
z Contact your merchant account provider to ensure that they support card-present
transactions.
z Contact PayPal Customer Service to request having your account set up properly for
accepting and passing swipe data.
42Payflow Pro Developer’s Guide
z If you plan to process card-present as well as card-not-present transactions, set up two
separate Payflow Pro accounts. Request that one account be set up for card-present
transactions, and use it solely for that purpose. Use the other for card-not-present
transactions. Using the wrong account may result in downgrades.
z A Sale is the preferred method to use for card-present transactions. Consult
with your acquiring bank for recommendations on other methods.
Supported Processing Platforms
PayPal is certified to submit card-present transactions for the following processing platforms:
z American Express Phoenix
z First Data Merchant Services (FDMS) Nashville
z First Data Merchant Services (FDMS) North
z First Data Merchant Services (FDMS) South
z Global Payments Central
z Global Payments East
Credit Card Transactions
Submitting Card-Present (SWIPE) Transactions
z Merchant e-Solutions
z Elavon (Formerly Nova)
z Paymentech Salem (New Hampshire)
z Paymentech Tampa
z TSYS Acquiring Solutions
Card-present Transaction Syntax
Use the SWIPE parameter to pass the Track 1 or Track 2 data (the card’s magnetic stripe
information). Include either Track 1 or Track 2 data—not both (up to 80 alphanumeric
characters). If Track 1 is physically damaged, the POS application can send Track 2 data
instead.
The track data includes the disallowed = (equal sign) character. To enable you to use the data,
the SWIPE parameter must include a length tag specifying the number of characters in the
track data. For this reason, in addition to passing the track data, the POS application must
count the characters in the track data and pass that number. Length tags are described in
“Using Special Characters in Values” on page 20. The length tag in the following example is
[40].
Do not include the ACCT or EXPDATE parameters in card-present transactions, as this data is
included in the SWIPE value.
This is an example card-present transaction parameter string:
A purchasing card (also referred to as a commercial card, co rporat e card , procure men t card or
business card) is a credit card that is issued at the request of an employer . It is usually reserved
for business-related charges. The card issuer provides specialized reporting for this card type
so the employer can monitor the use of the card. There is no method for determining whether a
card is a purchase card or a commercial card based on the card number.
To obtain the best bank interchange rates for commercial cards, you must pass specific
additional transaction information. Commercial card support and parameters vary from
processor to processor. See“Submitting Purchasing Card Level 2 and Level 3 T ransactions” on
page 97.
NOTE:Purchasing card transactions are not supported by the PayPal processor.
Using Address Verification Service
To qualify for the lowest bank rate, you must pass address verification service information—
street address and ZIP (postal) code.
Address verification service compares the submitted billing street address and zip code with
the values on file at the cardholder’s bank. The response includes values for AVSADDR and
AVSZIP: Y, N, or X for the match status of the customer’s street address and zip code.
Y = match, N =nomatch, X = cardholder’s bank does not support address verification service.
The address verification service result is for advice only. Banks do not decline transactions
based on the address verification service result—the merchant makes the decision to approve
or decline a transaction. Address verification service is supported by most US banks and some
international banks.
NOTE:Address verification service checks only for a street number match, not a street name
match, so 123 Main Street returns the same response as 123 Elm Street.
The international address verification service (IAVS) response indicates whether address
verification service response is international (Y), USA (N), or cannot be determined (X).
Processing Platforms Supporting Address Verification Service
TABLE 4.12 Processing plat forms supportin g Address Verification Service
American
Processing Platform
American Express PhoenixX———
44Payflow Pro Developer’s Guide
ExpressDiscoverMaster CardVisa
Credit Card Transactions
Example Address Verification Service Request Parameter List
T
ABLE 4.12 Processing plat forms suppo rting Address Verification Service
American
Processing Platform
American Express BrightonX———
FDMS NashvilleXXXX
FDMS NorthXXXX
FDMS SouthXXXX
Global Payments CentralXXXX
Global Payments EastXXXX
Merchant e-SolutionsXXXX
Elavon (formerly Nova)XXXX
ExpressDiscoverMaster CardVisa
Paymentech Salem (New
Hampshire)
Paymentech TampaXXXX
TSYS Acquiring Solutions
(formerly Vital Processing
Services)
XXXX
XXXX
See your processor’s information in “Processors Requiring Additional Transaction
Parameters” on page 65 for information on their handling of address verification service.
Example Address Verification Service Request Parameter List
This example request include the address verification service request parameters STREET and
ZIP:
The card security code is a 3- or 4-digit number (not part of the credit card number) that is
printed on the credit card. Because the card security code appears only on the card and not on
receipts or statements, the card security code provides some assurance that the physical card is
in the possession of the buyer.
This fraud prevention tool has various names, depending on the payment network. Visa calls it
CVV2 and MasterCard calls it CVC2. To ensure that your customers see a consistent name,
PayPal recommends use of the term card security code on all end-user materials.
IMPORTANT: To comply with credit card association regulations, do not store the CVV2
value.
On most cards, the card security code is printed on the back of the card (usually in the
signature field). All or part of the card number appears before the card security code (567 in
the example). For American Express, the 4-digit number (1122 in the example) is printed on
the front of the card, above and to the right of the embossed account number. Be sure to
explain this to your customers.
FIGURE 4.1 Card secu rity cod e
Processing Platforms and Credit Cards Supporting Card Security Code
NOTE:You need to contact American Express to be set up to accept their CID card security
To test your application, direct all transactions to the host address for testing. For details, see
“Host Addresses” on page 13. Transactions directed to this URL are processed through
PayPal’s simulated payment network, enabling you to test the configuration and operation of
your application or storefront — no money changes hands. (You must activate your account
and configure your application for live transactions before accepting real orders.)
Testing Guidelines
The following are testing guidelines:
z While testing, use only the credit card numbers listed in this chapter. Other numbers
produce an error.
z Expiration Date must be a valid date in the future (use the mmyy format).
z To view the credit card processor that you have selected for testing, see Account Info >
Processor Info in PayPal Manager.
Credit Card Numbers Used for Testing
Use the following credit card numbers for testing. Any other card number produces a general
failure.
TABLE 5.1 Test credit card numbers
American Express378282246310005
American Express371449635398431
American Express Corporate378734493671000
Diners Club30569309025904
Diners Club38520000023237
Discover6011111111111117
Discover6011000990139424
JCB3530111333300000
JCB3566002020360505
MasterCard5555555555554444
NOTE:Even though this number has a different character count than the
other test numbers, it is the correct and functional number.
Result Values in Responses
This section describes the result value responses that you receive.
Testing Result Values in Responses
You can use the amount of the transaction to generate a particular result value. The table below
lists the general guidelines for specifying amounts to submit in requests.
T
ABLE 5.2 Results generated by the amount submitted
AmountResult
$0 – $1000RESULT value 0 (Approved)
$1001 – $2000Certain amounts in this range will return specific PayPal results, and can be generated
by adding $1000 to that RESULT value. For example, for RESULT value 13 (Referral),
submit the amount 1013.
If the amount is in this range but does not correspond to a PayPal result supported by
this testing mechanism, RESULT value 12 (Declined) is returned
$2001+RESULT value 12 (Declined)
RESULT Values Returned Based on Transaction Amount
This table lists the RESULT values that you can generate using the amount of the transaction.
To generate a specific code, submit an amount of 1000 plus the code number (for example,
submit an amount of 1013 for a result code of 13).
T
ABLE 5.3 Result values supporting the amount con trol
Processing PlatformRESULT Values Available for Testing
American Express Phoenix
American Express Brighton
50Payflow Pro Developer’s Guide
0, 12, 13, 104, 1000
Credit Card Testing
RESULT Values Returned Based on Transaction Amount
T
ABLE 5.3 Result values supporting the amount con trol
Processing PlatformRESULT Values Available for Testing
Elavon (Formerly Nova)0, 12, 13, 104
First Data Merchant Services Nashville0, 12, 13, 104
First Data Merchant Services North0, 4, 5, 12, 13, 23, 24,114, 1000
First Data Merchant Services South0, 12, 13, 104
Global Payments Central0, 4, 5, 8, 12, 13, 23, 24, 104, 111, 114, 1000
Global Payments East0, 4, 5, 12, 13, 23, 24, 30, 100, 104, 114, 1000
Paymentech Salem (New Hampshire)0, 12, 13, 104
Paymentech Tampa0, 3, 4, 5, 12, 13, 23, 24, 1000
TSYS Acquiring Solutions (Formerly Vital Processing
Services)
0, 4, 12, 13, 23, 104, 114, 1000
Alternative Methods for Generating Specific RESULT Values
The table below shows another method for obtaining RESULT values. Non-zero RESULT
values from processors are not returned by the servers, and therefore cannot be simulated
using the amount. In some cases, you may get certain results using the RESULT value plus
1000 even though this table suggests another means of obtaining the RESULT value.
T
ABLE 5.4 Obtaining RESULT value
RESULTDefinitionHow to test using Payflow Pro
0ApprovedUse an AMOUNT of $1000 or less
For all Processors except Global Payments Central (MAPP) and FDI
Credit (C) and Force (F) transactions will always be approved
regardless of dollar amount or card number
1User authentication failedUse an invalid PWD
2Invalid tenderUse an invalid TENDER, such as G
3Invalid transaction typeUse an invalid TRXTYPE, such as G
4Invalid amountUse an invalid AMOUNT, such as –1
5Invalid merchant
information
7Field format errorSubmit a Delayed Capture transaction with no ORIGID
12DeclinedUse the AMOUNT 1012 or an AMOUNT of 2001 or more
13ReferralUse the AMOUNT 1013
Payflow Pro Developer’s Guide51
Use the AMOUNT 1005 - Applies only to the following processors:
Global Payments East and Central, and American Express
Credit Card Testing
RESULT Values Returned Base d on Transaction Amount
T
ABLE 5.4 Obtaining RESULT value
RESULTDefinitionHow to test using Payflow Pro
19Original transaction ID not
Submit a Delayed Capture transaction with an invalid ORIGID
found
22Invalid ABA numberApplies only to ACH transactions – submit an invalid ABA number
(8 digits)
23Invalid account numberSubmit an invalid account number, for example,
000000000000000
24Invalid expiration dateSubm it an invalid expiration date, for example, 0298
25Transaction type not
mapped to this host
(Processor)
Submit a transaction for a card or tender you are not currently set up
to accept, for example, a Diners card if you aren’t set up to accept
Diners
29Invalid XML documentPass a bad XML document (XMLPay users only)
30Duplicate TransactionUse the AMOUNT 1030 - Only applies to Global Payments East and
Central processors
50Insufficient funds availableUse the AMOUNT 1050 - Only applies to Paymentech
99General errorUse the
100Invalid transaction returned
from host (Processor)
Use the AMOUNT 1100. Only applies to Global Payments East and
Central
AMOUNT 1099 - Only applies to Global Payments East
101Time-out value too smallSet timeout value to 1
103Error reading response from
Use the AMOUNT 1103
host (Processor)
104Timeout waiting for
Use the AMOUNT 1104
processor response
105Credit errorAttempt to credit an authorization
108Void errorAttempt to void a captured authorization
111Capture errorCapture an Authorization transaction twice or attempt to capture a
transaction that is not an Authorization transaction
112Failed AVS checkYou cannot generate this RESULT value by subm itting an amount of
1112, but must submit a value for Address Verification Servicethat
will fail In production, this error occurs only if your account is
configured by PayPal customer service to use the “AVS Deny”
feature
113Cannot exceed sales capApplies to ACH transactions only
114CVV2 MismatchUse the AMOUNT 1114. Only applies to TSYS Acquiring Solutions,
Merchant e-Solutions, and Global Payments East and Central
processors
52Payflow Pro Developer’s Guide
Testing Address Verification Service
T
ABLE 5.4 Obtaining RESULT value
RESULTDefinitionHow to test using Payflow Pro
Credit Card Testing
1000Generic Host (Processor)
Error
Use the AMOUNT 2000 - Does not apply to Elavon (formerly Nova),
American Express, or Global Payments East processors
Testing Address Verification Service
The Payflow testing server simulates Address Verification Service by returning a value for
AVSADDR based on the first three characters of the submitted value for STREET.
The testing server returns a value for AVSZIP based on the submitted ZIP value as shown in
the table.
If STREET starts with 667 or higher or begin s with a non-numeric character, then the simulator
returns AVSADDR=X, AVSZIP=X.
T
ABLE 5.5 Testing AVSADDR
Submitted Value for STREETExample STREET ValueAVSADDR Result
000-33324285 ElmY
334-66649354 MainN
667 or higher or begins with a non-numeric
character
79232 MapleX
T
ABLE 5.6 Testing AVSZIP
Submitted Value for ZIPExample ZIP ValueAVSZIP Result
00000-5000000382Y
50001-9999994303N
Any value (if street address is 667 or higher or
begins with a non-numeric character)
STREET=79232 Maple, ZIP=20304X
Testing Card Security Code
If you submit a value for the card security code, the cardholder’s bank returns a
Yes / No / Not Supported (Y / N / X) response on whether the value matches the number on
file at the bank. Card security code is described in “Card Security Code Validation” on
page 46.
NOTE:Some processors will decline (RESULT value 12) a transaction if the card security code
does not match without returning a CVV2MATCH value. Test the results and check with
your processor to determine whether they support card security code checking.
Payflow Pro Developer’s Guide53
Credit Card Testing
Testing Address Verification Service
For the testing server, the first thre e ch aracters of the CVV2 value determine the CVV2MATCH
result, as shown here.
TABLE 5.7 Testing CVV2MATCH
CVV2 ValueCVV2MATCH Value
000Y
001-300Y
301-600N
601 or higherX
54Payflow Pro Developer’s Guide
Responses to Transaction
6
Requests
When a transaction finishes, the Payflow server returns a response string made up of namevalue pairs. This is an example response string.
Contents of a Response to a Credit Card Transaction Request
The table below describes values that can be returned in response strings
TABLE 6.8 Transaction response values
FieldDescription
PNREFPayflow Transaction ID, a unique number that identifies the transaction.
Character length and limitations: 12 alphanumeric characters
PPREFUnique transaction ID of the payment.
Character length and limitations: 17-character string
RESULTThe outcome of the attempted transaction. RESULT=0 means the
transaction was approved.
NOTE:For Account Verification transactions, RESULT=0 with
RESPMSG=Verified means a zero dollar authorization has been
successfully performed.
Any other value for RESULT indicates a decline or error.
Character length and limitations: variable length, numeric
CVV2MATCHResult of the card security code (CVV2) check. The issuing bank may
decline the transaction if there is a mismatch. In other cases, the
transaction may be approved despite a mismatch.
Character length and limitations: 1 alpha character (Y, N, X, or no
response)
RESPMSG The response message returned with the transaction result. Exact wording
varies. Sometimes a colon appears after the initial RESPMSG followed by
more detailed information.
NOTE:For Account Verification transactions, RESULT=0 with
RESPMSG=Verified means a zero dollar authorization has been
successfully performed.
Character length and limitations: variable, alphanumeric characters
Website Payments Pro Payflow Edition Developer’s Guide55
Responses to Transaction Requests
6
Contents of a Response to a Credit Card Transaction Request
T
ABLE 6.8 Transaction response values
FieldDescription
AUTHCODE Returned for Sale, Authorization, and Voice Authorization credit card
transactions. AUTHCODE is the approval code obtained over the telephone
from the processing network.
AUTHCODE is required when submitting a Force (F) transaction.
Character length and limitations: 6 alphanumeric characters
AVSADDR Address Verification Service address response returned if you are using
Address Verification Service. Address Verification Service address
responses are for advice only. This process does not affect the outcome of
the authorization.
Character length and limitations: 1 alpha character (Y, N, X, or no
response)
AVSZIP Address Verification Service address response returned if you are using
Address Verification Service. Address Verification Service address
responses are for advice only. This process does not affect the outcome of
the authorization.
Character length and limitations: 1 alpha character (Y, N, X, or no
response)
IAVS International Address Verification Service address responses may be
returned if you are using Address Verification Service. IAVS responses are
for advice only. This value does not affect the outcome of the transaction.
Indicates whether Address Verification Service response is international
(Y), US (N), or cannot be determined (X). Client version 3.06 or later is
required.
Character length and limitations: 1 alpha character (Y, N, X, or no
response)
PROCAVSAddress Verification Service response from the processor when you use
Address Verification Service and send a VERBOSITY request parameter
value of MEDIUM.
Character length and limitations: 1 character
PROCCVV2 CVV2 response from the processor when you send a VERBOSITY request
parameter value of MEDIUM.
Character length and limitations: 1 character
CORRELATIONIDValue used for tracking this Direct Payment transaction.
Character length and limitations: 13 alphanumeric characters
AMEXID
Unique transaction ID returned when VERBOSITY=MEDIUM or
VERBOSITY=HIGH for tracking American Express CAPN transactions.
NOTE:American Express CAPN transactions only: used by merchants
who authorize transactions through the payflow gateway but settle
through a third-party solution.
Character length and limitations: 15 numeric characters
56Website Payments Pro Payflow Edition Developer’s Guide
Responses to Transaction Requests
BALAMT Response Parameter and Stored Value Cards
T
ABLE 6.8 Transaction response values
FieldDescription
AMEXPOSDATA Value returned when VERBOSITY=MEDIUM or VERBOSITY=HIGH..
Character length and limitations: 12 alphanumeic characters
BALAMT Response Parameter and Stored Value Cards
BALAMT is a parameter that may be returned by transactions meeting Card Acceptance
Processing Network (CAPN) requirements when that transaction involves a stored value card.
Stored value cards typically are offered as “gif t” cards, allowing the user to spend any amount
up to the balance remaining on the card. BALAMT returns the ba lance on the card provided
that the card is active and is not compromised. If the card is used to purchase merchandise
exceeding the card balance, American Express declines the transaction and returns the card
balance in BALAMT.
For details on American Express CAPN request transaction parameters, see Appendix C,
“Submitting Purchasing Card Level 2 and Level 3 Transactions.”
6
American Express CAPN Stored Value Card Example
The Authorization request is for a purchase of 123.00.
The PNREF is a unique transaction identification number issued by PayPal that identifies the
transaction for billing, reporting, and transaction data purposes. The PNREF value appears in
the Transaction ID column in PayPal Manager reports.
z The PNREF value is used as the ORIGID value (original transaction ID) in Delayed
Capture transactions (TRXTYPE=D), Credits (TRXTYPE=C), Inquiries (TRXTYPE=I), and
Voids (TRXTYPE=V).
z The PNREF value is used as the ORIGID value (original transaction ID) value in reference
transactions for Authorization (TRXTYPE=A) and Sale (TRXTYPE=S).
NOTE:The PNREF is also referred to as the Transaction ID in PayPal Manager.
Website Payments Pro Payflow Edition Developer’s Guide57
Responses to Transaction Requests
6
RESULT Values and RESPMSG Text
PNREF Format
The PNREF is a 12-character string of printable characters, for example:
z VADE0B248932
z ACRAF23DB3C4
NOTE:Printable characters also include symbol s other than letters and numbers such as the
question mark (?). A PNREF typically contains letters and numbers only.
The PNREF in a transaction response tells you that your transaction is connecting to PayPal.
RESULT Values and RESPMSG Text
The RESULT parameter and value is the first name-value pair returned in the response string.
The value of RESULT indicates the overall status of the transaction attempt:
z A value of 0 (zero) indicates that no errors occurred and the transaction was approved.
NOTE:For Account Verification transactions, RESULT=0 with RESPMSG=Verified
means a zero dollar authorization has been successfully performed.
z A value less than 0 indicates that a communication error occurred. In this case, no
transaction is attempted.
z A value greater than 0 indicates a decline or error.
The response message (RESPMSG) provides a brief description for decline or error results.
RESULT Values for Transaction Declines or Errors
For non-zero RESULT values, the response string includes a RESPMSG name-value pair. The
exact wording of the RESPMSG (shown in bold) may vary. Sometimes a colon appears after the
initial RESPMSG followed by more detailed information.
TABLE 6.9 Payflow Transaction RESULT Values and RESPMSG Text
RESULTRESPMSG and Explanation
0Approved
NOTE:PayPal processor: Warning information may be returned that may be useful
to the request applicaton. See the PayPal API documentation on the PayPal
website for information on corrective actions.
58Website Payments Pro Payflow Edition Developer’s Guide
Responses to Transaction Requests
RESULT Values and RESPMSG Text
T
ABLE 6.9 Payflow Transaction RESULT Values and RESPMSG Text
RESULTRESPMSG and Explanation
1User authentication failed. Error is caused by one or more of the following:
z Login information is incorrect. Verify that USER, VENDOR, PARTNER, and
PASSWORD have been entered correctly. VENDOR is your merchant ID and USER
is the same as VENDOR unless you created a Payflow Pro user. All fields are case
sensitive.
z Invalid Processor information entered. Contact merchant bank to verify.
z "Allowed IP Address" security feature implemented. The transaction is coming
from an unknown IP address. See PayPal Manager online help for details on
how to use Manager to update the allowed IP addresses.
z You are using a test (not active) account to submit a transaction to the live
PayPal servers. Change the host address from the test server URL to the live
server URL
2Invalid tender type. Your merchant bank account does not support the following
credit card type that was submitted.
3Invalid transaction type. Transaction type is not appropriate for this transaction.
For example, you cannot credit an authorization-only transaction
6
4Invalid amount format. Use the format: “#####.##” Do not include currency
symbols or commas.
5Invalid merchant information. Processor does not recognize your merchant
account information. Contact your bank account acquirer to resolve this problem.
6Invalid or unsupported currency code
7Field format error. Invalid information entered. See RESPMSG
8Not a transaction server
9Too many parameters or invalid stream
10Too many line items
11Client time-out waiting for response
12Declined. Check the credit card number, expiration date, and transaction
information to make sure they were entered correctly. If this does not resolve the
problem, have the customer call their card issuing bank to resolve.
13Referral. Transaction cannot be approved electronically but can be approved with a
verbal authorization. Contact your merchant bank to obtain an authorization and
submit a manual Voice Authorization transaction.
19Original transaction ID not found. The transaction ID you entered for this
transaction is not valid. See RESPMSG
20Cannot find the customer reference number
22Invalid ABA number
Website Payments Pro Payflow Edition Developer’s Guide59
Responses to Transaction Requests
6
RESULT Values and RESPMSG Text
T
ABLE 6.9 Payflow Transaction RESULT Values and RESPMSG Text
RESULTRESPMSG and Explanation
23Invalid account number. Check credit card number and re-submit.
24Invalid expiration date. Check and re-submit.
25Invalid Host Mapping. You are trying to process a tender type such as Discove r
Card, but you are not set up with your merchant bank to accept this card type.
z You are trying to process a tender type such as Discover Card, but you are not
z Y o u are trying to proce ss an Express Checkout transaction when your account is
26Invalid vendor account. Login information is incorrect. Verify that USER,
VENDOR, P ARTNER, and P ASSWORD have been entered correctly . VENDOR is
your merchant ID and USER is the same as VENDOR unless you created a Payflow
Pro user. All fields are case sensitive.
27Insufficient partner permissions
set up with your merchant bank to accept this card type.
not set up to do so. Contact your account holder to have Express Checkout
added to your account.
28Insufficient user permissions
29Invalid XML document. This could be caused by an unrecognized XML tag or a
bad XML format that cannot be parsed by the system.
30Duplicate transaction
31Error in adding the recurring profile
32Error in modifying the recurring profile
33Error in canceling the recurring profile
34Error in forcing the recurring profile
35Error in reactivating the recurring profile
36OLTP Transaction failed
37Invalid recurring profile ID
50Insufficient funds available in account
51Exceeds per transaction limit
99General error. See RESPMSG.
100Transaction type not supported by host
101Time-out value too small
102Processor not available
103Error reading response from host
60Website Payments Pro Payflow Edition Developer’s Guide
Responses to Transaction Requests
RESULT Values and RESPMSG Text
T
ABLE 6.9 Payflow Transaction RESULT Values and RESPMSG Text
RESULTRESPMSG and Explanation
104Timeout waiting for processor response. Try your transaction again.
105Credit error. Make sure you have not already credited this transacti on, or th at this
transaction ID is for a creditable transaction. (For example, you cannot credit an
authorization.)
106Host not available
107Duplicate suppression time-out
108Void error. See RESPMSG. Make sure the transaction ID entered has not already
been voided. If not, then look at the Transaction Detail screen for this transaction to
see if it has settled. (The Batch field is set to a number greater than zero if the
transaction has been settled). If the transaction has already settled, your only
recourse is a reversal (credit a payment or submit a payment for a credit)
109Time-out waiting for host response
110Referenced auth (against order) Error
6
111Capture error. Either an attempt to capture a transaction that is not an
authorization transaction type, or an attempt to capture an authorization transaction
that has already been captured.
112Failed AVS check. Address and ZIP code do not match. An authorization may still
exist on the cardholder’s account.
113Merchant sale total will exceed the sales cap with current transaction. ACH
transactions only.
114Card Security Code (CSC) Mismatch. An authorization may still exist on the
cardholder’s account.
115System busy, try again la ter
116VPS Internal error. Failed to lock terminal number
117Failed merchant rule check. One or more of the following three failures occurred:
An attempt was made to submit a transaction that failed to meet the security
settings specified on the PayPal Manager Security Settings page. If the transaction
exceeded the Maximum Amount security setting, then no values are returned for
AVS or CSC.
AVS validation failed. The AVS return value should appear in the RESPMSG.
CSC validation failed. The CSC return value should appear in the RESPMSG
118Invalid keywords found in string fields
120Attempt to reference a failed transaction
121Not enabled for feature
Website Payments Pro Payflow Edition Developer’s Guide61
Responses to Transaction Requests
6
RESULT Values and RESPMSG Text
T
ABLE 6.9 Payflow Transaction RESULT Values and RESPMSG Text
RESULTRESPMSG and Explanation
122Merchant sale total will exceed the credit cap with current transaction. ACH
transactions only.
125Fraud Protection Services Filter — Declined by filters
126Fraud Protection Services Filter — Flagged for review by filters
IMPORTANT: RESULT value 126 indicates that a transaction triggered a fraud
RESULT value 126 is intended to give you an idea of the kind of transaction that is
considered suspicious to enable you to evaluate whether you can benefit from using
the Fraud Protection Services.
T o eliminate RESULT 126, tu rn the filters off.
For more information, see the fraud documentation for your payments solution.
filter. This is not an error, but a notice that the transaction is in a
review status. The transaction has been authorized but requires you
to review and to manually accept the transaction before it will be
allowed to settle.
127Fraud Protection Services Filter — Not processed by filters
128Fraud Protection Services Filter — Declined by merchant after being flagged
for review by filters
132Card has not been submitted for update
133Data mismatch in HTTP retry request
150Issuing bank timed out
151Issuing bank unavailable
200Reauth error
201Order error
600Cybercash Batch Error
601Cybercash Query Error
1000Generic host error. This is a generic message returned by your credit card
processor. The RES PMSG will contain more information describing the error.
1001Buyer Authentication Service unavailable
1002Buyer Authentication Service — Transaction timeout
1003Buyer Authentication Service — Invalid client version
1004Buyer Authentication Service — Invalid timeout value
1011Buyer Authentication Service unavailable
1012Buyer Authentication Service unavailable
62Website Payments Pro Payflow Edition Developer’s Guide
Responses to Transaction Requests
RESULT Values and RESPMSG Text
T
ABLE 6.9 Payflow Transaction RESULT Values and RESPMSG Text
RESULTRESPMSG and Explanation
1013Buyer Authentication Service unavailable
1014Buyer Authentication Service — Merchant is not enrolled for Buyer
Authentication Service (3-D Secure)
1016Buyer Authentication Service — 3-D Secure error response received. Instead of
receiving a PARes response to a Validate Authentication transaction, an error
response was received.
1017Buyer Authentication Service — 3-D Secure error response is invalid. An error
response is received and the response is not well formed for a Validate
Authentication transaction.
1021Buyer Authentication Service — Invalid card type
1022Buyer Authentication Service — Invalid or missing currency code
1023Buyer Authentication Service — merchant status for 3D secure is invalid
6
1041Buyer Authentication Service — Validate Authentication failed: missing or
invalid PARES
1042Buyer Authentication Service — Validate Authentication failed: PARES
format is invalid
1043Buyer Authentication Service — Validate Authentication failed: Cannot find
validation failed for PARES
1045Buyer Authentication Service — Validate Authentication failed: Mismatched
or invalid amount in PARES
1046Buyer Authentication Service — Validate Authentication failed: Mismatched
or invalid acquirer in PARES
1047Buyer Authentication Service — Validate Authentication failed: Mismatched
or invalid Merchant ID in PARES
1048Buyer Authentication Service — Validate Authentication failed: Mismatched
or invalid card number in PARES
1049Buyer Authentication Service — Validate Authentication failed: Mismatched
or invalid currency code in PARES
1050Buyer Authentication Service — Validate Authentication failed: Mismatched
or invalid XID in PARES
1051Buyer Authentication Service — Validate Authentication failed: Mismatched
or invalid order date in PARES
Website Payments Pro Payflow Edition Developer’s Guide63
Responses to Transaction Requests
6
RESULT Values and RESPMSG Text
T
ABLE 6.9 Payflow Transaction RESULT Values and RESPMSG Text
RESULTRESPMSG and Explanation
1052Buyer Authentication Service — Validate Authentication failed: This PARES
was already validated for a previous Validate Authentication transaction
RESULT Values for Communications Errors
A RESUL T value less than zero indicates that a communication error occurred. In this case, no
transaction is attempted.
A value of -1 or -2 usually indicates a configuration error caused by an incorrect URL or by
configuration issues with your firewall. A value of -1 or -2 can also be possible if the PayPal
servers are unavailable, or an incorrect server/socket pair has been specified. A value of -1 can
also result when there are internet connectivity errors. Contact customer support regarding any
other errors.
For information on firewall configuration, see Chapter 2, “Downloading, Installing, and
Activating.”
Details of the response message may vary slightly from that shown in the table, depending on
your SDK integration.
ABLE 6.10 Communications RESULT values
T
RESULTDescription
-1Failed to connect to host
-2Failed to resolve hostname
-5Failed to initialize SSL context
-6Parameter list format error: & in name
-7Parameter list format error: invalid [ ] name length clause
-8SSL failed to connect to host
-9SSL read failed
-10SSL write failed
-11Proxy authorization failed
-12Timeout waiting for response
-13Select failure
-14Too many connections
-15Failed to set socket options
-20Proxy read failed
64Website Payments Pro Payflow Edition Developer’s Guide
Responses to Transaction Requests
RESULT Values and RESPMSG Text
T
ABLE 6.10 Communications RESULT values
RESULTDescription
-21Proxy write failed
-22Failed to initia lize SSL certificate
-23Host address not specified
-24Invalid transaction type
-25Failed to create a socket
-26Failed to initialize socket layer
-27Parameter list format error: invalid [ ] name length clause
-28Parameter list format error: name
-29Failed to initialize SSL connection
-30Invali d timeout value
6
-31The certificate chain did not validate, no local certificate found
-32The certificate chain did not validate, common name did not match URL
-40Unexpected Request ID found in request
-41Required Request ID not found in request
-99Out of memory
-100Parameter list cannot be empty
-103Context initialization failed
-104Unexpected transaction state
-105Invalid name value pair request
-106Invalid response format
-107This XMLPay version is not supported
-108The server certificate chain did not validate
-109Unable to do logging
-111The following error occurred while initializing from message file: <Details of
the error message>
-113Unable to round and truncate the currency value simultaneously
Website Payments Pro Payflow Edition Developer’s Guide65
Responses to Transaction Requests
6
RESULT Values and RESPMSG Text
66Website Payments Pro Payflow Edition Developer’s Guide
This appendix lists both required and optional parameters supplementary to the common
parameter set.
In this Appendix
z “American Express” on page 67
z “First Data Merchant Services (FDMS) Nashville” on page 76
z “First Data Merchant Services (FDMS) South” on page 77
z “First Data Merchant Services (FDMS) North” on page 77
z “Elavon (Formerly Nova)” on page 79
z “Paymentech” on page 79
z “TSYS Acquiring Solutions” on page 83
American Express
In addition to the parameters in Table 4.1 , “Credit card transaction request parameters,”
American Express accepts the parameters described in this section. Parameters to meet
American Express Card Acceptance and Processing Network (CAPN) requirements are
described in Table A.1. American Express (legacy) platform parameters are described in
American Express Additional Credit Card Parameters (CAPN)
NOTE:You should start coding to the CAPN parameters if you want to be able to impact what
appears on AMEX statements and reports. With a few exceptions, most merchants in
the United States follow CAPN requirements; international merchants do not. If you
are not sure whether you should make the coding changes, contact Customer Service.
See “How to Contact Customer Support” on page 9 for contact information.
American Express Phoenix accepts the following parameters to meet CAPN requirements.
ABLE A.1American Express CAPN parameters (Continued)
ParameterDescriptionRequiredTypeLength
SHIPTOZIPShipping 5- to 9-digit ZIP (postal) code excluding
spaces, dashes, and non-numeric characters
Example: 951121737
SHIPTOPHONENUMShipping telephone numberNoString10
RECURRINGIdentifies the transaction as recurring. This value
does not activate PayPal’s Recurring Billing
Service APIs.
If the RECURRING parameter was set to Y for the
original transaction, then the setting is ignored
when forming Credit, Void, and Force
transactions.
If you subscribe to PayPal’s Fraud Protection
Services:
To avoid charging you to filter recurring
transactions that you know are reliable, the fraud
filters do not screen recurring transactions.
To screen a prospective recurring customer,
submit the transaction data using PayPal
Manager’s Virtual Terminal. The filters screen the
transaction in the normal manner. If the
transaction triggers a filter, then you can follow
the normal process to review the filter results.
NoAlpha-
numeric
NoAlpha-
numeric
Y or N
9
1
Location Transaction Advice Addendum Parameters
MERCHANTNAMEName of merchantNo
MERCHANTSTREETMerchant’s street address (number and street
name)
MERCHANTCITYMerchant’s city No
MERCHANTSTATEMerchant’s stateNo
MERCHANTCOUNTRYCODEMerchant’s numeric country code
Example:
USA: 840
MERCHANTZIPMerchant’s 5- to 9-digit ZIP (postal) code
excluding spaces, dashes, and non-numeric
characters
characters in length. The five character
length is designed to allow for future
expansion.
NoNumeric12
NoAlpha-
numeric
numeric
NoAlpha-
numeric
NoAlpha-
numeric
3
8
60
5
AIR-DESTINATIONDestination airport code for the first segment of
the trip; this is not necessarily the final
destination. For example, if a passenger flies from
STL to MIA with a layover at JFK, the destination
airport is JFK.
For a list of airport codes, see http://www.world-
ABLE A.1American Express CAPN parameters (Continued)
T
ParameterDescriptionRequiredTypeLength
AIRNUMBEROFCITIES
AIR-ROUTINGCITYnAirport codes of each city in this flight including
AIR-CARRIERnTwo character airline code for each unique airline
Number of unique cities in this trip including the
cities of origin and destination, where a maximum
value of 10 is allowed. For example, AIR-NUMBEROFCITIES is 3 for the fo llowing trip:
DEN to LAX
LAX to SFO
SFO to DEN
If not provided, this value is equal to the number
of AIR-ROUTINGCITYn parameters.
cities of origin and destination, where n is a value
from 1 to 10.
For a list of airport codes, see http://www.world-
ABLE A.1American Express CAPN parameters (Continued)
ParameterDescriptionRequiredTypeLength
Other
A
FIRSTNAMEAccount holder's first and last name. Note: Even
though the parameter name indicates only the first
name, this single parameter holds all of the
person's name information (both first and last
name, at a minimum).
LASTNAMEAccount holder's last name. NoAlpha-
INVNUMMerchant invoice number. The merchant invoice
number is used for authorizations and settlements
and, depending on your merchant bank, will
appear on your customer's credit card statement
and your bank reconciliation report. If you do not
provide an invoice number, the transaction ID
(PNREF) will be submitted.
ORDERDATEOrder date
For example, July 28, 2003 is 072803.
Format: mmddyy (with no slashes or dashes)
ORDERDATETIMEOrder time and date
Format is either
YYYY-MM-DD or
YYYY-MM-DD HH:MI:SS
(where HH is in 24-hour time).If the value does
not conform to one of the formats or if the date is
not valid (for example, 2004-17-35), then the
transaction is rejected with:
RESULT=7(SIG_FIELD_ERR)
RESPMSG=Invalid ORDERTIME
A truncated version of the ORDERTIME value (up
to 7 characters) overwrites any value provided by
ORDERDATE. If no value is provided, a NULL value
is stored.
NoAlpha-
numeric
numeric
No Alpha-
numeric
NoNumeric7
No19
13
13
9
SWIPEAllows Track 1 and Track 2 data to be passed to
enable a card-present transaction
NoAlpha-
numeric
80
American Express Additional Credit Card Parameters (Legacy)
In addition to the parameters in Table 4.1 , “Credit card transaction request parameters,”
American Express Phoenix accepts the following legacy parameters.
NOTE:Merchants in the United States follow the CAPN requirements and use the parameters
described in Table A.1; international merchants do not and instead use the legacy
parameters described in Table A.2. There are a few exceptions. If you are not sure,
contact Customer Service. See “How to Contact Customer Support” on pa ge 9 for
contact information.
TABLE A.2American Express legacy parameters
ParameterDescriptionRequiredTypeLength
DESCDescribes the transaction. NoAlpha-
numeric
DESC1Describes the transaction.NoAlpha-
numeric
DESC2Describes the transaction.NoAlpha-
numeric
DESC3Describes the transaction.NoAlpha-
numeric
DESC4Describes the transaction.NoAlpha-
numeric
FIRSTNAMEAccount holder's first and last name. Note: Even
though the parameter name indicates only the first
name, this single parameter holds all of the
person's name information (both first and last
name, at a minimum).
LASTNAMEAccount holder's last name. NoAlpha-
NoAlpha-
numeric
numeric
Brighton
40
Other
American
Express
platforms
23
40
40
40
40
13
13
INVNUMMerchant invoice number. The merchant invoice
number is used for authorizations and settlements
and, depending on your merchant bank, will
appear on your customer's credit card statement
and your bank reconciliation report. If you do not
provide an invoice number, the transaction ID
(PNREF) will be submitted.
ORDERDATESpecifi es an order date.
For example, July 28, 2003 is 072803.
Format: mmddyy (with no slashes or dashes)
ABLE A.2American Express legacy parameters (Continued)
ParameterDescriptionRequiredTypeLength
A
ORDERDATETIMESpecifies an order time and date.
Format is either
YYYY-MM-DD or
YYYY-MM-DD HH:MI:SS
(where HH is in 24-hour time).If the value does
not conform to one of the formats or if the date is
not valid (for example, 2004-17-35), then the
transaction is rejected with:
RESULT=7(SIG_FIELD_ERR)
RESPMSG=Invalid ORDERTIME
A truncated version of the ORDERTIME value (up
to 7 characters) overwrites any value provided by
ORDERDATE. If no value is provided, a NULL value
is stored
RECURRINGIdentifies the transaction as recurring. This value
does not activate PayPal’s Recurring Billing
Service APIs.
If the RECURRING parameter was set to Y for the
original transaction, then the setting is ignored
when forming Credit, Void, and Force
transactions.
If you subscribe to PayPal’s Fraud Protection
Services:
To avoid charging you to filter recurring
transactions that you know are reliable, the fraud
filters do not screen recurring transactions.
To screen a prospective recurring customer,
submit the transaction data using PayPal
Manager’s Manual Transactions page. The filters
screen the transaction in the normal manner. If the
transaction triggers a filter, then you can follow
the normal process to review the filter results.
No19
NoAlpha-
numeric
Y or N
1
SWIPEAllows Track 1 and Track 2 data to be passed to
In addition to the parameters in Table 4.1 , “Credit card transaction request parameters,”
FDMS Nashville accepts the following parameters:
TABLE A.3FDMS Nashville additional parameters
ParameterDescriptionRequiredTypeLength
INVNUMMerchant invoice number. The merchant invoice number is
used for authorizations and settlements and, depending on
your merchant bank, will appear on your customer's credit
card statement and your bank reconciliation report. If you
do not provide an invoice number, the transaction ID
(PNREF) will be submitted.
RECURRINGIdentifies the transaction as recurring. This value does not
activate PayPal’s Recurring Billing Service API.
If the RECURRING parameter was set to Y for the original
transaction, then the setting is ignored when forming
Credit, Void, and Force transactions.
If you subscribe to PayPal’s Fraud Protection Services:
T o avoid charging you to filter recurring transactions that
you know are reliable, the fraud filters do not screen
recurring transactions.
To screen a prospective recurring customer, submit the
transaction data using PayPal Manager’s Manual
Transactions page. The filters screen the transaction in the
normal manner. If the transaction triggers a filter, then you
can follow the normal process to review the filter results.
SWIPEAllows Track 1 and Track 2 data to be passed to enable a
In addition to the parameters in Table 4.1 , “Credit card transaction request parameters,”
FDMS South accepts the following parameters:
TABLE A.4FDMS South add itional p arame ters
ParameterDescriptionRequiredTypeLength
A
SWIPEAllows Track 1 and Track 2 data to be passed to enable a
card-present transaction.
NoAlpha-
numeric
80
First Data Merchant Services (FDMS) North
FDMS North, Additional Credit Card Parameters
In addition to the parameters in Table 4.1 , “Credit card transaction request parameters,”
FDMS North (also known as FDMS CardNet) accepts the parameters in Table A.5.
T
ABLE A.5FDMS North additional parameters
ParameterDescriptionRequiredTypeLength
DESCUse the DESC* parameters to pass in your DBA name
and other data describing the transaction. This
information will be displayed in the end user’s
statement.
Note: FDMS North passes the descriptive data to the
card associations with the following character
lengths:
z Visa: 25
z MasterCard: 22
z AMEX: 20
z DISC: 22
Some card associations truncate the value to 19
characters. If you have questions, consult the card
association.
NoAlpha-
numeric
25
MERCHSVCDefaults to CITY (where the merchant outlet is
located) for retail and to PHO NENUM for non-retail.
For example, 800 111-1111. Use uppercase
characters. The first three positions must be numeric.
INVNUMMerchant invoice number. The merchant invoice number
is used for authorizations and settlements and,
depending on your merchant bank, will appear on your
customer's credit card statement and your bank
reconciliation report. If you do not provide an invoice
number, the transaction ID (PNREF) will be submitted.
SWIPEAllows Track 1 and Track 2 data to be passed to enable a
card-present transaction.
RECURRINGIdentifies the transaction as recurring. This value does
not activate PayPal’s Recurring Billing Service APIs.
If the RECURRING parameter was set to Y for the
original transaction, then the setting is ignored when
forming Credit, Void, and Force transactions.
If you subscribe to PayPal’s Fraud Protection Services:
T o avoid char ging you to filter recurring transactions
that you know are reliable, the fraud filters do not screen
recurring transactions.
To screen a prospective recurring customer, submit the
transaction data using PayPal Manager’s Virtual
Terminal page. The filters screen the transaction in the
normal manner. If the transaction triggers a filter, then
you can follow the normal process to review the filter
results.
In addition to the parameters in Table 4.1 , “Credit card transaction request
parameters,”Elavon accepts the following parameter:
TABLE A.7Elavon additional parameters
ParameterDescriptionRequiredTypeLength
A
RECURRINGIdentifies the transaction as recurring. This value does
not activate PayPal’s Recurring Billing Service API.
If the RECURRING parameter was set to Y for the original
transaction, then the setting is ignored when forming
Credit, Void, and Force transactions.
If you subscribe to PayPal’s Fraud Protection Services:
T o avoid charging you to filter recurring transactions that
you know are reliable, the fraud filters do not screen
recurring transactions.
To screen a prospective recurring customer, submit the
transaction data using PayPal Manager’s Manual
Transactions page. The filters screen the transaction in
the normal manner. If the transaction triggers a filter,
then you can follow the normal process to review the
filter results.
NoAlpha-
numeric
Y or N
1
Paymentech
Paymentech Salem (New Hampshire), Additional Credit Card Parameters
(CAPN)
In addition to the parameters in Table 4.1 , “Credit card transaction request parameters,”
Paymentech Salem (New Hampshire) accepts the parameters in Table A.8 to meet CAPN
requirements.
T
ABLE A.8Additional Paymentech paramet ers to meet CAPN require ments
ABLE A.8Additional Paymentech paramet ers to meet CAPN
ParameterDescriptionRequiredTypeLength
A
ZIPAccount holder’s 5- to 9-digi t ZIP (postal) code
excluding spaces, dashes, and non-numeric
characters
Example: 951121737
PHONENUMAccount holder’s telephone number. The formats
are
xxx-xxx-xxxx (US numbers)
+xxxxxxxxxxx (international numbers)
SHIPTOFIRSTNAMEFirst name in the shipping addressNoAlpha-
SHIPTOLASTNAMELast name in the shipping addressNoAl pha-
SHIPTOSTREETShipping street addressNoAlpha-
SHIPTOCOUNTRYNumeric country code
Example:
USA: 840
SHIPTOZIPShipping 5- to 9-digi t ZIP (postal) code exclu ding
spaces, dashes, and non-numeric characters
Example: 951121737
NoString9
NoString20
numeric
numeric
numeric
NoAlpha-
numeric
NoAlpha-
numeric
30
30
30
3
9
SHIPTOPHONENUMShipping telephone numberNoString10
RECURRINGIdentifies the transaction as recurring. This value
does not activate the PayPal Recurring Billing
Service API.
If the RECURRING parameter was set to Y for the
original transaction, then the setting is ignored when
forming Credit, Void, and Force transactions.
If you subscribe to PayPal’s Fraud Protection
Services:
To avoid charging you to filter recurring
transactions that you know are reliable, the fraud
filters do not screen recurring transactions.
To screen a prospective recurring customer, submit
the transaction data using PayPal Manager’s Virtual
Terminal. The filters screen the transaction in the
normal manner. If the transaction triggers a filter,
then you can follow the normal process to review
the filter results.
In addition to the parameters in Table 4.1 , “Credit card transaction request parameters,”
Paymentech accepts the following legacy parameters. For best AVS results, pass the city and
state parameters in the parameter list.
TABLE A.9Additional Paymentech paramet ers (lega cy)
ParameterDescriptionRequiredTypeLength
CITYCardholder’s billing city. NoAlpha20
BILLTOCOUNTRYCardholder’s billing country codeYesNumeric3
INVNUMMerchant invoice num ber. The merchant invoice
number is used for authorizations and settlements
and, depending on your merchant bank, will appear
on your customer's credit card statement and your
bank reconciliation report. If you do not provide an
invoice number, the transaction ID (PNREF) will be
submitted.
MERCHDESCRMerchant descriptor.
For example, ABCCMPY*FALLCATALOG
MERCHSVCMerchant telephone number.
For example, 603-555-1212
STATECardholder’s billing state.NoAlpha2
SWIPEAllows Track 1 and Track 2 data to be passed to
enable a card-present transaction.
RECURRINGIdentifies the transaction as recurring. This value
does not activate PayPal’s Recurring Billing Service
APIs.
If the RECURRING parameter was set to Y for the
original transaction, then the setting is ignored when
forming Credit, Void, and Force transactions.
If you subscribe to PayPal’s Fraud Protection
Services:
To avoid charging you to filter recurring
transactions that you know are reliable, the fraud
filters do not screen recurring transactions.
To screen a prospective recurring customer, submit
the transaction data using PayPal Manager’s
Manual Transactions page. The filters screen the
transaction in the normal manner. If the transaction
triggers a filter, then you can follow the normal
process to review the filter results.
In addition to the parameters in T able 4.1 , “Credit card transaction request parameters,” TSYS
Acquiring Solutions accepts the following parameters to meet CAPN requirements.
T
ABLE A.10 Additional TSYS Acquiring Solutions parameters to meet CAPN
ABLE A.10 Additional TSYS Acquiring Solutions parameters to meet CAPN
requirements
ParameterDescriptionRequiredTypeLength
(Continued)
A
SHIPTOFIRSTNAMEFirst name in the shipping addressNoAlpha-
numeric
SHIPTOLASTNAMELast name in the shipping addressNoAlpha-
numeric
SHIPTOSTREETShipping street addressNoAlpha-
numeric
SHIPTOCOUNTRYNumeric country code
Example:
USA: 840
SHIPTOZIPShipping 5- to 9-digit ZIP (postal) code excluding
spaces, dashes, and non-numeric characters
Example: 951121737
SHIPTOPHONENUMShipping telephone numberNoString10
RECURRINGIdentifies the transaction as recurring. This value
does not activate PayPal’s Recurring Billing
Service APIs.
If the RECURRING parameter was set to Y for the
original transaction, then the setting is ignored
when forming Credit, Void, and Force
transactions.
If you subscribe to PayPal’s Fraud Protection
Services:
To avoid charging you to filter recurring
transactions that you know are reliable, the fraud
filters do not screen recurring transactions.
To screen a prospective recurring customer,
submit the transaction data using PayPal
Manager’s Virtual Terminal. The filters screen the
transaction in the normal manner. If the
transaction triggers a filter, then you can follow
the normal process to review the filter results.
NoAlpha-
numeric
NoAlpha-
numeric
NoAlpha-
numeric
Y or N
30
30
30
3
9
1
Location Transaction Advice Addendum Parameters
MERCHANTNAMEName of merchantNo
MERCHANTSTREETMerchant’s street address (number and street
name)
MERCHANTCITYMerchant’s city No
MERCHANTSTATEMerchant’s stateNo
ABLE A.10 Additional TSYS Acquiring Solutions parameters to meet CAPN
requirements
ParameterDescriptionRequiredTypeLength
(Continued)
A
AIR-DESTINATIONDestination airport code for the first segment of
the trip; this is not necessarily the final
destination. For example, if a passenger flies from
STL to MIA with a layover at JFK, the destination
airport is JFK.
For a list of airport codes, see http://www.world-
characters in length. The five character
length is designed to allow for future
expansion.
AIRNUMBEROFCITIES
AIR-ROUTINGCITYnAirport codes of each city in this flight including
Number of unique cities in this trip including the
cities of origin and destination, where a maximum
value of 10 is allowed. For example, AIR-NUMBEROFCITIES is 3 for the following trip:
DEN to LAX
LAX to SFO
SFO to DEN
If not provided, this value is equal to the number
of AIR-ROUTINGCITYn parameters.
cities of origin and destination, where n is a value
from 1 to 10.
For a list of airport codes, see http://www.world-
ABLE A.10 Additional TSYS Acquiring Solutions parameters to meet CAPN
T
requirements
ParameterDescriptionRequiredTypeLength
(Continued)
AIR-CARRIERnTwo character airline code for each unique airline
in this flight, where n is a value from 1 to 10.
If the same carrier is used for multiple segments of
the trip, it is passed only once. For example, the
two AIR-CARRIERn values for the following trip
are UA and AA:
UA flight from IAD to DEN
UA flight from DEN to LAX
UA flight from LAX to SFO
AA flight from SFO to DFW
For information about airlines codes, see
h
ttp://en.wikipedia.org/wiki/Airline_codes-All.
AIR-FAREBASISList discounts associated with the travel.NoAlpha-
AIRNUMBEROFPASSENGER
S
AIR-ISETICKETIf this is an electronic ticket. The values are:
AIRRESERVATIONCODE
Number of passengers on this trip.NoNumeri c
Y = yes
N = no
Code assigned to the travel reservation before the
ticket was purchased.
NoAlpha-
numeric
numeric
NoAlpha-
numeric
NoAlpha-
numeric
5
24
1
15
Other
FIRSTNAMEAccount holder's first and last name. Note: Even
though the parameter name indicates only the first
name, this single parameter holds all of the
person's name information (both first and last
name, at a minimum).
LASTNAMEAccount holder's last name. NoAlpha-
INVNUMMerchant invoice number. The merchant invoice
number is used for authorizations and settlements
and, depending on your merchant bank, will
appear on your customer's credit card statement
and your bank reconciliation report. If you do not
provide an invoice number, the transaction ID
(PNREF) will be submitted.
ORDERDATEOrder date
For example, July 28, 2003 is 072803.
Format: mmddyy (with no slashes or dashes)
ABLE A.10 Additional TSYS Acquiring Solutions parameters to meet CAPN
requirements
ParameterDescriptionRequiredTypeLength
(Continued)
A
ORDERDATETIMEOrder time and date
Format is either
YYYY-MM-DD or
YYYY-MM-DD HH:MI:SS
(where HH is in 24-hour time).If the value does
not conform to one of the formats or if the date is
not valid (for example, 2004-17-35), then the
transaction is rejected with:
RESULT=7(SIG_FIELD_ERR)
RESPMSG=Invalid ORDERTIME
A truncated version of the ORDERTIME value (up
to 7 characters) overwrites any value provided by
ORDERDATE. If no value is provided, a NULL value
is stored.
SWIPEAllows Track 1 and Track 2 data to be passed to
In addition to the parameters in T able 4.1 , “Credit card transaction request parameters,” TSYS
Acquiring Solutions accepts the following legacy parameters:
T
ABLE A.11 TSYS Acquiring Solutions additional parameters (legacy)
ParameterDescriptionRequiredTypeLength
INVNUMMerchant invoice number. The merchant invoice number
is used for authorizations and settlements and,
depending on your merchant bank, will appear on your
customer's credit card statement and your bank
reconciliation report. If you do not provide an invoice
number, the transaction ID (PNREF) will be submitted.
SWIPEAllows Track 1 and Track 2 data to be passed to enable a
ABLE A.11 TSYS Acquiring Solutions additional parameters (legacy)(Continued)
ParameterDescriptionRequiredTypeLength
RECURRINGIdentifies the transaction as recurring. This value does
not activate PayPal’s Recurring Billing Service API.
If the RECURRING parameter was set to Y for the original
transaction, then the setting is ignored when forming
Credit, Void, and Force transactions.
If you subscribe to PayPal’s Fraud Protection Services:
T o avoid char ging you to filter recurring transactions
that you know are reliable, the fraud filters do not screen
recurring transactions.
To screen a prospective recurring customer, submit the
transaction data using PayPal Manager’s Virtual
Terminal page. The filters screen the transaction in the
normal manner. If the transaction triggers a filter, then
you can follow the normal process to review the filter
results.
NoAlpha-
numeric
Y or N
1
90Payflow Pro Developer’s Guide
Performing TeleCheck Electronic
B
Check Transactions
This chapter describes Telecheck (electronic check) transaction processing and testing.
NOTE:TeleCheck transactions are not supported on the PayPal processor.
Paypal offers electronic check acceptance through TeleCheck. Before processing electronic
check transactions, merchants must obtain an account through TeleCheck
(www.telecheck.com).
For information on:
z Performing credit card transactions, skip this chapter and see “Credit Card Transactions”
on page 23.”
z Performing ACH transactions, contact your PayPal Sales Representative at
paymentsales@PayPal.com
TeleCheck Parameters
Parameters used for processing electronic checks through TeleCheck are described in
Table B.1. Required and optional parameters are noted.
NOTE:Appendix E, “Additional Reporting Parameters,” provides a list of parameters that you
can pass for reporting purposes.
Required Parameters
As a summary of Table B.1, the following parameters are required for every electronic check
transaction:
TRXTYPE
TENDER
CHKTYPE
PARTNER
VENDOR
USER
PWD
AMT
CITY
DL or SS
CHKNUM
EMAIL
MICR
NAME
STATE
Name>&PWD=<your Payflow passwo rd>&
AMT=42.00&STREET=1234 Main&CITY=Buffalo&DL=CA123456&CHKNUM=1001&EMAIL =<y
our e-mail address>&MICR=<Use a MICR value
from Table B.2>&NAME=Sally&STATE=CA&ZIP=95050”
ABLE B.2MICR values for testing
T
MICRHOSTCODETeleCheck Result
1234567804390850001001000800Check Approved ECA
1234567804390850011001000801Check Approved No ECA
1234567804390850021001000802Check Approved ECA, No Guarantee
1234567804390850031001000803Check Approved No ECA, No Guarantee
1234567804390850041001000804Check Decline Negative Data
1234567804390850051001000805Check Decline Scoring
1234567804390850071001000807Check Failed
Preparing for TeleCheck Production Transactions
Before going into production with your check integration, you must certify your storefront
with TeleCheck. To begin the certification process, send an e-mail to
ica_certification@telecheck.com. Be sure to include the following information:
z Your test website address where test transactions can be processed
z The name, e-mail address, and phone number of the person to contact about any needed
corrections.
The certification process usually takes 2-3 days.
Use the host address of the live server described in “Host Addresses” on page 13.
Responses to Telecheck Transactions
When a transaction finishes, PayPal returns a response string made up of name-value pairs.
For example:
Telecheck transaction response values are described in Table B.3.
TABLE B.3Transaction responses common to all tender types
FieldDescriptionTy peLength
B
RESULTThe outcome of the attempted transaction. A result of 0 (zero) indicates
the transaction was approved. Any other number indicates a decline or
error. RESULT values are described in “RESULT Values and
RESPMSG Text” on page 58.
PNREFPayPal Reference ID, a unique number that identifies the transaction.
PNREF is described in “HOSTCODE Values” on page 95.
HOSTCODETeleCheck’s response code representing the results of the transaction
authorization attempt. These values are described in “HOSTCODE
Values” on page 95.
RESPMSGA descriptive message associated with decline or error RESULTs.
Response messages are described in Chapter , “Responses to
Transaction Requests.”
HOSTCODE Values
The HOSTCODE reflects the TeleCheck server result. The following tables describe the
HOSTCODE values. TeleCheck requires that you display certain verbiage to the purchaser
based on the returned HOSTCODE value—check with TeleCheck for details.
NOTE:Many of these codes will not be encountered under normal operating conditions—they
are included as a troubleshooting aid. In the tables, the Frequency column indicates the
likelihood that you will encounter the code.
NumericVariable
Alphanumeric
Numeric6
Alphanumeric
12
Variable
T
ABLE B.4Sale Approved HOSTCODE values
CodeResponseDescriptionFrequency
000500Sale ApprovedSale Approved by credit card networkCommon
000501Sale Time-outSale transaction time-out in credit card networkCommon
000502Test CardTest card sale approved (never billed)Common
000504ANI Sale Approved900/Telc o sale approvedANI bill only
000505PB Sale ApprovedPrivate billing sale approvedPB only
000800Sale ApprovedDirect Check Sale/ECA approvedDirect Check
000801Sale ApprovedDirect Check Sale approved (no ECA)Direct Check
000802Sale ApprovedDirect Check Sale/ECA approved no guaranteeDirect Check
000803Sale ApprovedDirect Check Sale approved no ECA no guaranteeDirect Check
000300Sale DeclinedSale declined by credit card networkCommon
000301Sale RejectedSale does not meet risk standardsCommon
000804Check DeclinedDirect Check Sale declined negative dataDirect Check
000805Check DeclinedDirect Check Sale Decline ScoringDirect Check
000807Check FailureDirect Check SaleDirect Check
T
ABLE B.6Inquiry Approved HOSTCODE values
CodeResponseDescriptionFrequency
000400OTB ApprovedPreauthorization approved. AVS matches if provided.Common
000401No ResponseNo response from cred it card network for preauth.Common
000402AVS Time-outPreauth ori zation approved, AVS timed outAVS only
000403PB ApprovedPrivate billing app rov ed.PB only
000410Positive RecordPrevio us positi ve history.Common
000420Test card ApprovedTest CardCommon
000421OTB/AVS ApprovalPreauthorization approved, AVS matchAVS only
000503ANI Bill approved900/TELCO billing approvedANI bill only
T
ABLE B.7General Failure HOSTCODE values
CodeResponseDescriptionFrequency
000100General FailureGeneral host based failureRare
000101Invalid ValueInvalid for one or more fields in transactionCommon
999999Unknown ResponseTeleCheck received an unknown responseRare
T
ABLE B.8Inquiry Declined HOSTCODE values
CodeResponseDescriptionFrequency
000200Preauth DeclinedDeclined by credit card or Telco network (LIDB)Common
000201PIN MismatchMismatch on PIN stored in TeleCheck databaseNot Used
000210Negative Card RecordTemporary and permanent blocks. Prior OTB decline, sale
Common
decline or CS block Transaction falls below minimum
scoring standards. Most frequently used for risk scoring
declines, where a transaction falls below minimum
standards.
000215Negative ANI RecordANI previously blocked by CSCommon
000220Chargeback CardCard with chargeback historyCommon
000225Chargeback ANIANI with chargeback historyCommon
000230Exceed card profile
000240Too many Cards
000250Exceed ANI profile
000260Too Many Phones
a
Card has exceeded usage limitsUncommon
a
a
ANI has excessive number of cardsUncommon
a
ANI has exceeded usage limitsUncommon
Card has been used from excessive ANIUncommon
000270OTB/AVS DeclineOTB decline and AVS mismatchAVS OTB
only
000271OTB/AVS DeclineOTB approved and AVS mismatchAVS OTB
only
000272OTB/AVS DeclineOTB decline and AVS matchAVS OTB
only
000280Risk ReferralTemporary Risk referral, AVS necessaryCommon
000281Card Not QualifiedCard does not meet minimum bank restrictionsNot Used
000282PB Risk ReferralPrivate billing risk referral, AV S necessaryPB Only
a. This data is included in risk scoring decisions and a response of 210 has higher precedence.
PayPal Payment Services supports passing Purchasing Card Level 2 information (such as
purchase order number, tax amount, and charge description) in the settlement file.
If additional required invoice information and line item details are included in the transaction,
PayPal formats Purchasing Card Level 3 information in an appropriate format, for example,
EDI (Electronic Data Interchange) 810 format as required by American Express during
settlement processing.
About Purchasing Cards
Purchasing Cards are used in the procurement process to eliminate paper-based order systems
and associated costs, to improve control and accountability through itemized statements, to
foster better risk controls through spending limits and buying from approved vendors, to
reduce administrative overhead because employees are empowered to make small purchases,
and to enable enterprises to negotiate better contract pricing and discounts with suppliers
through the use of vendor detail reports.
To promote acceptance and usage of Purchasing Card programs, card issuers have established
incentive rates for merchants. These rates are available for merchants who comply at either
Level 2 or Level 3 (described in the next section). T ransactions that comply at Level 1 qualify
as normal credit card transactions.
NOTE:Card issuing institutions perform strict data verification on the enhanced data that is
submitted with Level 2 or Level 3 transactions. Issuers may charge stiff penalties if
fields contain either inaccurate or filler data. Only transactions that contain accurate
data are eligible for the incentive rates.
About Program Levels
The term Level does not apply to the card, but to the transaction data submitted for that card.
Generally, a higher level means more detailed data for reporting.
Table C.1 describes the transaction levels that are recognized.
TABLE C.1Transaction levels
LevelDescription
Level 1Function as normal credit cards and are authorized and associated with normal
transaction data in authorization and settlement. Any merchant who accepts
credit cards supports this level.
Payflow Pro Developer’s Guide99
Submitting Purchasing Card Level 2 and Level 3 Transactions
C
About American Express Purchasing Card Transactions - Phoenix Processor
TABLE C.1Transaction levels
LevelDescription
Level 2Additional data regarding sales tax, customer code, purchase order number,
invoice number are captured at the point of sale. In most cases, this
information is combined with the merchant’s tax ID number, state, and postal
code data and is then passed through during settlement. For some processors
and banks, however, a Level 2 authorization may include some of this data.
Level 3S ignificant additional information such as line items, product codes, item
descriptions, unit price, unit quantities, and ship-to postal data are added to the
Level 2 data to provide optimal reporting to buyers and sellers. Settlement
transactions typically carry Level 3 data.
Level 2 and Level 3 data is generally considered non-financial data. Lack of adeq uate data
may cause a transaction to be downgraded.
PayPal generally requires up to Level 2 information in an Authorization transaction followed
by additional Level 3 data in the associated Delayed Capture transaction. A Sale transaction
should include all Level 3 data since it is authorized and later settled.
Accepted BIN Ranges
Visa, MasterCard, and American Express publish specific Bank Identification Number (BIN)
ranges for purchasing cards. Sometimes the determination of whether a card is a purchasing
1
card is left to the processor (for example, TSYS Acquiring Solutions
). In other cases, the
Payflow payments gateway makes the determination based on the BIN range (for example,
FDMS South and American Express).
BIN ranges accepted for American Express Level 2 and Level 3 transactions are listed on
page 102.
About American Express Purchasing Card Transactions -
Phoenix Processor
The information in this section applies to transactions processed by the American Express
Phoenix Processor, not necessarily to all American Express cards. Level 2 and Level 3
purchasing card rules may differ for American Express card transactions processed by other
processors such as Paymentech or First Data Nashville.
1. Formerly Vital Processing Services
100Payflow Pro Developer’s Guide
Loading...
+ hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.