Developer's Guide

Table Of Contents
Payflow Pro Developer’s Guide 25
Credit Card Transactions
About Credit Card Processing
billing address on file for the consumer. Address verification service is described on page
“Using Address Verification Service” on page 44.
Card security code refers to a 3- or 4-digit number that appears on the back of most credit
cards. On American Express, the number appears above and to the right of the embossed
card number. Card security code is known by other names, such as CVV2, depending on
the type of card. If card security code data is submitted, the issuer can notify you whether
the number matches the number assigned to the card. Card security code is described on
page “Card Security Code Validation” on page 46.
It may also be possible to implement additional safeguards yourself or to use a fraud
service. You might want to discuss risk management with your Internet Merchant Account
provider.
z Store information in your local database or use PayPal Manager reports to manage the data.
You may want to store shipping information in your system, or you may prefer to send the
information to PayPal with the transaction and report on it later.
NOTE: PayPal recommends that you do not store credit card numbers. If you must store
numbers, encrypt and store them behind properly configured firewalls. You should
also consider whether and how to use the merchant-defined fields COMMENT1 and
COMMENT2 to help tie reports to your orders/customers or to report on other
information about the transaction.
z If or how you want to integrate with other systems, such as order fulfillment, customer
service, and so on. You may wish to connect these systems directly to Payflow Pro for
capturing funds, issuing refunds/credits, and so on. Alternatively, you may prefer to
perform these steps manually using PayPal Manager. Either way, PayPal recommends that
you monitor transaction activity using PayPal Manager.
z You may want to discuss, with your Internet Merchant Acquirer, practices that help you to
obtain the most advantageous rates.
Complying With the E-commerce Indicator (ECI)
Some processors support a software flag called E-commerce Indicator (ECI) that indicates that
the associated transaction is an internet transaction. Payflow Pro complies with ECI basic
requirements for all supported processors.
If you use the Buyer Authentication Service, then the ECI values reflects the Authentication
status. See Payflow Pro Fraud Protection Service Users Guide on Developer Central.
Handling Credit Card Type Information
The Payflow SDK does not check the credit card types that you are accepting. If a customer
uses a card type that you are not signed up to accept, the Payflow SDK responds with RESULT
value 23, “Invalid account number,” or the processor returns a message that the customer is
not signed up for the card type. For details on RESULT values and response messages, see
“RESULT Values and RESPMSG Text” on page 56. Optionally, you can provide your