Developer's Guide

Submitting Credit Card Transactions
Planning Your Gateway Integration
6
50 31 July 2012 Gateway Developer Guide and Reference
the issuer checks the street address and the zip code against the billing address on file for
the consumer.
Card security code refers to a 3- or 4-digit number that appears on the back of most credit
cards. On American Express, the number appears proceeding and to the right of the
embossed card number. Card security code is known by other names, such as CVV2,
depending on the type of card. If card security code data is submitted, the issuer can notify
you whether the number matches the number assigned to the card.
It may also be possible to implement additional safeguards yourself or to use a fraud
service. You might want to discuss risk management with your Internet Merchant Account
provider.
 Whether to store information in your local database or use PayPal Manager reports to
manage the data. You may want to store shipping information in your system, or you may
prefer to send the information to PayPal with the transaction and report on it later.
NOTE: Consider whether and how to use COMMENT1 and COMMENT2 to help tie reports to
your orders/customers or to report on other information about the transaction.
 If or how you want to integrate with other systems, such as order fulfillment, Customer
Service, and so on. You may want to integrate your systems directly for capturing funds,
issuing refunds/credits, and so on. Alternatively, you may prefer to perform these steps
manually using PayPal Manager. Either way, PayPal recommends that you monitor
transaction activity using PayPal Manager.
 Whether to discuss with your internet Merchant Acquirer practices that help you to obtain
the most advantageous rates.
Complying With E-commerce Indicator
Some processors support a software flag called E-commerce Indicator (ECI) that indicates that
the associated transaction is an internet transaction. The Payflow SDK complies with ECI
basic requirements for all supported processors.
If you use Buyer Authentication, the ECI values reflect the authentication status.
Handling Credit Card Type Information
The Payflow SDK does not check the credit card types that you are accepting. If a customer
uses a card type you do not accept, the SDK responds with RESULT value 25, “Invalid host
mapping,” or the processor returns a message that the customer is not signed up for the card
type. Optionally, you can provide your customer with a list of the card types that you accept
(in a drop-down list or menu, for example).
To accept additional credit card types, contact your acquiring bank (holding your Internet
Merchant Account) and ask them to add the card type to your account. Upon notification from
your acquirer that you can start accepting the card type, add the card to your Payflow account
through PayPal Manager. See PayPal Manager online help for details.