Home

Implementation Guide - High Capacity Gateway

1. 14 53 ISO Country Code i Trust MO MK MG MW MY MV ML MT MH MQ MR MU MX FM MI MD 5 MZ MM NA NR NP NL AN NC NZ NI NE NG NU PW PA PG PY PE e Country Macau Macedonia Madagascar Malawi Malaysia Maldives Mali Malta Marshall Islands Martinique Mauritania Mauritius Mexico Micronesia Midway Islands Moldova Monaco Mongolia Montserrat Morocco Mozambique Myanmar Namibia Nauru Nepal Netherlands Netherlands Antilles New Caledonia New Zealand Nicaragua Niger Nigeria Niue Norfolk Island Northern Mariana Islands Norway Oman Pakistan Palau Panama Papua New Guinea Paraguay Peru RiskGuardian 14 54 ISO Country Code PH PN PL PT PR QA RE RO RU RW SH KN LC PM VC ws SM ST SA SN SC SL SG SK SI SB SO ZA ES LK SD SR SJ SZ SE CH SY TW TJ TZ TH TG TK PaumentTrust Country Name Philippines Pitcairn Poland Portugal Puerto Rico Qatar Reunion Romania Russian Federation Rwanda Saint Helena Saint Kitts and Nevis Saint Lucia Saint Pierre and Miquelon Saint Vincent and The Grenadines Samoa San Marino Sao Tome an
2. Acquirer PH NA ALL ALL PN PN ALL NA NA NA NA PN NA NA PT ALL LY PT PH PT PT PT PT EC LY PH and BV AX FS LY and PH PT PT BACS PT LY and PH BACS 12 42 Explanation Received no answer from banking network Resend transaction No need to do this transaction Request submitted and waiting for processing to be completed next cycle Request submitted and waiting for processing to be completed next cycle Cannot find the BTID for the original request Notification Received Transaction Authorized Approved Validated Verified Prenoted Transaction was approved Base 24 Notification Cleared Deposit request previously submitted has been processed successfully Refund request previously submitted has been processed successfully Cancellation request has been processed successfully Transaction Declined Not Authorized Not Settled Cancellation Declined by Acquirer Cancellation transaction failed Card was authorized but AVS did not match Contact client Incoming record currency type does not match system stored currency Invalid merchant account number Bad check digit length or other credit card problem Credit card has expired or incorrect date entered Confirm date Credit card has expired Amount sent was 0 or unreadable Method of payment is invalid for this account number The specific credit card will
3. 12 41 Acquirer 12 APPENDIX V MESSAGE RESPONSE CODES The following list reflects all currently defined RiskGuardian response codes One of the following codes is returned with each transaction that is submitted into the RiskGuardian system Many of these codes will never be returned in your output Ok Transaction does not exist Field s Missing Basic Field s Missing Transaction Specific Wrong Merchantld User Name or Password DB System undefined errors or packet loss during transmission Please send again Time out during Transmission Please send again HTTP S method not supported Please call support Batch Transmission Error Failed to write to file Invalid document or Wrong XML Format Wrong Format Basic Wrong Format Transaction Specific GP Wrong Format or Parameter s Missing Transaction Type not Supported Security ERROR Please call Support Message Code Description 100 200 300 301 302 303 304 305 306 307 400 401 402 500 900 PaymentTrust Result Codes ST Streamline BMS Barclays LY Lloyds PH PaymentTech PT PaymentTrust EC EuroConnex PN Pacnet NT Neteller P2 Pay2 FS Swedish Acquirer BV Bank of Valleta FX Foreign Exchange 3D 3DSecure Verification Authentication NA Not applicable to any Acquirer Description Explanation Trust Message Code RiskGuardian
4. 5 Secure Sockets Layer An encryption system that allows merchants to securely process electronic transactions Deposit The process by which transactions with authorization codes are sent to the processor for payment to the merchant Deposit is a sort of electronic bookkeeping procedure that causes all Guardian Trust 17 70 funds from captured transaciions to be routed to the merchant s acquiring bank for deposit PaymentTrust automatically submits all captured transactions for deposit on a daily basis The time that it takes for these funds to reach the merchant account after deposit is 1 5 days but varies according to the merchant s agreement with their respective card processing company Also referred to as Deposit SIC Code Refers to Standard Industry Classification These codes are 4 digit numbers used to identify a business type Simultaneous Authorization And Deposit Charges the specified amount against the account and marks the transaction for immediate funds transfer during the next deposit period Smart Card A credit or debit card embodying a computer chip with memory and interactive capabilities used for identification and to store additional data about the cardholder cardholder s account or both Also called an integrated circuit card or a chip card SSL See Secure Sockets Layer Standard The lowest qualification level at which a Visa or MasterCard transaction may interchange This occurs when a transaction is
5. PH PH PH PH PH PN NA NA NA PH FS LY NT P2 and PH PH 12 43 Explanation Specific and relevant data within transaction is inaccurate or missing Same transaction had been submitted Issuer does not allow this transaction Processor permits only one deposit request per authorization Invalid merchant account number Invalid issuer or institution Invalid response code Currency code submitted is different than code submitted with original authorization request Invalid for credit Invalid refund not allowed CFT Invalid for debit Amex CID is incorrect Switch Solo Incorrect start date or requires an issue number Please correct Switch Solo 1 digit number submitted when 2 digit number should have been sent Please correct Switch Solo a format issue re examine transaction layout Please correct Bank not supported by Switch No card record Invalid bank routing number Missing the check writer s name Bank account has been closed Account type is invalid or missing Deposit transactions only Account does not exist Account number does not correspond to the individual Account holder deceased No further debits will be accepted by the bank Beneficiary deceased No further debits will be accepted by the bank The funds in this account are unavailable No further debits will be accepted by the bank Customer has refused to allow the transaction Banking institute does not accept ACH transac
6. 2 9 Example HTTP POST request for STLink This shows what an HTTP request to Stlink should be using the following STN URL https stnO1 sectranet com Sstlinkssl stlink dll depicts a new line The content length is the total amount of bytes including the key pair and the URLEncoded data POST stlinkssl stlink dll HTTP 1 1 n Content Length 123456 n n StringIn lt URL encoded string or XML document gt n n 2 10 Example HTTP POST request for STLink Batch This shows what an HTTP request to Stlink Batch should be using the following STN URL https stnO1 sectranet com stlinkssl stlink dll depicts a new line The content length is the total amount of bytes the XML document POST stlinkssl stlinkbatch dll 7 Content Length 123456 n n lt XML document with no URLencoding gt n n Guardian Trust 2 8 3 RISKGUARDIAN RiskGuardian is a secure risk management solution that allows merchants to securely manage the risk associated with doing business on the Internet RiskGuardian provides a set of static risk factors determined by TMI and a set of customizable risk factors which the merchant can alter to manage their risk on an individual basis RG Features e Provides risk management and assessment for online transactions e Total overhead is less than three seconds e Merchant controlled parameters and values e Online reporting and administration tools e Export and Import capabilities for mass
7. 400226999 VISA DEBIT 400227999 VISA DEBIT 400154000 400158000 400163000 400166000 400167000 400168000 400169000 400170000 400172000 400173000 400174000 400176000 400178000 400179000 400181000 400182000 400183000 400184000 400185000 400186000 400187000 400189000 400191000 400195000 400199000 400201000 400211000 400213000 400214000 400215000 400218000 400225000 400226000 400227000 4 M tmibin RiskGuardian 6 26 6 2 Screenshot of data txt format CardIssuer CardLength IssueNoLength IssueNoRequired A tmibin txt Notepad Ele Edit Format View Help CardName ISA DEBIT BANCO DO BRASIL S A BARCLAYS BANK PLC 400131999 ELECTRON 400136000 400136999 ELECTRON VE BR BANCO DO BRASIL S A 400145000 400145999 VISA CREDIT KZ PMB Ss 160 ec qa 400157000 400157999 VISA DEBIT VD hys STATE 16 0 SOUTHERN FEDERAL CREDIT U UNION 16 0 N 400158000 400158999 VISA DEBIT VD USN 400159000 400159999 VISA CREDIT Syr EE AMINIT LTD 16 0 52 505 HAB seis 16 rage N 400162000 400162999 ELECTRON VE BR BANCO DO BRASIL S A 400163000 400163999 ELECTRON VE BANCO DO BRASIL 400164999 VISA CREDIT A KZ JSC 400165000 400165999 VISA CREDIT 456 400166
8. Explanation Customer has not authorized bank to accept these transactions Pertains to Canadian ECP only Format of account number does not pass check digit routine for that institution For CDN ECP Invalid characters in account number Card has surpassed daily transaction amount limit The limit of number of times used for the card has been surpassed Card has surpassed its credit limit Enter a lesser amount No credit amount Card is limited to one purchase Over Sav limit Over Sav frequency Card not supported Invalid PIN Allowable PIN tries exceeded PIN required Card failed MOD 10 check verification Account number appears on negative file Stop Payment Issued PTLF full Fraud suspected Unable to process transaction Duplicate transaction Cutoff in progress Incorrect PIN PIN tries exceeded Exceeds withdrawal frequency Invalid 3D Secure Data Timeout waiting for host response Internal timeout Authorization host system is temporarily unavailable Authorization host network could not reach the bank which issued the card or Acquirer Invalid issuer or institution Trust pg Description 2328 Customer advises not authorized 2330 Invalid CECP action code 2332 Invalid account number format 2334 Bad account number data 2350 Card surpassed daily limit 2352 Times card used limit 2354 Over credit limit 2356 Enter lesser amount 2358 No credit amount 2360 One purchase limi
9. HSBC YORKSHIRE BANK BANK OF SCOTLAND BANK OF SCOTLAND BANK OF SCOTLAND ROYAL BANK OF SCOTLAND BANK OF SCOTLAND ROYAL BANK OF SCOTLAND ROYAL BANK OF SCOTLAND ROYAL BANK OF SCOTLAND ROYAL BANK OF SCOTLAND BANK OF SCOTLAND BANK OF SCOTLAND BANK OF SCOTLAND BANK OF SCOTLAND HSBC CLYDESDALE BANK PLC YORKSHIRE BANK CLYDESDALE BANK PLC YORKSHIRE BANK BANK OF SCOTLAND BANK OF SCOTLAND BANK OF SCOTLAND BANK OF SCOTLAND CLYDESDALE BANK PLC HALIFAX HALIFAX HALIFAX NATWEST CLYDESDALE BANK PLC NATWEST YORKSHIRE BANK Country Code GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB Card Type SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW Card Name SWITCH SWITCH SWITCH SWITCH SWITCH SWITCH SWITCH SOLO SOLO SOLO SOLO SOLO SOLO SOLO SOLO SOLO SOLO SOLO SOLO SOLO SOLO SOLO SOLO SOLO SOLO SOLO SOLO SOLO SOLO SOLO SWITCH SWITCH SWITCH SWITCH SWITCH SWITCH SWITCH SWITCH SWITCH BINS CardBin2 633300999 633301999 633302999 633303999 633304999 633311999 633312999 633450999 633451999 633452999 633453999 633454999 633455999 633456999 633457999 633461999 633473999 633476999 633478
10. RiskGuardian 6 PaymentTrust Implementation Guide Version 2 0 April 2007 Copyrights Copyright 2006 PaymentTrust Limited AII rights reserved Version 2 0 Issue Date April 2007 Prepared by PaymentTrust Ltd Trademarks Risk Guardian and PaymentTrust logo is trademark or service marks of Payment Trust Limited other marks listed in this document may be trademarks of their respective owners and are mentioned for identification purposes only This User Manual is protested by the copyright laws and treaties and may not be reproduced without permission from PaymentTrust Limited You may not use this guide to reverse engineer the PaymentTrust Limited PaymentTrust software ontents 1 Document Overview REDE ddd 1 1 1 1 PURPOSE OF THE DOCUMENITI 1 1 1 2 WHO SHOULD READ THIS DOCUMENT A 1 1 1 3 TERMINOLOGY 1 1 14 RELATED DOCUMENIS 1 2 2 Communication 2 3 21 STLINK OVERVIEW i5 2 u S Q u W Qa eus OEB a G aq u
11. 19 19 18 19 16 16 16 16 HALIFAX HALIFAX HALIFAX HALIFAX HALIFAX NATWEST HSBC HSBC HSBC NATWEST NATWEST NATWEST NATWEST NATWEST NATWEST NATWEST NATWEST NATWEST NATWEST NATWEST NATWEST NATWEST ROYAL BANK OF SCOTLAND ROYAL BANK OF SCOTLAND ROYAL BANK OF SCOTLAND ROYAL BANK OF SCOTLAND ROYAL BANK OF SCOTLAND ROYAL BANK OF SCOTLAND ROYAL BANK OF SCOTLAND BANK OF SCOTLAND BANK OF SCOTLAND BANK OF SCOTLAND BANK OF SCOTLAND CLYDESDALE BANK PLC CLYDESDALE BANK PLC BANK OF SCOTLAND NATWEST NATWEST HSBC YORKSHIRE BANK HALIFAX HALIFAX ROYAL BANK OF SCOTLAND ROYAL BANK OF SCOTLAND GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SWITCH SWITCH SWITCH SWITCH SWITCH SWITCH SWITCH SWITCH SWITCH SWITCH SWITCH SWITCH SWITCH SWITCH SWITCH SWITCH SWITCH SWITCH SWITCH SWITCH SWITCH SWITCH SWITCH SWITCH SWITCH SWITCH SWITCH SWITCH SWITCH SWITCH SWITCH SWITCH SWITCH SWITCH SWITCH SWITCH SWITCH SOLO SOLO SOLO SOLO SOLO SOLO SOLO 675906999 675907999 675908999 675909999 675910999 6759189
12. 4 3 PAYMENTTRUST IMPLEMENTATION KEY STAGES 4 12 4 4 METHOD OF PAYMENTS MOP S 4 12 BONY 40 11011 OZONE OCENE 4 13 4 6 THE DIFFERENCES WITH DOMESTIC MAESTRO AND SOLO 4 14 47 RESPONSE CODES wissiscccscascsenscesccsstecunecpsvesbeceveciscceuedvanctecbscetscoctiscsestevescodesseesnosetes 4 14 5 3DSecure with PaymentTrust 5 17 5 1 WHAT IS 3DSCECURE 5 17 A TYPICAL 3DSECURE TRANSACTION USING PAYMENT TRUST S HOSTED 5 17 5 2 MERCHANT APPLICATION REQUESTS STLINK FOR 3D SECURE ENROLMENT VERIFICATION REQUESTYPE V 5 17 5 3 ENROLMENT RESPONSE CONTAINS CUSTOMERS ISSUING BANK URL THE MERCHANT APPLICATION INSTRUCTS CUSTOMER S BROWSER TO REDIRECT TO THE PROVIDED UR 5 18 5 4 BROWSER REDIRECTS CUSTOMER S ISSUING BANK URL INCLUDING THE TERMURL AND MD FIELDS CUSTOMERS ATTEMPT TO AUTHENTICATE THEMSELVES BY ANSWERING THEIR CHALLENGE QUESTION OR ENTERING THEIR PIN 5 19 5 5 AUTHENTICATION RESULT IS POSTED BACK TO MERCHANT S COMMERCE APPLICATION sakke 5 20 5 6 MERCHANT S APPLICATION REQUESTS STLI
13. Bermuda BM Bhutan BT Bolivia BO Bosnia and BA Herzegovina Botswana BW Bouvet Island BV Guardian Trust 8 29 8 30 Trust BR IO BN BG BI KH CM CA TD CL CN CX CC CO KM CG CK CR CI HR cu CZ DK DJ DM DO Brazil British Indian Ocean Territory Brunei Darussalam Bulgaria Burkina Faso Burundi Cambodia Cameroon Canada Cape Verde Cayman Islands Central African Republic Chad Chile China Christmas Island Australia Cocos Keeling Islands Colombia Comoros Congo Cook Islands Costa Rica Cote D Ivoire Ivory Coast Croatia Hrvatska Cuba Cyprus Czech Republic Denmark Djibouti Dominica Dominican Republic Guardian 8 31 East Timor TP Ecuador EC Egypt EG El Salvador SV Equatorial GQ Guinea Eritrea ER Estonia EE Ethiopia ET Faeroe Islands FO Falkland FK Islands Malvinas Fiji FJ Finland FI France FR French Guiana GF French PF Polynesia Gabon GA Gambia GM Georgia GE Germany DE Ghana GH Gibraltar GI Great Britain GB Greece GR Greenland GL Grenada GD Guadeloupe GP Guam GU Guatemala GT Guinea GN Guinea Bissau GW Guyana GY Haiti HT Honduras HN Hong Kong HK Hungary HU Iceland IS India IN Indonesia ID Ir
14. Card Verification Value A unique verification value encoded on the magnetic strip of a card to validate card information during the authorization process The card verification value is calculated from the data encoded on the magnetic strip using a secure cryptographic process This method is used by Visa and Master Card CAV Cardholder Authentication Value used by PaymentTrust Ltd and Acquirer Base64 encoded data structure containing 3D Secure authentication results provided by the 3D Secure MPI usually Visa s CAVV or MasterCard s UCAF CAVV Visa s Cardholder Authentication Verification Value Base64 encoded data structure containing 3D Secure authentication results provided by the 3D Secure MPI CGI See Common Gateway Interface Chargeback The act of taking back funds that have been paid to a merchant for a disputed or improper credit card transaction The issuer can initiate this procedure 30 days after the deposit Chargeback Period The number of calendar days in which a card member may charge sales back to the merchant beginning with the day after the date the record is first received by the member or agent and continuing until the end of the day on which it is dispatched as a chargeback item Chargeback Reason Code A two digit code identifying the specific reason for the chargeback Check Guarantee A service which guarantees check payments up to the limit defined for the account provided that the merchant follows c
15. 075 862 VEB PaumentTrust SPANISH PESETA SWEDISH KRONA SWISS FRANC NEW TAIWAN DOLLAR BAHT TURKISH LIRA NEW TURKISH LIRA UAE DIRHAM POUND STERLING US DOLLAR UZBEKISTAN SUM BOLIVAR Count ry Code ESP SWE CHE TWD THA TUR TUR ARE GBR USA UZS VEN Country Name SPAIN SWEDEN SWITZERLAND TAIWAN THAILAND TURKEY TURKEY UNITED ARAB EMIRATES UAE UNITED KINGDOM UNITED STATES OF AMERICA UZBEKISTAN VENEZUELA RiskGuardian 14 50 ISO Country Code AF AL DZ AS AD AO Al AQ AG AR AM AW AU AT AZ BS BH BD BB BY BE BZ BJ BM BT BO BA BW BV BR IO BN BG BF BI KH CM PaumentTrust 14 APPENDIX VII COUNTRY CODES Country Name Afghanistan Albania Algeria American Samoa Andorra Angola Anguilla Antarctica Antigua and Barbuda Argentina Armenia Aruba Australia Austria Azerbaijan Bahamas Bahrain Bangladesh Barbados Belarus Belgium Belize Benin Bermuda Bhutan Bolivia Bosnia and Herzegovina Botswana Bouvet Island Brazil British Indian Ocean Territory Brunei Darussalam Bulgaria Burkina Faso Burundi Cambodia Cameroon Canada RiskGuardian 14 51 ISO Country Code CV KY CL CN CX CC co KM CG CK CR Cl HR CU CY CZ DK DJ D
16. CARD SET UP FORM Merchant Name RiskGuardian PaymentTrust 10 37 10 APPENDIX III PT ACQUIRING SET UP FORM PaymentTrust Ltd Identifier TMID Date PaymentTrust Ltd Sales Representative Merchant Acquiring Bank Name Merchant ID Credit amp Debit Cards Accepted Visa Visa Purchasing Master Card Maestro JCB Switch Solo Delta Electron American Express American Express Diners separate authorisations are required for these credit cards see PPD for Trust latest information Trading Currencies Please list all the currencies that you currently trade in Currencies Guardian StartDate Required z Z Z Z Z z 2 Z Z Z Z 2 2 2 lt lt lt lt lt lt lt lt lt lt lt lt Z lt 2 z lt lt lt lt lt lt lt z 1 oo IssueNo Required z Z Z lt Z z z z lt lt 2 z z z z z z lt lt lt lt lt lt lt lt lt lt lt lt lt lt Jz gt 11 APPENDIX IV DOMESTIC MAESTRO AND SOLO IssueNo Length o jo jo o jo Jo Joa Ja m N N j o O jo o o o o Trust Card Length 16 19 16 16 16 16 16 16 16 16 16 16 16 16 16 18 18 19 18 19 16 16 16 16 18 16 16 16 19 18 19 19
17. Invalid format Invalid message type Invalid POS system type A message has be sent to reverse previous time out transaction This TrxSource is not supported by the bank Not enough terminal ID at the time of transaction General error for PC card Amount is invalid Line items do not add up to summary total Not supported for batch Mandatory field is invalid or missing Total line items do not add up Line items missing Commodity code is invalid or missing Cross border information is invalid or missing Not a purchase card One of the ICC parameters submitted was invalid Card issuer wants card returned Call issuer Card reported as lost stolen Generic decline No other information is being provided by the issuer Issuer wants voice contact with cardholder Insufficient funds Issuer has declined request because CVV2 edit failed Trust 1 Description 2618 Unidentified error 2620 Unable to process 2622 Unable to authorize 2624 Merchant information incomplete 2626 Invalid CVN value 2627 Invalid track2 data 2628 Transaction not supported 2630 Invalid store ID 2632 Invalid 6 2634 Invalid format 2636 Invalid message type 2638 Invalid POS system type 2640 This transaction has been cancelled 2642 This TrxSource is not supported by the bank 2644 Insufficient Terminal IDs please try again 2700 Invalid file 2702 Amounts do not compute 2704 Line items do not add up to summary tota
18. MO TO Mail Order Telephone Order credit card transactions MPI Merchant Plugin 3 party software used by a merchant to authenticate 3D Secure transactions Guardian Trust 17 67 MSP See Member Service Provider N Network See Processor Also used to refer to communication networks like AT amp T or CompuServe Non Qualified A broad term that describes a transaction that did not interchange at the best rate because it was entered manually was not deposited in a timely manner or the data set required for the best interchange was not provided 0 ODFI See Originating Depository Financial Institution Open to buy The amount of credit available at a given time on a cardholder s account Operator A central clearing facility that provides distribution and deposit of ACH transactions ACH operators clear debits and credits electronically rather manually Currently four ACH Operators exist the Federal Reserve System which clears approximately 80 of all ACH transactions Visanet ACH New York ACH and American ACH Original Draft The original copy of the forms and signatures used in the transaction Also referred to as the hard copy Originating Depository Financial Institution A financial institution that initiates and warrants electronic payments through the ACH network on behalf of its customers Originator A company or other business entity that creates entries for introduction into the ACH network For example a b
19. RW Saint Helena SH Saint Kitts and KN Nevis Saint Lucia LC Guardian Trust 8 34 Saint Pierre PM and Miquelon Saint Vincent 6 Grenadines Samoa WS San Marino SM Sao Tome and ST Principe Saudi Arabia SA Senegal SN Seychelles SC Sierra Leone SL Singapore SG Slovakia SK Slovenia SI Solomon SB Islands Somalia SO South Africa ZA Spain ES Sri Lanka LK Sudan SD Suriname SR Svalbard and SJ Jan Mayen Islands Swaziland SZ Sweden SE Switzerland CH Syrian Arab SY Rep Taiwan TW Tajikistan TJ Tanzania TZ Thailand TH Togo TG Tokelau TK Tonga TO Trinidad and TT Tobago Tunisia TN Turkey TR Turkmenistan TM Turks and TC Guardian Trust 8 35 Trust TV UG UA AE US UY UZ VU VA VE VN VG VI WK EH YE YU ZR ZM ZW Caicos Islands Tuvalu Uganda Ukraine United Arab Emirates United States Uruguay Uzbekistan Vanuatu Vatican City State Holy See Venezuela Viet Nam Virgin Islands British Virgin Islands US Wake Island Wallis and Futuna Islands Western Sahara Yemen Yugoslavia Zaire Zambia Zimbabwe Guardian 9 APPENDIX Il PAYBACK CREDIT
20. account data 3341 Non executable rate 3354 Refund amount over limit 3361 Rate quote invalid 3362 Rate expired not escalated 3371 Rate revoked 3381 Transaction exceeds amount limit 3391 Batch size exceeds the maximum allowed 3614 FX system unavailable 3781 Refund not enabled 3783 Refund not possible 3785 Refund period expired 4050 Cardholder enrolled 4100 Cardholder authenticated 4200 Cardholder not enrolled Guardian 12 47 Acquirer 3D 3D 3D 3D 3D 3D 3D 3D 3D 3D 3D 3D 3D 3D 3D 3D Explanation Credit card is not recognized as a 3D Secure card Cardholder failed to answer password challenge question Invalid currency Invalid merchant setup Please call support Invalid merchant account number Invalid credit card number Invalid credit card expiration date Invalid amount Specific and relevant data within transaction is inaccurate or missing Invalid transaction Enrolment process failed Autheniication process failed MPI not available Directory server not available Internal MPI error Invalid Secureld Trust Message Code Description 4202 Card not participating in 3D Secure 4204 Cardholder not authenticated 4206 Invalid currency 4207 Invalid merchant setup Please call support 4208 Invalid mercha
21. by Visa and MasterCard for each credit card transaction This fee is part of the discount rate Internet Merchant Bank Account A special account required for merchants who wish to sell goods and services over the Internet and accept credit cards as payment This type of account is different than a typical merchant account and is considered similar to a card not present transaction Internet Service Provider A company that offers access to individuals or companies to connect to the Internet ISO See Independent Sales Organization ISP See Internet Service Provider Issuer An institution that issues plastic cards to cardholders Issuing Bank See Issuer M Magnetic Ink Character Recognition MICR The process used to read the string of numbers on the bottom of a check The MICR characters 0 9 and 4 special characters are printed in special toner or ink When the check is passed Guardian Trust 17 66 through reader sorter it passes through two magnetic heads The first one 5 the MICR character and the second one reads the now magnetic MICR character Also referred to as Magnetic Ink Check Reader Manual Entry Credit card information that is entered via the e Transaction Terminal of PaymentTrust Payment Manager Manual Refund A transaction that returns the specified amount to the cardholder s account MasterCard An association of banks that governs the issuing and acquiring of MasterCard credit card transaction
22. deposit request per authorization and this must be for a value lesser or equal to the authorized amount A Refund R request returns a specified amount to cardholder s account The following refund is submitted where a previous deposit transaction has been processed by the system Please note that refunds for gaming clients as part of the Visa Credit Funds Transfer programme must be sent to PaymentTrust as Forced Refunds Details of this Transaction can be found in the Developer s Guide V8 0 16 page 31 A Simultaneous Authorization and Settlement S charges the specified amount against the cardholder s account and marks the transaction for funds collection during the next deposit cycle with the financial institution This single request initiates both an authorization and a deposit request in the PT system It should only be used in situations where merchants fulfil their orders immediately The deposit portion of the C request will only proceed once a successful authorization has been obtained A Cancellation Any transaction that is showing 2050 request pending can be cancelled A Payback P request has three methods Guardian Trust 4 11 1 Credit card This is a payment going back to a Credit Card Issuer quoting the full card number as a reference and is only available to UK issued Mastercard and Visa Payments are made via BACS Ltd in the UK 2 Physical Cheque This is a physical cheque being
23. not accept payment Method of payment is invalid for this merchant Invalid information entered No Sort code or Account Number in Payback system Trust Message Code Description 2000 No answer 2001 Dropped the transaction 2040 Pending to be finalized 2050 Request pending 2051 Request Pending with Errors 2053 Notification Received 2100 Transaction Authorized Approved 2101 Validated 2102 Verified 2103 Prenoted 2104 Transaction approved 2105 Notification Cleared 2150 Funds deposited successfully 2160 Funds refunded successfully 2170 Transaction cancelled successfully 2200 Transaction Declined 2202 Cancellation Declined 2203 Cancellation cannot be performed 2204 Soft AVS 2206 Invalid currency 2208 Invalid merchant account number 2210 Invalid credit card number 2212 Invalid credit card expiration date 2214 Credit card expired 2216 Invalid amount 2218 Invalid method of payment 2219 Credit card is not valid for this transaction 2220 Invalid method of payment for merchant account number 2222 Invalid field data 2223 No Sort code or Account Number in Payback system Guardian Acquirer PT FS PH and BV PT PT AX FS PH PH PH LY BG ST FS PH PH PH BMS ST and LY PH BMS ST and LY PH BMS ST and LY PH NA PH
24. own samples and applications to send transaction information but must conform to the string requirements set in this document PaymentTrust Secure Transaction Network Merchants uit VPN Merchants Transaction Services Merchants Fig 2 Overview of Network Implementation Possibilities The STN is comprised of three layers Descriptions of these layers can be found below in Figure 3 Authentication Communication STlink within STN lt gt TM Access A SSL VPN Cryptography Network TCP IP Internet Platform Independent Fig 3 TM Secure Transaction Services Network Communication Protocol Layers Guardian Trust 24 2 2 Network Layer This layer is handled exclusively by the designated Internet Service Provider 2 3 Security Layer The Security Layer will be handled either by 128 bit SSL certificate or a secure tunnel Triple DES VPN conforming to the IPSEC standard PaymentTrust will provide at an additional cost the VPN hardware equipment if required The Security Layer also includes the Merchant access layer into the PaymentTrust Secure Transaction Network STN This involves the use of a Merchant ID a Username and Password which are sent as a string to STLink 2 4 STLink Application The Application Layer manipulates data using HTTP S GET POST request or an XML request and communicates via standard ports 443 for SSL or port 80 for VPN The system can intelligently proces
25. pairs by the amp symbol For instance key 1 some value amp key2 some value In the case of STLink there is one key value pair The key is StringIn and the value is any of TMI transaction types The POST data is always attached to the HTTP header after 2 new lines An additional 2 new lines must be appended after the POST data to terminate the HTTP request as a whole 2 6 Example Request STN String This string demonstrates the key value pair of a POST request and contains the data of a partial transaction StringInz VersionUsed 1 MerchantId 100000 UserName Mariah UserPassword rr 87uy TransactionType A IsTest 1 TimeOut 90000 2 7 Example Request STN XML This XML document demonstrates the key value pair of a POST request and contains the data of a partial transaction Stringln lt xml version l1 0 gt lt TMSTN gt lt VersionUsed gt 1 lt VersionUsed gt lt Merchantld gt 100000 lt Merchantld gt lt UserName gt Mariah lt UserName gt lt UserPassword gt rr87uy lt UserPasswo rd gt lt TransactionType gt A lt TransactionType gt lt IsTest gt 1 lt IsTest gt lt TimeOut gt 90000 lt TimeOut gt lt TMSTN gt Though STLink Batch accepts POST requests it is important to note that the StringIn key is not required and must not be submitted to the STLink Batch for batch requests If not the batch request will be rejected for reason of being a malformed XML document The and amp symbols are
26. s 2 3 2 2 NETWORK LAYER 4 5 a ai u aS S soe PN P a NR SCHO TEE 2 5 2 3 SECURITY LAYER ii wd a qaq aG kaqa Gs Sa a SGS 2 5 2 4 STLINK APPLICATION scsciscsdsscvsccsvesecccseadss csascavoneasesocccsoaccsducessceesessusececsessiscscaseveave 2 5 2 5 NETWORK REQUIREMENTS 2 6 2 6 EXAMPLE REQUEST STN STRING 2 7 2 7 EXAMPLE REQUEST STN XML 2 7 2 8 EXAMPLE XML WITH ESCAPING 2 8 2 9 EXAMPLE HTTP POST REQUEST FOR STLINK 2 8 2 10 EXAMPLE HTTP POST REQUEST FOR STLINK BATCH 2 8 3 15 a TAA 3 9 3 1 RISK GUARDIAN IMPLEMENTATION KEY STAGES 3 9 3 2 LOGIC TSCORE AND TRISK iso co a du Gda Ga sopra PY an 3 10 4 Payment EFUSL riri u 4 11 4 1 WHAT IS PAYMENTTRUST 4 11 4 2 REQUESTYPES csieisszsoscs lt tccicseasess3scseacassensvsevacesesesosassusessavevcesasesocesassitessnsccavaeeessectes 4 11
27. sent out to the recipient via the conventional post or via courier 3 Electronic Credit This is an Electronic payment going back directly to a Clients bank account A document entitled Payback Service Overview is available on request which cover the payback service in detail A Bank Transfer B a document entitled Bank Transfer Service Overview is also available on request 4 3 PaymentTrust Implementation key stages Technical evaluation Understanding our API and what impact it will have on your system Development Actual coding based on API and system changes required Testing Full application end to end testing Live bank set up Merchant account details are given to the merchant by the Acquiring Bank based on Currency transaction type channel Internet Moto digital TV etc these details are entered into the PaymentTrust live back end systems Terminal ID s are allocated by PaymentTrust and sent to the Acquiring bank for set up on their live systems Once the details are active on both systems then everything is ready and go live can commence Go live 4 4 Method of Payments MOP s e CC Visa and Mastercard credit and debit products visa credit visa delta visa electron Mastercard Credit International Maestro e DS Domestic Maestro and Solo e CQ Payback via Cheque e Payback via Electronic Credit e NT Neteller P2 Pay2 e DC PIN enabled debit cards PC Purchas
28. standard characters used in the HTTP protocol to separate key value pairs there fore it is important that no and 4 symbols be found in the transactions although this can be overcome by escaping all characters after the StringIn key by using URL encoding URL encoding allows the and other HTTP characters to be included in the transaction Example StringIn lt URL encoded transaction gt Because STLink Batch does use the StringIn key the batch request must not be URL encoded If not the batch request will be rejected for reason of being a malformed XML document XML has its own encoding rules For one the STLink and STLink Batch will support any XML document that has been encoded in an 8 bit ANSI character set such as ISO 8859 1 Second of all XML has its own share of special characters If any of these characters are to be included within the data of a specified transaction tag they to must be escaped The table below lists those characters and their escape sequence Guardian Trust 2 7 lt Less than Alt gt Greater than amp gt amp Ampersand amp amp i Single quote amp apos Double quote amp quot 2 8 Example XML with escaping lt xml version 1 0 gt lt root gt lt tag1 gt The text in here contains a less than symbol Here it is amp lt lt tag1 gt lt tag2 gt The text in here contains a double quote symbol Here it is amp quot lt tag2 gt lt root gt
29. updates e Focused on identity theft through Internet aware as well as traditional parameters e Over 60 parameters and 300 algorithms and cross checks performed 3 1 Risk Guardian Implementation key stages Technical evaluation Understanding our API and what impact it will have on your system Development Actual coding based on API and system changes required Profiling Understanding merchant s requirements in terms of blocking lists previous fraud etc etc Appendix X is set up form for RG where most of this information is obtained Testing Full end to end testing of your application Fine Tuning Sending live data to the Risk Guardian test system for the initial 2 weeks in order that the risk profile previously completed is 100 in line with the Merchant s requirements Please note this is still testing and the logic talked about earlier in this document should be ignored until go live Basically the merchant should not act upon the TScore s until profiling is complete Go live Guardian Trust 3 9 3 2 Logic Tscore and TRisk Risk Guardian is works on a scoring basis 1 meaning an instant pass and 100 meaning an instant failure Enclosed is a sample transaction Request StringInz VersionUsed 3 MerchantId 100162 OrderNumber HelpDeskTest Ty peof Sale H TransactionType RG IsTest 1 TimeOut 90000 UserName umberdella Us erPassword della AcctN ame Eric Smith MOP CC AcctNumber 4000000000000002 ExpD
30. 000 400166999 VISA DEBIT NS US rs CORE CREDIT UNION 7367 707 N 400167000 400167999 VISA DEBIT VD US PINNACLE CREDIT UNION hig N 400168000 400168999 ELECTRON VE BR BANCO DO BRASIL S A 16 07 NZ NEW HORIZONS CREDIT UNION 16 OED ad NEW HORIZONS CREDIT UNION 1 N nge N 400169000 400169158 VISA CREDIT 400169159 400169159 VISA CREDIT Wa US T 400169160 400169999 VISA CREDIT us NEW HORIZONS CREDIT UNION 16 wpisz NU h 5 BRASIL BRASIL BRASIL BRASIL BRASIL CITIZENS CITIZENS BANK DO BRASIL 5 16 ELECTRON VE I ELECTRON VE 400174000 400174999 ELECTRON 400176000 400176999 ELECTRON VE 400178000 400178999 LECTRON 2 400179000 400179999 VISA DEBIT 400181000 400181999 VISA DEBET 400182000 400182999 3 400183000 400183999 QUALTRUST FEDERAL CREDIT NIO gales Oe N BRASIL BRASIL BRASIL BRASIL BRASIL BRASIL BRASIL Pay mentTrust 400186000 400186999 400187999 ELECTRON VE 400189999 ELECTRON 4001919997 i pube RiskGuardian 7 URL S AND TOOLS Test and Live transaction system Primary https stn01 sectranet com stlinkssl stlink dll https stn01 sectranet com stlinkssl stlinkbatch dll Batch Secondary https stI007 kontek cc stlinkssl st
31. 8 19 ROYAL BANK OF SCOTLAND ROYAL BANK OF SCOTLAND BANK OF SCOTLAND BANK OF SCOTLAND BANK OF SCOTLAND BANK OF SCOTLAND NATWEST HSBC NATWEST NATWEST NATWEST NATWEST NATWEST NATWEST NATWEST NATWEST NATWEST NATWEST NATWEST NATWEST NATWEST YORKSHIRE BANK CLYDESDALE BANK PLC CLYDESDALE BANK PLC CLYDESDALE BANK PLC CLYDESDALE BANK PLC NATWEST GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB GB SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SW SOLO SOLO SOLO SWITCH SWITCH SOLO SOLO SOLO SOLO SOLO SOLO SOLO SOLO SOLO SOLO SOLO SOLO SOLO SOLO SOLO SOLO SOLO SOLO SOLO SOLO SOLO SOLO 676710999 676711999 676712999 676713999 676714999 676715999 676718999 676740999 676750999 676751999 676752999 676753999 676754999 676755999 676756999 676757999 676758999 676759999 676760999 676761999 676762999 676770999 676774999 676779999 676782999 676795999 676798999 Guardian 676710000 676711000 676712000 676713000 676714000 676715000 676718000 676740000 676750000 676751000 676752000 676753000 676754000 676755000 676756000 676757000 676758000 676759000 676760000 676761000 676762000 676770000 676774000 676779000 676782000 676795000 676798000
32. 99 675938999 675939999 675940999 675950999 675951999 675952999 675953999 675954999 675955999 675956999 675957999 675958999 675959999 675960999 675961999 675962999 675963999 675964999 675965999 675966999 675967999 675968999 675969999 675970999 675971999 675972999 675973999 675982999 675995999 675996999 675998999 676701999 676703999 676705999 676706999 676707999 676708999 676709999 Guardian 675906000 675907000 675908000 675909000 675910000 675918000 675938000 675939000 675940000 675950000 675951000 675952000 675953000 675954000 675955000 675956000 675957000 675958000 675959000 675960000 675961000 675962000 675963000 675964000 675965000 675966000 675967000 675968000 675969000 675970000 675971000 675972000 675973000 675982000 675995000 675996000 675998000 676701000 676703000 676705000 676706000 676707000 676708000 676709000 z z z z z z z z z z z z z z z z lt lt lt lt lt lt z 11 40 z lt lt lt lt lt lt lt lt lt lt lt lt lt lt lt lt lt lt lt lt lt zlziziziz u fo Jo Jo Jo Joa Jo Jo Jo lo Jo lo lo Trust 16 16 16 16 16 16 19 18 19 19 19 19 19 19 19 19 19 19 19 19 19 19 18 18 18 1
33. 999 633481999 633490999 633491999 633492999 633493999 633494999 633495999 633496999 633497999 633498999 633499999 671850999 671851999 671852999 671853999 671854999 671855999 671856999 675901999 675905999 Guardian CardBin1 633300000 633301000 633302000 633303000 633304000 633311000 633312000 633450000 633451000 633452000 633453000 633454000 633455000 633456000 633457000 633461000 633473000 633476000 633478000 633481000 633490000 633491000 633492000 633493000 633494000 633495000 633496000 633497000 633498000 633499000 671850000 671851000 671852000 671853000 671854000 671855000 671856000 675901000 675905000 z z z z z z lt lt lt lt lt lt lt lt lt lt lt lt lt lt Z Z Z Z Z Z Z Z Z lt lt lt lt lt lt lt gt gt gt gt lt lt lt lt lt lt lt lt lt lt lt lt lt lt lt lt z z z z 2 2 2 2 z z lt lt lt lt lt lt z z gt u Jo Jo Jo Jo Jo Jo Jo Jo Jo Jo Jo Jo Jo lo lo lo lo jojo O o l o Jo Trust 16 16 16 16 16 19 18 18 18 19 19 19 19 19 19 19 19 19 19 19 19 19 16 16 16 16 16 16 16 16 16 16 16 16 16 16
34. M DO TP EC EG SV GQ ER EE ET FO FK FJ F FR GF PF GA GM GE DE GH GI PaumentTrust Country Name Cape Verde Cayman Islands Central African Republic Chad Chile China Christmas Island Australia Cocos Keeling Islands Colombia Comoros Congo Cook Islands Costa Rica Cote D lvoire Ivory Coast Croatia Hrvatska Cuba Cyprus Czech Republic Denmark Djibouti Dominica Dominican Republic East Timor Ecuador Egypt El Salvador Equatorial Guinea Eritrea Estonia Ethiopia Faeroe Islands Falkland Islands Malvinas Fiji Finland France French Guiana French Polynesia Gabon Gambia Georgia Germany Ghana Gibraltar RiskGuardian Country ISO Country Code Great Britain GB Greece GR Greenland GL Grenada GD Guadeloupe GP Guam GU Guatemala GT Guinea GN Guinea Bissau GW Guyana GY Haiti HT Honduras HN Hong Kong HK Hungary HU Iceland IS India IN Indonesia ID Iran IR Iraq IQ Ireland IE Isle of Man U K IM Israel IL Italy IT Jamaica JM Japan JP Johnston Island JT Jordan JO Kazakhstan KZ Kenya KE Kiribati KI Korea North KP Korea South KR Kuwait KW Kyrgyzstan KG Lao P Dem R LA Latvia LV Lebanon LB Lesotho LS Liberia LR Libyan Arab Jamahiriya LY Liechtenstein LI Lithuania LT Luxembourg LU RiskGuardian PaymentTrust 14 52
35. NK FOR VALIDITY OF THE AUTHENTICATION RESPONSE REQUEST YPE A 5 20 5 7 MERCHANT S APPLICATION PREPARES A STANDARD AUTH SALE WITH PROVIDED 3D SECURE FIELDS CAV SECUREID AND SENDS A REQUEST TO STLINK 5 22 5 8 A RECEIPT PAGE IS RETURNED TO THE CUSTOMER WITH ACCEPTED OR DECLINED MESSAGE are eaissasi 5 4 6 Bank Indentification Table BIN Table 6 25 6 1 SCREENSHOT OF DATA CSV FORMAT 6 25 6 2 SCREENSHOT OF DATA TXT FORMAT 6 26 7 URE S nd Ti AAA 7 27 ALL TEST AND LIVE TRANSACTION SYSTEM 7 27 RG TEST WEBSITE Lasker 7 27 LEST WEBSITE obi BO dan PEOR ua eV WEE PER 7 27 8 Appendix I RG Set up Form 8 28 9 Appendix PayBack Credit Card Set up Form 9 36 10 Appendix III PT Acquiring Set up Form 10 37 11 Appendix IV Domestic Maestro and Solo Bins 11 38 12 Appendix V message response codes 12 41 13 App
36. SH POUND SHEKEL ITALIAN LIRA JAMAICAN DOLLAR YEN JORDANIAN DOLLAR WON KUWAITI DINAR LUXEMBOURG FRANC MALAYSIAN RINGGITT MALTESE LIRA MEXICAN NUEVO PESO MOROCCAN DIRHAM NETHERLANDS GUILDER NEW ZEALAND DOLLAR NORWEGIAN KRONE RIAL OMANI BALBOA PHILIPPINE PESO NEW ZLOTY PORTUGUESE ESCUDO QATARI RIAL RUSSIAN RUBLE SAUDI RIYAL SINGAPORE DOLLAR RAND Count ry Code AUS AUT BHR BEL BMU BRA CAN COL CYP CZE DNK EUR FIN FRA PYF DEU GRC HKG HUN ISL IND IDN IRL ISR ITA JAM JPN JOR KOR KWT LUX MYS MLT MEX MAR NLD NZL NOR OMN PAN PHL POL PRT QAT RUS SAU SGP ZAF following currencies Country AUSTRALIA AUSTRIA BAHRAIN BELGIUM BERMUDA BRAZIL CANADA CYPRUS CZECH REPUBLIC DENMARK EUROPEAN UNION FINLAND FRANCE FRENCH POLYNESIA GERMANY GREECE HONG KONG HUNGARY ICELAND INDIA INDONESIA IRELAND ISRAEL ITALY JAMAICA JAPAN JORDAN KOREA REPUBLIC OF KUWAIT LUXEMBOURG MALAYSIA MALTA MEXICO MOROCCO NETHERLANDS NEW ZEALAND NORWAY OMAN PANAMA PHILIPPINES POLAND PORTUGAL QATAR RUSSIAN FEDERATION SAUDI ARABIA SINGAPORE SOUTH AFRICA RiskGuardian 13 49 kaj li Currency Code 724 ESP 752 SEK 756 901 TWD 764 THB 792 TRL 949 TRY 784 AED 826 GBP 840 USD 860
37. a Northern Cape RiskGuardian 15 58 Country za za za au au au au au au au au PaymentTrust State Region Northern Province North West Western Cape Australian Capital Territory New South Wales Northern Territory Queensland South Australia Tasmania Victoria Western Australia RiskGuardian 16 APPENDIX IX HOW TO CONTACT US Our product support specialists provide technical assistance to current customers or maintenance customers prospective customers who are evaluating our products and services Our support specialists handle questions on the use configuration and functionality of our products and services and are committed to providing timely responses to your enquiries Contact us at support Qpaymenttrust com Supportline office hours Dialing from within the UK 0845 3007567 Dialing from outside the UK 44 0 1932 690237 Guardian Trust 16 59 17 GLOSSARY OF PAYMENT PROCESSING TERMINOLOGY A ABA See American Bankers Association ABA Routing Number The American Bankers Association ABA routing number is a unique bank identifying number that directs electronic ACH deposits to the proper bank The routing number precedes the account number printed at the bottom of a check and is usually printed with magnetic ink Acco
38. ace API is the interface by which an application program Guardian Trust 17 60 accesses the operating system and other services An API is defined at source code level and provides a level of abstraction between the application and the kernel to ensure the portability of the code Approval Any transaction that is approved by the cardholder or the check issuer s bank Approvals are requested via an authorization An approval is the opposite of a declined transaciion Arbitration The procedure used to determine the responsibility for a chargeback related dispute between a merchant and buyer Asynchronous A method of transmitting data in which the data elements are ideniified with special start and stop characters An asynchronous modem cannot communicate with a synchronous modem Compare with Synchronous e g standard Hayes compatible modem ATM See Automated Teller Machine Auth Only A transaction in which the merchant does not intend to charge the cardholder until a later time if at all See Prior Authorized Sale Authorization An authorization is a request to charge a cardholder It reduces the cardholder s open to buy but does not actually capture the funds An authorization is the first transaction in the delayed deposit process It does not bill the card until a delayed capture transaction is issued The authorization must be deposited in order to charge the account If it is not used within a certain time period it will dr
39. an IR Iraq IQ Ireland IE Guardian Trust 8 32 Trust IM IL IT JM JP JT JO aie KI KR KW KG LA LV LB LS LR LY LI LT LU MO MK MG MW MY MV ML MT MH MR MU MX FM MI MD MC Isle of Man U K Israel Italy Jamaica Japan Johnston Island Jordan Kazakhstan Kenya Kiribati Korea North Korea South Kuwait Kyrgyzstan Lao P Dem R Latvia Lebanon Lesotho Liberia Libyan Arab Jamahiriya Liechtenstein Lithuania Luxembourg Macau Macedonia Madagascar Malawi Malaysia Maldives Mali Malta Marshall Islands Martinique Mauritania Mauritius Mexico Micronesia Midway Islands Moldova Monaco Guardian Mongolia MN Montserrat MS Morocco MA Mozambique MZ Myanmar MM Namibia NA Nauru NR Nepal NP Netherlands NL Netherlands AN Antilles New Caledonia NC New Zealand NZ Nicaragua NI Niger NE Nigeria NG Niue NU Norfolk Island NF Northern MP Mariana Islands Norway NO Oman OM Pakistan PK Palau PW Panama PA Papua New PG Guinea Paraguay PY Peru PE Philippines PH Pitcairn PN Poland PL Portugal PT Puerto Rico PR Qatar QA Reunion RE Romania RO Russian RU Federation Rwanda
40. and solo transaction have to be sent in GBP sterling currency only CurrencyID 826 Appendix D shows which switch solo card range need an issue number or a start date to process a transaction 4 7 Response Codes A full list of response codes can be found in the Developer s guide Enclosed here is a list of the common response codes Payment processing with acquiring bank Streamline and Barclays 2100 Transaction Approved 2200 Transaction Declined 2958 Call Acquirer Issuer 2614 Acquirer Issuer Unavailable 2210 Invalid Credit card number 2212 Card expired 2644 Insufficient Terminal 5 Payback Credit card 2050 Request pending successfully processed will be processed in next batch 2223 No sort code and account number in the payback system Guardian Trust 4 14 4 5 2219 Not supported the card number is non UK Please note for transactions that go on line in the case of RequestType s A s and S s if successful the transactions will received a response code 2100 transaction approved This is also the case for Switch Solo refunds For transactions which are batched and processed at a later time like refunds R s or payback P s then a successful response is 2050 request pending Switch Refund request example Request StringInz VersionUsed 1 MerchantId 100625 TransactionType PT IsTest 1 Type ofSale S TimeOut 90 UserName TMISUPPORT UserPassword tmis
41. ansactions are transmitted as a group for processing Batch Deposit An electronic bookkeeping procedure that sends all funds from captured transactions to the merchant s acquiring bank for deposit PaymentTrust automatically submits all captured transactions for deposit on a daily basis The time span in which funds reach the merchant account after deposit is 1 5 days but varies by acquiring bank BIN See Bank Identification Number Binary Executable A universal character coding system Bundled Rate A discount rate that includes communication costs as well as transaction fees Also referred to as a flat rate 0 Cancellation Reversal of a partial or an entire authorization charge prior to the deposit process It prevents a transaciion from being deposited A Cancellation does not remove any hold on the cardholder s open to buy Capture The process of capturing funds from an authorized transaciion Card Issuer See Issuer Issuing Bank Card Not Present A merchant environment where the cardholder and the card are not physically present at the time of purchase The following are typical card not present transactions mail telephone order business to business and internet based transactions Card Present A merchant environment where the cardholder and the card are physically present at the time of purchase Card present transactions account for the majority of credit card transactions in the world Guardian Trust 17 2
42. ate 092002 CurrencyId 1 24 Amount 56 78 Title Mr FirstName Eric MiddleName LastName Smith Suf fix 3rd Address1 2130 Gold Address2 Suite 101 Address3 City Chicago StateCode il ZipCode 12345 6789 CountryCode us PhoneNumber 6188565656 Email johns aol com ShipTo Title Mr ShipToFirstName Eric ShipToMiddleName ShipToLastName Smith S hipToSuffix 3rd ShipToAddress1 123 Road ShipToAddress2 ShipToA ddress3 ShipToCity Seattle ShipToStateCode wa ShipToZipCode 34567 8907 ShipToCountryCode us ShipToPhoneNumber 6188565656 REMOTE ADD R 205 188 146 23 HTTP USER AGENT MSIE 5 0 Windows NT HTTP ACCEPT LANGUAGF en fr CA HTTP ACCEPT CHARSET iso 8859 1 utf 8 HTTP REFERER www cnn com IsMember 3 Response MerchantId 100162 TransactionType RG OrderNumber HelpDeskTest StrId 1780 43 MessageCode 100 GttId 1329853 tScore 100 0000 tRisk 56 This transaction scored 100 because the card number is invalid Please note that transactions can score for a number of reasons i e cross reference or velocity controls Simply if the TScore is Greater than the TRisk then the transaction had failed your risk profile and shouldn t be processed By default if the TScore is equal to or Lower that the TRisk then the transaction should proceed for processing with the acquiring bank either via PaymentTrust or another Payment Processor Guerdian Trust 4 PAYMENT TRUST 4 1 What is PaymentTrust PaymentTrust is capable of receiving multiple request types w
43. atically flagged for capture include simultaneous authorization deposit and refund V Visa An association of banks that governs the issuing and acquiring of Visa credit card transactions Guardian Trust 17 72
44. d Principe Saudi Arabia Senegal Seychelles Sierra Leone Singapore Slovakia Slovenia Solomon Islands Somalia South Africa Spain Sri Lanka Sudan Suriname Svalbard and Jan Mayen Islands Swaziland Sweden Switzerland Syrian Arab Rep Taiwan Tajikistan Tanzania Thailand Togo Tokelau RiskGuardian ISO Country Code TO TT TN TR TM TC TV UG UA AE US UY UZ VU VA VE VN VG VI WK WF EH YE YU ZR ZM ZW PaymentTrust 14 55 Country Trinidad and Tobago Tunisia Turkey Turkmenistan Turks and Caicos Islands Tuvalu Uganda Ukraine United Arab Emirates United States Uruguay Uzbekistan Vanuatu Vatican City State Holy See Venezuela Viet Nam Virgin Islands British Virgin Islands US Wake Island Wallis and Futuna Islands Western Sahara Yemen Yugoslavia Zaire Zambia Zimbabwe RiskGuardian 15 56 15 APPENDIX VIII STATE PROVINCE REGION CODES Country us us us us us us us us us us us us us us us us us us us us us us us us us us us us us us us us us us us us us us PaymentTrust AL AK AS AZ AR AE AP AA 00 CT DE DC FM FL GA GU State Region Alabama Alaska American Samoa Ari
45. deposited several days after the original authorization Surcharges Any additional charges to a merchant s standard processing fee They are a result of non qualified transactions of different communication methods Suspense A state in which a batch of transactions is not released to interchange because of problems noticed by the host computer Requires human intervention to fix the problem and deposit the batch Swiped Card Credit card information that is transferred directly as a result of swiping or sliding the credit card through a card reader Swiped cards are used in retail and other card present situations The information magnetically encoded in the magnetic strip includes confidential data that helps validate the card Synchronous A method of transmitting data in which the data elements are sent at a specific rate so that start and stop characters are not needed Used by older modems such as Amex PIP terminals See Asynchronous T T 8 E Card See Travel and Entertainment Card Tender Type The type of money used when processing a transaction for example credit card check ACH Purchase Card etc Guardian Trust 17 71 Third Party Processor A non member agent employed by an acquiring bank which provides authorization deposit and merchant services to the bank s merchant Track 1 Bank discretionary data encoded on a magnetic stripe Includes credit card account number cardholder name and expiry date This ma
46. ed based on the 3D Secure TXStatus value the merchant may be able to send an authorization Guardian Trust 5 20 Customer Customer s Browser Bank 2 INTERNET Merchant STLink Commerce Application Guardian Trust 5 21 TXStatus VISA MasterCard N Merchant must not send Merchant must not send authorization and decline authorization and decline customer s purchase customer s purchase See Step 5 8 See Step 5 8 A Merchant sends authorization Merchant sends authorization request with 3D Secure fields request with 3D Secure fields ECI 06 ECI 01 CAV Send if available CAV Send if available Secureld Secureld submitted to Secureld Secureld submitted to MPI during enrolment verification MPI during enrolment verification See Step 5 8 See Step 5 8 U Merchant can decide to send Merchant can decide to send authorization authorization ECI 07 ECI N A CAV N A CAV N A Secureld Secureld submitted to Secureld Secureld submitted to MPI during enrolment verification MPI during enrolment verification See Step 5 8 See Step 5 8 N A Merchant must not send Merchant must not send authorization and decline authorization and decline customer s purchase customer s purchase See Step 5 8 See Step 5 8 5 7 Merchant s application prepares a standard auth sale with provided 3D Secure fields ECI CAV Secureld and sends a request to STLink Guardian Trust 5 22 5 23 Customer Brows
47. encoded or both on a plastic card that identifies the issuer and the particular cardholder account The PAN consists of a major industry identifier issuer identifier individual account identifier and check digit Prior See Prior Authorized Sale Prior Authorized Sale A transaction for which authorization was obtained before a transaction takes place e g when a merchant has to call for authorization before services are rendered The approved authorization request may be held for an extended length of time before a card is present or not Prior Auth See Prior Authorized Sale Private Label Card A bank card that can be used only in a specific merchant s store Typically not a bank card Processing Date The date on which the acquiring bank processes the transaction Processor A large data center that processes credit card transactions and deposits funds to merchants A processor connects to the merchant on behalf of an acquirer via a gateway or POS system to process payments electronically Processors edit and format messages and switch to bank card networks They provide files for clearing and deposit and other value added services Q Guardian Trust 17 69 Qualification A level at which a transaction interchanges The level of qualification is dependent on how a credit card number is entered how quickly a transaction is deposited the type of industry and other specific information R RDFI See Receiving Depository Fina
48. endix VI currency codes 13 48 14 Appendix VII country codes 14 50 15 Appendix VIII state province region codes 15 56 16 Appendix IX how to contact us 16 59 17 Glossary of payment processing terminology 17 60 1 DOCUMENT OVERVIEW 1 1 Purpose of the Document This document provides an overview of how to implement PaymentTrust s core services Risk Guardian and PaymentTrust Additionally to this there are subsequent documents listed below covering our Payback services and Bank Transfer Service these documents should be read in conjunction with this when implementing these services The Developer s guide is the main document for understanding message formats and communication methods 1 2 Who should read this document System Integrators and Project Managers responsible for implementing PaymentTrust s products and services 1 3 Terminology The following is a glossary of terms and abbreviations used in this document Term or Abbreviation Definition PT PaymentTrust STLink PaymentTrust s Secure Transaction Link STN PaymentTrust s Secure Transact
49. er Merchant Commerce Application MasterCard Merchant sends authorization request with 3D Secure fields ECI 02 CAV Send if available Secureld Secureld submitted to MPI during enrolment verification See Step 8 Trust Customer s Bank INTERNET VISA Merchant sends authorization request with 3D Secure fields ECI 05 CAV Send if available Secureld Secureld submitted to MPI during enrolment verification See Step 8 STLink TXStatus Y Guardian 5 8 receipt page is returned to the customer with accepted or declined message Customer Customer s Browser Bank INTERNET Merchant STLink Commerce Application Guardian Trust 5 24 6 25 6 BANK IDENTIFICATION TABLE BIN TABLE down load the latest BIN table go to the following URL httos www trustmarque ca Paymenttrust1 2 Live BINSDownload And type in the username and password If asked below Username support Password tmicsupport Right click on tmibin csv A pop up window appears click on save Change file extension from csv to txt and then click save to your desired location It will take approximately 4 minutes to download and will be a 7 MB file The BIN table may be downloaded as often as required PaymentTrust will update the table weekly on a Wednesday at 8 00am GMT PaymentTrust will erase all BINs on this day and upload the new table from NatWest Therefore t
50. et Virtual Private Network VPN connection using the Triple DES standard Firewall VIA Internet HTTP XML HTTP HTTPS XML HTTPS XML VPN Hardware Direct Link SSL 128 bit Triple DES On Demand Secure Transaction Link System Serialization and Dispatch ee lh er pee ere ee ee eee BIN request PaymentTrust RiskGuardian and other services Fig 1 Overview of PaymentTrust s Secure Transaction Network 2 1 STLink Overview PaymentTrust s Secure Transaction Link STLink is a high performance communication solution STLink is a service of on demand secure communication links between the PaymentTrust Secure Transaction Network STN and a PaymentTrust Client Merchant STLink conforms to encryption and protocol standards as described below See Figure 2 for network implementation Transactions sent between a PaymentTrust Merchant and the PaymentTrust STN travel securely via a 128 bit SSL Internet connection The STLink system also allows for a hardware encryption method solution using VPN technology amp IPSEC standards The Merchant s own application will reside on his system and will be accessible via major web servers Transaction platforms and back end systems Merchants will be using PaymentTrust s technical specs as guidance to develop their own applications PaymentTrust provides Merchants example code in ASP VB C Java HTML and RiskGuardian PaymentTrust 23 XML Merchants may choose to use their
51. gnetic strip is read only and its contents are defined in ISO 7813 Track 2 Bank discretionary data encoded on a magnetic stripe Track 2 includes credit card account number and expiry date This magnetic strip is read only and its contents are defined in ISO 7813 Transaction The action between a cardholder and a merchant that results in activity on the cardholder s account Transaction Fee A per transaction charge in addition to the percentage discount fees incurred by merchants who are on scale pricing Transaction Date The date on which a transaction between a cardholder and a merchant an acquirer or a carrier occurs Transaction ID A is a 16 character numeric string that PaymentTrust assigns to every transaction that it processes Transaction Type A specific financial detail transaction activity that can be submitted to the clearing system Travel and Entertainment Card Credit cards that typically require payment in full each month e g American Express Diner s Club and Carte Blanche U UCAF MasterCard s Universal Cardholder Authentication Field Base64 encoded data structure containing 3D Secure authentication results provided by the 3D Secure MPI Undeposited Transactions PaymentTrust automatically deposits deposit transactions on a daily basis Please note that authorization transactions are not captured until they are completed by a deposit transaction PaymentTrust transaction types that are autom
52. here is no update just a complete replace 6 1 Screenshot of data csv format Below is a screenshot showing the fields of data provided The list is CardBIN1 CardBin2 CardName CardType and CountryCode 1 x Trust az M c aa 0 B ZU SSH EE Us BR US US BR US BR BR US BR BR BR US US BR US BR BR BR BR BR BR BR BR TW TW 56 56 56 US BR US JP CardType CountryCode VE BR vD VE vD vD Ed Microsoft Excel tmibin 18 Edit View Insert Format Tools Data Window Help y HBA o CardBin1 CardBin2 CardName 400154999 ELECTRON 400158999 VISA DEBIT 400163999 ELECTRON 400166999 VISA DEBIT 400167999 VISA DEBIT 400168999 ELECTRON 400169999 VISA CREDIT VI VE VE 400170999 ELECTRON 400172999 ELECTRON 400173999 VISA DEBIT 400174999 ELECTRON 400176999 ELECTRON 400178999 ELECTRON 400179999 VISA DEBIT 400181999 VISA DEBIT 400182999 ELECTRON 400183999 VISA DEBIT 400184999 ELECTRON 400185999 ELECTRON 400186999 ELECTRON 400187999 ELECTRON 400189999 ELECTRON 400191999 ELECTRON 400195999 ELECTRON 400199999 ELECTRON 400201999 VISA CREDIT VI 400211999 VISA CREDIT VI 400213999 VISA CREDIT VI 400214999 VISA CREDIT VI 400215999 VISA CREDIT VI 400218999 VISA DEBIT 400225999 VISA CREDIT VI vD
53. illing company produces debit entries from customers financial institution accounts who have authorized direct payment for products and services PAN See Primary Account Number PIN Personal Identification Number used by a cardholder to authenticate card ownership for ATM or debit card transactions The cardholder enters his her PIN into a keypad The PIN is required to complete an ATM debit card transaction Point Of Sale The place and time at which a transaction occurs Point of Sale POS also refers to the devices or software used to capture transactions Guardian Trust 17 68 POS See Point Of Sale Post Authorization A transaction for which a voice authorization was received See Prior Authorized Sale Post Auth See Post Authorization Posting The process of recording debits and credits to a cardholder s account balances Pre Auth Same as Auth Only Prenote See Pre Notification Pre Notification Prior to the initiation of the first ACH entry to an ACH receiver or the ACH receiver s account with an RDFI an ACH originator may at its option deliver or send a pre notification through an ODFI to its ACH operator for transmittal to the appropriate RDFI The pre notification shall provide notice to the RDFI that the originator intends to initiate one or more entries to that receiver s account in accordance to the receiver s authorization Primary Account Number commonly called PAN The number that is embossed
54. ing cards Guerdian Trust 4 12 4 5 StorelDs Storeid is mandatory for all TransactionType PT The Storeid is the same number as the Acquiring bank MerchantID This is required in each transaction in order that PaymentTrust can settle into the correct currency account with the bank Moto sales MerchantID StoreID 52722722 26242846 47383563 13252322 46474647 53735373 72537363 93739383 83638251 23262028 Moto refunds MerchantID StoreID 75857575 63736373 98765454 34542872 53635396 25262522 86323242 12415161 86785744 56252425 25262526 Typical set up with Natwest Streamline Currency Australian Dollars Danish Kroner Euro Euro Laser Card Swedish Kronor Swiss Franc s Taiwanese New Dollar settle in GBP Thai Baht US Dollars British Pounds Currency Australian Dollars Danish Kroner Euro Euro Laser Card Hong Kong Dollars Swedish Kronor Swiss Franc s Taiwanese New Dollar settle in GBP Thai Baht US Dollars British Pounds E commerce sales MerchantID StoreID 64383638 81524262 76494332 42524262 22840507 79585958 63734324 13538292 26836383 12154121 E commerce Refunds MerchantID StoreID 63836383 74846384 84747498 63736387 75957595 74948494 51625171 76584575 62826282 84374847 23241911 Currency Australian Dollars Danish Kroner Euro Euro Laser Card Swedish Kronor Swiss Franc s Taiwanese New Dollar settle in GBP Thai Baht US Dollar
55. ingInz VersionUsed 1 MerchantId 100625 TransactionType PT IsTest 1 Type ofSale S TimeOut 90 UserName TMISUPPORT UserPassword tmisupport Acct Name Alex MOP cc AcctNumber 5301207010000012 ExpDate 122005 Currenc yId 826 Amount 1 00 RequestType P Storeid 100625 Response MerchantId 100625 TransactionType PT OrderNumber 637464746 StrId 827448 2 PTTID 10414967 MOP CC CurrencyId 826 Amount 1 00 RequestType R M essageCode 2050 Message Request pending Guerdian Trust 5 3DSECURE WITH PAYMENT TRUST 5 1 What is 3DSecure 3DSecure enables cardholders to authenticate themselves to their issuers through use of a unique personal code It s an industry wide initiative that is being undertaken in order to address current consumer concerns about security of online shopping This includes Verified By Visa and MasterCard Secure Code A Typical 3DSecure Transaction using PaymentTrust s Hosted MPI Customer confirms his purchase A form is posted to the merchant s commerce application php asp jsp cold fusion etc 5 2 Merchant application requests via STLink for 3D Secure enrolment verification RequesType V Customer Browser Customer s Bank INTERNET Merchant STLink Commerce 2 Application a If enrolment response is successful CHEnrolled Y See Step 5 3 Guardian Trust 5 17 b If enrolment verification failed based on the 3D Secure CHEnrolled value the merchant sends an authorizati
56. ion Network SSL Secure Sockets Layer API Application Program Interface ASP Active Server Pages CGI Common Gateway Interface VPN Virtual Private Network RG RM RiskGuardian Risk Management PT PP PaymentTrust Payment Processing Includes PaymentTrust PT RiskGuardian RG Bins BN Bank Transfer Service BT Foreign Exchange FX Transaction Services 3DSecure 3D and others Merchant PaymentTrust Client RiskGuardian PaumentTrust 1 2 1 4 Related Documents AII Integration related documents can be downloaded from the following URL http www paymenttrust ca devtools PaymentTrust User Guide PaymentTrust User Guide 2 4 pdf RiskGuardian User Guide RiskGuardian User Guide 3 0 pdf Developer s Guide MerchantServices DevGuide 08 20 00 doc 3DSecure Flow Chart Hosted MPI Flow 002 dec06 doc doc Guardian Trust 2 COMMUNICATION The PaymentTrust Secure Transaction Network STN is a collection of robust multithreaded and real time transaction systems See Figure 1 below STN is composed of the PaymentTrust Secure Transaction Link STLink system and back end Transaction Services STLink receives transaction information from merchants processes the information through one of the many transaction services and sends the response back to the merchant s requesting system Internet communication mentioned in this document is executed via an Internet 128 bit Secure Sockets Layer SSL connection or an Intern
57. ithin the PT Transaction Each request type instructs the system to perform a different financial transaction It is important to note that all requests types must follow a logical sequence so prior to a Deposit request one must have an Authorization request There are cases where the PT TRX is an independent TRX not requiring any other Request type such in the case of a payback TRX or Bank Transfer Following the submission of a request the system will return an appropriate response code that will flag the transaction as being either successful unsuccessful with reason or pending awaiting third party confirmation Each numeric response code is by a text definition 4 2 Requestypes An Authorization A request will reduce cardholder s open to buy credit limit It places a hold on the funds for merchant with cardholder s bank for a limited period of time defined by the credit card associations before it expires An authorization does not move any funds to the merchant s bank account A deposit request type is required to initiate fund collection and is described below A Settlement D request marks a previously authorized transaction for funds collection during the next deposit cycle with the financial institution Merchants who do not ship goods immediately should only perform this transaction request at the order fulfillment stage shipment Important Note A merchant can only submit one
58. l 2706 Not supported for batch 2712 Mandatory field is invalid or missing 2714 Total line items do not add up 2716 Line items missing 2718 Commodity code is invalid or missing 2720 Cross border information is invalid or missing 2722 Invalid purchase card number 2802 Invalid ICC parameter 2952 Pick up card 2954 Card stolen 2956 Do not honour 2958 Call Bank 2960 Insufficient funds 2962 CVV2 failure Guardian 1246 Acquirer Explanation Delinquent account Cancellation is going to reverse the authorization Transaction pending A new rate is assigned for the transaction FX transaction approved Transaction rate escalated Transaction cancelled successfully Transaction refunded Rate requested has expired and no new is available The deposit refund transaction being cancelled cannot be because it has already been submitted Cancellation disabled in merchant set up Invalid currency of record Exchange currency not setup in merchant account Conversion to same currency redundant Cannot convert to requested currency Currency submitted does not match the original rate request Invalid amount Invalid FXID Unexpected error Credit card is not valid for this transaction Currency of card not supported One or more required parameters are not present Duplicated transaction Generic err
59. link dll https stI007 kontek cc stlinkssl stlinkbatch dll Batch RG Test website https merchantadmin riskguardian com test PT Test website https merchantadmin paymenttrust com test Guardian Trust 7 27 8 28 8 APPENDIX RG SET UP FORM PaymentTrust Ltd Date PaymentTrust Ltd Sales Representative Identifier PTMID Product Profile What products are sold Do you provide hard digital or service goods Please provide details of accepted currencies and associated values Currency Avg Sale Highest Sale Lowest Sale Are the majority of sales to male or females How often will a consumer buy on average Do you require the consumer to register Will registration 1 length of membership be passed to RG Do you require consumers to use a wallet account Guardian Trust How long does it take to refill the wallet account Have you experienced any fraud problems Please provide details below Which Which Which countries countries have Country Country Code countries do do you not wish you you sell to to sell to experienced problems Algeria DZ American AS Samoa Andorra AD Angola AO Anguilla Al Antarctica AQ Antigua and AG Barbuda Argentina AR Armenia AM Aruba AW Australia AU Austria AT Azerbaijan AZ Bahamas BS Bahrain BH Bangladesh BD Barbados BB Belarus BY Belgium BE Belize BZ Benin BJ
60. n form fields TermUrl and MD Merchant Data The TermUrl tells the issuing bank where to POST back the results The MD field may contain any value the merchant may require to establish back the session Before placing any sensitive data in the MD field it must be encrypted Guardian Trust 5 18 Customer Browser Customer s Bank INTERNET Merchant STLink Commerce Application See Step 5 4 5 4 Browser redirects to customer s issuing bank URL including the TermUrl and MD fields Customers attempt to authenticate themselves by answering their challenge question or entering their pin Customer Customer s Browser Bank INTERNET Merchant STLink Commerce Application See Step 5 5 Guardian Trust 5 19 5 5 Authentication result is posted back to merchant s commerce application Note 1 In Step 5 3 one of the hidden form fields TermUrl contains a merchant assigned URL that is used to receive the authentication response Note 2 The MD field will also be posted back as a hidden form field This is the data Customer Browser the merchant opted to include during Step 5 3 Customer s Bank INTERNET Merchant STLink Commerce Application See Step 5 6 5 6 Merchant s application requests via STLink for validity of the authentication response Reques A a If authentication succeeded customer answered challenge correctly See Step 5 7 b If authentication fail
61. n the delayed deposit process and should be used by merchants who do not provide immediate shipment of goods Delayed Deposit This is a two phase process that utilizes an authorization and a delayed capture transaction to process customer orders This procedure is recommended when the merchant delivers goods or services after a 48 hour period Guardian Trust Demand Deposit Account A standard checking or savings account into which electronic funds can be transferred Deposit The process of transmitting a batch of transactions from the merchant to the acquiring institution for deposit preparation It marks a previously authorized transaction for funds capture during the next deposit period Merchants who do not ship goods immediately should use this transaction type after fulfilling their sales obligation Discount fee Fee paid by the merchant to the merchant bank or other contracted party for processing the merchant s credit card sales transactions Discount Rate Amount charged to a merchant by the acquiring bank for transaction processing It usually represents a percentage of the transaction amount The rate is typically based on monthly transaction volume total dollars and average ticket The discount fee is the dollar amount charged Downgraded ICC A chip card that only contains track 2 information on it Draft Capture Refers to Deposit E ECR See Electronic Cash Register EFT See Electronic Funds Transfer Elect
62. ncial Institution Receipt A hard copy description of the transaction that occurred at the point of sale Minimum information contained on a receipt is date merchant name and location account number type of account used e g Visa MasterCard Amex etc amount reference number and or authorization code and action code Receiver A consumer customer employee or business who has authorized ACH payments by Direct Deposit or Direct Payment to be applied against a depository account Receiving Depository Financial Institution A financial institution that provides depository account services to customers employees and businesses and accepts electronic debits and credits to and from these accounts Recurring Transaction A transaction in which a cardholder has given a merchant permission to periodically charge the cardholder s account Refund A transaction that returns the specified amount to the cardholder s account Response Code A numeric code that indicates whether a transaction was approved or declined Response codes are used in the PaymentTrust system to indicate transaction responses to merchants Retrieval See Retrieval Request Retrieval Request A request to a merchant for documentation concerning a transaction usually initiated by a cardholder s dispute or suspicious sale return A retrieval request can lead to a chargeback Return Code Any of the codes returned by PaymentTrust when a transaction is processed
63. nt account number 4210 Invalid credit card number 4212 Invalid credit card expiration date 4216 Invalid amount 4224 Data is inaccurate or missing 4228 Invalid transaction 4240 Cardholder enrolment failed 4242 Cardholder authentication failed 4614 MPI not available 4616 Directory server not available 4618 Internal MPI error 4626 Invalid Secureld RiskGuardian 13 48 13 APPENDIX VI CURRENCY CODES The ability to accept new currencies will enable you to attract a larger customer base Processing in multiple currencies eliminates your customers foreign exchange risks and issues which typically stem from local charges to foreign credit cards PaymentTrust currently processes Visa Master Card and American Express transactions in the Currency Code AUD ATS BHD BEF BMD BRL CAD COP CYP CZK DKK EUR FIM DEM GRD HKD HUF ISK INR IDR IEP ILS ITL JMD JPY JOD KRW KWD LUF MYR MTL MXN MAD NLG NZD NOK OMR PAB PHP PLN PTE QAR RUB SAR SGD ZAR Trust ID 710 Currency Name AUSTRALIAN DOLLAR SCHILLING BAHRAINI DINAR BELGIAN FRANC BERMUDIAN DOLLAR BRAZILIAN REAL CANADIAN DOLLAR COLOMBIAN PESO CYPRUS POUND CZECH KORUNA DANISH KRONE EURO MARKKA FRENCH FRANC CFP FRANC DEUTSCHE MARK DRACHMA HONG KONG DOLLAR FORINT ICELAND KRONA INDIAN RUPEE INDONESIAN RUPIAH IRI
64. ocess from IP NNN NNN NNN NNN using SSL etc It must be noted that the STLink system is Payload independent data within the communication link is independent and can accommodate any type of Transaction for example an RG transaction with the same ease as a PT transaction This eases the transition when new services become available The STLink system is based on HTTP 1 1 as a transport protocol as well as XML 1 0 It uses generic protocols for communication between user agents and proxies gateways and other Internet systems Communication between a PaymentTrust Merchant and a PaymentTrust STN will be achieved through request Guardian Trust 25 messages and response messages The STLink system implements and exploits the advantages provided by HTTP S and XML 2 5 Network Requirements The following is required prior to testing of the STN and STLink system by Merchants Internet access or dedicated link into the TMI Secure Transaction Network The originating external IPs if SSL is used or the internal IP addresses of the computers that will participate in the VPN as well as the external IP it will use Name and phone number of the designated technician or administrator responsible for the integration process Notification when the testing process is complete Our Network Operations Team will at that point take over of the process The Merchant will receive the following items from TMI VPN hardware if this is the solution cho
65. on as follows CHEnrolled VISA MasterCard N Merchant sends authorization Merchant sends authorization request with 3D Secure fields request with 3D Secure fields ECI 06 ECI N A CAV N A CAV N A Secureld Secureld submitted to Secureld Secureld submitted to MPI during enrolment verification MPI during enrolment verification See Step 5 8 See Step 5 8 U Merchant sends authorization Merchant sends authorization request with 3D Secure fields request with 3D Secure fields ECI 07 ECI N A CAV N A CAV N A Secureld Secureld submitted to Secureld Secureld submitted to MPI during enrolment verification MPI during enrolment verification See Step 5 8 See Step 5 8 N A Merchant can decide to send Merchant can decide to send authorization request with 3D authorization request with 3D Secure fields Secure fields ECI 07 ECI N A CAV N A CAV N A Secureld Secureld submitted to Secureld Secureld submitted to MPI during enrolment verification MPI during enrolment verification See Step 5 8 See Step 5 8 5 3 Enrolment response contains customers issuing bank URL The merchant application instructs customer s browser to redirect to the provided URL Note 1 This is typically done through hidden form fields and JavaScript that automatically posts the form to the bank URL Note 2 The merchant session is re established as follows When the merchant application instructs the browser to redirect there are 2 hidde
66. op off The issuing bank determines the time period for drop off Authorizations can only be used for credit card transactions Authorization Code Approved sale and authorization transactions always receive a numeric or alphanumeric authorization code referencing the transaction for processing purposes Automated Clearing House The Automated Clearing House ACH network is a nationwide wholesale electronic payment and collection system It is a method of transferring funds between banks via the Federal Reserve System Most but not all financial institutions use it Average Ticket The average dollar amount of merchant credit transactions AVS See Address Verification Service B Bank card A debit or credit card issued by a bank Bank Identification Number The digits of a credit card that identifies the issuing bank It is sometimes the first six digits and is often referred to as a BIN Also referred to as Issuer Identification Number Guardian Trust 17 61 Basis Point One one hundredth of a percent Discount rates are expressed as basis points Batch A collection of transactions submitted for deposit Usually a merchant has one batch per day or per shift Batch ID Once a batch is deposited it is assigned a batch ID Every transaction in the batch shares this ID If a transaction does not have a batch ID associated with it the transaction has not been deposited Batch Processing A type of data processing where related tr
67. or message for invalid transactions Invalid account data Quoted rate is not executable Refund is over the original value of the deal Quoted rate is invalid Expired rate cannot be escalated Rate has been revoked Transaction min max limits reached Batch size exceeds the Maximum allowable size transaction payment not written to database FX system cannot be reached Refund disabled in merchant set up Refund cannot be processed Refund period expired Cardholder enrolled for 3D Secure Cardholder answered password challenge question correctly Cardholder not enrolled for 3D Secure Trust n Description 2964 Delinquent account 2990 Cancellation 3050 Transaction pending 3051 Transaction pending with rate escalated 3100 Transaction approved 3111 Rate escalated 3170 Transaction cancelled successfully 3171 Transaction refunded 3200 Rate expired 3203 Cancellation cannot be performed 3204 Cancellation not enabled 3206 Invalid currency 3207 Exchange currency not supported 3208 Currencyld matches ConvertedCurrencyld 3209 Currency pair not supported 3210 Currencyld does not match FX request 3216 Invalid amount 3217 Invalid FXID 3218 Issuer is not available Please try again 3219 card is not valid for this transaction 3220 Currency Not Supported 3224 Data is inaccurate or missing 3226 Duplicated transaction 3228 Invalid transaction 3321 Invalid
68. orrect procedures in accepting the check The service determines whether the check issuer has previously written delinquent checks Companies like TeleCheck provide this type of service Chip Card Also known as a smart card A chip card holds details on a computer chip which can store and process information It usually also has a traditional magnetic stripe Clearing The process of exchanging financial details between an acquirer and an issuer to facilitate posting of a cardholder s account and reconciliation of a merchant s deposit position Common Gateway Interface An interface program that enables an Internet server to run external programs to perform a specific function Also referred to as gateways or CGI scripts these programs generally consist of a set of instructions written in a programming language like C or PERL that process requests from a browser executes a program and formats the results in HTML Gateway scripts often add interactivity to a Web page by enabling users to fill out and submit forms for processing Confirmation Letter A letter sent by a processor to a merchant on a daily or weekly basis to verify batch deposits Converted Currency ID ISO standard numeric ids of the converted currency Example USA 840 GBP 826 JPY 392 Guardian Trust 17 63 17 4 Conversion Rate The conversion rate applied to the transaction amount in U S dollars Copy Request See Retrieval Request Credit Also known as a ref
69. ronic Cash Register The combination of a cash register and a POS terminal often PC based Electronic Funds Transfer The paperless act of transmitting money through a computer network External Sales Agent Amex term for ISO or MSP F Floor Limit A preset limit established by an issuer that allowed merchants to accept credit card sales without authorization provided the merchant verifies the card number on a warning bulletin for lost or stolen cards Floor limits are now rarely used Fraudulent User An individual who is not the cardholder or designee and who uses a card to obtain goods or services without the cardholder s consent Guardian Trust 17 65 Fraudulent Transaction A transaction unauthorized by the cardholder of a bank card Such transactions are categorized as lost stolen not received issued on a fraudulent application counterfeit fraudulent processing of transactions account takeover or other fraudulent conditions as defined by the card company or the member company H HTTP Protocol Hardware and or software that connects computer networks and allows them to communicate ICC Integrated Circuit Card See chip card Independent Sales Organization Visa term for a company that is sponsored by an acquiring bank to solicit and sometimes support merchants Interchange The flow of information between issuers and acquirers e g transactions retrieval requests chargebacks Interchange Fee The fee charged
70. s British Pounds Currency Australian Dollars Danish Kroner Euro Euro Laser Card Hong Kong Dollars Swedish Kronor Swiss Franc s Taiwanese New Dollar settle in GBP Thai Baht US Dollars British Pounds Typical set up with Barclaycard Merchant Services Multi Currency Sales Multi currency refunds Sterling sales Sterling refunds 5464543 3637363 3738373 8474847 Storeid s for all payback requests is the same as the PaymentTrust Merchant ID ie Trust 100625 Guardian 4 6 The Differences with Domestic Maestro and Solo Payment Transactions are relevant for switch and solo Authorisation Sale Forced Refund The difference here is the MOP DS the Issuenumber and Startdate Following fields become mandatory for switch and solo transactions along with all other fields See the API document for full detailed table Dat 5 Data a YA Field Name Type Siz Description e MOP Alpha 2 DS for Switch Solo debit cards Issue number stands for the number of cards issued on that bank account Maximum of 2 Issuenumber Numeric 2 digits The number can be any number between 1 and 99 however normally it s between 1 and 10 Startdate Numeric 6 Example 092003 The additional error codes for switch and solo are 2280 Incorrect start date congratulations 2282 Invalid issue number Please note that all switch
71. s a request whether GET POST or XML The request an input string is routed with the STN to the appropriate service for processing PT RG and others The system returns the response to the requesting URL Should the delivery fail the system will capture the error inform the merchant and store the information for later reporting Captured errors are further analyzed When the delivery is successful the merchant receives a response and stamps each transaction with an appropriate message code Please note that for larger strings sizes the GET method should not be used The input string message sent by the Merchant is stored in a serialised database with a unique serial number PaymentTrust maintains a log of any transaction requested by the Merchant and responds with a real time message which will encapsulate information regarding Integrity of the message sent by the Merchant if a message is received truncated incomplete or in a tampered condition the STLink application will capture the error and will respond with the appropriate error message to the merchant s system Authentication of sending and receiving agents attributes that assure a given request is received from a specific trading partner messages between Merchant and PaymentTrust must contain attributes that identify and recognize a specific Merchant The Type of Transaction requested along with processing statistics an transaction that took 2 seconds to pr
72. s and Maestro debit transactions Member A financial institution that is a member of Visa USA and or MasterCard International A member is licensed to issue cards to cardholders and or accept merchant drafts Merchant A retailer or any other entity pursuant to a Merchant Agreement that agrees to accept credit cards debit cards or both when properly presented Merchant Agreement A written agreement between a merchant and a bank or possibly between a merchant a bank and ISO summarizing their respective rights duties and warranties with respect to acceptance of the bank card and matters related to bank card activity Merchant Bank A bank issuing an agreement to a merchant to accept acquire deposits generated by bank card transactions Merchant Category Code A code assigned by an acquirer to a merchant to identify the merchant s principal trade profession or line of business This 4 digit code is also know as the SIC code Merchant Discount Compensation received by a bank from a merchant for processing and accepting credit card risk on the merchant s credit card sales Merchant Number A series or group of digits that uniquely identifies the merchant to the merchant s signing bank for account and billing purposes Merit Refers to the qualification levels for a MasterCard transaction Merit IIl is the highest discount followed by Merit II Merit I and then Standard MICR Number See Magnetic Ink Character Recognition
73. sen SSL URL if SSL is chosen High Encryption Pack A merchant must follow a few simple steps to send transactions to the STN 1 Build the HTTP headers Build the transaction data Encode the transaction data Attach the transaction data to the HTTP headers Establish secure communication to STN using S L 2 3 4 5 Open a TCP IP connection to STN 6 7 Send the HTTP request to STN 8 Receive HTTP response with transaction result from STN AII transaction requests must be submitted to STLink and all batch requests to STLink Batch in either STN s string format or as XML documents Both STLink and STLink Batch accept the HTTP and HTTPS protocols though it is recommended that the HTTPS protocol be used to safely transmit the requests via the Internet HTTP is the message protocol used to make request to the STN servers HTTPS refers to the fact that the HTTP request is done over an encrypted secure network connection The HTTP header should consist of the request method POST the requested resource STLink the HTTP version 1 1 a new line the amount of data being posted Content Length and 2 new lines The 2 new lines at the end of the header allow the separation of the HTTP header from the data being posted All requests must be submitted using the HTTP POST method The POST method 6639 works by supplying key value pairs where the key and value are split by the Guardian Trust 2 6 symbol and key value
74. t 2362 Over Sav limit 2364 Over Sav frequency 2366 Card not supported 2368 Invalid PIN 2370 Allowable PIN tries exceeded 2372 PIN required 2374 Card failed MOD 10 check 2380 On negative file 2382 Stop Payment Issued 2400 PTLF full 2401 Fraud suspected 2402 Unable to process transaction 2403 Duplicate transaction 2404 Cutoff in progress 2405 Incorrect PIN 2406 PIN tries exceeded 2407 Exceeds withdrawal frequency 2410 Invalid 3D Secure Data 2610 Timeout error 2611 Timeout error 2612 Authorization host system down or unavailable 2614 Acquirer Issuer unavailable Resend 2616 Invalid issuer Guardian Acquirer BMS ST PH and BV FS LY and BV LY and BV NT and P2 FS and LY AX and LY NA NA AX and LY PT ST NA PT PT PT PT PT NA AX PT PT PT EC LY PH and BV FS LY PH and BV FS LY and PH AX ST BMS EC FS LY BV and PH FS LY NT P2 and PH LY and PH 12 45 Explanation Unidentified error Unable to process transaction Unable to process transaction due to system malfunction Unable to authorize due to system malfunction Merchant information incomplete Invalid CVN value The track2 format information is incorrect Merchant not Support this transaction No such store ID for the merchant Invalid authcode
75. tions For US ECP Account number is incorrect Customer has notified their bank not to accept these transactions Trust Description 2224 Data is inaccurate or missing 2226 Duplicated transaction 2228 Invalid transaction 2229 Invalid transaction 2230 Invalid merchant account number 2232 Invalid issuer 2234 Invalid response code 2235 Invalid Currency Code Entered 2236 Invalid for credit 2237 Invalid refund not allowed CFT 2238 Invalid for debit 2240 Invalid SEC code Amex 2280 Incorrect start date 2282 Invalid issue number 2284 Invalid transaction 2286 Bank not supported by Switch 2300 Card does not exist 2302 Invalid transit routing number ABA code 2304 Missing name 2306 Bank account closed 2308 Invalid account type 2310 Account does not exist 2312 No account 2314 Account holder deceased 2316 Beneficiary deceased 2318 Account frozen 2320 Customer opt out 2322 ACH non participant 2324 Invalid account number 2326 Authorization revoked by customer Guardian Acquirer PH PH PH PH PH PH LY and PH NA NA PH BV PH LY EC FS and PH PH and BV BV BV LY PH and BV PN BV NA NA LY PN FS LY NT and BV FS and LY FS and LY BMS ST and LY FS AX BV ST and LY PT ST PH and BV BMS ST LY EC AX and PH LY and PH 12 44
76. und A credit is a transaction that transfers funds from the merchant s account back in to the customer s credit card This type of transaction is usually performed when a product is returned to the merchant A credit can be performed through the e Transaction Terminal area of PaymentTrust Payment Manager or through a merchant s storefront application Check refunds can only be issued via credit card or through a non electronic paper check A credit can only be issued to an account that has not had a previous authorization Credit Limit The limit of credit a cardholder is approved to borrow Credit card purchases are loans to the cardholder by the issuer Currency ID ISO standard numeric ids of the converted currency Example USA 840 GBP 826 JPY 392 CVC See Card Verification Code CVV See Card Verification Value CVV2 See Card Verification Value D DDA See Demand Deposit Account Debit Card An ATM bank card used to purchase goods and services and to obtain cash debit card debits the cardholder s bank account and requires Personal Identification Number PIN Debit cards branded with a bank card logo e g Visa can be accepted without a PIN for Internet transactions Decline A transaction in which the issuing bank will not authorize the transaction Delayed Capture A delayed capture is a transaction type that uses the information from an authorization transaciion to capture funds This is the second step i
77. unt Number A unique sequence of numbers assigned to a cardholder s account which identifies the issuer and type of financial transaction card ACH See Automated Clearing House ACI See Authorization Characteristics Indicator Acquirer A bank or financial institution that acquires data relating to transactions from a merchant or card acceptor for processing The acquirer enters this data into interchange either directly or indirectly See Interchange Acquiring Bank A bank that receives credit card transactions and then deposits them with the issuing banks This is an acquirer Address Verification Service A service that verifies the cardholder s billing address in order to help combat fraud in card not present transactions e g mail order telephone order internet etc Used only in the United States Agent Bank A bank that participates in another bank s acquiring program usually by turning over its applicants for bank cards to the bank administering the acquiring program American Banker s Association The trade association of American bankers This body also has the responsibility of assigning the registration authority for identification numbers American Express An organization that issues cards and acquires transactions unlike Visa and MasterCard which are bank associations American Express processes their own transactions through their network Amex See American Express API The Application Programming Interf
78. upport Acct Name Alex MOP DS AcctNumber 4936540000400016 ExpDate 122002 Curren cyId 826 Amount 1 00 RequestType R issuenumber l Response MerchantId 100625 TransactionType PT OrderNumber 5209075289 StrId 82744 20 PTTID 10414920 MOP DS CurrencyId 826 Amount 1 00 AuthCode B01637 RequestType R MessageCode 2100 Message Transaction Approved Visa card Refund request example Request StringInz VersionUsed 1 MerchantId 100625 TransactionType PT IsTest 1 Type ofSale S TimeOut 90 UserName TMISUPPORT UserPassword tmisupport Acct Name Alex MOP cc AcctNumber 4779160330716625 ExpDate 122005 Currenc yId 826 Amount l 00 RequestType R Response MerchantId 100625 TransactionType PT OrderNumber 536177545 StrId 827448 2 PTTID 10414921 MOP CC CurrencyId 826 Amount 1 00 RequestType R M essageCode 2050 Message Request pending Visa card Authorisation request example Request StringInz VersionUsed 1 MerchantId 100625 TransactionType PT IsTest 1 Type ofSale S TimeOut 90 UserName TMISUPPORT UserPassword tmisupport Acct Name Alex MOP cc AcctNumber 4779160330716625 ExpDate 122005 Currenc yId 826 Amount 1 00 RequestType A Response MerchantId 100625 TransactionType PT OrderNumber 7470534577 StrId 82745 42 PTTID 10414923 MOP CC Currencyl1d 826 Amount 1 00 AuthCode B0466 F RequestType A MessageCode 2100 Message Transaction Approved MasterCard Payback request example Request Guerdian Trust 4 16 Str
79. zona Arkansas Armed Forces Europe Armed Forces Pacific Armed Forces The Americas California Colorado Connecticut Delaware District of Columbia Federated States of Micronesia Florida Georgia Guam Hawaii Idaho Illinois Indiana lowa Kansas Kentucky Louisiana Maine Marshall Islands Maryland Massachusetts Michigan Minnesota Mississippi Missouri Montana Nebraska Nevada New Hampshire New Jersey RiskGuardian 15 57 Country us us us us us us us us us us us us us us us us us us us us us us us us ca ca ca ca ca ca ca ca ca ca ca ca ca za za za za za za entTrust Code NM NY ND MP OH OK OR PW PA PR RI SC SD TN TX UT VT VI VA WA WV WI WY AB BC MB NB NF NS NT NN ON PE QC SK YT EC FS GG KN MG NO State Region New Mexico New York North Carolina North Dakota Northern Mariana Islands Ohio Oklahoma Oregon Palau Pennsylvania Puerto Rico Rhode Island South Carolina South Dakota Tennessee Texas Utah Vermont Virgin Islands Virginia Washington West Virginia Wisconsin Wyoming Alberta British Columbia Manitoba New Brunswick Newfoundland Nova Scotia Northwest Territories Nunavut Ontario Prince Edward Island Quebec Saskatchewan Yukon Eastern Cape Free State Gauteng KwaZulu Natal Mpumalamang

Implementation Guide - High Capacity Gateway

Contents

Download Pdf Manuals

Related Search

Related Contents