Integration Guide

PayPal Payments Pro Integration Guide April 2012 87
B
Implementing 3-D Secure
Transactions (UK Only)
Website Payments Pro allows UK merchants to pass 3-D Secure™ authentication data to
PayPal for debit and credit cards processed with the DoDirectPayment API request.
Updating your site with 3-D Secure enables your participation in the Verified by Visa and
MasterCard SecureCode programs.
NOTE: A US or Canadian merchant can implement 3-D Secure; however, the authentication
data is ignored by PayPal. This information only applies to 3-D Secure for UK
merchants implementing Direct Payment.
 Introduction to 3-D Secure
 Integration Overview
 Cardinal Commerce Registration and Installation
 Transaction Processing
 Website Setup
 Examples
 Testing
 cmpi_lookup API
 Issuer Authentication Fields
 cmpi_authenticate API
Introduction to 3-D Secure
3-D Secure is a protocol developed by the card schemes that improves the security of Internet
payments that are not within a closed-loop checkout option (such as PayPal). It allows
merchants to authenticate cardholders through the cards’ issuers. Its goals are to reduce the
likelihood of fraud when using supported cards and to improve transaction performance.
Merchants who do not use 3-D Secure may be liable for fraudulent transactions even if the
transaction was authorized by other means. Visa offers 3-D Secure under the name Verified by
Visa and MasterCard offers it as MasterCard SecureCode.
PayPal enables you to pass 3-D Secure data to PayPal for Payments Pro transactions, but you
must obtain the 3-D Secure authentication data from the card’s issuer. PayPal has an
agreement with Cardinal Commerce that allows Payments Pro merchants free access to
Cardinal’s 3-D Secure technology, Cardinal Centinel®. The Cardinal Centinel Thin Client
interface provides access to payer authentication for transactions using Visa, MasterCard, and
Maestro branded cards. Use of 3-D Secure authentication is optional for Visa and MasterCard
transactions.