User's Guide
Table Of Contents
- Payflow Pro Fraud Protection Services User’s Guide
- Preface
- Overview
- How Fraud Protection Services Protect You
- Configuring the Fraud Protection Services Filters
- Assessing Transactions that Triggered Filters
- Activating and Configuring the Buyer Authentication Service
- Performing Buyer Authentication Transactions Using the SDK
- Testing the Buyer Authentication Service
- Buyer Authentication Transaction Overview
- Buyer Authentication Terminology
- Buyer Authentication Server URLs
- Detailed Buyer Authentication Transaction Flow
- Call 1: Verify that the cardholder is enrolled in the 3-D Secure program
- Call 2: POST the authentication request to and redirect the customer’s browser to the ACS URL
- Call 3: Validate the PARES authentication data returned by the ACS server
- Call 4: Submit the intended transaction request to the Payflow server
- Example Buyer Authentication Transactions
- Buyer Authentication Transaction Parameters and Return Values
- ECI Values
- Logging Transaction Information
- Screening Transactions Using the Payflow SDK
- Downloading the Payflow SDK (Including APIs and API Documentation)
- Transaction Data Required by Filters
- Transaction Parameters Unique to the Filters
- Existing Payflow Parameters Used by the Filters
- Response Strings for Transactions that Trigger Filters
- Accepting or Rejecting Transactions That Trigger Filters
- Logging Transaction Information
- Responses to Credit Card Transaction Requests
- Fraud Filter Reference
- Testing the Transaction Security Filters
- Good and Bad Lists
- AVS Failure Filter
- BIN Risk List Match Filter
- Country Risk List Match Filter
- Email Service Provider Risk List Match Filter
- Freight Forwarder Risk List Match Filter
- Geo-location Failure Filter
- International IP Address Filter
- International Shipping/Billing Address Filter
- IP Address Match Filter
- Shipping/Billing Mismatch Filter
- Total Item Ceiling Filter
- Total Purchase Price Ceiling Filter
- Total Purchase Price Floor Filter
- USPS Address Validation Failure Filter
- ZIP Risk List Match Filter
- Testing Buyer Authentication Transactions Using the Payflow SDK
- Deactivating Fraud Protection Services
- Index
Preface
Customer Service
10 Fraud Protection Services User’s Guide
z Appendix A, “Fraud Filter Reference,” describes the Transaction filters that make up part
of the Fraud Protection Services.
z Appendix B, “Testing the Transaction Security Filters,” provides Payflow SDK
transactions that you can use to test the filters.
z Appendix C, “Testing Buyer Authentication Transactions Using the Payflow SDK,
provides examples of testing Buyer Authentication transactions.
z Appendix D, “Deactivating Fraud Protection Services,” describes the process of
deactivating Fraud Protection Services.
Customer Service
If you are having problems with Fraud Protection Services, contact Customer Service at:
Email: payflow-support@paypal.com.
Telephone: 1 800 505-4916
Revision History
TABLE 2.1 Revision History
Date Description
June 2008 Updated Payflow server test and live URLs.
Updated Customer Service information.
February 2008 Updated test and live URLs.
Minor edits for technical accuracy.
August 2007 AU Enhancements
April 2007 Updated guide to include PayPal Manager User Interface changes.
February 2007 Updated AVS responses rules.
Added return codes: 51, 110, 119, 120, 121, 132, 133, 200, 201, 402, 403, 404,
600, and 601.
December 2006 Updated buyer auth test URL to pilot-buyerauth.verisign.com
Minor corrections for technical accuracy