Credit Cards SO API
Credit Cards SO API
September 2019
CyberSource Corporation HQ | P.O. Box 8999 | San Francisco, CA 94128-8999 | Phone: 800-530-9095
CyberSource Contact Information
For general information about our company, products, and services, go to
http://www.cybersource.com.
For support information about any CyberSource Service, visit the Support Center at
http://www.cybersource.com/support.
Copyright
© 2019 CyberSource Corporation. All rights reserved. CyberSource Corporation ("CyberSource") furnishes this
document and the software described in this document under the applicable agreement between the reader of
this document ("You") and CyberSource ("Agreement"). You may use this document and/or software only in
accordance with the terms of the Agreement. Except as expressly set forth in the Agreement, the information
contained in this document is subject to change without notice and therefore should not be interpreted in any way
as a guarantee or warranty by CyberSource. CyberSource assumes no responsibility or liability for any errors
that may appear in this document. The copyrighted software that accompanies this document is licensed to You
for use only in strict accordance with the Agreement. You should read the Agreement carefully before using the
software. Except as permitted by the Agreement, You may not reproduce any part of this document, store this
document in a retrieval system, or transmit this document, in any form or by any means, electronic, mechanical,
recording, or otherwise, without the prior written consent of CyberSource.
Trademarks
Authorize.Net, eCheck.Net, and The Power of Payment are registered trademarks of CyberSource Corporation.
CyberSource, CyberSource Payment Manager, CyberSource Risk Manager, CyberSource Decision Manager,
and CyberSource Connect are trademarks and/or service marks of CyberSource Corporation.
All other brands and product names are trademarks or registered trademarks of their respective owners.
2
CONTENTS
Contents
Credit Card Services Using the Simple Order API | September 2019 3
Contents
Credit Card Services Using the Simple Order API | September 2019 4
Contents
Credit Card Services Using the Simple Order API | September 2019 5
Contents
Credit Card Services Using the Simple Order API | September 2019 6
Contents
Credit Card Services Using the Simple Order API | September 2019 7
Contents
Credit Card Services Using the Simple Order API | September 2019 8
Contents
Credit Card Services Using the Simple Order API | September 2019 9
Contents
Credit Card Services Using the Simple Order API | September 2019 10
Contents
Credit Card Services Using the Simple Order API | September 2019 11
Contents
Index 507
Credit Card Services Using the Simple Order API | September 2019 12
REVISIONS
Recent Revisions to This
Document
Release Changes
September 2019 All processors: fixed the broken links to Reason Codes.
All processors that support merchant-initiated transactions (MITs):
Updated "Merchant-Initiated Transactions (MITs) and Credentials-on-File (COF)
Transactions," page 173:
Added support for customer-initiated transactions with credentials on file.
subsequentAuthOriginalAmount
subsequentAuthReason
All processors that support Visa Checkout:
Changed “Visa Checkout” to “Visa Checkout and Visa Secure Remote Commerce”
throughout the guide.
Replaced links to Visa Checkout documentation with link to web page that provides the Visa
Checkout and Visa Secure Remote Commerce documentation: Visa Checkout and Visa
Secure Remote Commerce web page.
Chase Paymentech Solutions: ccCreditService_commerceIndicator is required for stand-
alone credit requests. See "Creating a Credit Request," page 79.
CyberSource through VisaNet: added Visa to the TC 33 mapping information for the
invoiceHeader_submerchantID field in "Request Fields," page 243.
FDC Nashville Global: added support for Mastercard Identity Check 2.0. See "Mastercard
Identity Check," page 189.
Credit Card Services Using the Simple Order API | September 2019 13
Recent Revisions to This Document
Release Changes
August 2019 All processors: moved reason codes for the Simple Order API to Reason Codes.
All processors that support merchant-initiated transactions: updated the note at the beginning
of the section by adding a link to a new FAQ. See "Merchant-Initiated Transactions (MITs) and
Credentials-on-File (COF) Transactions," page 173.
CyberSource through VisaNet: updated the TC 33 field names for the following fields. See
"Request Fields," page 243.
ccAuthService_aggregatorID
invoiceHeader_salesOrganizationID
invoiceHeader_submerchantID
FDI Australia
Added support for "Installment Payments," page 145.
Added support for "Least-Cost Routing (LCR)," page 164.
Added support for "Zero Amount Authorizations," page 231.
All processors that support merchant-initiated transactions: updated the description for
subsequentAuthStoredCredential. See "Request Fields," page 243.
Barclays: added support for "Merchant-Initiated Transactions (MITs) and Credentials-on-File
(COF) Transactions," page 173.
CyberSource through VisaNet: updated the information about installment payments with
Mastercard:
In the feature description:
Updated the description for Mastercard in Brazil. See "Installment Payments on
CyberSource through VisaNet in Brazil," page 152.
Added "Installment Payments on CyberSource through VisaNet in Croatia," page 155.
Added "Installment Payments on CyberSource through VisaNet in Georgia (Sakartvelo),"
page 155.
Added "Installment Payments on CyberSource through VisaNet in Greece," page 156.
Added section for Mastercard in "Installment Payments on CyberSource through VisaNet
in Other Countries," page 157.
Credit Card Services Using the Simple Order API | September 2019 14
Recent Revisions to This Document
Release Changes
July 2019 In "Request Fields," page 243:
Added installment_firstInstallmentAmount.
installment_amount installment_paymentType
installment_gracePeriodDuration installment_planType
installment_ installment_totalCount
gracePeriodDurationType
installment_amount installment_totalAmount
installment_firstInstallmentDate installment_totalCount
installment_ installment_insurance
additionalCostsPercentage
installment_amountFunded installment_insurancePercentage
installment_ installment_maximumTotalCount
amountRequestedPercentage
installment_annualInterestRate installment_minimumTotalCount
installment_expenses installment_monthlyInterestRate
installment_expensesPercentage installment_taxes
installment_fees installment_taxesPercentage
installment_feesPercentage
Elavon Americas: recurring payments with Visa must comply with the Visa merchant-initiated
transactions mandate. See "Recurring Payments," page 207.
HBoS: added support for "Merchant-Initiated Transactions (MITs) and Credentials-on-File
(COF) Transactions," page 173.
HSBC: added support for "Merchant-Initiated Transactions (MITs) and Credentials-on-File
(COF) Transactions," page 173.
Lloyds-OmniPay: added support for "Merchant-Initiated Transactions (MITs) and Credentials-
on-File (COF) Transactions," page 173.
SIX: added support for "Merchant-Initiated Transactions (MITs) and Credentials-on-File (COF)
Transactions," page 173.
Streamline: added support for "Merchant-Initiated Transactions (MITs) and Credentials-on-File
(COF) Transactions," page 173.
Credit Card Services Using the Simple Order API | September 2019 15
Recent Revisions to This Document
Release Changes
June 2019 All processors that support Mastercard SecureCode: changed the name of this feature to
Mastercard Identity Check.
All processors that support Verified by Visa: changed the name of this feature to Visa Secure.
CCS (CAFIS): removed this processor from the documentation.
Chase Paymentech Solutions: added support for Discover for "Zero Amount Authorizations,"
page 231.
CyberSource through VisaNet:
Added support for "Japanese Payment Options," page 162.
Added support for the following payer authentication fields. See "Mastercard Identity
Check," page 189.
ccAuthService_directoryServerTransactionID
ccAuthService_paSpecificationVersion
Added support for the Sumitomo Mitsui Card Co. acquirer. See Appendix K, "CyberSource
through VisaNet Acquirers," on page 480.
JCN Gateway:
Updated "Japanese Payment Options," page 162.
Removed the NICOS and ORICO cards.
OmniPay Direct: added support for the following payer authentication fields. See "Mastercard
Identity Check," page 189.
ccAuthService_directoryServerTransactionID
ccAuthService_paSpecificationVersion
Credit Card Services Using the Simple Order API | September 2019 16
Recent Revisions to This Document
Release Changes
April 2019 Added new processor Getnet. See "Payment Processors," page 32, and Chapter 2, "Payment
Card Processing," on page 38.
Added new processor Software Express. See "Payment Processors," page 32, and Chapter 2,
"Payment Card Processing," on page 38.
American Express Direct: added values to Table 57, "Additional Amount Types for Goods and
Services," on page 462.
Chase Paymentech Solutions: added support for American Express for "Zero Amount
Authorizations," page 231.
CyberSource through VisaNet:
Added enhancements for Mastercard installment payments in Brazil:
Added two funding methods: co-branded merchant financed and issuer merchant co-
financed. See "Overview," page 150.
Added two values for the installment_planType field for the new funding methods. See
"Request Fields," page 243.
Added two request fields for grace periods. See the installment_gracePeriodDuration
and installment_gracePeriodDurationType fields in "Request Fields," page 243.
Added three reply fields. See the installment_firstInstallmentAmount, installment_
minimumTotalCount, and installment_maximumTotalCount fields in "Reply Fields,"
page 362.
Added the following request fields. For details, see "Request Fields," page 243.
ccAuthService_cryptocurrencyPurchase
ccAuthService_deferredAuthIndicator
ccAuthService_lowValueExemptionIndicator
ccAuthService_riskAnalysisExemptionIndicator
ccAuthService_secureCorporatePaymentIndicator
ccAuthService_trustedMerchantExemptionIndicator
ccAuthService_verificationType
Elavon Americas:
Added support for "Masterpass," page 169.
Updated the maximum length for the merchantReferenceCode field. See "Request Fields,"
page 243.
Credit Card Services Using the Simple Order API | September 2019 17
Recent Revisions to This Document
Release Changes
March 2019 Added new processor RuPay. See "Payment Processors," page 32, and Chapter 2, "Payment
Card Processing," on page 38.
All processors that support merchant descriptors: moved the merchant descriptor information
to Merchant Descriptors Using the Simple Order API.
Chase Paymentech Solutions: added American Express as a supported card type for full
authorization reversals. See "Reversing an Authorization," page 52.
Credit Mutuel-CIC: updated the description for cardTypeSelectionIndicator to indicate that
the field is required for the authorization service. See "Request Fields," page 243.
CyberSource through VisaNet: added American Express as a supported card type for Network
International. See Appendix K, "CyberSource through VisaNet Acquirers," on page 480.
Ingenico ePayments: added note stating that CyberSource does not support Diners Club or
Discover on Ingenico ePayments. See Table 10, "Payment Processors and Card Types," on
page 33.
Credit Card Services Using the Simple Order API | September 2019 18
ABOUT GUIDE
About This Guide
Implementing the CyberSource credit card services requires software development skills.
You must write code that uses the API request and reply fields to integrate the credit card
services into your existing order management system.
Conventions
The following special statements are used in this document:
Credit Card Services Using the Simple Order API | September 2019 19
About This Guide
Convention Meaning
bold Field and service names in text; for example:
Include the ccAuthService_run field.
screen text XML elements
Code examples
Values for API fields; for example:
Set the ccAuthService_run field to true.
Related Documentation
Getting Started with CyberSource Advanced for the Simple Order API describes how
to get started using the Simple Order API. (PDF | HTML)
The Secure Acceptance Checkout API Integration Guide describes how to create a
Secure Acceptance Checkout API profile. (PDF | HTML)
The Secure Acceptance Hosted Checkout Integration Guide describes how to create
a Secure Acceptance Hosted Checkout profile. (PDF | HTML)
The CyberSource API Versions page provides information about the CyberSource API
versions.
Customer Support
For support information about any CyberSource service, visit the Support Center:
http://www.cybersource.com/support
Credit Card Services Using the Simple Order API | September 2019 20
CHAPTER
Introduction to the
Credit Card Services
1
Table 2 Cards and Payment Methods Processed with Credit Card Services
Card or Description
Payment
Method
Credit cards CyberSource can accept payments made with numerous types of credit
cards, including Visa®, Mastercard®, American Express®, Discover®,
Diners Club®, and JCB®.
Private label cards Private label cards are payment cards that are issued by a private
company and that can be used only at the issuing company’s stores. If you
are interested in using CyberSource to process transactions for your
company’s private label card, contact your CyberSource account
representative for information.
Debit cards and Prepaid cards, Visa-branded debit cards, and Mastercard-branded debit
prepaid cards cards can be processed with the credit card services. See Chapter 4,
"Features for Debit Cards and Prepaid Cards," on page 105.
Quasi-cash A quasi-cash transaction is a cash-like transaction for the sale of items
that are directly convertible to cash. See "Quasi-Cash," page 205.
Credit Card Services Using the Simple Order API | September 2019 21
Chapter 1 Introduction to the Credit Card Services
CyberSource can use the card’s BIN value to determine whether the card is a
co-badged Cartes Bancaires card.
You must let the customer choose the card type to use for the transaction. You can
specify a default card type to use when the customer does not choose a card type or
when the customer chooses a card type that is not supported by the card.
Debit Cards
The following table provides an overview of the CyberSource services that you can use for
processing debit cards.
Table 3 CyberSource Services for Processing Debit Cards
Services Description
Credit card You can use credit card services to process payments with prepaid cards,
services Visa-branded debit cards, and Mastercard-branded debit cards. See
Chapter 4, "Features for Debit Cards and Prepaid Cards," on page 105.
PIN debit services You can use PIN debit services to process payments if your processor
supports PIN debit transactions. See PIN Debit Processing Using the
Simple Order API.
PINless debit You can use PINless debit services to process payments if your business
services is in one of the acceptable merchant categories in which a card-not-
present debit transaction is low risk. These categories include educational
institutions, insurers, and utilities. See PINless Debit Card Services Using
the Simple Order API.
Credit Card Services Using the Simple Order API | September 2019 22
Chapter 1 Introduction to the Credit Card Services
For some card types on some processors, the information in your CyberSource account
must include processor-issued IDs for these transactions to be processed successfully.
Call CyberSource Customer Support to update your account information.
Credit Card Services Using the Simple Order API | September 2019 23
Chapter 1 Introduction to the Credit Card Services
As a result of these acquisitions and alliances, the following card types are processed on
the Discover Network:
China UnionPay
Diners Club
Discover
JCB (US Domestic): For JCB cards, “US Domestic” means that the currency is USD
and your location is the U.S., Puerto Rico, Guam, U.S. Virgin Islands, or Northern
Mariana Islands.
Note
Your processor takes care of routing your transactions; you do not need to do
any additional processing to route these card types to the Discover Network.
Note
CyberSource sends the transactions directly to the Saudi Arabia Monetary Authority
(SAMA) for processing.
Credit Card Services Using the Simple Order API | September 2019 24
Chapter 1 Introduction to the Credit Card Services
Credit Card Services Using the Simple Order API | September 2019 25
Chapter 1 Introduction to the Credit Card Services
Types of Transactions
Card-Present Transactions
When a customer uses a card that is physically present to make a purchase, the purchase
is known as a card-present transaction. This type of transaction typically occurs in a retail
environment. To process card-present transactions:
Use the credit card services described in this guide.
Provide card-present data as described in Card-Present Processing Using the Simple
Order API.
Card-Not-Present Transactions
When a customer provides a card number but you do not have access to the physical
card, the purchase is known as a card-not-present transaction. This type of transaction
typically occurs over the Internet or through a call center. To process card-not-present
transactions, use the credit card services described in this guide.
Airline data: see Airline Processing Using the Simple Order API.
Level II and Level III data: see Level II and Level III Processing Using the Simple
Order API.
Card-present data: see Card-Present Processing Using the Simple Order API.
Credit Card Services Using the Simple Order API | September 2019 26
Chapter 1 Introduction to the Credit Card Services
International Transactions
Compliance
Accepting payments from a country other than your own requires that you observe the
processing rules and practices of the payment systems in that country. The following table
describes areas of compliance that have particular focus.
Credit Card Services Using the Simple Order API | September 2019 27
Chapter 1 Introduction to the Credit Card Services
Table 7 Fees
Fee Description
Discount rates Your acquiring bank charges a fee and collects a percentage of every
transaction. The combination of the fee and the percentage is called the discount
rate. These charges can be bundled (combined into a single charge) or
unbundled (charged separately) depending on your acquiring bank and other
factors.
Interchange Visa and Mastercard each have a base fee, called the interchange fee, for each
fees type of transaction. Your acquiring bank and processor can explain how to
minimize this fee.
Chargebacks When customers dispute charges to their accounts, you can incur chargebacks.
A chargeback occurs when a charge on a customer’s account is reversed. Your
merchant bank removes the money from your account and could charge you a
fee for the chargeback.
Credit Card Services Using the Simple Order API | September 2019 28
Chapter 1 Introduction to the Credit Card Services
The items in the preceding list are required to prevent an excessive number of credit card
chargebacks. In the event that credit card chargebacks become excessive, CyberSource
can require you to undertake business process changes to reduce chargebacks. If the
chargebacks are not reduced to a satisfactory level, CyberSource can terminate your
account.
Some payment card companies, such as Visa and Mastercard, are trade associations that
do not issue cards. Instead, issuing banks are members of these associations and they
issue cards under license from the associations.
Other card companies, such as Discover and American Express, act as the issuing banks
for their own cards. Before you use CyberSource to process cards from these companies,
you must sign agreements with the companies.
Credit Card Services Using the Simple Order API | September 2019 29
Chapter 1 Introduction to the Credit Card Services
Services
The credit card services are:
Authorization: see "Authorizing a Payment," page 38.
Full authorization reversal: see "Reversing an Authorization," page 52.
Capture: see "Capturing an Authorization," page 61.
Credit: see "Crediting a Payment," page 78.
Void: see "Voiding a Capture or Credit," page 85. This service is not restricted to the
credit card services; it can also be used for other payment methods.
You can also request an authorization and capture together. See "Performing a Sale,"
page 75.
Order Tracking
See Getting Started with CyberSource Advanced for the Simple Order API for information
about order tracking. This section provides the names of the API fields that are used for
order tracking for the credit card services.
Request IDs
For all CyberSource services, the request ID is returned in the reply messages in
requestID. The following table lists the fields for the request IDs in request messages.
Credit Card Services Using the Simple Order API | September 2019 30
Chapter 1 Introduction to the Credit Card Services
Reconciliation IDs
The following table lists the fields for the reconciliation IDs, which are returned in the reply
messages.
Credit Card Services Using the Simple Order API | September 2019 31
Chapter 1 Introduction to the Credit Card Services
JCN Gateway does not support the reconciliation ID for any services.
Note
Payment Processors
Payment processors connect CyberSource servers with acquiring banks. Before you can
accept payments, you must register with a payment processor. Your acquiring bank might
require you to use a payment processor with which the bank has a business relationship.
CyberSource does not necessarily support all the features that are offered by each
processor. This guide describes the payment processing features supported by
CyberSource. The beginning of each feature description specifies which payment
processors support the feature.
Your processor provides you with unique identification numbers for your account. You
must provide these identification numbers to CyberSource Customer Support.
The following table lists the processors and corresponding card types that CyberSource
supports for the credit card services.
Note
Credit Card Services Using the Simple Order API | September 2019 32
Chapter 1 Introduction to the Credit Card Services
Credit Card Services Using the Simple Order API | September 2019 33
Chapter 1 Introduction to the Credit Card Services
Credit Card Services Using the Simple Order API | September 2019 34
Chapter 1 Introduction to the Credit Card Services
Credit Card Services Using the Simple Order API | September 2019 35
Chapter 1 Introduction to the Credit Card Services
Credit Card Services Using the Simple Order API | September 2019 36
Chapter 1 Introduction to the Credit Card Services
Credit Card Services Using the Simple Order API | September 2019 37
CHAPTER
Payment Card Processing
2
Authorizing a Payment
CyberSource supports authorizations for all processors.
Online Authorizations
Online authorization means that when you submit an order using a payment card, you
receive an immediate confirmation about the availability of the funds. If the funds are
available, the issuing bank reduces your customer’s open to buy, which is the amount of
credit available on the card. Most of the common payment cards are processed online. For
online authorizations, you typically start the process of order fulfillment soon after you
receive confirmation of the order.
Online authorizations expire with the issuing bank after a specific length of time if they
have not been captured and settled. Most authorizations expire within five to seven days.
The issuing bank sets the length of time.
When an authorization expires with the issuing bank, your bank or processor might require
you to resubmit an authorization request and include a request for capture in the same
message.
Credit Card Services Using the Simple Order API | September 2019 38
Chapter 2 Payment Card Processing
The following figure shows the steps that occur when you request an online credit card
authorization.
1 The customer places an order and provides the payment card number, the card expiration
date, and additional information about the card.
2 You send a request for authorization over a secure Internet connection. When the
customer buys a digitally delivered product or service, you can request both the
authorization and the capture at the same time. When the customer buys a physically
fulfilled product, do not request the capture until you ship the product.
3 CyberSource validates the order information then contacts your payment processor and
requests authorization.
4 The processor sends the transaction to the payment card company, which routes it to the
issuing bank for the customer’s payment card. Some card companies, including Discover
and American Express, act as their own issuing banks.
Depending on the processor and card type, the issuing bank can use AVS to confirm the
billing address and CVN to verify that the customer has possession of the card. See
Chapter 3, "Authorization Features," on page 88.
For debit cards and prepaid cards, the issuing bank can approve a partial amount if the
balance on the card is less than the requested authorization amount and if the transaction
is enabled for partial authorization. For details about partial authorizations and for a list of
the processors and card types supported for partial authorizations, see "Partial
Authorizations," page 105.
6 CyberSource runs its own tests then tells you whether the authorization succeeded.
Credit Card Services Using the Simple Order API | September 2019 39
Chapter 2 Payment Card Processing
Offline Authorizations
Offline authorization means that when you submit an order using a payment card, you do
not know whether the funds are available until you capture the order and receive
confirmation of payment. You typically do not ship the goods until you receive this payment
confirmation. For offline payment cards, it usually takes five days longer to receive
payment confirmation than for online cards.
Automatic Captures
Processors:
Asia, Middle East, and Africa Gateway
Cielo
Comercio Latino
CyberSource Latin American Processing
To enable automatic captures for your account, contact CyberSource Customer Support.
If automatic captures are enabled for your account, submit a bundled request.
If automatic captures are not enabled for your account, submit a bundled request and
set ccAuthService_authType to AUTOCAPTURE.
If your account is configured to enable automatic captures but you want to process a
standard capture for a specific transaction, submit a bundled or standard authorization
request and set ccAuthService_authType to STANDARDCAPTURE. The authorization is
processed immediately, and if it is successful, the capture is processed during the next
settlement submission cycle.
Credit Card Services Using the Simple Order API | September 2019 40
Chapter 2 Payment Card Processing
Authorization reversal and void services are not supported for automatic capture
transactions.
Table 11 Automatic Capture Information for Specific Processors
Credit (ccCreditService)
Credit Card Services Using the Simple Order API | September 2019 41
Chapter 2 Payment Card Processing
If you are using Apple Pay, see Apple Pay Using the Simple Order API.
If you are using Google Pay, see Google Pay Using the Simple Order API.
If you are using Visa Checkout or Visa Secure Remote Commerce, see Table 12 for
the required fields:
Field Notes
ccAuthService_run Set to true.
merchantID
merchantReferenceCode
paymentSolution Set to visacheckout.
purchaseTotals_currency
purchaseTotals_ Either purchaseTotals_grandTotalAmount or item_#_
grandTotalAmount unitPrice must be included in the request.
vc_orderID
wallet_type Required only on CyberSource through VisaNet.
Field Notes
billTo_city1
billTo_country1
billTo_email1
billTo_firstName1
billTo_lastName1
billTo_postalCode1 Required only for transactions in the U.S. and Canada.
1 This field is optional if your CyberSource account is configured for relaxed requirements for address
data and expiration date. See "Relaxed Requirements for Address Data and Expiration Date,"
page 91. Important It is your responsibility to determine whether a field is required for the
transaction you are requesting.
Credit Card Services Using the Simple Order API | September 2019 42
Chapter 2 Payment Card Processing
Field Notes
1
billTo_state Required only for transactions in the U.S. and Canada.
1
billTo_street1
card_accountNumber
card_cardType Required for certain card types. CyberSource strongly
recommends that you send the card type even if it is optional
for your processor. Omitting the card type can cause the
transaction to be processed with the wrong card type.
card_expirationMonth1
card_expirationYear1
ccAuthService_run Set to true.
merchantID
merchantReferenceCode
purchaseTotals_currency
purchaseTotals_ Either purchaseTotals_grandTotalAmount or item_#_
grandTotalAmount unitPrice must be included in the request.
1 This field is optional if your CyberSource account is configured for relaxed requirements for address
data and expiration date. See "Relaxed Requirements for Address Data and Expiration Date,"
page 91. Important It is your responsibility to determine whether a field is required for the
transaction you are requesting.
Step 3 If needed, modify the request to accommodate additional information for your processor.
See "Authorization Information for Specific Processors," page 48.
There are several authorization features that can be performed automatically depending
on the information included in your request. These features are described in Chapter 3,
"Authorization Features," on page 88.
There are several optional features that you can include in your request. These features
are described in Chapter 5, "Optional Features," on page 116.
Credit Card Services Using the Simple Order API | September 2019 43
Chapter 2 Payment Card Processing
Card type:
RuPay
The check status service includes a payment status field in the reply message. When the
value of the payment status field is AUTHORIZED, proceed with the order by requesting
the capture service. When the value of the payment status field is DECLINED, the
authorization has been declined. You can request a different form of payment from the
customer.
Field Notes
ccCheckStatusService_ Set to the request ID in the reply message for the authorization
authRequestID you want to check.
ccCheckStatusService_run Set to true.
merchantID
merchantReferenceCode
Credit Card Services Using the Simple Order API | September 2019 44
Chapter 2 Payment Card Processing
Incremental Authorizations
Processor:
CyberSource through VisaNet
Card types:
Mastercard
Visa
Incremental authorizations are useful when a customer adds products and services to an
original purchase. After a successful original authorization, the incremental authorization
service enables you to:
Request subsequent authorizations.
Request one capture for the original and incremental authorizations.
Limitations
Maximum of 100 incremental authorizations per transaction, in addition to the original
authorization.
Interchange optimization is not supported.
Split shipments are not supported.
2 The customer orders dinner through room service the first night. You request an
incremental authorization of 50.00 for the dinner.
3 The customer decides to stay an extra night. You request an incremental authorization of
200.00 for the additional night.
4 The customer uses items from the mini-bar. The cost of the mini-bar items is 50.00. You
request an incremental authorization of 50.00.
5 When the customer ends their stay and checks out, they sign a receipt for 700.00, which is
the total of all costs incurred.
Credit Card Services Using the Simple Order API | September 2019 45
Chapter 2 Payment Card Processing
Supported Features
Authorization reversals with Mastercard. The reversal amount is the amount of the
original authorization plus the amounts for all incremental authorizations. In the
authorization reversal request, set the request ID to the request ID that was returned
in the reply for the original authorization. See "Reversing an Authorization," page 52.
Authorization reversals with Visa. You can reverse any of the following amounts. See
"Reversing an Authorization," page 52.
Amount of the original authorization plus the amounts for all incremental
authorizations. In the authorization reversal request, set the request ID to the
request ID that was returned in the reply for the original authorization.
Partial authorizations for an original authorization. This feature is supported only for
an original authorization made with a debit card or prepaid card. You can request an
incremental authorization after a partial original authorization, but the incremental
authorization cannot result in a partial authorization. See "Partial Authorizations,"
page 105.
Credit Card Services Using the Simple Order API | September 2019 46
Chapter 2 Payment Card Processing
Step 2 Include the following required fields in each request for an incremental authorization:
Field Notes
ccIncrementalAuthService_authRequestID Set to the request ID that was included in the
original authorization reply message.
ccIncrementalAuthService_run Set to true.
merchantID
merchantReferenceCode
purchaseTotals_currency
purchaseTotals_grandTotalAmount Either purchaseTotals_grandTotalAmount or
item_#_unitPrice must be included in the
request.
CyberSource through VisaNet limits
authorization and capture amounts to 12 digits;
therefore, the maximum amount is
999999999999.
subsequentAuthReason
Step 3 When you request the capture, CyberSource recommends that you set the capture
amount to the amount of the original authorization plus the amounts for all incremental
authorizations.
If the requested capture amount is less than the amount of the original authorization plus
the amounts for all incremental authorizations, CyberSource automatically performs a
partial authorization reversal. See "Automatic Partial Authorization Reversals," page 69.
If the requested capture amount is more than the amount of the original authorization plus
the amounts for all incremental authorizations, CyberSource does not reject the capture
request.
Credit Card Services Using the Simple Order API | September 2019 47
Chapter 2 Payment Card Processing
Credit Card Services Using the Simple Order API | September 2019 48
Chapter 2 Payment Card Processing
Credit Card Services Using the Simple Order API | September 2019 49
Chapter 2 Payment Card Processing
Credit Card Services Using the Simple Order API | September 2019 50
Chapter 2 Payment Card Processing
Credit Card Services Using the Simple Order API | September 2019 51
Chapter 2 Payment Card Processing
Reversing an Authorization
The full authorization reversal service releases the hold that the authorization placed on
the customer’s credit card funds. Use this service to reverse an unnecessary or undesired
authorization.
Each issuing bank has its own rules for deciding whether a full authorization
reversal succeeds or fails. When a reversal fails, contact the issuing bank to
Note learn whether it is possible to reverse the authorization by alternate means.
If your processor supports authorization reversal after void (ARAV), you can reverse an
authorization after you void the associated capture. See "Authorization Reversal after Void
(ARAV)," page 59. If your processor does not support ARAV, you can use the full
authorization reversal service only for an authorization that has not been captured and
settled.
Credit Card Services Using the Simple Order API | September 2019 52
Chapter 2 Payment Card Processing
Credit Card Services Using the Simple Order API | September 2019 53
Chapter 2 Payment Card Processing
Credit Card Services Using the Simple Order API | September 2019 54
Chapter 2 Payment Card Processing
Credit Card Services Using the Simple Order API | September 2019 55
Chapter 2 Payment Card Processing
Credit Card Services Using the Simple Order API | September 2019 56
Chapter 2 Payment Card Processing
For information about requesting a follow-on service, see Getting Started with
CyberSource Advanced for the Simple Order API.
Credit Card Services Using the Simple Order API | September 2019 57
Chapter 2 Payment Card Processing
Field Notes
ccAuthReversalService_ Set to the request ID that was included in the authorization reply
authRequestID message.
ccAuthReversalService_run Set to true.
merchantID
merchantReferenceCode
paymentSolution Include this field only when using Visa Checkout or Visa Secure
Remote Commerce.
purchaseTotals_currency
purchaseTotals_ Either purchaseTotals_grandTotalAmount or item_#_
grandTotalAmount unitPrice must be included in the request.
vc_orderID Include this field only when using Visa Checkout or Visa Secure
Remote Commerce.
Step 3 Make sure that the amount of the reversal is the same as the amount that was authorized:
You cannot partially reverse an authorization; you can reverse an authorization only
for its full amount.
When you use a debit card or prepaid card and only a partial amount was approved,
the amount of the reversal must be the amount that was authorized, not the amount
that was requested.
Credit Card Services Using the Simple Order API | September 2019 58
Chapter 2 Payment Card Processing
Card Types:
On CyberSource through VisaNet—all mada card types as described in "mada Debit
Cards," page 24.
Authorization reversals are not supported for least-cost routing and single-
message processing on Worldpay VAP. To process an aborted transaction or
Note a return, request the credit service. See "Crediting a Payment," page 78.
An authorization reversal returns funds to the customer, either by releasing the hold on the
customer’s funds or by transferring money from your account to the customer’s account. If
the authorization reversal request is not successful, perform a credit to refund the money
to the customer.
Credit Card Services Using the Simple Order API | September 2019 59
Chapter 2 Payment Card Processing
SIX
Streamline
TSYS Acquiring Solutions
Worldpay VAP—Worldpay VAP was previously called Litle.
This feature enables you to reverse an authorization after you void the associated capture.
Step 2 Reverse the authorization associated with the capture. See "Reversing an Authorization,"
page 52.
You might need to perform additional steps if you performed multiple partial
captures for the authorization. To learn whether your processor supports
Note multiple partial captures, see "Multiple Partial Captures," page 71. For
information about multiple captures and ARAV, see "Multiple Partial Captures
and Authorization Reversal after Void," page 73.
Automatic ARAV
Processors:
Credit Mutuel-CIC
CyberSource through VisaNet
SIX
Normally, you must send an authorization reversal request after you void the associated
capture. With automatic ARAV, CyberSource automatically reverses the authorization
after you void the associated capture. To enable automatic ARAV, contact CyberSource
Customer Support to have your account configured for this feature.
Credit Card Services Using the Simple Order API | September 2019 60
Chapter 2 Payment Card Processing
Capturing an Authorization
CyberSource supports captures for all processors.
When you are ready to fulfill a customer’s order and transfer funds from the customer’s
bank to your bank, capture the authorization for that order.
When fulfilling only part of a customer’s order, do not capture the full amount of the
authorization. Capture only the cost of the items that you ship. When you ship the
remaining items, request a new authorization, and then capture the new authorization.
Captures
Unlike authorizations, a capture does not happen in real time. All of the capture requests
for a day are placed in a batch file and sent to the processor. In most cases, the batch is
settled at night. It usually takes two to four days for your acquiring bank to deposit funds in
your merchant bank account.
The following figure shows the steps that occur when you request a capture or credit.
1 You send a request for capture or credit over a secure Internet connection.
2 CyberSource validates the order information then stores the capture or credit request in a
batch file.
3 After midnight, CyberSource sends the batch file to your payment processor.
Credit Card Services Using the Simple Order API | September 2019 61
Chapter 2 Payment Card Processing
4 The processor settles the capture or credit request and transfers funds to the appropriate
bank account.
Due to the potential delay between authorization and capture, the authorization might
expire with the issuing bank before you request capture. Most authorizations expire within
five to seven days. If an authorization expires with the issuing bank before you request the
capture, your bank or processor might require you to resubmit an authorization request
and include a request for capture in the same message.
For information about requesting a follow-on service, see Getting Started with
CyberSource Advanced for the Simple Order API.
For Atos, your request for a capture must also include the request token
returned from a previous authorization in addition to the request ID. Like the
Note request ID, the request token links the capture to the authorization. Send the
request token in the orderRequestToken field.
Credit Card Services Using the Simple Order API | September 2019 62
Chapter 2 Payment Card Processing
Credit (ccCreditService)
Field Notes
ccCaptureService_run Set to true.
ccCaptureService_ Set to the request ID that was included in the authorization reply
authRequestID message. Optional when ccAuthService and ccCaptureService
are in the same request.
merchantID
merchantReferenceCode
orderRequestToken Required only for Atos.
paymentSolution Include this field only when using Visa Checkout or Visa Secure
Remote Commerce.
purchaseTotals_currency
purchaseTotals_ Either purchaseTotals_grandTotalAmount or item_#_unitPrice
grandTotalAmount must be included in the request.
vc_orderID Include this field only when using Visa Checkout or Visa Secure
Remote Commerce.
Step 3 If needed, modify the request to accommodate additional information for your processor.
See Table 20, "Capture Information for Specific Processors," on page 64.
For Cartes Bancaires cards, your capture request cannot be for less than 0.99
EUR.
Note
Credit Card Services Using the Simple Order API | September 2019 63
Chapter 2 Payment Card Processing
There are several optional features that you can include in your request. These features
are described in Chapter 5, "Optional Features," on page 116.
Credit Card Services Using the Simple Order API | September 2019 64
Chapter 2 Payment Card Processing
Credit Card Services Using the Simple Order API | September 2019 65
Chapter 2 Payment Card Processing
Credit Card Services Using the Simple Order API | September 2019 66
Chapter 2 Payment Card Processing
Credit Card Services Using the Simple Order API | September 2019 67
Chapter 2 Payment Card Processing
Capture Features
Authorization Refresh
Processor:
Atos
CyberSource provides authorization refresh functionality to Atos merchants for all card
types except Maestro (UK Domestic).
When a capture request occurs more than 5 days, 20 hours, and 30 minutes after the date
of the original authorization, CyberSource tries to obtain a fresh authorization for the
capture amount by performing a system-generated authorization using the payment data
from the original authorization.
Payer authentication data and CVN data are not included in system-generated
authorizations. Regardless of whether or not you included payer authentication data in
your original authorization request, you will not receive payer authentication protection for
a system-generated authorization.
Credit Card Services Using the Simple Order API | September 2019 68
Chapter 2 Payment Card Processing
In addition to credit cards, automatic partial authorization reversals are supported for:
Debit cards and prepaid cards: see Chapter 4, "Features for Debit Cards and Prepaid
Cards," on page 105.
Credit Card Services Using the Simple Order API | September 2019 69
Chapter 2 Payment Card Processing
If the capture amount is less than the authorization amount, CyberSource automatically
performs a partial authorization reversal before it sends the capture request to the
processor. The results of a successful partial authorization reversal are:
The capture amount matches the new authorization amount at the payment card
company.
The hold on the unused credit card funds might be released. The issuing bank
decides whether or not to release the hold on unused funds.
Interchange Optimization
Processors:
CyberSource through VisaNet: Visa, Mastercard
Automatic authorization refresh: When the capture request occurs more than six days
after the date of the original authorization, CyberSource automatically obtains a fresh
authorization for the capture amount.
On GPN, the fresh authorization uses the same authorization indicator as the original
authorization. For more information, see "Final Authorization Indicator," page 138.
Automatic partial authorization reversal: If the capture does not need a fresh
authorization but the capture amount is less than the authorization amount,
CyberSource automatically performs a partial authorization reversal which releases
the hold on unused credit card funds and ensures that the settlement amount matches
the authorization amount.
Note
Credit Card Services Using the Simple Order API | September 2019 70
Chapter 2 Payment Card Processing
Barclays
Elavon
Elavon Americas
FDC Compass
FDC Nashville Global: multiple partial captures are supported only for card-not-
present transactions; they are not supported for card-present transactions.
FDMS Nashville: multiple partial captures are supported only for card-not-present
transactions; they are not supported for card-present transactions.
HSBC: HSBC is the CyberSource name for HSBC U.K. To enable multiple partial
captures on HSBC, contact CyberSource Customer Support to have your account
configured for this feature.
JCN Gateway
Credit Card Services Using the Simple Order API | September 2019 71
Chapter 2 Payment Card Processing
Multiple partial captures and split shipments are not the same feature.
The multiple partial captures feature is provided by the processor. This
Note feature enables you to request multiple partial captures for one
authorization.
The split shipment feature is provided by CyberSource. This feature
supports three different scenarios: multiple authorizations, multiple
captures, and multiple authorizations with multiple captures. For more
information, see "Split Shipments," page 220.
This feature enables you to request multiple partial captures for one authorization. You
must ensure that the total amount of all the captures does not exceed the authorized
amount.
FDC Compass. To avoid a downgrade for a Visa transaction, the special request fields
are required. For other card types, CyberSource strongly recommends that you
include the special request fields.
FDC Nashville Global. The special request fields are required for all card types:
For Visa and Mastercard, CyberSource sends the values for the special request
fields to the processor.
For all card types, CyberSource uses the values for the special request fields to
determine whether to initiate an automatic partial authorization reversal as
described in "Automatic Partial Authorization Reversals," page 69.
FDMS Nashville. The special request fields are required for Visa and Mastercard
transactions. They are not supported for other card types.
Credit Card Services Using the Simple Order API | September 2019 72
Chapter 2 Payment Card Processing
OmniPay Direct. CyberSource strongly recommends that you include the special
request fields. The supported acquirers are:
Bank of America Merchant Services
Cardnet International
First Data Merchant Solutions (Europe)
Global Payments International Acquiring
Include the following special request fields in each capture request when you are
requesting multiple partial captures:
ccCaptureService_sequence
ccCaptureService_totalCount
When you do not know the total number of captures that you are going to request, set the
capture total count to an estimated value or 99 for all capture requests except the final
one. For the final capture request, set the capture total count and the capture sequence to
the same value.
Credit Card Services Using the Simple Order API | September 2019 73
Chapter 2 Payment Card Processing
This feature enables you to reverse an authorization after you void the associated capture.
If you void only one of the multiple captures, CyberSource declines subsequent
authorization reversal requests.
If you void all of the multiple captures, you can reverse the authorization.
Step 1 Void each capture associated with the authorization. See "Voiding a Capture or Credit,"
page 85.
Credit Card Services Using the Simple Order API | September 2019 74
Chapter 2 Payment Card Processing
Performing a Sale
A sale is a bundled authorization and capture. Some processors and acquirers require a
sale transaction instead of separate authorization and capture requests. For other
processors and acquirers, you can request a sale instead of a separate authorization and
capture if there is no delay between taking a customer’s order and shipping the goods. A
sale is typically used for electronic goods and for services that you can turn on
immediately.
Dual-Message Processing
To perform a sale, request the authorization and capture services at the same time.
Include the request fields that are required for the authorization. No additional fields are
required for the capture.
If the authorization is successful, CyberSource processes the capture immediately and the
reply message includes results for the authorization and for the capture. If the
authorization is declined, CyberSource does not process the capture and the reply
message includes results only for the authorization.
For debit cards and prepaid cards, the issuing bank can approve a partial amount if the
balance on the card is less than the requested authorization amount and if the transaction
is enabled for partial authorization. When this happens, CyberSource does not process
the capture. However, you can submit a capture request for the approved amount. For
details about partial authorizations and for a list of the processors and card types
supported for partial authorizations, see "Partial Authorizations," page 105.
For a limited number of processors and card types, partial authorizations are
supported for credit cards in addition to debit cards and prepaid cards. See
Note "Partial Authorizations," page 105.
For details about authorizations and captures, see "Authorizing a Payment," page 38, and
"Capturing an Authorization," page 61.
Credit Card Services Using the Simple Order API | September 2019 75
Chapter 2 Payment Card Processing
Single-Message Processing
Note
Processors:
CyberSource through VisaNet—National Commercial Bank (NCB) is the only acquirer
that supports single-message processing.
RuPay
Card Types:
All mada card types as described in "mada Debit Cards," page 24.
RuPay
To perform a sale using SMP, request the authorization and capture services at the same
time. Include the request fields that are required for the authorization. No additional fields
are required for the capture. On CyberSource through VisaNet, SAMA sends a full-
financial transaction request to the issuer.
The reply message that CyberSource sends to you includes authorization and capture
results. The authorization amount and capture amount are the same.
For details about authorizations and captures, see "Authorizing a Payment," page 38, and
"Capturing an Authorization," page 61.
Partial Authorizations
For SMP, partial authorizations are supported only on CyberSource through VisaNet. If the
transaction is enabled for partial authorization, the processor can process a partial amount
instead of the entire requested amount. For details about partial authorizations, see
"Partial Authorizations," page 105.
Credit Card Services Using the Simple Order API | September 2019 76
Chapter 2 Payment Card Processing
Debit cards. See Chapter 4, "Features for Debit Cards and Prepaid Cards," on
page 105.
Merchant descriptors. See Merchant Descriptors Using the Simple Order API.
Prepaid cards. See Chapter 4, "Features for Debit Cards and Prepaid Cards," on
page 105.
Credit Card Services Using the Simple Order API | September 2019 77
Chapter 2 Payment Card Processing
Unsupported Features
The following features are not supported for single-message processing:
Authorization reversal after void
Automatic authorization reversal after void
Automatic partial authorization reversals
Interchange optimization
Multiple partial captures
Split shipments
Stand-alone authorizations
Stand-alone captures
Verbal authorizations
Voids
Crediting a Payment
CyberSource supports credits for all processors.
When your request for a credit is successful, the issuing bank for the payment card takes
money out of your merchant bank account and returns it to the customer. It usually takes
two to four days for your acquiring bank to transfer funds from your merchant bank
account.
Credit requests are batched in the same manner as captures. See "Captures," page 61.
Credit Card Services Using the Simple Order API | September 2019 78
Chapter 2 Payment Card Processing
Types of Credits
A follow-on credit is linked to a capture in the CyberSource system. You can request
multiple follow-on credits against a single capture. On CyberSource through VisaNet and
SIX, you must request a follow-on credit within 180 days of the authorization. For all other
processors, you must request a follow-on credit within 60 days of the authorization.
On Atos, your request for a follow-on credit must also include the request token
returned from a previous capture request in addition to the request ID. Like the
Note request ID, the request token links the follow-on credit to the capture. Send the
request token in the orderRequestToken field.
When you combine a request for a follow-on credit with a request for another
service, such as the tax calculation service, you must provide the customer’s
Important billing and account information.
A stand-alone credit is not linked to a capture. There is no time limit for requesting stand-
alone credits. Instead of sending the request ID field in the credit request, the request
must include the fields for the customer’s billing and account information.
For information about requesting a follow-on service, see Getting Started with
CyberSource Advanced for the Simple Order API.
Credit Card Services Using the Simple Order API | September 2019 79
Chapter 2 Payment Card Processing
Field Notes
ccCreditService_ For a follow-on credit, set to the request ID that was included in
captureRequestID the capture reply message. Not used for a stand-alone credit.
ccCreditService_ Required only for stand-along credits on Chase Paymentech
commerceIndicator Solutions.
ccCreditService_run Set to true.
merchantID
merchantReferenceCode
paymentSolution Include this field only when using Visa Checkout or Visa Secure
Remote Commerce.
purchaseTotals_currency
purchaseTotals_ Either purchaseTotals_grandTotalAmount or item_#_unitPrice
grandTotalAmount must be included in the request.
vc_orderID Include this field only when using Visa Checkout or Visa Secure
Remote Commerce.
Credit Card Services Using the Simple Order API | September 2019 80
Chapter 2 Payment Card Processing
Field Notes
billTo_city1
billTo_country1
billTo_email1
billTo_firstName1
billTo_lastName1
billTo_postalCode1 Required only for transactions in the U.S. and Canada.
1
billTo_state Required only for transactions in the U.S. and Canada.
1
billTo_street1
card_accountNumber
card_cardType Required for certain card types. CyberSource strongly
recommends that you send the card type even if it is optional for
your processor. Omitting the card type can cause the transaction
to be processed with the wrong card type.
card_expirationMonth1
card_expirationYear1
1 This field is optional if your CyberSource account is configured for relaxed requirements for address data
and expiration date. See "Relaxed Requirements for Address Data and Expiration Date," page 91.
Important It is your responsibility to determine whether a field is required for the transaction you are
requesting.
Step 4 If needed, modify the request to accommodate additional information for your processor.
See "Credit Information for Specific Processors," page 82.
Step 5 Include optional features in the request. See Chapter 5, "Optional Features," on page 116.
Credit Card Services Using the Simple Order API | September 2019 81
Chapter 2 Payment Card Processing
Credit Card Services Using the Simple Order API | September 2019 82
Chapter 2 Payment Card Processing
Credit Card Services Using the Simple Order API | September 2019 83
Chapter 2 Payment Card Processing
Credit Authorizations
Processor:
CyberSource through VisaNet
A credit authorization authenticates the card and customer. If you are located in the U.S.
or Canada, CyberSource automatically authorizes every credit request. If you are not
located in the U.S. or Canada, contact CyberSource Customer Support to enable credit
authorizations for your account.
When you use the Simple Order API in XML format, you must use version
1.151 or later of the XML schema to receive the following reply fields.
Note
The following fields are included in the credit reply when CyberSource authorizes the
credit request:
ccCreditReply_authorizationCode
ccCreditReply_paymentNetworkTransactionID
ccCreditReply_processorResponse
See Appendix A, "API Fields," on page 240 for descriptions of these fields.
Credit Card Services Using the Simple Order API | September 2019 84
Chapter 2 Payment Card Processing
CyberSource Latin American Processing does not support voids for Aura Card
and Hipercard because transactions with these cards are captured
Note immediately.
CyberSource Latin American Processing is the name of a specific processing
connection that CyberSource supports. In the CyberSource API
documentation, CyberSource Latin American Processing does not refer to the
general topic of processing in Latin America. The information in this note is for
the specific processing connection called CyberSource Latin American
Processing. It is not for any other Latin American processors that
CyberSource supports.
Cielo and Comercio Latino are online gateways. Transactions are batched
every four minutes, which provides very little time for you to void a transaction.
Note
You cannot perform a follow-on credit for a transaction that has been voided.
When you void a capture, a hold remains on the unused credit card funds. If you are not
going to re-capture the authorization as described in "Capture after Void," page 86, and if
your processor supports authorization reversal after void as described in "Authorization
Reversal after Void (ARAV)," page 59, CyberSource recommends that you request an
authorization reversal to release the hold on the unused credit card funds.
Credit Card Services Using the Simple Order API | September 2019 85
Chapter 2 Payment Card Processing
To learn whether your processor supports multiple captures, see "Multiple Partial
Captures," page 71.
On all other processors, when you void a transaction the transaction is at the end of its life
and cannot be the source of another follow-on capture or credit. For example, if you
authorize and capture a transaction, and then you void the capture, you cannot submit
another capture request that uses the authorization code or CyberSource request ID from
the original authorization. If you still want to capture that transaction, you must
re-authorize the transaction and capture the new authorization.
For information about requesting a follow-on service, see Getting Started with
CyberSource Advanced for the Simple Order API.
Credit Card Services Using the Simple Order API | September 2019 86
Chapter 2 Payment Card Processing
Field Notes
merchantID
merchantReferenceCode
voidService_run Set to true.
voidService_voidRequestID Set to the request ID that was included in the capture or credit
reply message.
Credit Card Services Using the Simple Order API | September 2019 87
CHAPTER
Authorization Features
3
You must support the authorization features that your processor supports.
Note
Standard AVS
The following table lists the processors and card types for which CyberSource returns
standard AVS results.
Credit Card Services Using the Simple Order API | September 2019 88
Chapter 3 Authorization Features
Credit Card Services Using the Simple Order API | September 2019 89
Chapter 3 Authorization Features
Credit Card Services Using the Simple Order API | September 2019 90
Chapter 3 Authorization Features
To enable relaxed requirements for address data and expiration date, contact
CyberSource Customer Support to have your account configured for this feature. For
details about relaxed requirements, see the Relaxed Requirements for Address Data and
Expiration Date page.
Credit Card Services Using the Simple Order API | September 2019 91
Chapter 3 Authorization Features
AVS occurs automatically with every authorization request. The authorization reply
includes the ccAuthReply_avsCode field, which contains the AVS code from the issuing
bank that indicates whether AVS matched the address and whether the address match
was partial or complete. See Appendix E, "AVS Codes," on page 468.
When AVS cannot verify the address, but the authorization is otherwise valid, you might
receive an AVS decline. You can capture authorizations that receive an AVS decline.
However, you must review these orders to ensure that they are legitimate. Settling
authorizations that fail the AVS check might have an impact on the fees charged by your
bank. Contact your bank for details about how AVS management might affect your
discount rate.
The ccAuthReply_avsCodeRaw field is the raw AVS code sent directly from the
processor. Do not use this value to handle the AVS response. Use the value only for
debugging purposes.
When your request includes the businessRules_ignoreAVSResult field set to true, you
receive no AVS declines, even when you use businessRules_declineAVSFlags.
Credit Card Services Using the Simple Order API | September 2019 92
Chapter 3 Authorization Features
Enhanced AVS
Processor:
American Express Direct
Card type:
American Express
Enhanced AVS consists of the standard AVS functionality plus verification of some
additional fields. The additional fields that are verified for Enhanced AVS are:
billTo_firstName
billTo_lastName
Card type:
American Express
AAV+ consists of the Enhanced AVS functionality plus verification of some additional
fields. This service is intended for merchants who deliver physical goods to a different
address than the billing address. AAV+ verifies the additional fields only when the
standard and Enhanced AVS tests pass first. For information about Enhanced AVS, see
"Enhanced AVS," page 93.
Credit Card Services Using the Simple Order API | September 2019 93
Chapter 3 Authorization Features
For American Express Direct, when your account is enabled for AAV+ and
when you include the first name, last name, and phone number in your request
Note message, the reply message includes EV response codes for those fields. See
"Electronic Verification (EV)," page 94.
Card types:
American Express
Discover—only on TSYS Acquiring Solutions. Only the first name and last name are
checked.
Credit Card Services Using the Simple Order API | September 2019 94
Chapter 3 Authorization Features
As part of EV for TSYS Acquiring Solutions and Worldpay VAP, you can
provide the IP address in the billTo_ipAddress field. When you provide the IP
Note address, American Express does not send a response for it. Instead, American
Express uses the IP address to run a check in their internal database to ensure
that the IP address does not match previously fraudulent transactions with the
same IP address and is not from countries that American Express has
determined to be a high risk for fraud. If, based on the IP address, American
Express determines that the transaction is fraudulent or is a high risk for fraud,
American Express declines the transaction.
Request Fields
To receive an EV response code for a particular value, you must include that value in your
authorization request. Table 27, "Request Fields for Electronic Verification," on page 95
lists the request fields for each value that EV can verify. In the table, the R/O column
indicates whether the field is required or optional for the authorization service.
Some merchants use placeholder data for some required fields, such as
addresses and phone numbers, because their customers do not provide them
Note with the required information. The benefit of using certain specific placeholder
values is that Decision Manager ignores the values instead of attempting to
process them. However, when you use placeholder data in any of the fields that
are used for EV, the corresponding EV results are invalid.
Credit Card Services Using the Simple Order API | September 2019 95
Chapter 3 Authorization Features
Reply Fields
For each verified value, EV returns a raw response code and a mapped response code:
The raw response code is the value returned by the processor.
The mapped response code is the pre-defined CyberSource value that corresponds to
the raw response code. Appendix M, "Electronic Verification Response Codes," on
page 486 describes the mapped response codes.
The following table lists the reply fields for each value that EV can verify.
Table 28 API Fields for Electronic Verification Responses
Value That Is API Field for Mapped API Field for Raw Response
Being Verified Response
Email ccAuthReply_evEmail ccAuthReply_evEmailRaw
First name and last ccAuthReply_evName ccAuthReply_evNameRaw
name
Phone number ccAuthReply_evPhoneNumber ccAuthReply_evPhoneNumberRaw
Postal code ccAuthReply_evPostalCode ccAuthReply_evPostalCodeRaw
Street address ccAuthReply_evStreet ccAuthReply_evStreetRaw
Credit Card Services Using the Simple Order API | September 2019 96
Chapter 3 Authorization Features
CyberSource through VisaNet Visa, Mastercard, American Express, Diners Club, JCB,
Discover, mada as described in "mada Debit Cards,"
page 24
Credit Card Services Using the Simple Order API | September 2019 97
Chapter 3 Authorization Features
Credit Card Services Using the Simple Order API | September 2019 98
Chapter 3 Authorization Features
Credit Card Services Using the Simple Order API | September 2019 99
Chapter 3 Authorization Features
Each payment card company has its own name for this value:
Visa calls it the Card Verification Value (CVV2).
American Express and Discover call it the Card Identification Digits (CID).
Mastercard calls it the Card Validation Code (CVC2).
To use the CVN, include the card_cvNumber field in the request. This number is never
transferred during card swipes and should be known only by the cardholder.
In Europe, Visa mandates that you must not include a CVN for mail-order
transactions and must not record a CVN on any physical format such as a mail-
Important order form.
CVN Codes
The reply message includes a raw response code and a mapped response code:
The raw response code is the value returned by the processor. This value is returned
in the ccAuthReply_cvCodeRaw field. Use this value only for debugging purposes;
do not use it to determine the card verification response.
The mapped response code is the pre-defined CyberSource value that corresponds to
the raw response code. This value is returned in the ccAuthReply_cvCode field.
Appendix J, "CVN Codes," on page 479 describes the mapped response codes.
Even when the CVN does not match the expected value, the issuing bank might still
authorize the transaction. You will receive a CVN decline from CyberSource, but you can
still capture the transaction because it has been authorized by the bank. However, you
must review the order to ensure that it is legitimate.
Credit Card Services Using the Simple Order API | September 2019 100
Chapter 3 Authorization Features
Settling authorizations that fail the CVN check might have an impact on the fees charged
by your bank. Contact your bank for details about how card verification management
might affect your discount rate.
When a CVN decline is received for the authorization in a sale request, CyberSource does
not process the capture unless you set the businessRules_ignoreCVResult field to
true.
Verbal Authorizations
CyberSource supports verbal authorizations for these processors:
AIBMS
American Express Brighton
American Express Direct
Asia, Middle East, and Africa Gateway
Barclays
Credit Card Services Using the Simple Order API | September 2019 101
Chapter 3 Authorization Features
Credit Card Services Using the Simple Order API | September 2019 102
Chapter 3 Authorization Features
Important
When you request an authorization through CyberSource, the issuing bank might ask you
to call the payment processor to answer questions about the transaction. When this
happens, the processor gives you a verbal authorization code for the transaction. To
capture a verbally authorized transaction, send the verbal authorization code in the
capture request. Make sure your customer service and point-of-sale staff can enter verbal
authorization codes into your system.
You can use a verbal authorization to capture an authorization that was declined for any of
these reasons:
Verbal authorization required
Card expired
Card refused
Invalid card
1 The authorization reply includes reason code 201, which indicates that the issuing bank is
requiring a verbal authorization.
For the American Express card type on FDMS Nashville, the authorization reply also
includes a referral response number in ccAuthReply_referralResponseNumber. You
will be asked for this number, which identifies the failed transaction, when you call
American Express for the verbal authorization.
3 When the processor verbally authorizes the transaction, the processor gives you a verbal
authorization code.
Credit Card Services Using the Simple Order API | September 2019 103
Chapter 3 Authorization Features
For the American Express card type on American Express Direct or FDMS South, the
ccCaptureService_posData and ccCaptureService_transactionID fields are
required to comply with the CAPN requirements.
Credit Card Services Using the Simple Order API | September 2019 104
CHAPTER
Features for Debit Cards
and Prepaid Cards
4
Debit cards and prepaid cards are processed using the credit card services described in
this document. This chapter describes the special features that are available for debit
cards and prepaid cards: partial authorizations and balance responses.
When you use the Simple Order API in XML format, you must use version 1.52
or later of the XML schema to implement partial authorizations or balance
Note responses.
Partial Authorizations
Note
For debit cards and prepaid cards, the issuing bank can approve a partial amount if the
balance on the card is less than the requested authorization amount.
Credit Card Services Using the Simple Order API | September 2019 105
Chapter 4 Features for Debit Cards and Prepaid Cards
Credit Card Services Using the Simple Order API | September 2019 106
Chapter 4 Features for Debit Cards and Prepaid Cards
Opting In
If you accept American Express cards and Chase Paymentech Solutions is
your processor, see "Special Processing for American Express Cards on
Note Chase Paymentech Solutions," page 109.
You must opt in to be able to receive and capture partial authorizations. There are two
ways to opt in:
You can call CyberSource Customer Support to have your account enabled for partial
authorizations. When you do this, all your authorization requests are enabled for
partial authorizations.
or
You can set ccAuthService_partialAuthIndicator to true in your authorization or
sale request. When you do this, only that specific transaction is enabled for partial
authorization.
Opting Out
When your account is enabled for partial authorizations, you can disable partial
authorization for a specific transaction by setting ccAuthService_partialAuthIndicator to
false in your authorization or sale request.
When the balance on a debit card or prepaid card is less than the requested authorization
amount, the issuing bank can approve a partial amount. When this happens, you can
accept multiple forms of payment for the order starting with some or all of the approved
amount followed by one or more different payment methods:
1 If your account is not configured for partial authorizations, you must enable partial
authorizations for the transaction by setting ccAuthService_partialAuthIndicator to
true in your request.
Credit Card Services Using the Simple Order API | September 2019 107
Chapter 4 Features for Debit Cards and Prepaid Cards
If you accept IDR or CLP currencies on FDMS South, see "Special Processing
for IDR and CLP on FDMS South," page 109.
Note
2 You submit an authorization request or a sale request for a debit card or prepaid card.
Note
When you capture only part of the approved amount, CyberSource or your processor
might be able to perform an automatic partial authorization reversal for you. See
"Automatic Partial Authorization Reversals," page 69.
If you do not capture the partial authorization, you must request a full
authorization reversal if this service is supported for your processor and card
Note type. See "Reversing an Authorization," page 52.
5 You use one or more different payment methods for the rest of the order amount.
When you process these payment methods through CyberSource, you can use the
linkToRequest field to link the payment requests to the original authorization request. Set
linkToRequest to the requestID value that was returned in the reply message for the
original authorization request.
Credit Card Services Using the Simple Order API | September 2019 108
Chapter 4 Features for Debit Cards and Prepaid Cards
Step 1 Contact Chase Paymentech Solutions to have your account enabled for partial
authorizations for the American Express card type. The transaction division for partial
authorizations for American Express should be set to 3.
This step is only for the American Express card type on Chase Paymentech
Solutions. For all other card types on Chase Paymentech Solutions, the
Important transaction division for partial authorizations should be set to the default value
of 0 (zero).
Step 2 Contact CyberSource Customer Support to have your account enabled for partial
authorizations.
After your accounts have been enabled for partial authorizations at Chase Paymentech
Solutions and at CyberSource, you can disable partial authorizations for a specific
transaction by setting ccAuthService_partialAuthIndicator to false in your
authorization or sale request.
Rounding occurs, which can cause a minor discrepancy of up to one currency unit
between the amount you requested and the amount that is authorized.
When a transaction is enabled for partial authorization, you must ensure that the
requested amount does not include any digits to the right of the decimal separator.
Credit Card Services Using the Simple Order API | September 2019 109
Chapter 4 Features for Debit Cards and Prepaid Cards
Real-Time Reversals
There are two kinds of real-time reversals:
For details about automatic partial authorization reversals and for a list of the
processors and card types for which it is supported, see "Automatic Partial
Authorization Reversals," page 69.
Credit Card Services Using the Simple Order API | September 2019 110
Chapter 4 Features for Debit Cards and Prepaid Cards
Balance Responses
Note
For descriptions of these fields, see Appendix A, "API Fields," on page 240.
Credit Card Services Using the Simple Order API | September 2019 111
Chapter 4 Features for Debit Cards and Prepaid Cards
The following table lists the processors and card types for which balance responses are
supported. Depending on what data your processor sends to CyberSource, the following
fields might be included in the reply.
Table 32 Processors Supported for Balance Responses
Credit Card Services Using the Simple Order API | September 2019 112
Chapter 4 Features for Debit Cards and Prepaid Cards
Credit Card Services Using the Simple Order API | September 2019 113
Chapter 4 Features for Debit Cards and Prepaid Cards
Credit Card Services Using the Simple Order API | September 2019 114
Chapter 4 Features for Debit Cards and Prepaid Cards
This section previously covered Solo cards, but Solo cards are being phased
out.
Note
Note
Maestro (UK Domestic) cards are debit cards that originate in the United Kingdom. These
cards can have the following features:
Issue number: A Maestro (UK Domestic) card might have an issue number embossed
on it. The issue number can consist of one or two digits; the first digit can be a zero.
An issue number of 2 is different from 02.
Start date: A Maestro (UK Domestic) card might have a start date embossed on it. The
start date consists of a month and year.
When the card balance is sufficient for the requested transaction, the transaction is
successful.
When the card balance is not sufficient for the requested transaction, the request is
declined.
Credit Card Services Using the Simple Order API | September 2019 115
CHAPTER
Optional Features
5
0 Authorizations
See "Zero Amount Authorizations," page 231.
Additional Amounts
Services:
Capture
Credit
Processor:
American Express Direct
This feature enables you to provide detailed information about specific amounts included
in a transaction. For example, if a transaction amount includes a gratuity of 5.00, you can
include these fields in the capture or credit request:
purchaseTotals_additionalAmount0=5.0
purchaseTotals_additionalAmountType0=058
You can include a maximum of five additional amounts in a transaction. For each amount,
you must include an amount field and an amount type field:
purchaseTotals_additionalAmount0 through purchaseTotals_additionalAmount4
purchaseTotals_additionalAmountType0 through purchaseTotals_
additionalAmountType4
The additional amount type values are listed in Appendix C, "Additional Amount Types,"
on page 462.
Credit Card Services Using the Simple Order API | September 2019 116
Chapter 5 Optional Features
2 CyberSource processes the additional amount fields for the shipping and handling
amount of 9.95. The item-level fields for the shipping and handling amount are
ignored.
Taxes
Additional amount fields for taxes take precedence over item-level fields. See the following
example.
Example 2 Taxes
2 CyberSource processes the additional amount fields for the tax amount of 7.95. The
item-level field for the tax amount is ignored.
Aggregator Support
This feature enables a third-party agent to act as a payment aggregator and process
payment card transactions for sub-merchants. Independent sales organizations (ISOs)
and member service providers (MSPs) are agents that can also leverage these aggregator
features.
Contact CyberSource Customer Support to have your account configured for this feature.
Credit Card Services Using the Simple Order API | September 2019 117
Chapter 5 Optional Features
Terminology
Table 33 Aggregator Terminology
Term Definition
aggregator Also known as payment aggregator. Organization that aggregates sub-
merchants under a single account and settles funds directly to the sub-
merchants. An aggregator is usually an ISO or MSP.
independent sales Organization that does one or more of the following:
organization (ISO)
Works with acquirers to sponsor merchant accounts and usually
assumes the risks associated with the merchants’ processing.
Procures new merchant relationships based on contracts with
acquirers.
Connects with a gateway to process online payment card
transactions for small businesses, usually in exchange for a fee or
percentage of sales.
member service Same as an ISO although an MSP has no financial responsibility to the
provider (MSP) merchant.
payment facilitator Payment aggregator.
service provider Third-party or outsource provider of payment processing services. A
service provider typically provides a single service with no role in settling
funds to a merchant.
sub-merchant Merchant whose transactions are submitted to CyberSource by a
payment aggregator.
third-party agent Umbrella term for independent sales organizations, member service
providers, payment aggregators, and payment facilitators.
Card type:
American Express
The following fields are required for aggregator transactions when requesting an
authorization, capture, or credit:
ccAuthService_aggregatorID—required only for the authorization service
ccAuthService_aggregatorName—required only for the authorization service
ccCaptureService_aggregatorID—required only for the capture service
ccCaptureService_aggregatorName—required only for the capture service
Credit Card Services Using the Simple Order API | September 2019 118
Chapter 5 Optional Features
All fields except the merchant descriptor fields are described in Appendix A, "API Fields,"
on page 240. For information about the merchant descriptor fields, see Merchant
Descriptors Using the Simple Order API.
Typically, the merchant descriptor field is used to display your business name on the
customer's statement. However, when you are a payment aggregator, you can use other
values to provide the sub-merchant’s business name for capture and credit requests. The
following table describes these values. The order of the values in the table is the order that
CyberSource uses to determine which values to use.
Credit Card Services Using the Simple Order API | September 2019 119
Chapter 5 Optional Features
Table 34 Values for Providing a Sub-Merchant’s Business Name on American Express Direct
Credit Card Services Using the Simple Order API | September 2019 120
Chapter 5 Optional Features
Card types:
American Express
Diners Club
Discover
JCB
Mastercard
Visa
Authorizations
When requesting an authorization, you must include the following fields:
ccAuthService_aggregatorID
ccAuthService_aggregatorName
invoiceHeader_submerchantCity
invoiceHeader_submerchantName
invoiceHeader_submerchantStreet
The preceding fields are described in Appendix A, "API Fields," on page 240.
Credit Card Services Using the Simple Order API | September 2019 121
Chapter 5 Optional Features
All fields except the merchant descriptor fields are described in Appendix A, "API Fields,"
on page 240. The merchant descriptor fields are described in Merchant Descriptors Using
the Simple Order API.
Typically, the merchant descriptor field is used to display your business name on the
customer's statement. However, when you are a payment aggregator, you can use other
values to provide the sub-merchant’s business name for capture and credit requests.
When you do not provide a value in the merchant descriptor fields, CyberSource uses the
values in your CyberSource account. To add or update the values in your CyberSource
account, contact CyberSource Customer Support.
Credit Card Services Using the Simple Order API | September 2019 122
Chapter 5 Optional Features
All fields except the merchant descriptor fields are described in Appendix A, "API Fields,"
on page 240. The merchant descriptor fields are described in Merchant Descriptors Using
the Simple Order API.
Typically, the merchant descriptor field is used to display your business name on the
customer's statement. However, when you are a payment aggregator, you can use other
values to provide the sub-merchant’s business name for capture and credit requests.
When you do not provide a value in the merchant descriptor fields, CyberSource uses the
values in your CyberSource account. To add or update the values in your CyberSource
account, contact CyberSource Customer Support.
All fields except the merchant descriptor fields are described in Appendix A, "API Fields,"
on page 240. The merchant descriptor fields are described in Merchant Descriptors Using
the Simple Order API.
Typically, the merchant descriptor field is used to display your business name on the
customer's statement. However, when you are a payment aggregator, you can use other
values to provide the sub-merchant’s business name for capture and credit requests.
When you do not provide a value in the merchant descriptor fields, CyberSource uses the
values in your CyberSource account. To add or update the values in your CyberSource
account, contact CyberSource Customer Support.
Credit Card Services Using the Simple Order API | September 2019 123
Chapter 5 Optional Features
Card types:
American Express
Mastercard
The following fields are required for aggregator transactions with American Express or
Mastercard when requesting an authorization, capture, or credit:
ccAuthService_aggregatorID—required only for the authorization service
ccAuthService_aggregatorName—required only for the authorization service with
Mastercard
ccCaptureService_aggregatorID—required only for the capture service
ccCaptureService_aggregatorName—required only for the capture service with
Mastercard
ccCreditService_aggregatorID—required only for the credit service
ccCreditService_aggregatorName—required only for the credit service with
Mastercard
invoiceHeader_submerchantCity
invoiceHeader_submerchantID
invoiceHeader_submerchantName
invoiceHeader_submerchantTelephoneNumber
For Mastercard aggregator captures and credits, CyberSource combines the following two
values to provide the business name information for the customer’s statement:
Aggregator name in the ccCaptureService_aggregatorName or ccCreditService_
aggregatorName field.
Sub-merchant name in the invoiceHeader_suberchantName field.
Credit Card Services Using the Simple Order API | September 2019 124
Chapter 5 Optional Features
The total length of the value that CyberSource sends to the processor is 36 characters. It
is formatted with an asterisk (*) between the aggregator name and the sub-merchant
name:
aggregator name*sub-merchant name
Because the asterisk uses one character, 37 characters remain for the combined length of
the aggregator name and sub-merchant name.
Card types:
American Express
Mastercard
The following fields are required for aggregator transactions with American Express or
Mastercard when requesting an authorization, capture, or credit:
ccAuthService_aggregatorID—required only for the authorization service
ccAuthService_aggregatorName—required only for the authorization service
ccCaptureService_aggregatorID—required only for the capture service
ccCaptureService_aggregatorName—required only for the capture service
ccCreditService_aggregatorID—required only for the credit service
ccCreditService_aggregatorName—required only for the credit service
invoiceHeader_submerchantCity
invoiceHeader_submerchantCountry
invoiceHeader_submerchantEmail
invoiceHeader_submerchantID
invoiceHeader_submerchantName
invoiceHeader_submerchantPostalCode
invoiceHeader_submerchantState
invoiceHeader_submerchantStreet
invoiceHeader_submerchantTelephoneNumber
merchantCategoryCode
Credit Card Services Using the Simple Order API | September 2019 125
Chapter 5 Optional Features
Airline Data
See Airline Processing Using the Simple Order API.
Android Pay
The name of Android Pay changed to Google Pay. See Google Pay Using the Simple
Order API.
Apple Pay
See Apple Pay Using the Simple Order API.
Credit Card Services Using the Simple Order API | September 2019 126
Chapter 5 Optional Features
Authorization Only
Service:
Authorization
Processors:
American Express Direct
Elavon Americas
In the authorization reply message, CyberSource provides you with point-of-sale (POS)
and transaction ID (TID) values. When you perform authorizations through CyberSource
and perform captures and credits through other financial institutions, you can include
these values in your capture requests and follow-on credit requests:
POS data: Get this value from ccAuthReply_posData.
TID: Get this value from ccAuthReply_transactionID.
Including these values in your capture requests and follow-on credit requests enables you
to comply with the CAPN requirements, thus avoiding noncompliance fees.
When you use the Simple Order API in XML format, you must use version 1.63
or later of the XML schema to implement the authorization only feature.
Note
AVS Only
See "Zero Amount Authorizations," page 231.
Credit Card Services Using the Simple Order API | September 2019 127
Chapter 5 Optional Features
Balance Inquiries
Service:
Authorization
Processors:
CyberSource through VisaNet
Elavon Americas
To use this feature, include the balanceInquiry field in an authorization request. The
amount in the request must be zero.
Credit Card Services Using the Simple Order API | September 2019 128
Chapter 5 Optional Features
BNDES
Services:
Authorization
Credit
Card types:
Mastercard
Visa
Processor:
CyberSource through VisaNet
BNDES is card product the same way Visa Platinum, Visa Corporate, and Mastercard
Corporate are products. BNDES is also a bank named Brazilian Development Bank. The
BNDES bank issues the BNDES card products.
Step 1 You must include the following fields in your authorization or credit request:
billTo_companyTaxID
billTo_merchantTaxID
card_productName
For information about these fields, see Appendix A, "API Fields," on page 240.
Step 1 You must include the following fields in your authorization or credit request:
billTo_personalID or billTo_companyTaxID
card_productName
loan_assetType
loan_type
For information about these fields, see Appendix A, "API Fields," on page 240.
Credit Card Services Using the Simple Order API | September 2019 129
Chapter 5 Optional Features
Card-on-File Transactions
See "Merchant-Initiated Transactions (MITs) and Credentials-on-File (COF) Transactions,"
page 173.
Card-Present Data
See Card-Present Processing Using the Simple Order API.
Processors:
Chase Paymentech Solutions
Worldpay VAP—Worldpay VAP was previously called Litle.
Contact your processor to have your account configured for this feature.
Contact CyberSource Customer Support to have your account configured for
Note this feature.
This feature enables you to receive CTI information in your authorization reply messages.
The processor can provide CTI information for approved or declined transactions, not for
rejected transactions.
Credit Card Services Using the Simple Order API | September 2019 130
Chapter 5 Optional Features
For Worldpay VAP, CTI information is also returned in the following fields:
card_prepaidReloadable
card_prepaidType
card_virtual
The CTI fields are described in Appendix A, "API Fields," on page 240.
Your authorization request message must comply with the CTI acceptance criteria as
described in the following table.
Credit Card Services Using the Simple Order API | September 2019 131
Chapter 5 Optional Features
Cash Advances
Services:
Authorization
Capture
Processors:
Barclays
LloydsTSB Cardnet
A cash advance enables a customer to use a payment card to purchase foreign currency
or travelers checks. The currency the customer uses to fund the transactions must be
British pounds.
Process a cash advance transaction the same way you process a regular credit card
transaction: with an authorization and a capture.
You cannot process a cash advance and airline data in the same transaction.
Important
Chase Pay
See Chase Pay Using the Simple Order API.
Credentials-on-File Transactions
See "Merchant-Initiated Transactions (MITs) and Credentials-on-File (COF) Transactions,"
page 173.
Customer Profiles
See "Payment Tokenization," page 204.
Credit Card Services Using the Simple Order API | September 2019 132
Chapter 5 Optional Features
Services:
Authorization
Authorization reversal
Capture
Credit
Processors:
FDC Nashville Global—only for card-present transactions
SIX—only for card-present transactions
Card types:
Visa
Mastercard
DCC converts a foreign customer’s purchase from your local pricing currency to the
customer’s billing currency. This functionality can help you improve or create business
relationships with customers who prefer to make purchases in their own currency.
Contact CyberSource Customer Support to have your account configured for this
feature.
Credit Card Services Using the Simple Order API | September 2019 133
Chapter 5 Optional Features
You must meet the payment card company rules for DCC. Contact your acquirer for
details. For example, you might need to:
Provide the customer with a receipt that shows the amount in the local pricing
currency, the amount in the billing currency, the rate of exchange used to convert
the order amount, and the DCC markup.
Have the customer sign an acknowledgment that the customer had a choice to
pay in the local pricing currency and that the choice of currency is final.
When you use DCC for an order, you cannot split the order into multiple shipments.
Terminology
Table 36 DCC Terminology
Term Definition
Billing currency Currency in which the card is denominated and in which transactions
or are posted to the customer’s account.
converted currency
Converted amount Amount of the transaction, denominated in the customer’s billing
currency.
Exchange rate Factor used to convert an amount in one currency to an amount in
another currency.
Local pricing currency Selling currency that you use for pricing your goods and in which you
usually submit transactions for processing.
Original amount Amount of the transaction, denominated in your local pricing
currency.
Examples
See the examples for DCC in Card-Present Processing Using the Simple Order API.
Credit Card Services Using the Simple Order API | September 2019 134
Chapter 5 Optional Features
Authorizing a Payment
dcc_dccIndicator: set this field to 1. When you include DCC data in your authorization
request and do not set this field to 1, CyberSource rejects the request.
For details about these fields, see Appendix A, "API Fields," on page 240.
Credit Card Services Using the Simple Order API | September 2019 135
Chapter 5 Optional Features
Reversing an Authorization
Do not include any DCC fields in a full authorization reversal request. When you
include DCC fields in the request, CyberSource ignores them. For full
Important authorization reversals, CyberSource uses the data from the original
authorization.
For information about creating an authorization reversal request, see "Creating a Full
Authorization Reversal Request," page 57.
Capturing an Authorization
Do not include any DCC fields in a capture request. When you include DCC
fields in the request, CyberSource ignores them. For captures, CyberSource
Important uses the data from the original authorization.
For information about creating a capture request, see "Creating a Capture Request,"
page 62.
Credit Card Services Using the Simple Order API | September 2019 136
Chapter 5 Optional Features
To credit a payment for a transaction that uses DCC, request a follow-on credit. For
information about creating a credit request, see "Creating a Credit Request," page 79.
DCC is not supported for stand-alone credits. When you include DCC fields in a request
for a stand-alone credit, CyberSource ignores them.
Processor:
Chase Paymentech Solution’s Credit Card Encryption program
Depending on your type of business, you might be eligible to acquire from an issuing bank
a list of the customers who have payment cards issued by that bank. The list does not
include the customers’ payment card numbers, but instead includes encoded account
numbers. Some processors refer to this type of program as issuer encryption and to the
numbers as encrypted account numbers. This type of program is designed to protect
customer information according to the provisions of the Gramm-Leach-Bliley Act.
When processing a payment or credit for one of these customers, you use the encoded
account number instead of the customer’s payment card number. The issuing bank then
matches the encoded account number to the customer’s payment card number when
processing the payment.
You must contact your processor to obtain the information required for the Credit Card
Encryption program and you must have a relationship with the bank in order to acquire
their list of customers.
Credit Card Services Using the Simple Order API | September 2019 137
Chapter 5 Optional Features
Processors:
Barclays
Elavon
FDC Compass
FDI Australia
FDMS Nashville
GPN
HBoS
HSBC
Lloyds-OmniPay
LloydsTSB Cardnet
SIX
Credit Card Services Using the Simple Order API | September 2019 138
Chapter 5 Optional Features
Streamline
Card types:
Mastercard
Maestro (International)
Maestro (UK Domestic)
Co-badged Mastercard and mada as described in "mada Debit Cards," page 24. You
must identify the card type as Mastercard. Supported only on CyberSource through
VisaNet.
This feature supports a mandate from Mastercard. The purpose of the mandate is to
ensure that a customer’s funds are available when there is a risk that the order will not be
fulfilled.
For an authorization with an amount greater than zero, Mastercard recommends that you
indicate whether the authorization is a final authorization, a preauthorization, or an
undefined authorization.
Final Authorizations
For a final authorization:
Authorization amount is the final amount that the customer agrees to pay.
Authorization must be submitted for capture within seven calendar days of its request.
Capture amount and currency must be the same as the authorization amount and
currency.
Credit Card Services Using the Simple Order API | September 2019 139
Chapter 5 Optional Features
Preauthorizations
For a preauthorization:
Authorization amount can be an estimate when the final amount is unknown, which is
typical for hotel, auto rental, e-commerce, and restaurant transactions.
Authorization must be submitted for capture within 30 calendar days of its request.
When you do not capture the authorization, you must reverse it.
In the U.S., Canada, Latin America, and Asia Pacific, Mastercard charges
an additional fee for a preauthorization that is not captured and not
Note reversed.
In Europe, Russia, Middle East, and Africa, Mastercard charges fees for
all preauthorizations.
Undefined Authorizations
Credit Card Services Using the Simple Order API | September 2019 140
Chapter 5 Optional Features
Authorization must be submitted for capture within seven calendar days of its request.
When you do not capture the authorization, you must reverse it; otherwise,
Mastercard charges an additional fee for the transaction.
Unmarked Authorizations
CyberSource does not set a mark or indicator for the type of authorization in the
request that is sent to the processor.
Credit Card Services Using the Simple Order API | September 2019 141
Chapter 5 Optional Features
Step 1 Include the authIndicator field in your authorization request. See "Request Fields,"
page 243, for the field description.
Step 2 For a final authorization on a processor that supports merchant-initiated transactions, your
authorization request must include subsequent authorization fields as described in
"Merchant-Initiated Transactions (MITs) and Credentials-on-File (COF) Transactions,"
page 173.
The authIndicator field is included in the reply message for the following processors:
Chase Paymentech Solutions
CyberSource through VisaNet
FDC Compass
FDC Nashville Global
FDI Australia
FDMS Nashville
Forced Captures
Service:
Authorization
Processors:
AIBMS
American Express Direct
Asia, Middle East, and Africa Gateway
Chase Paymentech Solutions
Credit Card Services Using the Simple Order API | September 2019 142
Chapter 5 Optional Features
Elavon Americas
FDC Nashville Global
FDMS Nashville
FDMS South
GPN
JCN Gateway
OmniPay Direct. The supported acquirers are:
Bank of America Merchant Services
Cardnet International
First Data Merchant Solutions (Europe)
Global Payments International Acquiring
Forced captures are not supported for Comercio Latino and CyberSource Latin
American Processing.
Note CyberSource Latin American Processing is the name of a specific processing
connection that CyberSource supports. In the CyberSource API
documentation, CyberSource Latin American Processing does not refer to the
general topic of processing in Latin America. The information in this note is for
the specific processing connections called Comercio Latino and CyberSource
Latin American Processing. It is not for any other Latin American processors
that CyberSource supports.
Credit Card Services Using the Simple Order API | September 2019 143
Chapter 5 Optional Features
A forced capture occurs when you process an authorization outside the CyberSource
system but then capture the order through CyberSource.
After you process the authorization outside the CyberSource system, request the
CyberSource authorization and capture services at the same time as described in
"Creating an Authorization Request," page 41, and "Creating a Capture Request,"
page 62:
Include the request fields that are required for the authorization.
ccAuthService_authType=verbal
For the American Express card type on FDMS South, you must include the
ccCaptureService_posData and ccCaptureService_transactionID fields in the capture
request to support the CAPN requirements. Obtain the values for these fields from the
response for the authorization that was processed outside the CyberSource system.
Full-Financial Transactions
See "Least-Cost Routing (LCR)," page 164 and "Single-Message Processing," page 76.
Google Pay
See Google Pay Using the Simple Order API.
Credit Card Services Using the Simple Order API | September 2019 144
Chapter 5 Optional Features
Installment Payments
Services:
Authorization
Capture—only on CyberSource through VisaNet and FDC Nashville Global
Credit Card Services Using the Simple Order API | September 2019 145
Chapter 5 Optional Features
Credit Card Services Using the Simple Order API | September 2019 146
Chapter 5 Optional Features
Credit Card Services Using the Simple Order API | September 2019 147
Chapter 5 Optional Features
Credit Card Services Using the Simple Order API | September 2019 148
Chapter 5 Optional Features
The following table lists the countries and regions for which CyberSource supports
installment payments on American Express Direct.
When you submit an installment transaction that does not meet the American
Express Direct requirements for installment payments, American Express
Important Direct processes the transaction as a regular, non-installment transaction.
Step 1 You must include the installment_totalCount field in your authorization request.
Step 3 You must include the installment_planType field in your authorization request if the
corresponding value is not set in your CyberSource account. If this value is set in your
CyberSource account, you can include the field in your authorization request to override
the value in your CyberSource account.
For information about these fields, see Appendix A, "API Fields," on page 240.
Credit Card Services Using the Simple Order API | September 2019 149
Chapter 5 Optional Features
For information about these fields, see Merchant Descriptors Using the Simple Order API.
Step 4 You can include the following optional fields in your authorization request:
installment_sequence
installment_totalCount
For information about these fields, see Appendix A, "API Fields," on page 240.
Overview
Installment payments, which are called parcelados and parcelas in Brazil, are a common
way to pay for purchases made with payment cards. When a customer pays in
installments, the entire payment amount is authorized and captured at the time of the
purchase, but the payment is settled in increments over a period of time. Each incremental
settlement is an installment payment.
Before you can accept installment payments, you and your acquirer must agree on the
maximum number of installments you can accept, which can be different for each card
type.
For customers, installment payments provide greater purchasing power and lower impact
on their monthly budget. For you, offering installment payments at checkout typically
increases the number of successfully completed purchases by 50%.
Credit Card Services Using the Simple Order API | September 2019 150
Chapter 5 Optional Features
Types of Funding
There are two standard types of funding for installment payments:
Issuer-funded installments
Merchant-funded installments
There are two additional types of funding for installment payments in Brazil:
Co-branded merchant financed
Issuer merchant co-financed
CyberSource through VisaNet supports all four types of funding. CyberSource through
VisaNet only enables the processing of installment payments. It has no role in setting the
terms for the installments.
Credit Card Services Using the Simple Order API | September 2019 151
Chapter 5 Optional Features
Step 1 You must include the following fields in your authorization or capture request:
installment_planType
installment_totalCount
Step 2 When creating an authorization request, you must include subsequent authorization fields
as described in "Merchant-Initiated Transactions (MITs) and Credentials-on-File (COF)
Transactions," page 173.
For information about these fields, see Appendix A, "API Fields," on page 240.
Step 1 Inquire about Crediario eligibility for the customer by requesting the authorization service.
Include the following required fields in the authorization request:
eligibilityInquiry—set to Crediario.
installment_amount
installment_firstInstallmentDate
installment_frequency
installment_sequence
installment_totalAmount
installment_totalCount
purchaseTotals_grandTotalAmount—set to 0.
Step 2 The issuer determines whether the customer is eligible for Crediario installment payments.
If the customer is eligible, the authorization reply includes the following fields:
installment_additionalCosts
installment_additionalCostsPercentage
installment_amountFunded
installment_amountRequestedPercentage
installment_annualFinancingCost
installment_annualInterestRate
installment_expenses
installment_expensesPercentage
Credit Card Services Using the Simple Order API | September 2019 152
Chapter 5 Optional Features
installment_fees
installment_feesPercentage
installment_insurance
installment_insurancePercentage
installment_monthlyInterestRate
installment_taxes
installment_taxesPercentage
Step 3 Use the values in the authorization reply to display the installment payment terms to the
customer. The customer decides whether to accept the terms.
a Request the authorization service. Include the following required fields in the
authorization request:
installment_planType
installment_totalAmount
installment_totalCount
Subsequent authorization fields as described in "Merchant-Initiated Transactions
(MITs) and Credentials-on-File (COF) Transactions," page 173.
You can include the following optional fields in the authorization request:
installment_amount
installment_firstInstallmentDate
installment_frequency
installment_sequence
b Request the capture service. Include the following required fields in the capture
request:
installment_additionalCosts
installment_additionalCostsPercentage
installment_amountFunded
installment_amountRequestedPercentage
installment_annualFinancingCost
installment_annualInterestRate
installment_expenses
installment_expensesPercentage
installment_fees
installment_feesPercentage
installment_insurance
installment_insurancePercentage
installment_monthlyInterestRate
Credit Card Services Using the Simple Order API | September 2019 153
Chapter 5 Optional Features
installment_planType
installment_taxes
installment_taxesPercentage
installment_totalAmount
installment_totalCount
You can include the following optional fields in the capture request:
installment_amount
installment_firstInstallmentDate
installment_frequency
installment_sequence
For information about these fields, see Appendix A, "API Fields," on page 240.
Step 1 You must include the following fields in your authorization or capture request:
installment_planType
installment_totalCount
Step 2 When creating an authorization request, you must include subsequent authorization fields
as described in "Merchant-Initiated Transactions (MITs) and Credentials-on-File (COF)
Transactions," page 173.
Step 3 You can include the following optional field in your authorization or capture request:
installment_paymentType
For information about these fields, see Appendix A, "API Fields," on page 240.
Credit Card Services Using the Simple Order API | September 2019 154
Chapter 5 Optional Features
Step 1 You must include the following fields in your authorization or capture request:
billTo_merchantTaxID
installment_planType
Step 2 When creating an authorization request, you must include subsequent authorization fields
as described in "Merchant-Initiated Transactions (MITs) and Credentials-on-File (COF)
Transactions," page 173.
For information about these fields, see Appendix A, "API Fields," on page 240.
Step 1 You must include the following fields in your authorization or capture request:
installment_amount
installment_firstInstallmentAmount
installment_monthlyInterestRate
installment_planType
installment_totalCount
Step 2 When creating an authorization request, you must include subsequent authorization fields
as described in "Merchant-Initiated Transactions (MITs) and Credentials-on-File (COF)
Transactions," page 173.
For information about these fields, see Appendix A, "API Fields," on page 240.
Credit Card Services Using the Simple Order API | September 2019 155
Chapter 5 Optional Features
Step 1 You must include the following fields in your authorization or capture request:
installment_gracePeriodDuration
installment_gracePeriodDurationType
installment_planType
installment_totalCount
Step 2 When creating an authorization request, you must include subsequent authorization fields
as described in "Merchant-Initiated Transactions (MITs) and Credentials-on-File (COF)
Transactions," page 173.
For information about these fields, see Appendix A, "API Fields," on page 240.
Credit Card Services Using the Simple Order API | September 2019 156
Chapter 5 Optional Features
For information about these fields, see Appendix A, "API Fields," on page 240.
Step 1 You must include the following fields in your authorization or capture request:
installment_paymentType
installment_planType
For information about these fields, see Appendix A, "API Fields," on page 240.
Step 3 The authorization request must include subsequent authorization fields as described in
"Merchant-Initiated Transactions (MITs) and Credentials-on-File (COF) Transactions,"
page 173.
Credit Card Services Using the Simple Order API | September 2019 157
Chapter 5 Optional Features
Step 4 You can include the following optional fields in your authorization request:
installment_amount
installment_frequency
installment_sequence
installment_totalAmount
installment_totalCount
For information about these fields, see Appendix A, "API Fields," on page 240.
Step 2 When you request the capture service, include the following required fields in the request:
installment_sequence
installment_totalCount
For information about these fields, see Appendix A, "API Fields," on page 240.
Credit Card Services Using the Simple Order API | September 2019 158
Chapter 5 Optional Features
Step 1 In the authorization request for the first installment payment, set ccAuthService_
commerceIndicator to install.
Step 2 In the authorization requests for the subsequent installment payments, include these
fields:
ccAuthService_commerceIndicator—set to install.
For information about these fields, see Appendix A, "API Fields," on page 240.
Step 1 You must include the installment_totalCount field in your authorization request.
Credit Card Services Using the Simple Order API | September 2019 159
Chapter 5 Optional Features
Step 3 You must include the installment_planType field in your authorization request if the
corresponding value is not set in your CyberSource account. If this value is set in your
CyberSource account, you can include the field in your authorization request to override
the value in your CyberSource account.
For information about these fields, see Appendix A, "API Fields," on page 240.
Step 2 For a transaction in Brazil, you can include the following optional fields in your
authorization request:
installment_planType
installment_totalCount
For information about these fields, see Appendix A, "API Fields," on page 240.
Step 3 For a transaction in Mexico, installment payments are supported, but conditions vary, so
contact CyberSource Customer Support or your CyberSource account manager.
Credit Card Services Using the Simple Order API | September 2019 160
Chapter 5 Optional Features
Step 1 You must include the following fields in your authorization request:
installment_planType
installment_totalCount
For information about these fields, see Appendix A, "API Fields," on page 240.
Step 1 You must include the installment_totalCount field in your authorization request.
For information about this field, see Appendix A, "API Fields," on page 240.
For information about these fields, see Appendix A, "API Fields," on page 240.
Credit Card Services Using the Simple Order API | September 2019 161
Chapter 5 Optional Features
Processors:
CyberSource through VisaNet—the only supported acquirer is Sumitomo Mitsui Card
Co.
JCN Gateway
Card types:
Visa
Mastercard—supported only on JCN Gateway
American Express—supported only on JCN Gateway
Diners Club—supported only on JCN Gateway
JCB—supported only on JCN Gateway
In addition to standard single payments, Japanese acquirers support the payment options
listed in Table 40, "Japanese Payment Options," on page 163.
Before using one of these payment options, you must sign a contract with your acquirer.
Additionally, the funding cycle could differ when using these options. Contact your account
provider for details about contracts and funding cycles.
Some acquirers might not support all of these payment options. Additionally, a card holder
must sign a contract with an issuing bank before using one of these payment options.
Therefore, not all card holders take advantage of these payment options. Confirm
payment option availability with your account provider and the card holder before
implementing one of these payment options.
The following table lists the API fields required for each payment option. For details about
these fields, see Appendix A, "API Fields," on page 240.
Credit Card Services Using the Simple Order API | September 2019 162
Chapter 5 Optional Features
For details about these fields, see Appendix A, "API Fields," on page 240.
CyberSource also supports the following fields for card-present transactions in Japan:
jpo_jccaTerminalID
jpo_jis2TrackData
For details about these fields, see Card-Present Processing Using the Simple Order API.
Verbal Authorizations
When you submit a capture request with a verbal authorization, if the initial authorization
included Japanese payment option fields, the capture request must include the same
Japanese payment option fields.
Stand-Alone Credits
When you perform a stand-alone credit for a transaction that included Japanese payment
option fields, the request for the stand-alone credit must include the same Japanese
payment option fields.
Credit Card Services Using the Simple Order API | September 2019 163
Chapter 5 Optional Features
On CyberSource through VisaNet, stand-alone credits are supported only for JPO
payment method 1.
When a request for a stand-alone credit is made with JCN Gateway, most acquirers make
inquiries about the purpose of such a request. CyberSource recommends using follow-on
credits instead of stand-alone credits whenever possible.
Additional Information
For more information about the Japanese payment options, contact Customer Support of
CyberSource KK (Japan).
JCB J/Secure
See "Payer Authentication," page 186.
Note
Processors:
FDI Australia—supported only for AUD
Worldpay VAP
Least-cost routing offers the lowest routing costs available. When you request LCR, the
processor first determines whether LCR is possible for the transaction, and, if it is
possible, the processor uses single-message processing to accomplish LCR.
Credit Card Services Using the Simple Order API | September 2019 164
Chapter 5 Optional Features
Step 1 Contact CyberSource Customer Support to enable LCR for your account.
Include the request fields that are required for an authorization. See "Authorizing
a Payment," page 38.
If the transaction does not include any optional capture features, such as Level II
data, no additional fields are required for the capture. See "Capturing an
Authorization," page 61.
If the transaction includes an optional capture feature, include the fields that are
needed for the feature.
b The reply message from CyberSource includes authorization and capture results. The
authorization amount and capture amount are the same.
c To find out whether the processor used LCR for the transaction, see the daily
processor report.
For a description of the LCR field, see Appendix A, "API Fields," on page 240.
Step 1 Request the authorization and capture services at the same time:
Include the request fields that are required for an authorization. See "Authorizing a
Payment," page 38.
If the transaction does not include any optional capture features, such as Level II data,
no additional fields are required for the capture. See "Capturing an Authorization,"
page 61.
Credit Card Services Using the Simple Order API | September 2019 165
Chapter 5 Optional Features
If the transaction includes an optional capture feature, include the fields that are
needed for the feature.
The reply message from CyberSource includes authorization and capture results. The
authorization amount and capture amount are the same.
Step 2 To find out whether the processor used LCR for the transaction, see the daily processor
report.
For a description of the LCR field, see Appendix A, "API Fields," on page 240.
Partial Authorizations
If the transaction is enabled for partial authorization, the processor can process a partial
amount instead of the entire requested amount. For details about partial authorizations,
see "Partial Authorizations," page 105.
Supported Features
The following features are supported for least-cost routing and single-message
processing on Worldpay VAP:
AVS. See "Address Verification System (AVS)," page 88.
Balance responses. See "Balance Responses," page 111.
Card type indicators. See "Card Type Indicators (CTIs)," page 130.
Credits. See "Crediting a Payment," page 78.
CVN. See "Card Verification Numbers (CVNs)," page 97.
Debit cards. See Chapter 4, "Features for Debit Cards and Prepaid Cards," on
page 105.
Merchant descriptors. See Merchant Descriptors Using the Simple Order API.
Payer authentication. See "Payer Authentication," page 186.
Prepaid cards. See Chapter 4, "Features for Debit Cards and Prepaid Cards," on
page 105.
Credit Card Services Using the Simple Order API | September 2019 166
Chapter 5 Optional Features
Unsupported Features
The following features are not supported for least-cost routing and single-message
processing:
Authorization reversal after void
Full authorization reversals
Multiple partial captures
Stand-alone authorizations
Stand-alone captures
Verbal authorizations
Voids
Level II Data
See Level II and Level III Processing Using the Simple Order API.
Processor:
CyberSource through VisaNet
Note
Mastercard provides a Bill Payment program that enables customers to use their
Mastercard cards to pay their bills. When you participate in this program, Mastercard
requests that you flag the bill payments so they can be easily identified. To flag these
transactions, include the billPaymentType field in your transaction requests. Do not use
this indicator if you have not signed up with Mastercard to participate in the program.
Credit Card Services Using the Simple Order API | September 2019 167
Chapter 5 Optional Features
Processor:
CyberSource through VisaNet
To use EMS, call CyberSource Customer Support to have your account enabled for this
feature. After your account is enabled, Mastercard performs EMS on all your CNP
authorization requests for U.S.-issued Mastercard cards. For these requests,
CyberSource returns the fraud score in the ccAuthReply_emsTransactionRiskScore
field. For information about this field, see Appendix A, "API Fields," on page 240.
Mastercard Send
Mastercard Send is one of the networks supported by CyberSource Payouts.
Credit Card Services Using the Simple Order API | September 2019 168
Chapter 5 Optional Features
Masterpass
Services:
Authorization
Credit—Chase Paymentech Solutions and CyberSource through VisaNet only
Processors:
Chase Paymentech Solutions
CyberSource through VisaNet
Elavon Americas
OmniPay Direct. The supported acquirers are:
Bank of America Merchant Services
Cardnet International
First Data Merchant Solutions (Europe)
Getnet
Rede
SIX
For details about these fields, see Appendix A, "API Fields," on page 240.
Merchant Descriptors
See Merchant Descriptors Using the Simple Order API.
Credit Card Services Using the Simple Order API | September 2019 169
Chapter 5 Optional Features
Processors:
Chase Paymentech Solutions
CyberSource through VisaNet
Elavon Americas
FDC Nashville Global
OmniPay Direct—merchant-initiated voids are not supported.
Rede
SIX
When you do not receive a reply message after sending a request to CyberSource, this
feature enables you to reverse or void the transaction that you requested.
Note
Step 2 When you do not receive a reply message for your original transaction request, reverse or
void the original transaction as described in the following table.
Transaction to Procedure
Reverse or Void
Authorization Request the full authorization reversal service as described in "Creating a
Full Authorization Reversal Request," page 57. Instead of including the
request ID in your request message, include the
merchantTransactionIdentifier field. The merchant transaction ID links
your reversal request to your original request.
Capture or sale Request the void service as described in "Creating a Void Request,"
page 86. Instead of including the request ID in your request message,
include the merchantTransactionIdentifier field. The merchant
transaction ID links your void request to your original request.
CyberSource automatically handles authorization reversals on capture
and sale requests.
Credit Card Services Using the Simple Order API | September 2019 170
Chapter 5 Optional Features
Transaction to Procedure
Reverse or Void
Credit Request the void service as described in "Creating a Void Request,"
page 86. Instead of including the request ID in your request message,
include the merchantTransactionIdentifier field. The merchant
transaction ID links your void request to your original request.
Step 3 If the original transaction failed, the reply message for the reversal or void request
includes the following fields:
originalTransaction_amount
originalTransaction_reasonCode
Note
Step 2 When you do not receive a reply message for your original transaction request, reverse
the original transaction as described in the following table.
Transaction to Procedure
Reverse or Void
Authorization Request the full authorization reversal service as described in
"Creating a Full Authorization Reversal Request," page 57. Instead of
including the request ID in your request message, include the
merchantTransactionIdentifier field. The merchant transaction ID
links your reversal request to your original request.
Capture or sale 1 Request the void service as described in "Creating a Void
Request," page 86. Include the request ID in your request
message.
2 Request the authorization reversal service as described in
"Creating a Full Authorization Reversal Request," page 57. Instead
of including the request ID in your request message, include the
merchantTransactionIdentifier field. The merchant transaction ID
links your reversal request to your original request.
Credit Request the void service as described in "Creating a Void Request,"
page 86. Include the request ID in your request message.
Credit Card Services Using the Simple Order API | September 2019 171
Chapter 5 Optional Features
Step 3 If the original transaction failed, the reply message for the reversal request includes the
following fields:
originalTransaction_amount
originalTransaction_reasonCode
Note
Step 2 When you do not receive a reply message for your original transaction request, reverse or
void the original transaction as described in the following table.
Transaction to Procedure
Reverse or Void
Authorization Request the full authorization reversal service as described in "Creating a Full
Authorization Reversal Request," page 57. Instead of including the request ID in your
request message, include the merchantTransactionIdentifier field. The merchant
transaction ID links your reversal request to your original request.
Capture or sale 1 Request the void service as described in "Creating a Void Request," page 86. Instead of
including the request ID in your request message, include the
merchantTransactionIdentifier field. The merchant transaction ID links your void
request to your original request.
2 Request the authorization reversal service as described in "Creating a Full Authorization
Reversal Request," page 57. Instead of including the request ID in your request
message, include the merchantTransactionIdentifier field. The merchant transaction
ID links your reversal request to your original request.
Credit Request the void service as described in "Creating a Void Request," page 86. Instead of
including the request ID in your request message, include the
merchantTransactionIdentifier field. The merchant transaction ID links your void request
to your original request.
Step 3 If the original transaction failed, the reply message for the reversal or void request
includes the following fields:
originalTransaction_amount
originalTransaction_reasonCode
Credit Card Services Using the Simple Order API | September 2019 172
Chapter 5 Optional Features
https://www.cybersource.com/content/dam/cybersource/Token_
Management_Service_Stored_Credential_Mandate_FAQ.pdf
Service:
Authorization
Credit Card Services Using the Simple Order API | September 2019 173
Chapter 5 Optional Features
Credit Card Services Using the Simple Order API | September 2019 174
Chapter 5 Optional Features
Credit Card Services Using the Simple Order API | September 2019 175
Chapter 5 Optional Features
Overview
Figure 4 illustrates the relationships between kinds of stored credential transactions.
Obtain the customer’s consent for storing the payment credentials and disclose the
reason for storing them.
Credit Card Services Using the Simple Order API | September 2019 176
Chapter 5 Optional Features
You must include the subsequentAuthFirst field in the request to identify this
transaction as a COF transaction. Set the value for this field to true.
For information about authorizations, see "Authorizing a Payment," page 38. For
information about full-financial transactions, see "Least-Cost Routing (LCR),"
page 164, or "Single-Message Processing," page 76.
You must include the subsequentAuthFirst field in the request to identify this
transaction as a COF transaction. Set the value for this field to true.
If the payment transaction or zero amount authorization fails, do not store the
credentials, and do not use the credentials for subsequent COF transactions.
Step 1 Include the subsequentAuthStoredCredential field in the authorization request. Set the
value for this field to true.
Step 2 See "Creating an Authorization Request," page 41, for information about additional
required fields.
Credit Card Services Using the Simple Order API | September 2019 177
Chapter 5 Optional Features
Merchant-Initiated Transactions
A merchant-initiated transaction is an authorization that you initiate when the customer is
not present. An MIT uses payment information from a previous CIT but is conducted
without the active participation of the customer. There are two main types of MITs. See:
Industry Practice MITs, page 178
Standing Instruction MITs, page 182
Delayed Charge
Card type:
Visa
A delayed charge is associated with an agreement between you and the customer for
services rendered. Delayed charges are typical for lodging transactions and auto rental
transactions.
Step 2 If the payment information is COF information, include the following field in the
authorization request:
subsequentAuthStoredCredential—set the value for this field to true.
Step 3 See "Creating an Authorization Request," page 41, for information about additional
required fields.
Credit Card Services Using the Simple Order API | September 2019 178
Chapter 5 Optional Features
Incremental Authorization
Card type:
Visa
The kind of incremental authorization described in this section is not the same
as the incremental authorization service. For information about the incremental
Note authorization service, see "Incremental Authorizations," page 45.
Step 2 See "Creating an Authorization Request," page 41, for information about additional
required fields.
No-Show Charge
Card type:
Visa
A no-show charge occurs when you and a customer have an agreement for a purchase,
but the customer does not meet the terms of the agreement. No-show charges are
typically used in hotels and motels for a single-night stay.
Credit Card Services Using the Simple Order API | September 2019 179
Chapter 5 Optional Features
Step 2 If the payment information is COF information, include the following field in the
authorization request:
subsequentAuthStoredCredential—set the value for this field to true.
Step 3 See "Creating an Authorization Request," page 41, for information about additional
required fields.
Reauthorization
Card types:
Discover
Visa
You can reauthorize a payment when the completion of the original order extends beyond
the authorization validity time limit set by Visa. Two common reauthorization scenarios
are:
Split or delayed shipment. A split or delayed shipment occurs when some of the goods
that were ordered are not available for shipment at the time of purchase. When you
ship goods after the authorization validity time limit set by Visa, you must perform a
separate authorization to ensure that customer funds are available.
Extended stay for hotels, car rentals, and cruise lines. When a hotel stay, car rental, or
cruise extends beyond the authorization validity time limit set by Visa, you must
perform a separate authorization to ensure that customer funds are available.
Credit Card Services Using the Simple Order API | September 2019 180
Chapter 5 Optional Features
subsequentAuthOriginalAmount—set the value for this field to the amount for the
original authorization. Required only for Discover.
Step 2 If the payment information is COF information, include the following field in the
authorization request:
subsequentAuthStoredCredential—set the value for this field to true.
Step 3 See "Creating an Authorization Request," page 41, for information about additional
required fields.
Step 4 When the reauthorization is for a split shipment, see "Split Shipments," page 220, for
additional information.
Step 5 When the reauthorization is for a partial authorization, see "Partial Authorizations,"
page 105.
Resubmission
Card types:
Visa
Credit Card Services Using the Simple Order API | September 2019 181
Chapter 5 Optional Features
Step 2 If the payment information is COF information, include the following field in the
authorization request:
subsequentAuthStoredCredential—set the value for this field to true.
Step 3 See "Creating an Authorization Request," page 41, for information about additional
required fields.
Installment Payment
Card type:
Discover
Mastercard
Visa
Credit Card Services Using the Simple Order API | September 2019 182
Chapter 5 Optional Features
Step 1 Charge the first installment payment as a CIT. Include the following field in the
authorization request:
subsequentAuth—set the value for this field to true.
Step 1 Charge subsequent installment payments on a regular basis. Include the following fields in
each authorization request:
ccAuthService_commerceIndicator—set the value for this field to install.
subsequentAuth—set the value for this field to true.
subsequentAuthTransactionID—set the value for this field to the network transaction
identifier that was returned in the ccAuthReply_paymentNetworkTransactionID
field in the reply message for the original authorization. Optional for Mastercard.
Step 2 See "Creating an Authorization Request," page 41, for information about additional
required fields.
Step 3 See "Installment Payments," page 145, for additional information about installment
payments.
Recurring Payment
Card types:
Discover
Mastercard
Visa
Step 1 Charge the first recurring payment as a CIT. Include the following field in the authorization
request:
subsequentAuthFirst—set the value for this field to true.
subsequentAuthTransactionID—set the value for this field to the network transaction
identifier that was returned in the ccAuthReply_paymentNetworkTransactionID
field in the reply message for the original authorization. Optional for Mastercard.
Credit Card Services Using the Simple Order API | September 2019 183
Chapter 5 Optional Features
Step 2 Charge subsequent recurring payments regularly. Include the following fields in each
authorization request:
ccAuthService_commerceIndicator—set the value for this field to recurring.
subsequentAuthFirst—set the value for this field to true.
subsequentAuthTransactionID—set the value for this field to the network transaction
identifier that was returned in the ccAuthReply_paymentNetworkTransactionID
field in the reply message for the original authorization. Optional for Mastercard.
Step 3 See "Creating an Authorization Request," page 41, for information about additional
required fields.
Step 4 See "Recurring Payments," page 207, for additional information about recurring
payments.
An unscheduled COF transaction uses stored payment information for a fixed or variable
amount that does not occur on a scheduled or regular basis. An account top-up is one
kind of unscheduled COF.
Step 1 Charge the first payment. Include the following fields in the authorization request:
Step 2 Charge subsequent payments. Include the following fields in each authorization request:
subsequentAuth—set the value for this field to true.
subsequentAuthStoredCredential—set the value for this field to true.
subsequentAuthTransactionID—set the value for this field to the network transaction
identifier that was returned in the ccAuthReply_paymentNetworkTransactionID
field in the reply message for the original authorization. Optional for Mastercard.
Credit Card Services Using the Simple Order API | September 2019 184
Chapter 5 Optional Features
Step 3 See "Creating an Authorization Request," page 41, for information about additional
required fields.
Micropayments
Services:
Authorization
Capture
Credit
Processors:
Most of the card types and processors that CyberSource supports
Micropayments are payments for less than one unit in the transaction’s currency.
Multi-Currency Service
Services:
Authorization
Capture
Credit
Processor:
Chase Paymentech Solutions
If you sell your products in multiple countries, you might want to list your product prices in
your customers’ local currencies. The CyberSource multi-currency service provides
current, guaranteed exchange rates, which enables customers to pay using their local
currencies while enabling you to do business and settle transactions in your desired
currency.
For more information about the CyberSource multi-currency service, see the
Multicurrency Service for Chase Paymentech Solutions Using the Simple Order API.
Credit Card Services Using the Simple Order API | September 2019 185
Chapter 5 Optional Features
Network Tokenization
See "Payment Network Tokenization," page 204.
Partial Shipments
See "Split Shipments," page 220.
Payer Authentication
When you request an authorization using a supported card type and a supported
processor, you can include payer authentication data in the request. You can use the
CyberSource payer authentication services to add Visa Secure, JCB J/Secure™,
ProtectBuy, Mastercard® Identity Check™, RuPay PaySecure, or American Express
SafeKey support to your web site without running additional software on your own server.
The following table lists the cards supported for each type of payer authentication. For
descriptions of the CyberSource payer authentication services, see Payer Authentication
Using the Simple Order API.
Credit Card Services Using the Simple Order API | September 2019 186
Chapter 5 Optional Features
Processors:
American Express Direct: mandatory for transactions that originate in Singapore.
CyberSource through VisaNet
Elavon Americas
FDC Nashville Global
JCN Gateway
Step 1 Add the fields in the following table to your ccAuthService request. The values for these
fields are in the reply from the validate authentication service payerAuthValidateService.
When you request payerAuthValidateService and ccAuthService together, the data is
automatically passed from one service to the other.
The authorization service returns a raw response code and a mapped response code:
The raw response code is the value returned by the processor. CyberSource returns
this value in the ccAuthReply_cavvResponseCodeRaw field.
The mapped response code is the predefined CyberSource value that corresponds to
the raw response code. CyberSource returns this value in the ccAuthReply_
cavvResponseCode field. Appendix D, "American Express SafeKey Response
Codes," on page 467 describes the mapped response codes.
Credit Card Services Using the Simple Order API | September 2019 187
Chapter 5 Optional Features
Value and Requirements Request Field for the Get the Value from this
Authorization Service Payer Authentication
Reply Field
CAVV—cardholder authentication verification value. ccAuthService_cavv payerAuthValidateReply_
This value is a transaction identifier generated by the cavv
issuing bank during American Express SafeKey
payer authentication. This value is required.
ECI—electronic commerce indicator. This value is ccAuthService_ payerAuthValidateReply_
required. Possible values: commerceIndicator commerceIndicator
aesk: Successful AESK transaction.
aesk_attempted: AESK transaction was
attempted but not authenticated.
XID—transaction identifier. This value is optional. ccAuthService_xid payerAuthValidateReply_xid
JCB J/Secure
Service:
Authorization
Processors:
CyberSource through VisaNet
Elavon Americas
Ingenico ePayments
JCN Gateway
SIX
TSYS Acquiring Solutions
JCB J/Secure authenticates the customer by adding a password identification step to the
online shopping process. For details about signing up for and using J/Secure, contact your
acquiring bank or go to the JCB web site:
http://www.jcb-global.com/
Step 1 Add the fields listed in Table 46, "Request Fields for Visa Secure, JCB J/Secure, and
ProtectBuy," on page 199 to your ccAuthService request. The values for these fields are
in the reply from the validate authentication service payerAuthValidateService. When
you request payerAuthValidateService and ccAuthService together, the data is
automatically passed from one service to the other.
Credit Card Services Using the Simple Order API | September 2019 188
Chapter 5 Optional Features
Credit Card Services Using the Simple Order API | September 2019 189
Chapter 5 Optional Features
http://www.mastercard.com/
Credit Card Services Using the Simple Order API | September 2019 190
Chapter 5 Optional Features
Step 1 Add the fields in Table 44, "Request Fields for Mastercard Identity Check," to your
ccAuthService request. The values for these fields are in the reply from the validate
authentication service payerAuthValidateService. When you request
payerAuthValidateService and ccAuthService together, the data is automatically
passed from one service to the other.
Value and Requirements Request Field for the Get the Value from this
Authorization Service Payer Authentication
Reply Field
3D Secure Version—version of 3D Secure that was ccAuthService_ payerAuthEnrollReply_
used to process the Mastercard Identity Check paSpecificationVersion specificationVersion
transaction.
or
Used only for these processors:
payerAuthValidateReply_
CyberSource through VisaNet specificationVersion
OmniPay Direct
Always required.
Examples: 1.0.2 or 2.0.0.
CAVV Algorithm—algorithm for generating the ccAuthService_ payerAuthValidateReply_
UCAF authentication data. cavvAlgorithm cavvAlgorithm
Used only for these processors:
Atos
Ingenico ePayments when a third-party provider
authenticates the transaction
Required when you include the UCAF
authentication data in your request.
You must not include the CAVV algorithm value in
your request when the UCAF authentication data
is not included in your request or when your
processor is not Atos or Ingenico ePayments.
Possible values:
0: HMAC (hash-based message authentication
code)
1: CVV
2: CVV with ATN
3: Mastercard SPA (secure payment algorithm)
Note Ingenico ePayments was previously called
Global Collect.
Credit Card Services Using the Simple Order API | September 2019 191
Chapter 5 Optional Features
Value and Requirements Request Field for the Get the Value from this
Authorization Service Payer Authentication
Reply Field
Directory Server Transaction ID—Transaction ID ccAuthService_ payerAuthEnrollReply_
generated by the Mastercard directory server during directoryServer directoryServerTransactionID
authentication. TransactionID
or
Used only for these processors:
payerAuthValidateReply_
CyberSource through VisaNet directoryServerTransactionID
OmniPay Direct
Required for Mastercard Identity Check 2.0
transactions.
Example: f38e6948-5388-41a6-bca4-
b49723c19437.
ECI—electronic commerce indicator. ccAuthService_ payerAuthValidateReply_
commerceIndicator commerceIndicator
Used for all processors that support Mastercard
Identity Check.
Always required.
Possible values for a Mastercard Identity Check
transaction:
spa: Mastercard Identity Check transaction.
spa_failure: Mastercard Identity Check
authentication failed. Available only for Elavon,
HSBC, and Streamline.
Note The ECI for all Mastercard Identity Check
transactions, including authentication attempts, must
be set to spa. Otherwise, the transactions will be
processed as non-Identity Check transactions.
ECI Raw—raw electronic commerce indicator. ccAuthService_eciRaw payerAuthValidateReply_
Used for all processors that support Mastercard eciRaw
Identity Check.
Required when the payer authentication validation
service returns a raw ECI value.
Some processors require the raw ECI to
guarantee chargeback protection. Contact
CyberSource Customer Support for information
about your processor’s requirements.
Credit Card Services Using the Simple Order API | September 2019 192
Chapter 5 Optional Features
Value and Requirements Request Field for the Get the Value from this
Authorization Service Payer Authentication
Reply Field
PARes Status—payer authentication response ccAuthService_ payerAuthValidateReply_
status. paresStatus paresStatus
Used only for these processors:
Asia, Middle East, and Africa Gateway
Atos
Ingenico ePayments when a third-party provider
authenticates the transaction
For Atos and Ingenico ePayments: required for a
successful Mastercard Identity Check transaction,
which is indicated when the UCAF collection
indicator is 2.
For the Asia, Middle East, and Africa Gateway:
required unless all of the following are true:
You are requesting the payer authentication and
the authorization in separate requests.
This is a successful Mastercard Identity Check
transaction, which is indicated when the
commerce indicator is spa.
The card is not enrolled, which is indicated
when the VERes enrolled status is not Y.
When all the preceding conditions are true, do
not include the PARes status in the
authorization request. If you do, CyberSource
sends the value to the processor without
modification. CyberSource does not decline the
transaction; declines are generated by the
processor.
Possible values:
Y: Customer was successfully authenticated.
A: Proof of authentication attempt was
generated.
N: Customer failed or cancelled authentication.
Transaction denied.
U: Authentication not completed regardless of
the reason.
Note Ingenico ePayments was previously called
Global Collect.
Credit Card Services Using the Simple Order API | September 2019 193
Chapter 5 Optional Features
Value and Requirements Request Field for the Get the Value from this
Authorization Service Payer Authentication
Reply Field
UCAF Authentication Data—authentication data for ucaf_authenticationData payerAuthValidateReply_
the universal cardholder authentication field. ucafAuthenticationData
Used for all processors that support Mastercard
Identity Check.
Required when the UCAF collection indicator is 1,
2, or 5. Do not include UCAF authentication data
in the authorization request if the UCAF collection
indicator is not 1, 2, or 5.
Important Mastercard has indicated that an issuing
bank can downgrade an authorization request to a
non-secure transaction when the UCAF collection
indicator is 1 and UCAF authentication data is not
present. An issuing bank can choose not to settle a
downgraded Mastercard Identity Check transaction.
When UCAF authentication data is not present, set
the UCAF collection indicator to 0.
UCAF Collection Indicator—collection indicator for ucaf_collectionIndicator payerAuthValidateReply_
the universal cardholder authentication field. ucafCollectionIndicator
Used for all processors that support Mastercard
Identity Check.
Always required.
Possible values:
0: UCAF collection is not supported at your web
site.
1: UCAF collection is supported at your web
site, and the UCAF was populated.
2: UCAF collection is supported at your web
site and the UCAF was populated. This value
indicates a successful Mastercard Identity
Check transaction.
5: UCAF collection is supported at your web
site, and the UCAF was populated based on the
risk assessment that the issuer performed. This
value is supported only for Masterpass
transactions.
6: UCAF collection is supported at your web
site, and the UCAF was populated based on the
risk assessment that you performed. This value
is supported only for Masterpass transactions.
Credit Card Services Using the Simple Order API | September 2019 194
Chapter 5 Optional Features
Value and Requirements Request Field for the Get the Value from this
Authorization Service Payer Authentication
Reply Field
VERes Enrolled—verification response enrollment ccAuthService_ payerAuthEnrollReply_
status. veresEnrolled veresEnrolled
Used only for the Asia, Middle East, and Africa
Gateway.
Required for all payer authentication transactions.
Possible values:
Y: Authentication available.
N: Customer not participating.
U: Unable to authenticate regardless of the
reason.
XID—transaction identifier. Must be 28-character ccAuthService_xid payerAuthValidateReply_xid
base64 or 40-character hex binary.
Used for all processors that support Mastercard
Identity Check.
For Atos: required for a successful Mastercard
Identity Check transaction, which is indicated
when the UCAF collection indicator is 2.
For all other processors: required when the payer
authentication validation service returns an XID
value.
ProtectBuy
Service:
Authorization
Processor:
SIX
http://protectbuy.nnja.co/
Credit Card Services Using the Simple Order API | September 2019 195
Chapter 5 Optional Features
Step 1 Add the fields listed in Table 46, "Request Fields for Visa Secure, JCB J/Secure, and
ProtectBuy," on page 199 to your ccAuthService request. The values for these fields are
in the reply from the validate authentication service payerAuthValidateService. When
you request payerAuthValidateService and ccAuthService together, the data is
automatically passed from one service to the other.
RuPay PaySecure
Service:
Authorization
Processor:
RuPay
RuPay PaySecure authenticates the customer during an online purchase and protects
payment information as it is transmitted over the Internet. See the Payer Authentication
RuPay Integration Guide.
Step 1 Add the fields in the following table to your ccAuthService request. The values for these
fields are in the reply from the payer authentication validate service
payerAuthValidateService. When you request payerAuthValidateService and
ccAuthService together, the data is automatically passed from one service to the other.
Value and Requirements Request Field for the Get the Value from this
Authorization Service Payer Authentication
Reply Field
CAVV—cardholder authentication verification value. ccAuthService_cavv payerAuthValidateReply_
This value is a transaction identifier generated by the cavv
issuing bank during RuPay PaySecure payer
authentication. This value is required.
ECI—electronic commerce indicator. This value is ccAuthService_ payerAuthValidateReply_
required. Possible value: commerceIndicator commerceIndicator
rpy: Successful RuPay PaySecure transaction.
XID—transaction identifier. This value is required. ccAuthService_xid payerAuthValidateReply_xid
Credit Card Services Using the Simple Order API | September 2019 196
Chapter 5 Optional Features
Visa Secure
Service:
Authorization
Processors:
AIBMS
Asia, Middle East, and Africa Gateway
Atos
Barclays
Chase Paymentech Solutions
Cielo
Comercio Latino
Credit Mutuel-CIC
CyberSource Latin American Processing: Visa Secure is an emerging feature in the
Latin American region. It is not fully supported in all countries. Contact CyberSource
Customer Support for details.
Credit Card Services Using the Simple Order API | September 2019 197
Chapter 5 Optional Features
LloydsTSB Cardnet
Moneris
OmniPay Direct. The supported acquirers are:
Bank of America Merchant Services
Cardnet International
First Data Merchant Solutions (Europe)
Global Payments International Acquiring
Visa Secure reduces the risk of unauthorized use of a payment card account. Visa Secure
enables you to verify a customer’s identity through the use of a password and provides
results to you in real time during the checkout process. For details about signing up for
and using Visa Secure, contact your acquiring bank or go to the Visa web site:
http://visa.com/
For Visa Secure transactions, use card type 001. Do not use card type 033. For
information about card type values, see Appendix G, "Card Types," on
Note page 473.
For Visa Checkout and Visa Secure Remote Commerce transactions, do not
map the Visa Secure data from the decrypt Visa Checkout data service reply
Note message to the payer authentication fields in the authorization request.
CyberSource maps the data for you. The transaction information that
CyberSource sends to the processor includes the Visa Secure data.
Credit Card Services Using the Simple Order API | September 2019 198
Chapter 5 Optional Features
Step 1 Add the fields listed in the following table to your ccAuthService request. The values for
these fields are in the reply from the validate authentication service
payerAuthValidateService. When you request payerAuthValidateService and
ccAuthService together, the data is automatically passed from one service to the other.
The authorization service returns a raw response code and a mapped response code:
The raw response code is the value returned by the processor. CyberSource returns
this value in the ccAuthReply_cavvResponseCodeRaw field.
The mapped response code is the predefined CyberSource value that corresponds to
the raw response code. CyberSource returns this value in the ccAuthReply_
cavvResponseCode field. Appendix T, "Visa Secure Response Codes," on page 505
describes the mapped response codes.
Table 46 Request Fields for Visa Secure, JCB J/Secure, and ProtectBuy
Value and Requirements Request Field for the Get the Value from this
Authorization Service Payer Authentication
Reply Field
CAVV—cardholder authentication verification value. ccAuthService_cavv payerAuthValidateReply_
This value is a transaction identifier generated by the cavv
issuing bank during Visa Secure, JCB J/Secure, or
ProtectBuy payer authentication. Must be
28-character base64 or 40-character hex binary.
Used for all processors that support Visa Secure,
JCB J/Secure, or ProtectBuy.
Required when the commerce indicator is js, pb,
pb_attempted, vbv, or vbv_attempted.
Optional when the commerce indicator is
js_attempted.
For Visa Secure on FDC Nashville Global,
CyberSource sets this field to the value for the
transaction identifier (XID) if the XID is present in
the authorization request and the CAVV is not
present.
Credit Card Services Using the Simple Order API | September 2019 199
Chapter 5 Optional Features
Table 46 Request Fields for Visa Secure, JCB J/Secure, and ProtectBuy (Continued)
Value and Requirements Request Field for the Get the Value from this
Authorization Service Payer Authentication
Reply Field
CAVV Algorithm—algorithm for generating the ccAuthService_ payerAuthValidateReply_
CAVV. cavvAlgorithm cavvAlgorithm
Used only for these processors:
Atos
Ingenico ePayments when a third-party provider
authenticates the transaction
Required when you include the CAVV in your
request.
You must not include the CAVV algorithm value in
your request when the CAVV is not included in
your request or when your processor is not Atos or
Ingenico ePayments.
Possible values:
0: HMAC (hash-based message authentication
code)
1: CVV
2: CVV with ATN
Note Ingenico ePayments was previously called
Global Collect.
ECI—electronic commerce indicator. ccAuthService_ payerAuthValidateReply_
commerceIndicator commerceIndicator
Used for all processors that support Visa Secure,
JCB J/Secure, or ProtectBuy.
Always required.
Possible values for a Visa Secure, JCB J/Secure,
or ProtectBuy transaction:
js: Successful JCB J/Secure transaction.
js_attempted: JCB J/Secure transaction
was attempted but not authenticated.
pb: Successful ProtectBuy transaction.
pb_attempted: ProtectBuy transaction was
attempted but not authenticated.
vbv: Successful Visa Secure transaction.
vbv_attempted: Visa Secure transaction
was attempted but not authenticated.
vbv_failure: Visa Secure authentication
failed. Available only for HSBC and Streamline.
Credit Card Services Using the Simple Order API | September 2019 200
Chapter 5 Optional Features
Table 46 Request Fields for Visa Secure, JCB J/Secure, and ProtectBuy (Continued)
Value and Requirements Request Field for the Get the Value from this
Authorization Service Payer Authentication
Reply Field
ECI Raw—raw electronic commerce indicator. ccAuthService_eciRaw payerAuthValidateReply_
eciRaw
Used for all processors that support Visa Secure,
JCB J/Secure, or ProtectBuy.
Required when the payer authentication validation
service returns a raw ECI value.
Some processors require the raw ECI to
guarantee chargeback protection. Contact
CyberSource Customer Support for information
about your processor’s requirements.
Credit Card Services Using the Simple Order API | September 2019 201
Chapter 5 Optional Features
Table 46 Request Fields for Visa Secure, JCB J/Secure, and ProtectBuy (Continued)
Value and Requirements Request Field for the Get the Value from this
Authorization Service Payer Authentication
Reply Field
PARes Status—payer authentication response ccAuthService_ payerAuthValidateReply_
status. paresStatus paresStatus
Used only for these processors:
Asia, Middle East, and Africa Gateway
Atos
Ingenico ePayments when a third-party provider
authenticates the transaction
For Atos and Ingenico ePayments: required for a
successful Visa Secure transaction, which is
indicated when the commerce indicator is vbv.
For the Asia, Middle East, and Africa Gateway:
required unless all of the following are true:
You are requesting the payer authentication and
the authorization in separate requests.
This is a successful or attempted Visa Secure
transaction, which is indicated when the
commerce indicator is vbv or
vbv_attempted.
The card is not enrolled, which is indicated
when the VERes enrolled status is not Y.
When all the preceding conditions are true, do
not include the PARes status in the
authorization request. If you do, CyberSource
sends the value to the processor without
modification. CyberSource does not decline the
transaction; declines are generated by the
processor.
Possible values:
Y: Customer was successfully authenticated.
A: Proof of authentication attempt was
generated.
N: Customer failed or cancelled authentication.
Transaction denied.
U: Authentication not completed regardless of
the reason.
Note Ingenico ePayments was previously called
Global Collect.
Credit Card Services Using the Simple Order API | September 2019 202
Chapter 5 Optional Features
Table 46 Request Fields for Visa Secure, JCB J/Secure, and ProtectBuy (Continued)
Value and Requirements Request Field for the Get the Value from this
Authorization Service Payer Authentication
Reply Field
VERes Enrolled—verification response enrollment ccAuthService_ payerAuthEnrollReply_
status. veresEnrolled veresEnrolled
Used only for the Asia, Middle East, and Africa
Gateway.
Required for all payer authentication transactions.
Possible values:
Y: Authentication available.
N: Customer not participating.
U: Unable to authenticate regardless of the
reason.
XID—transaction identifier. Must be 28-character ccAuthService_xid payerAuthValidateReply_xid
base64 or 40-character hex binary.
Used for all processors that support Visa Secure,
JCB J/Secure, or ProtectBuy.
For Atos: required for a successful Visa Secure
transaction, which is indicated when the
commerce indicator is vbv.
For all other processors: required when the
commerce indicator is js, pb, or vbv.
Optional when the commerce indicator is
js_attempted, pb_attempted, or vbv_
attempted.
For Visa Secure on FDC Nashville Global,
CyberSource sets the cardholder authentication
verification value (CAVV) field to the XID value if
the XID is present in the authorization request and
the CAVV is not present.
Credit Card Services Using the Simple Order API | September 2019 203
Chapter 5 Optional Features
Payment Tokenization
See "Token Management Service (TMS)," page 228.
Payouts
See Payouts Using the Simple Order API.
POS Transactions
See Card-Present Processing Using the Simple Order API.
Credit Card Services Using the Simple Order API | September 2019 204
Chapter 5 Optional Features
Quasi-Cash
Services:
Authorization
Full authorization reversal
Capture
Credit
Void
Processors:
Atos: Full authorization reversals and automatic partial authorization reversals are not
supported for Atos.
GPN
TSYS Acquiring Solutions
Credit Card Services Using the Simple Order API | September 2019 205
Chapter 5 Optional Features
A quasi-cash transaction is a cash-like transaction for the sale of items that are directly
convertible to cash, such as:
Casino gaming chips
Money orders
Wire transfers
Automatic partial authorization reversals are supported for quasi-cash transactions. See
"Automatic Partial Authorization Reversals," page 69.
Recipients
Service:
Authorization
Processors:
Barclays
Elavon
HBoS
LloydsTSB Cardnet
Streamline
In the United Kingdom there is a regulation that permits customers to use a debit card to
pay outstanding debt for another person. This person is referred to as the payment
recipient. For example, a customer can pay the entire balance or part of the balance on a
recipient’s payment card or payday loan. To help reduce the high levels of fraud that occur
for these kinds of transactions, you must include information about the recipient in the
authorization request. The following fields are required in the United Kingdom for Visa
debit transactions that are characterized under merchant category code 6012:
recipient_accountID
recipient_dateOfBirth
recipient_lastName
recipient_postalCode
Credit Card Services Using the Simple Order API | September 2019 206
Chapter 5 Optional Features
Recurring Billing
When you use Recurring Billing, you can process an authorization, capture, or credit by
using information that is stored in a subscription. CyberSource uses the subscription ID to
reference the subscription information in the CyberSource database. Instead of providing
all the information that is normally required for a transaction, you only need to provide the
following values:
Merchant ID
Merchant reference code
Amount of the payment or credit
Subscription ID
You can override most of the information stored in the subscription by including the
relevant API fields in the payment or credit request. For example, you could provide a
different billing or shipping address in the request. You cannot override the payment card
account number.
Recurring Payments
Service:
Authorization
Credit Card Services Using the Simple Order API | September 2019 207
Chapter 5 Optional Features
Credit Card Services Using the Simple Order API | September 2019 208
Chapter 5 Optional Features
Credit Card Services Using the Simple Order API | September 2019 209
Chapter 5 Optional Features
Credit Card Services Using the Simple Order API | September 2019 210
Chapter 5 Optional Features
Credit Card Services Using the Simple Order API | September 2019 211
Chapter 5 Optional Features
American Express and Discover have programs that you must register for if you
want to process recurring payments. Contact American Express and Discover
Note for details about their programs.
Depending on the types of products and services you sell, you might want to process
recurring payments for a customer. For example, you might want to charge a customer
19.95 USD each month to access a service that you offer.
A customer’s recurring payment does not have to be the same amount each
time.
Note
You must disclose clearly to customers when they make a purchase what the amount will
be for the recurring payments. If the amount varies based on usage, make it clear.
Step 1 For the first payment, the type of request you need to send depends on which processor
and card type you are using.
For all card types on Atos, include the following fields and values in the request for the
first payment:
ccAuthService_commerceIndicator=recurring
ccAuthService_firstRecurringPayment=Y
card_cvNumber
Credit Card Services Using the Simple Order API | September 2019 212
Chapter 5 Optional Features
For all card types on Credit Mutuel-CIC, include the following fields and values in the
request for the first payment:
Set ccAuthService_commerceIndicator to internet, spa, vbv, or vbv_
attempted.
Set ccAuthService_firstRecurringPayment to Y.
For Mastercard and American Express transactions on FDC Nashville Global, include
the following fields and values in the request for the first payment:
ccAuthService_commerceIndicator=recurring
ccAuthService_firstRecurringPayment=TRUE
card_cvNumber
For all card types on OmniPay Direct, request a non-recurring transaction and include
the following field and value in the request for the first payment:
ccAuthService_firstRecurringPayment=Y
For all other processors and card types, request a non-recurring transaction for a
credit card authorization.
If the first authorization is successful, you can submit subsequent authorizations for
recurring payments using that card. If the first authorization is not successful, do not
submit subsequent authorizations using that card.
You must perform Step 1 once per year to verify the account.
Important
Step 2 For each subsequent recurring payment, send an authorization request using the
e-commerce indicator to indicate that the payment is a recurring payment:
ccAuthService_commerceIndicator=recurring
CyberSource also offers services that enable you to create a subscription or customer
profile for a customer in the CyberSource system and then use that subscription or
customer profile later to manually or automatically bill the customer. The CyberSource
system eliminates the need for you to handle or store the customer’s sensitive payment
card information or create your own system for billing the customer on a regular basis. For
more information, see "Payment Tokenization," page 204, and "Recurring Billing,"
page 207.
Credit Card Services Using the Simple Order API | September 2019 213
Chapter 5 Optional Features
Note
If AVS is supported for your processor and card type, AVS is run for every authorization
request that you submit. For recurring payments, check the AVS result for the first
payment to ensure that the payment information is accurate and to reduce the risk of
fraud.
You must decide what to do with the AVS results for subsequent payments. You might
want to ignore the AVS results for the these payments because you have already
confirmed with the first payment that the payment card number is valid and not fraudulent.
When you need to change the payment card number used for a series of recurring
payments, follow Step 1 in creating a recurring payment to verify the new account number.
Closely evaluate the AVS results. If the first authorization is successful, you can submit
subsequent authorizations for recurring payments using that card. If the first authorization
is not successful, do not submit subsequent authorizations using that card. For
subsequent payments, follow Step 2 in creating a recurring payment. You can choose to
ignore the AVS results.
Note
With Ingenico ePayments, you must not include the CVN in a recurring payment request.
If you do, CyberSource rejects the request because of invalid data.
Note
Credit Card Services Using the Simple Order API | September 2019 214
Chapter 5 Optional Features
Table 48 Processors That Support Replacement Expiration Dates for Recurring Payments
Credit Card Services Using the Simple Order API | September 2019 215
Chapter 5 Optional Features
Normally when you request a credit card authorization, you must provide a valid expiration
date for the payment card. If you are processing a recurring payment, and the payment
card that you have on file for the customer has expired, you might still be able to request
the authorization depending on which processor you use. Instead of sending the out-of-
date expiration date, you can include a replacement expiration date in your request.
Do not use a replacement expiration date for cards that have not expired. Use
a replacement expiration date only for cards that have expired and only for
Important recurring payments.
Using a replacement expiration date for a recurring payment does not
guarantee that the authorization will be successful. The issuing bank
determines whether a card is authorized; some issuing banks do not accept
an expiration date that does not match the expiration date in the bank’s
database.
The replacement expiration date that CyberSource supports is 12/2099. To use this date,
include these fields and values in your authorization request:
card_expirationMonth=12
card_expirationYear=2099
Recurring Profiles
See "Recurring Billing," page 207.
Credit Card Services Using the Simple Order API | September 2019 216
Chapter 5 Optional Features
Report Groups
Services:
Authorization
Full authorization reversal
Capture
Credit
Processor:
Worldpay VAP—Worldpay VAP was previously called Litle.
Report group values enable you to define custom groups for your processor reports. You
can put your transactions into groups and then request processor reports for each group.
This value is case sensitive and space sensitive.
When you do not have a specific report group structure in mind, Worldpay VAP
recommends that you use your merchant ID as your report group value.
Note
To use multiple report groups for your transactions, you must contact Worldpay
VAP to have your Worldpay VAP account configured for this feature. When
Important using one report group for all your transactions, you do not need to have your
Worldpay VAP account configured for this feature.
Credit Card Services Using the Simple Order API | September 2019 217
Chapter 5 Optional Features
The following table describes the logic that CyberSource uses for each kind of request to
determine which report group value to use.
Samsung Pay
See Samsung Pay Using the Simple Order API.
Secure Data
See "Payment Tokenization," page 204.
Credit Card Services Using the Simple Order API | September 2019 218
Chapter 5 Optional Features
Service Fees
See Service Fee Processing Using the Simple Order API.
Single-Message Processing
See "Single-Message Processing," page 76.
Soft Descriptors
See "Merchant Descriptors," page 169.
Split Dial/Route
See "Forced Captures," page 142.
Credit Card Services Using the Simple Order API | September 2019 219
Chapter 5 Optional Features
Split Shipments
Services:
Authorization
Capture
Processors:
CyberSource through VisaNet
Split shipments are not available for Mastercard transactions in the IDR
currency on CyberSource through VisaNet.
Important
GPN
The split-shipment feature enables you to split an order into multiple shipments with
multiple captures.
Multiple partial captures and split shipments are not the same feature.
The multiple partial captures feature is provided by the processor. This
Note feature enables you to request multiple partial captures for one
authorization. For more information, see "Multiple Partial Captures,"
page 71.
All the transactions for a split shipment are linked together in the Business Center and
in reports.
When you split an order into multiple shipments with multiple captures, you do not
need to request additional authorizations; CyberSource takes care of the additional
authorizations for you.
Credit Card Services Using the Simple Order API | September 2019 220
Chapter 5 Optional Features
Requirements
The requirements for using split shipments are:
You must use CyberSource through VisaNet or GPN.
You must contact CyberSource Customer Support to have your account configured for
this feature. On CyberSource through VisaNet, your account can be enabled for
multiple partial captures or split shipments; it cannot be enabled for both features.
Additional Authorizations
When you need an additional authorization for an order, you can use the link-to-request
field to link the additional authorization to the first authorization. For the additional
authorization, you must submit an authorization request that includes the link-to-request
field in addition to the basic fields required for every authorization request. The additional
authorization is linked to the original authorization in the Business Center and in reports.
The captures for these authorizations are also linked to the original authorization in the
Business Center and in reports.
For scenarios that use an additional authorization, see the following sections:
"One Authorization and One Sale," page 222
"Two Authorizations and One Capture," page 224
Additional Captures
When you need an additional capture for an order, CyberSource performs a system-
generated authorization for the additional capture request, using the payment data from
the original authorization. The system-generated authorization is linked to the original
authorization in the Business Center and in reports. The captures are linked to the
authorizations in the Business Center and in reports through the request IDs as with any
capture.
On GPN, the system-generated authorization uses the same authorization indicator as the
original authorization. For more information, see "Final Authorization Indicator," page 138.
Credit Card Services Using the Simple Order API | September 2019 221
Chapter 5 Optional Features
For scenarios that use an additional capture, see the following sections:
"One Authorization and Two Captures," page 223
"Multiple Captures in a Batch File," page 223
Split-Shipment Scenarios
2 After the product becomes available, you ship the product and request a sale.
For the second authorization, you must submit an authorization request that includes the
link-to-request field in addition to the basic fields required for every authorization request.
Set the link-to-request field to the request ID from the first authorization’s reply:
First Authorization Reply Message: requestID=SWVdPS5IM
Second Authorization Request: linkToRequest=SWVdPS5IM
Including the link-to-request field in your authorization request triggers the split-shipment
functionality. Because you are requesting the second authorization and capture together,
you do not need to include the request ID in your capture request.
3 CyberSource tries to link the second authorization request to the first authorization:
If the link-to-request value is valid, the second authorization is linked to the original
authorization in the Business Center and in reports.
If the link-to-request value is not valid, the second authorization is not linked to the
original authorization in the Business Center and in reports.
If the link-to-request value for the second authorization was valid, all three
transactions (first authorization, second authorization, capture) are linked together in
the Business Center and in reports.
If the link-to-request value for the second authorization was not valid, the second
authorization and capture are linked to each other in the Business Center and in
reports, but they are not linked to the first authorization.
Credit Card Services Using the Simple Order API | September 2019 222
Chapter 5 Optional Features
2 You ship the available products and request a capture for the amount of the shipped
products.
One of the products is not available for immediate shipment, so you ship the available
products and wait for the remaining product to become available.
3 After the remaining product becomes available, you ship the product and request a
capture for the amount of that product.
6 You get the status of the second capture request and its associated system-generated
authorization.
See "Obtaining the Status of a System-Generated Authorization," page 225.
Note
1 You create and upload a batch file using one of these methods:
Offline Transaction File Submission System: This system is described in the Offline
Transaction File Submission Implementation Guide.
Credit Card Services Using the Simple Order API | September 2019 223
Chapter 5 Optional Features
3 You get the status of your batch requests by viewing the Batch Submission Detail Report.
Get the report by using one of these methods, both of which are described in the Offline
Transaction File Submission Implementation Guide:
View the report on the Business Center.
Download the report programmatically.
2 After the product becomes available, you request a second authorization to ensure that
funds are still available. The authorization request must include:
Basic fields required for every authorization request.
Link-to-request field. Set the value for this field to the request ID from the first
authorization’s reply:
First Authorization Reply Message: requestID=SWVdPS5IM
Second Authorization Request: linkToRequest=SWVdPS5IM
Including the link-to-request field in your authorization request triggers the split-
shipment functionality.
3 CyberSource tries to link the second authorization request to the first authorization:
If the link-to-request value is valid, the second authorization is linked to the original
authorization in the Business Center and in reports.
If the link-to-request value is not valid, the second authorization is not linked to the
original authorization in the Business Center and in reports.
Credit Card Services Using the Simple Order API | September 2019 224
Chapter 5 Optional Features
If the link-to-request value for the second authorization was valid, all three
transactions (first authorization, second authorization, capture) are linked together in
the Business Center and in reports.
If the link-to-request value for the second authorization was not valid, the second
authorization and capture are linked to each other in the Business Center and in
reports, but they are not linked to the first authorization.
CyberSource recommends that you use one of the methods described in the following
table to get the status of the system-generated authorization request before shipping the
product.
Method Description
Business Center Use the capture request ID to search for the second capture. The
details for all related transactions are displayed on the Transaction
Search Details page. It can take a maximum of six hours for the
status of the system-generated authorization request to be
available.
On-Demand Single This report is described in the Classic Reporting Developer Guide.
Transaction Report You must use version 1.3 or later and include the parameter
includeExtendedDetail in your query. It can take a maximum of six
hours for the status of the system-generated authorization request
to be available.
Transaction Exception This report is described in the Classic Reporting Developer Guide.
Detail Report CyberSource recommends that you use this report on a daily basis
to identify transactions that have been declined.
Credit Card Services Using the Simple Order API | September 2019 225
Chapter 5 Optional Features
Additional Information
For descriptions of the required fields for authorization and capture requests, and to see
which fields are optional, see Appendix A, "API Fields," on page 240.
Processor:
FDC Compass
Terminology
Table 51 Staged Digital Wallet Terminology
Term Definition
Business application Identifier for the type of transaction.
indicator (BAI)
Digital wallet Entity that provides the pass-through digital wallet or staged digital
operator (DWO) wallet service to the customer.
Merchant verification Setting in your CyberSource account that is required for processing
value (MVV) SDW transactions.
Pass-through wallet Digital wallet that replaces the customer’s payment information with a
or pass-through token. Examples: Apple Pay, Google Pay, Visa Checkout, Masterpass.
digital wallet
Staged digital wallet Digital wallet that replaces the customer’s payment information with
(SDW) credentials provided by a SDWO. Examples: PayPal, AliPay.
Staged digital wallet Entity that provides the staged digital wallet service to the customer and
operator (SDWO) processes the payment between the customer and the merchant.
Credit Card Services Using the Simple Order API | September 2019 226
Chapter 5 Optional Features
Requirements
You must:
Contact CyberSource Customer Support to set the merchant verification value in your
CyberSource account.
SDW Functionality
The SDW provides functionality that:
Uses the card or bank account number supplied by the customer to the SDWO.
Purchase transaction: customer pays you using the credentials assigned by the
SDWO. For example, the typical credentials for PayPal are a username and a
password.
Funding: uses the account number provided by the customer to fund or reimburse
the staged digital wallet.
Subscriptions
See "Recurring Billing," page 207.
Tax Calculation
See Tax Calculation Service Using the Simple Order API.
Tokenization
See "Payment Network Tokenization," page 204, and "Token Management Service
(TMS)," page 228.
Credit Card Services Using the Simple Order API | September 2019 227
Chapter 5 Optional Features
When you use TMS, you can process an authorization, capture, or credit by using
information that is associated with a customer token. CyberSource uses the customer
token to reference customer information in the CyberSource database. Instead of
providing all the information that is normally required for a transaction, you only need to
provide the following values:
Merchant ID
Merchant reference code
Amount of the payment or credit
Subscription ID—set this field to the value of the customer token.
You can override most of the information associated with the customer token by including
the relevant API fields in the payment or credit request. For example, you could provide a
different billing or shipping address in the request. You cannot override the payment card
account number.
Type II Cards
See Level II and Level III Processing Using the Simple Order API.
Verbal Authorizations
See "Verbal Authorizations," page 101.
Credit Card Services Using the Simple Order API | September 2019 228
Chapter 5 Optional Features
Processors:
Chase Paymentech Solutions
FDC Compass
FDC Nashville Global
FDMS Nashville
GPN
OmniPay-Ireland: OmniPay-Ireland is the CyberSource name for HSBC International.
TSYS Acquiring Solutions
Visa provides a Bill Payment program that enables customers to use their Visa cards to
pay their bills. When you participate in this program, Visa requests that you flag the bill
payments and credits so they can be easily identified. To flag these transactions, include
the ccAuthService_billPayment field in your transaction requests.
Although CyberSource accepts the bill payment indicator no matter which processor you
are using, do not use this indicator if you have not signed up with Visa to participate in the
program.
Credit Card Services Using the Simple Order API | September 2019 229
Chapter 5 Optional Features
Visa provides a Debt Repayment program that enables customers to use their Visa debit
cards to make a payment towards an existing contractual loan. The types of loans that can
qualify for this program are:
Auto loans
Payment cards
Mortgages
Student loans
To participate in this program, contact your processor for details and requirements.
When you participate in this program, Visa requests that you flag the debt repayments and
credits so they can be easily identified. To flag these transactions, include these fields in
your transaction requests:
ccAuthService_billPayment—not required on CyberSource through VisaNet
debtIndicator
When you use the Simple Order API in XML format, you must use version 1.37
or later of the XML schema to implement Visa debt repayments.
Note
Visa Direct
Visa Direct is one of the networks supported by CyberSource Payouts.See Payouts Using
the Simple Order API.
Visa Secure
See "Payer Authentication," page 186.
Credit Card Services Using the Simple Order API | September 2019 230
Chapter 5 Optional Features
Credit Card Services Using the Simple Order API | September 2019 231
Chapter 5 Optional Features
Credit Card Services Using the Simple Order API | September 2019 232
Chapter 5 Optional Features
Credit Card Services Using the Simple Order API | September 2019 233
Chapter 5 Optional Features
Credit Card Services Using the Simple Order API | September 2019 234
Chapter 5 Optional Features
Credit Card Services Using the Simple Order API | September 2019 235
Chapter 5 Optional Features
Authorizing a payment for a zero amount shows whether a payment card account is valid
and whether the card is lost or stolen. You cannot capture a zero amount authorization.
Credit Card Services Using the Simple Order API | September 2019 236
CHAPTER
Testing the Credit Card
Services
6
To ensure that your requests are processed correctly, you must test the basic success and
error conditions for each CyberSource service you plan to use.
Before you can test, you must contact CyberSource Customer Support to
activate the credit card services and configure your account for testing. You
Important must also contact your processor to set up your processor account.
Use your regular CyberSource merchant ID when you test your system.
Unless otherwise specified, use test payment card numbers, not real ones. See
Table 53, "Test Payment Card Numbers," on page 238.
Use a real combination for the city, state, and postal code.
Use a real combination for the area code and telephone number.
Use a nonexistent account and domain name for the customer’s email address.
Note
When testing the Simple Order API, use the test URL:
https://ics2wstesta.ic3.com/commerce/1.x/transactionProcessor
Credit Card Services Using the Simple Order API | September 2019 237
Chapter 6 Testing the Credit Card Services
When you test captures on Ingenico ePayments, you must capture the full
amount of the authorization. Although a capture request for a partial amount is
Note not rejected during testing, it will be rejected by the processor in production.
Ingenico ePayments was previously called Global Collect.
Credit Card Services Using the Simple Order API | September 2019 238
Chapter 6 Testing the Credit Card Services
For trigger amounts and responses, see Simple Order API and SOAP Toolkit API Testing
Information page.
Step 1 Contact CyberSource Customer Support to have your account configured for CVN. Until
you do this, you will receive a 1 in the ccAuthReply_cvCode reply field.
Step 2 Test your system in production using a small currency amount, such as one currency unit.
Instead of using the test account numbers, use a real payment card account number, and
send an incorrect CVN in the request for authorization. The card should be refused and
the request declined.
Credit Card Services Using the Simple Order API | September 2019 239
APPENDIX
API Fields
A
Formatting Restrictions
Unless otherwise noted, all field names are case sensitive and all fields accept special
characters such as @, #, and %.
The values of the item_#_ fields must not contain carets (^) or colons (:)
because these characters are reserved for use by the CyberSource services.
Note Values for request-level and item-level fields must not contain new lines or
carriage returns. However, they can contain embedded spaces and any other
printable characters. CyberSource removes all leading and trailing spaces.
Atos
The billTo_ fields must not contain colons (:).
Moneris
Values for request-level and item-level fields must not contain these special
characters: ampersands (&), single quotes (‘), double quotes (“), less than
signs (<), and greater than signs (>).
Multibyte Characters
Many international languages – such as Korean, Chinese, and Russian – require more than one
ASCII byte per character. Therefore, a string of multibyte characters can exceed the allotted string
length of some API fields.
In many international languages, a short name that visually has only 3 or 4 characters may be
equivalent to 10 or 15 bytes in UTF-8. Therefore, it is important to take into consideration the overall
length of a multibyte string to be sure it fits into the allotted ASCII string length.
For best success when working with international languages, make sure the
total size of a multibyte string does not exceed the ASCII string length for a
Important specific API field.
Credit Card Services Using the Simple Order API | September 2019 240
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 241
Appendix A API Fields
Numbered Elements
The CyberSource XML schema includes several numbered elements. You can include
these complex elements more than once in a request. For example, when a customer
order includes more than one item, you must include multiple <item> elements in your
request. Each item is numbered, starting with 0. The XML schema uses an id attribute in
the item’s opening tag to indicate the number. For example:
<item id="0">
As a name-value pair field name, this tag is represented as item_0. In this portion of the
field name, the underscore before the number does not indicate hierarchy in the XML
schema. The item fields are generically referred to as item_#_<element name> in the
documentation.
Below is an example of the numbered <item> element and the corresponding name-
value pair field names. If you are using the Simple Object Access Protocol (SOAP), the
client contains a corresponding Item class.
Example 3 Numbered XML Schema Element Names and
Name-Value Pair Field Names
Credit Card Services Using the Simple Order API | September 2019 242
Appendix A API Fields
Request Fields
When you use Payment Tokenization or Recurring Billing and you include a
subscription ID in your request, many of the fields in the following table that are
Note normally required for an authorization or credit become optional. See "Payment
Tokenization," page 204, and "Recurring Billing," page 207.
Credit Card Services Using the Simple Order API | September 2019 243
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 244
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 245
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 246
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 247
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 248
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 249
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 250
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 251
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 252
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 253
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 254
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 255
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 256
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 257
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 258
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 259
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 260
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 261
Appendix A API Fields
businessRules_ Flag for a sale request that indicates whether to Authorization (O) String (5)
ignoreCVResult allow the capture service to run even when the
authorization receives a CVN decline, as
indicated by a ccAuthReply_cvCode value of
D or N.
Possible values:
true: Ignore the results of CVN checking
and run the capture service.
false (default): If the authorization
receives a CVN decline, do not run the
capture service.
Credit Card Services Using the Simple Order API | September 2019 262
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 263
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 264
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 265
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 266
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 267
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 268
Appendix A API Fields
ccAuthReversalService_ Reason for the authorization reversal. Possible Authorization Reversal String (3)
reversalReason value: (O)
34: Suspected fraud
CyberSource ignores this field for processors
that do not support this value.
ccAuthReversalService_run Whether to include the authorization reversal Authorization Reversal String (5)
service in your request. Possible values: (R)
true: Include the service in your request.
false (default): Do not include the service
in your request.
For information about this service, see
"Reversing an Authorization," page 52.
1 Optional for a follow-on credit request, which must include ccCreditService_captureRequestID.
2 This field is optional if your CyberSource account is configured for relaxed requirements for address data and expiration date. See
"Relaxed Requirements for Address Data and Expiration Date," page 91. Important It is your responsibility to determine whether a
field is required for the transaction you are requesting.
3 You must include either item_#_unitPrice or purchaseTotals_grandTotalAmount in your request. For information about items and
grand totals, see Getting Started with CyberSource Advanced for the Simple Order API.
4 Required for Visa Checkout and Visa Secure Remote Commerce transactions. Otherwise, not used.
5 The TC 33 Capture file contains information about the purchases and refunds that a merchant submits to CyberSource. CyberSource
through VisaNet creates the TC 33 Capture file at the end of the day and sends it to the merchant’s acquirer, who uses this information
to facilitate end-of-day clearing processing with payment card companies.
Credit Card Services Using the Simple Order API | September 2019 269
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 270
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 271
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 272
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 273
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 274
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 275
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 276
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 277
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 278
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 279
Appendix A API Fields
ccAuthService_paresStatus Payer authentication response status. For the Authorization String (1)
description and requirements, see "Payer
Authentication," page 186.
1 Optional for a follow-on credit request, which must include ccCreditService_captureRequestID.
2 This field is optional if your CyberSource account is configured for relaxed requirements for address data and expiration date. See
"Relaxed Requirements for Address Data and Expiration Date," page 91. Important It is your responsibility to determine whether a
field is required for the transaction you are requesting.
3 You must include either item_#_unitPrice or purchaseTotals_grandTotalAmount in your request. For information about items and
grand totals, see Getting Started with CyberSource Advanced for the Simple Order API.
4 Required for Visa Checkout and Visa Secure Remote Commerce transactions. Otherwise, not used.
5 The TC 33 Capture file contains information about the purchases and refunds that a merchant submits to CyberSource. CyberSource
through VisaNet creates the TC 33 Capture file at the end of the day and sends it to the merchant’s acquirer, who uses this information
to facilitate end-of-day clearing processing with payment card companies.
Credit Card Services Using the Simple Order API | September 2019 280
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 281
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 282
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 283
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 284
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 285
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 286
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 287
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 288
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 289
Appendix A API Fields
ccCreditService_ Type of transaction. Use with stand-alone Credit (R for stand-alone String (13)
commerceIndicator credits. Some payment card companies use credits on Chase
this information when determining discount Paymentech solutions;
rates. Possible values: otherwise, optional.)
internet
moto
recurring
recurring_internet
For details about these values, see Appendix I,
"Commerce Indicators," on page 477.
ccCreditService_ Dynamic payment descriptor extension (DPDE) Credit (O) String (4)
dpdeBillingMonth that specifies the month for which you are
billing the customer. Depending on your
business model, you might bill for a service that
has already been provided, such as a
telephone service, or you might bill for a service
that is going to be provided, such as a
subscription to investment information. This
value lets the customer know which month the
payment is for.
Format: YYMM
This field is supported only on JCN Gateway
and is not supported for all Japanese acquirers.
1 Optional for a follow-on credit request, which must include ccCreditService_captureRequestID.
2 This field is optional if your CyberSource account is configured for relaxed requirements for address data and expiration date. See
"Relaxed Requirements for Address Data and Expiration Date," page 91. Important It is your responsibility to determine whether a
field is required for the transaction you are requesting.
3 You must include either item_#_unitPrice or purchaseTotals_grandTotalAmount in your request. For information about items and
grand totals, see Getting Started with CyberSource Advanced for the Simple Order API.
4 Required for Visa Checkout and Visa Secure Remote Commerce transactions. Otherwise, not used.
5 The TC 33 Capture file contains information about the purchases and refunds that a merchant submits to CyberSource. CyberSource
through VisaNet creates the TC 33 Capture file at the end of the day and sends it to the merchant’s acquirer, who uses this information
to facilitate end-of-day clearing processing with payment card companies.
Credit Card Services Using the Simple Order API | September 2019 290
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 291
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 292
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 293
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 294
Appendix A API Fields
installment_additionalCosts Additional costs charged by the issuer to fund Capture (R for Crediario String (12)
the installment payments. installment payments in
Brazil on CyberSource
This field is included in the authorization reply
through VisaNet)
for the Crediario eligibility request when the
issuer approves the customer's request for
Crediario installment payments in Brazil. See
"Installment Payments on CyberSource through
VisaNet," page 150.
This field is supported only for Crediario
installment payments in Brazil on CyberSource
through VisaNet.
The value for this field corresponds to the
following data in the TC 33 capture file5:
Record: CP01 TCR9
Position: 128-139
Field: Total Other Costs
1 Optional for a follow-on credit request, which must include ccCreditService_captureRequestID.
2 This field is optional if your CyberSource account is configured for relaxed requirements for address data and expiration date. See
"Relaxed Requirements for Address Data and Expiration Date," page 91. Important It is your responsibility to determine whether a
field is required for the transaction you are requesting.
3 You must include either item_#_unitPrice or purchaseTotals_grandTotalAmount in your request. For information about items and
grand totals, see Getting Started with CyberSource Advanced for the Simple Order API.
4 Required for Visa Checkout and Visa Secure Remote Commerce transactions. Otherwise, not used.
5 The TC 33 Capture file contains information about the purchases and refunds that a merchant submits to CyberSource. CyberSource
through VisaNet creates the TC 33 Capture file at the end of the day and sends it to the merchant’s acquirer, who uses this information
to facilitate end-of-day clearing processing with payment card companies.
Credit Card Services Using the Simple Order API | September 2019 295
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 296
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 297
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 298
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 299
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 300
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 301
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 302
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 303
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 304
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 305
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 306
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 307
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 308
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 309
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 310
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 311
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 312
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 313
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 314
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 315
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 317
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 318
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 319
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 320
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 321
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 322
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 323
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 324
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 325
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 326
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 327
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 328
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 329
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 330
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 331
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 332
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 333
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 334
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 335
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 336
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 337
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 338
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 339
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 340
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 341
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 342
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 343
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 344
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 345
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 346
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 347
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 348
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 349
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 350
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 351
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 352
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 353
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 354
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 355
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 356
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 357
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 358
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 359
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 360
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 361
Appendix A API Fields
Reply Fields
Table 56 Reply Fields
Credit Card Services Using the Simple Order API | September 2019 362
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 363
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 364
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 365
Appendix A API Fields
Worldpay VAP
Important Before using this field on Worldpay
VAP, you must contact CyberSource Customer
Support to have your account configured for this
feature.
Type of card used in the transaction. The only
possible value is:
PREPAID: Prepaid Card
RBS WorldPay Atlanta
Type of card used in the transaction. Possible
values:
B: Business Card
O: Noncommercial Card
R: Corporate Card
S: Purchase Card
Blank: Purchase card not supported
1 The TC 33 Capture file contains information about the purchases and refunds that a merchant submits to CyberSource.
CyberSource through VisaNet creates the TC 33 Capture file at the end of the day and sends it to the merchant’s acquirer, who
uses this information to facilitate end-of-day clearing processing with payment networks.
Credit Card Services Using the Simple Order API | September 2019 366
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 367
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 368
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 369
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 370
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 371
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 372
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 373
Appendix A API Fields
ccAuthReply_posData Point-of-sale details for the transaction. This value Authorization String (12)
is returned only on American Express Direct.
CyberSource generates this value, which consists
of a series of codes that identify terminal
capability, security data, and specific conditions
present at the time the transaction occurred. To
comply with the CAPN requirements, this value
must be included in all subsequent follow-on
requests, such as captures and follow-on credits.
When you perform authorizations, captures, and
credits through CyberSource, CyberSource
passes this value from the authorization service to
the subsequent services for you. However, when
you perform authorizations through CyberSource
and perform subsequent services through other
financial institutions, you must ensure that your
requests for captures and credits include this
value. See "Authorization Only," page 127.
1 The TC 33 Capture file contains information about the purchases and refunds that a merchant submits to CyberSource.
CyberSource through VisaNet creates the TC 33 Capture file at the end of the day and sends it to the merchant’s acquirer, who
uses this information to facilitate end-of-day clearing processing with payment networks.
Credit Card Services Using the Simple Order API | September 2019 374
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 375
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 376
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 377
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 378
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 379
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 380
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 381
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 382
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 383
Appendix A API Fields
installment_ Additional costs charged by the issuer to fund the Authorization String (12)
additionalCosts installment payments. This field is supported for
two kinds of installment payments in Brazil on
CyberSource through VisaNet:
Crediario with Visa: this field is included in the
authorization reply for the Crediario eligibility
request when the issuer approves the
customer's request for Crediario installment
payments
Mastercard
See "Installment Payments on CyberSource
through VisaNet," page 150.
The value for this field corresponds to the following
data in the TC 33 capture file1:
Record: CP01 TCR9
Position: 128-139
Field: Total Other Costs
1 The TC 33 Capture file contains information about the purchases and refunds that a merchant submits to CyberSource.
CyberSource through VisaNet creates the TC 33 Capture file at the end of the day and sends it to the merchant’s acquirer, who
uses this information to facilitate end-of-day clearing processing with payment networks.
Credit Card Services Using the Simple Order API | September 2019 384
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 385
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 386
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 387
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 388
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 389
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 390
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 391
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 392
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 393
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 394
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 395
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 396
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 397
Appendix A API Fields
1 The TC 33 Capture file contains information about the purchases and refunds that a merchant submits to CyberSource.
CyberSource through VisaNet creates the TC 33 Capture file at the end of the day and sends it to the merchant’s acquirer, who
uses this information to facilitate end-of-day clearing processing with payment networks.
Credit Card Services Using the Simple Order API | September 2019 398
Appendix A API Fields
1 The TC 33 Capture file contains information about the purchases and refunds that a merchant submits to CyberSource.
CyberSource through VisaNet creates the TC 33 Capture file at the end of the day and sends it to the merchant’s acquirer, who
uses this information to facilitate end-of-day clearing processing with payment networks.
Credit Card Services Using the Simple Order API | September 2019 399
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 400
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 401
Appendix A API Fields
Credit Card Services Using the Simple Order API | September 2019 402
APPENDIX
Examples
B
ccAuthService_run=true
merchantID=Napa Valley Vacations
merchantReferenceCode=482046C3A7E94F5
billTo_firstName=John
billTo_lastName=Doe
billTo_street1=1295 Charleston Rd.
billTo_city=Mountain View
billTo_state=CA
billTo_postalCode=94043
billTo_country=US
billTo_phoneNumber=650-965-6000
[email protected]
item_0_unitPrice=49.95
item_0_quantity=1
purchaseTotals_currency=USD
card_expirationMonth=12
card_expirationYear=2015
card_accountNumber=4111111111111111
card_cardType=001
Credit Card Services Using the Simple Order API | September 2019 403
Appendix B Examples
Note
requestID=0305782650000167905080
decision=ACCEPT
reasonCode=100
merchantReferenceCode=482046C3A7E94F5
purchaseTotals_currency=USD
ccAuthReply_reconciliationID=ABCDE12345FGHIJ67890
ccAuthReply_cardCategory=F^
ccAuthReply_cardGroup=0
ccAuthReply_reasonCode=100
ccAuthReply_amount=49.95
ccAuthReply_accountBalance=50.05
ccAuthReply_authorizationCode=123456
ccAuthReply_avsCode=Y
ccAuthReply_avsCodeRaw=YYY
ccAuthReply_processorResponse=A
ccAuthReply_paymentNetworkTransactionID=3312345
ccCaptureService_authRequestID=0305782650000167905080
merchantID=Napa Valley Vacations
merchantReferenceCode=482046C3A7E94F5BD1FE3C66C
ccCaptureService_run=true
item_0_unitPrice=49.95
purchaseTotals_currency=USD
requestID=1019827520348290570293
merchantReferenceCode=482046C3A7E94F5BD1FE3C66C
decision=ACCEPT
reasonCode=100
ccCaptureReply_amount=49.95
purchaseTotals_currency=USD
ccCaptureReply_reasonCode=100
ccCaptureReply_reconciliationID=1094820975023470
Credit Card Services Using the Simple Order API | September 2019 404
Appendix B Examples
merchantReferenceCode=482046C3A7E94F5BD1FE3C66C
requestID=1019827520348290570293
decision=ACCEPT
reasonCode=100
purchaseTotals_currency=EUR
ccCreditReply_reasonCode=100
ccCreditReply_amount=1694.00
ccCreditReply_reconciliationID=C3A7E94F5BD1FE3C64820466C
Credit Card Services Using the Simple Order API | September 2019 405
Appendix B Examples
shipTo_firstName=Jane
shipTo_lastName=Smith
shipTo_street1=1234 ABCD Street
shipTo_city=Mountain View
shipTo_state=CA
shipTo_country=US
shipTo_postalCode=94043
billTo_firstName=John
billTo_lastName=Doe
billTo_street1=1295 Charleston Road
billTo_city=Mountain View
billTo_state=CA
billTo_country=US
billTo_postalCode=94043
billTo_ipAddress=10.7.7.7
[email protected]
billTo_phoneNumber=650-965-6000
merchantReferenceCode=0123456789
purchaseTotals_currency=USD
card_accountNumber=4111111111111111
card_expirationMonth=12
card_expirationYear=2020
card_cardType=001
ccAuthService_commerceIndicator=vbv
ccAuthService_xid=WhPlErd9WE2pb12345HlewUIQwQ
ccAuthService_veresEnrolled=Y
ccAuthService_paresStatus=Y
ccAuthService_cavv=PpmBUYXt2uyt12345mAb8XgnOk
ccAuthService_run=true
item_0_unitPrice=12.34
item_1_unitPrice=56.78
ccAuthReply_avsCode=2
ccAuthReply_amount=69.12
ccAuthReply_reasonCode=100
ccAuthReply_reconciliationID=19119123440
ccAuthReply_processorResponse=0
ccAuthReply_authorizationCode=ABC12345
requestID=1921371701234567904567
reasonCode=100
decision=ACCEPT
merchantReferenceCode=0123456789
purchaseTotals_currency=USD
Credit Card Services Using the Simple Order API | September 2019 406
Appendix B Examples
Cielo Examples
Example 12 Automatic Capture Request with Elo
merchantReferenceCode=Transaction-Cielo-NTA-3
requestID=4231489930765000001540
decision=ACCEPT
reasonCode=100
purchaseTotals_currency=usd
ccAuthReply_reasonCode=100
ccAuthReply_amount=104.00
ccAuthReply_authorizationCode=123456
ccAuthReply_avsCode=Y
ccAuthReply_avsCodeRaw=CC
ccAuthReply_processorResponse=00
ccAuthReply_reconciliationID=Auth12345678
ccAuthReply_paymentNetworkTransactionID=333138
ccAuthReply_processorTransactionID=00142308609746028231
ccCaptureReply_reasonCode=100
ccCaptureReply_amount=104.00
ccCaptureReply_reconciliationID=Auth12345678
Credit Card Services Using the Simple Order API | September 2019 407
Appendix B Examples
merchantReferenceCode=Transaction-Cielo-NTA-4
requestID=4231489990775000001540
decision=ACCEPT
reasonCode=100
purchaseTotals_currency=brl
ccAuthReply_reasonCode=100
ccAuthReply_amount=106.00
ccAuthReply_authorizationCode=123456
ccAuthReply_avsCode=Y
ccAuthReply_avsCodeRaw=CC
ccAuthReply_processorResponse=00
ccAuthReply_reconciliationID=Auth12345678
ccAuthReply_paymentNetworkTransactionID=333138
ccAuthReply_processorTransactionID=00142308609746028231
ccCaptureReply_reasonCode=100
ccCaptureReply_amount=106.00
ccCaptureReply_reconciliationID=Auth12345678
Credit Card Services Using the Simple Order API | September 2019 408
Appendix B Examples
merchantReferenceCode=Transaction-Cielo-NTA-1
requestID=4231493140785000001540
decision=ACCEPT
reasonCode=100
purchaseTotals_currency=brl
ccAuthReply_reasonCode=100
ccAuthReply_amount=51025.00
ccAuthReply_authorizationCode=123456
ccAuthReply_avsCode=Y
ccAuthReply_avsCodeRaw=CC
ccAuthReply_processorResponse=00
ccAuthReply_reconciliationID=Auth12345678
ccAuthReply_paymentNetworkTransactionID=333138
ccAuthReply_processorTransactionID=00142308609746028231
Credit Card Services Using the Simple Order API | September 2019 409
Appendix B Examples
Example 18 Credit Card Authorization Request for Redecard in Brazil with AVS
ccAuthService_run=true
merchantID=Foster City Flowers
merchantReferenceCode=1234567890
billTo_firstName=Adriana
billTo_lastName=Tavares da Silva
billTo_street1=Rua da Quitanda 187
billTo_buildingNumber=187
billTo_city=Rio de Janeiro
billTo_postalCode=20091-005
billTo_country=BR
billTo_phoneNumber=+552121114700
[email protected]
billTo_personalID=987654321
item_0_quantity=1
item_0_unitPrice=49.95
purchaseTotals_currency=BRL
card_cardType=052
card_accountNumber=5432543254325432
card_expirationMonth=12
card_expirationYear=2015
decision=ACCEPT
reasonCode=100
requestID=12345678901234567890
merchantReferenceCode=1234567
purchaseTotals_currency=BRL
ccAuthReply_reasonCode=100
ccAuthReply_personalIDCode=Y
ccAuthReply_amount=49.95
ccAuthReply_authorizationCode=123456
ccAuthReply_reconciliationID=1911912456
ccAuthReply_avsCode=V
Credit Card Services Using the Simple Order API | September 2019 410
Appendix B Examples
ccIncrementalAuthService_run=true
purchaseTotals_grandTotalAmount=101.00
purchaseTotals_currency=USD
merchantID=Napa Valley Vacations
merchantReferenceCode=33557799
ccIncrementalAuthService_authRequestID=3434254100000181552556
subsequentAuthReason=2
requestID=3524892270000181552556
decision=ACCEPT
reasonCode=100
merchantReferenceCode=33557799
purchaseTotals_currency=usd
additionalData=00612012345678910000000008160003359
ccIncrementalAuthReply_amount=101.00
ccIncrementalAuthReply_authorizationCode=831000
ccIncrementalAuthReply_processorResponse=A
ccIncrementalAuthReply_paymentNetworkTransactionID=016153570198200
ccIncrementalAuthReply_reasonCode=100
ccIncrementalAuthReply_reconciliationID=3524892270000181552556
ccIncrementalAuthReply_cardCategory=J1
receiptNumber=841215
Credit Card Services Using the Simple Order API | September 2019 411
Appendix B Examples
ccAuthService_run=true
merchantID=Foster City Flowers
merchantReferenceCode=AB1234.1-1
billTo_firstName=John
billTo_lastName=Smith
billTo_street1=201 S. Division St.
billTo_street2=Suite 500
billTo_city=Ann Arbor
billTo_state=MI
billTo_country=US
billTo_postalCode=48104-2201
[email protected]
billTo_phoneNumber=123-456-7890
card_accountNumber=4111111111111111
card_cardType=001
card_cvNumber=xxx
card_expirationMonth=12
card_expirationYear=2015
purchaseTotals_currency=USD
purchaseTotals_grandTotalAmount=1500.00
Credit Card Services Using the Simple Order API | September 2019 412
Appendix B Examples
Note
merchantReferenceCode=AB1234.1-1
requestID=2688497722340000852964
decision=ACCEPT
reasonCode=100
ccAuthReply_reconciliationID=ABCDE12345FGHIJ67890
ccAuthReply_reasonCode=100
ccAuthReply_amount=1500.00
ccAuthReply_avsCode=A
ccAuthReply_avsCodeRaw=A
ccAuthReply_authorizationCode=831000
ccAuthReply_processorResponse=000
ccAuthReply_accountBalance=23.62
ccAuthReply_accountBalanceCurrency=USD
ccAuthReply_accountBalanceSign=positive
ccAuthReply_cardCategory=J1
ccAuthReply_cardGroup=0
ccAuthReply_cvCode=3
ccAuthReply_merchantAdviceCode=00
ccAuthReply_paymentNetworkTransactionID=3312345
purchaseTotals_currency=USD
Credit Card Services Using the Simple Order API | September 2019 413
Appendix B Examples
ccAuthService_run=true
merchantID=Foster City Flowers
merchantReferenceCode=AB1234.1-1
billTo_firstName=John
billTo_lastName=Smith
billTo_street1=201 S. Division St.
billTo_street2=Suite 500
billTo_city=Ann Arbor
billTo_state=MI
billTo_country=US
billTo_postalCode=48104-2201
[email protected]
billTo_phoneNumber=123-456-7890
card_accountNumber=4111111111111111
card_cardType=001
card_cvNumber=xxx
card_expirationMonth=12
card_expirationYear=2015
purchaseTotals_currency=USD
purchaseTotals_grandTotalAmount=1401.00
Credit Card Services Using the Simple Order API | September 2019 414
Appendix B Examples
Note
merchantReferenceCode=AB1234.1-1
requestID=2688497722340000852964
decision=REJECT
reasonCode=110
ccAuthReply_reconciliationID=ABCDE12345FGHIJ67890
ccAuthReply_reasonCode=110
ccAuthReply_amount=500.00
ccAuthReply_avsCode=A
ccAuthReply_avsCodeRaw=A
ccAuthReply_authorizationCode=831000
ccAuthReply_processorResponse=010
ccAuthReply_requestAmount=1401.00
ccAuthReply_requestCurrency=USD
ccAuthReply_cardCategory=J1
ccAuthReply_cardGroup=0
ccAuthReply_cvCode=3
ccAuthReply_merchantAdviceCode=00
ccAuthReply_paymentNetworkTransactionID=3312345
purchaseTotals_currency=USD
Credit Card Services Using the Simple Order API | September 2019 415
Appendix B Examples
RuPay Examples
Example 26 Credit Card Authorization Request
merchantID=RuPayMerchant1
merchantReferenceCode=ABCDE12345
billTo_firstName=Jane
billTo_lastName=Smith
billTo_street1=123 Main Street
billTo_city=Any Town
billTo_state=CA
billTo_postalCode=99999-1234
billTo_country=IN
billTo_phoneNumber=999-999-9999
[email protected]
billTo_ipAddress=123.4.567.89
purchaseTotals_currency=INR
purchaseTotals_grandTotalAmount=120.00
card_accountNumber=5088888888888
card_expirationMonth=12
card_expirationYear=2025
card_cvNumber=123
card_cardType=061
ccAuthService_run="true"
ccAuthService_cavv=XYZAV54321XYZAV54321XYZAV54321XYZAV54321
ccAuthService_commerceIndicator=rpy
ccAuthService_xid=ODI4MTEyMjU5ODAy
merchantReferenceCode=ABCDE12345
requestID=5391708182936018401540
decision=ACCEPT
reasonCode=100
purchaseTotals_currency=INR
ccAuthReply_reasonCode=100
ccAuthReply_amount=120.00
ccAuthReply_authorizationCode=183217
ccAuthReply_processorResponse=ABCDE12345
ccAuthReply_reconciliationID=1094820975023470
merchantID=RuPayMerchant1
merchantReferenceCode=ABCDE12345
ccCheckStatusService_run="true"
ccCheckStatusService_authRequestID=5391708182936018401540
Credit Card Services Using the Simple Order API | September 2019 416
Appendix B Examples
merchantReferenceCode=ABCDE12345
requestID=3951708182936018401450
decision=ACCEPT
reasonCode=100
ccCheckStatusReply_reasonCode=100
ccCheckStatusReply_paymentStatus=AUTHORIZED
ccCheckStatusReply_authorizationCode=183217
Split-Shipment Examples
ccAuthService_run=true
merchantID=Foster City Flowers
merchantReferenceCode=482046C3A7E94F5BD1
billTo_firstName=John
billTo_lastName=Doe
billTo_phoneNumber=650-965-6000
[email protected]
billTo_street1=1295 Charleston Rd.
billTo_city=Mountain View
billTo_state=CA
billTo_country=US
billTo_postalCode=94043
card_expirationMonth=12
card_expirationYear=2015
card_accountNumber=4111111111111111
card_cardType=001
item_0_unitPrice=49.95
item_0_quantity=1
purchaseTotals_currency=USD
Credit Card Services Using the Simple Order API | September 2019 417
Appendix B Examples
Note
decision=ACCEPT
reasonCode=100
merchantReferenceCode=482046C3A7E94F5BD1
requestID=0305782650000167905080
ccAuthReply_reconciliationID=ABCDE12345FGHIJ67890
ccAuthReply_cardCategory=F^
ccAuthReply_cardGroup=0
ccAuthReply_reasonCode=100
ccAuthReply_amount=49.95
ccAuthReply_avsCode=Y
ccAuthReply_avsCodeRaw=YYY
ccAuthReply_authorizationCode=123456
ccAuthReply_processorResponse=A
ccAuthReply_paymentNetworkTransactionID=3312345
purchaseTotals_currency=USD
ccAuthService_run=true
ccCaptureService_run=true
linkToRequest=0305782650000167905080
merchantID=Foster City Flowers
merchantReferenceCode=482046C3A7E94F5BD1
billTo_firstName=John
billTo_lastName=Doe
billTo_phoneNumber=650-965-6000
[email protected]
billTo_street1=1295 Charleston Rd.
billTo_city=Mountain View
billTo_state=CA
billTo_country=US
billTo_postalCode=94043
card_expirationMonth=12
card_expirationYear=2015
card_accountNumber=4111111111111111
card_cardType=001
item_0_unitPrice=49.95
item_0_quantity=1
purchaseTotals_currency=USD
Credit Card Services Using the Simple Order API | September 2019 418
Appendix B Examples
Note
decision=ACCEPT
reasonCode=100
merchantReferenceCode=482046C3A7E94F5BD1
requestID=1416783769994859
ccAuthReply_reconciliationID=ABCDE12345FGHIJ67890
ccAuthReply_cardCategory=F^
ccAuthReply_cardGroup=0
ccAuthReply_reasonCode=100
ccAuthReply_amount=49.95
ccAuthReply_avsCode=Y
ccAuthReply_avsCodeRaw=YYY
ccAuthReply_authorizationCode=123456
ccAuthReply_processorResponse=A
ccAuthReply_paymentNetworkTransactionID=3312345
purchaseTotals_currency=USD
ccCaptureReply_reasonCode=100
ccCaptureReply_amount=49.95
ccCaptureReply_reconciliationID=02850840187309570
Credit Card Services Using the Simple Order API | September 2019 419
Appendix B Examples
ccAuthService_run=true
merchantID=Foster City Flowers
merchantReferenceCode=482046C3A7E94F5BD1
billTo_firstName=John
billTo_lastName=Doe
billTo_phoneNumber=650-965-6000
[email protected]
billTo_street1=1295 Charleston Rd.
billTo_city=Mountain View
billTo_state=CA
billTo_country=US
billTo_postalCode=94043
card_expirationMonth=12
card_expirationYear=2015
card_accountNumber=4111111111111111
card_cardType=001
item_0_unitPrice=52.00
item_0_quantity=1
item_1_unitPrice=16.00
item_1_quantity=1
purchaseTotals_currency=USD
Note
decision=ACCEPT
reasonCode=100
merchantReferenceCode=482046C3A7E94F5BD1
requestID=0305782650000167905080
ccAuthReply_reconciliationID=ABCDE12345FGHIJ67890
ccAuthReply_cardCategory=F^
ccAuthReply_cardGroup=0
ccAuthReply_reasonCode=100
ccAuthReply_amount=68.00
ccAuthReply_avsCode=Y
ccAuthReply_avsCodeRaw=YYY
ccAuthReply_authorizationCode=123456
ccAuthReply_processorResponse=A
ccAuthReply_paymentNetworkTransactionID=3312345
purchaseTotals_currency=USD
Credit Card Services Using the Simple Order API | September 2019 420
Appendix B Examples
ccCaptureService_run=true
merchantID=Foster City Flowers
merchantReferenceCode=482046C3A7E94F5BD1
ccCaptureService_authRequestID=0305782650000167905080
item_0_unitPrice=52.00
item_0_quantity=1
purchaseTotals_currency=USD
decision=ACCEPT
reasonCode=100
merchantReferenceCode=482046C3A7E94F5BD1
requestID=1019827520348290570293
ccCaptureReply_reasonCode=100
ccCaptureReply_amount=52.00
ccCaptureReply_reconciliationID=02850840187309570
purchaseTotals_currency=USD
ccCaptureService_run=true
merchantID=Foster City Flowers
merchantReferenceCode=482046C3A7E94F5BD1
ccCaptureService_authRequestID=0305782650000167905080
item_0_unitPrice=16.00
item_0_quantity=1
purchaseTotals_currency=USD
decision=ACCEPT
reasonCode=100
merchantReferenceCode=482046C3A7E94F5BD1
requestID=49601835arbl569cj
ccCaptureReply_reasonCode=100
ccCaptureReply_amount=16.00
ccCaptureReply_reconciliationID=sl59vu2nh4ek9lq
purchaseTotals_currency=USD
Credit Card Services Using the Simple Order API | September 2019 421
Appendix B Examples
ccAuthService_run=true
merchantID=Foster City Flowers
merchantReferenceCode=482046C3A7E94F5BD1
billTo_firstName=John
billTo_lastName=Doe
billTo_phoneNumber=650-965-6000
[email protected]
billTo_street1=1295 Charleston Rd.
billTo_city=Mountain View
billTo_state=CA
billTo_country=US
billTo_postalCode=94043
card_expirationMonth=12
card_expirationYear=2015
card_accountNumber=4111111111111111
card_cardType=001
item_0_unitPrice=49.95
item_0_quantity=1
purchaseTotals_currency=USD
Note
decision=ACCEPT
reasonCode=100
merchantReferenceCode=482046C3A7E94F5BD1
requestID=0305782650000167905080
ccAuthReply_reconciliationID=ABCDE12345FGHIJ67890
ccAuthReply_cardCategory=F^
ccAuthReply_cardGroup=0
ccAuthReply_reasonCode=100
ccAuthReply_amount=49.95
ccAuthReply_avsCode=Y
ccAuthReply_avsCodeRaw=YYY
ccAuthReply_authorizationCode=123456
ccAuthReply_processorResponse=A
ccAuthReply_paymentNetworkTransactionID=3312345
purchaseTotals_currency=USD
Credit Card Services Using the Simple Order API | September 2019 422
Appendix B Examples
ccAuthService_run=true
linkToRequest=0305782650000167905080
merchantID=Foster City Flowers
merchantReferenceCode=482046C3A7E94F5BD1
billTo_firstName=John
billTo_lastName=Doe
billTo_phoneNumber=650-965-6000
[email protected]
billTo_street1=1295 Charleston Rd.
billTo_city=Mountain View
billTo_state=CA
billTo_country=US
billTo_postalCode=94043
card_expirationMonth=12
card_expirationYear=2015
card_accountNumber=4111111111111111
card_cardType=001
item_0_unitPrice=49.95
item_0_quantity=1
purchaseTotals_currency=USD
Note
decision=ACCEPT
reasonCode=100
merchantReferenceCode=482046C3A7E94F5BD1
requestID=1416783769994859
ccAuthReply_reconciliationID=ABCDE12345FGHIJ67890
ccAuthReply_cardCategory=F^
ccAuthReply_cardGroup=0
ccAuthReply_reasonCode=100
ccAuthReply_amount=49.95
ccAuthReply_avsCode=Y
ccAuthReply_avsCodeRaw=YYY
ccAuthReply_authorizationCode=123456
ccAuthReply_processorResponse=A
ccAuthReply_paymentNetworkTransactionID=3312345
purchaseTotals_currency=USD
Credit Card Services Using the Simple Order API | September 2019 423
Appendix B Examples
ccCaptureService_run=true
merchantID=Foster City Flowers
merchantReferenceCode=482046C3A7E94F5BD1
ccCaptureService_authRequestID=1416783769994859
item_0_unitPrice=49.95
item_0_quantity=1
purchaseTotals_currency=USD
decision=ACCEPT
reasonCode=100
merchantReferenceCode=482046C3A7E94F5BD1
requestID=1019827520348290570293
ccCaptureReply_reasonCode=100
ccCaptureReply_amount=49.95
ccCaptureReply_reconciliationID=02850840187309570
purchaseTotals_currency=USD
ccAuthService_run=true
merchantID=Foster_City_Flowers
merchantReferenceCode=123456
purchaseTotals_currency=USD
purchaseTotals_grandTotalAmount=25.00
paymentSolution=visacheckout
vc_orderID=335161017227386762
Credit Card Services Using the Simple Order API | September 2019 424
Appendix B Examples
Note
ccAuthReply_reconciliationID=ABCDE12345FGHIJ67890
ccAuthReply_cardCategory=F^
ccAuthReply_cardGroup=0
ccAuthReply_amount=25.00
ccAuthReply_avsCode=Y
ccAuthReply_authorizationCode=831000
ccAuthReply_processorResponse=00
ccAuthReply_avsCodeRaw=Y
ccAuthReply_reasonCode=100
ccAuthReply_paymentNetworkTransactionID=3312345
purchaseTotals_currency=USD
decision=ACCEPT
reasonCode=100
merchantReferenceCode=123456
requestID=4068437426340172492292
Credit Card Services Using the Simple Order API | September 2019 425
Appendix B Examples
merchantID=My_Store
merchantReferenceCode=Order_158
invoiceHeader_merchantDescriptor=Business_Name
invoiceHeader_merchantDescriptorContact=999-999-9999
invoiceHeader_merchantDescriptorAlternate=Business_Email@example.com
invoiceHeader_merchantDescriptorCity=Business_City
billTo_firstName=Jane
billTo_middleName=Anne
billTo_lastName=Smith
billTo_street1=1234 Main St.
billTo_street2=Suite 500
billTo_city=Foster City
billTo_state=CA
billTo_postalCode=94404
billTo_country=US
billTo_phoneNumber=650-999-9999
[email protected]
billTo_ipAddress=111.111.111.111
billTo_customerID=Customer_1234
purchaseTotals_currency=USD
purchaseTotals_grandTotalAmount=5000
pos_entryMode=keyed
pos_cardPresent=y
pos_terminalCapability=2
card_accountNumber=4111111111111111
card_expirationMonth=12
card_expirationYear=2022
card_cvIndicator=1
card_cvNumber=000
ccAuthService_run=true
ccAuthService_commerceIndicator=retail
ccAuthService_leastCostRouting=y
ccCaptureService_run=true
reportGroup=Report_Group_1234
Credit Card Services Using the Simple Order API | September 2019 426
Appendix B Examples
merchantReferenceCode=Order_158
requestID=5459942086076547903095
decision=ACCEPT
reasonCode=100
purchaseTotals_currency=USD
ccAuthReply_reasonCode=100
ccAuthReply_amount=5000.00
ccAuthReply_authorizationCode=123456
ccAuthReply_avsCode=Y
ccAuthReply_avsCodeRaw=00
ccAuthReply_cvCode=M
ccAuthReply_cvCodeRaw=M
ccAuthReply_processorResponse=000
ccAuthReply_reconciliationID=5459942086076547903095
ccAuthReply_accountBalance=0.00
ccAuthReply_paymentNetworkTransactionID=1234567890123456
ccAuthReply_cardCategory=PREPAID
ccAuthReply_affluenceIndicator=MASS AFFLUENT
ccAuthReply_cardIssuerCountry=USA
ccAuthReply_processorTransactionID=1234567
ccCaptureReply_reasonCode=100
ccCaptureReply_amount=5000.00
ccCaptureReply_reconciliationID=5459942086076547903095
card_cardType=001
card_suffix=1111
card_virtual=true
card_prepaidReloadable=NO
card_prepaidType=GIFT
Credit Card Services Using the Simple Order API | September 2019 427
Appendix B Examples
XML Examples
<requestMessage xmlns="urn:schemas-cybersource-com:transaction-data-1.23">
<merchantID>Napa Valley Vacations</merchantID>
<merchantReferenceCode>482046C3A7E94F5</merchantReferenceCode>
<billTo>
<firstName>John</firstName>
<lastName>Doe</lastName>
<street1>1295 Charleston Rd.</street1>
<city>Mountain View</city>
<state>CA</state>
<postalCode>94043</postalCode>
<country>US</country>
<phoneNumber>650-965-6000</phoneNumber>
<email>[email protected]</email>
</billTo>
<item id="0">
<unitPrice>49.95</unitPrice>
<quantity>1</quantity>
</item>
<purchaseTotals>
<currency>USD</currency>
</purchaseTotals>
<card>
<accountNumber>4111111111111111</accountNumber>
<expirationMonth>12</expirationMonth>
<expirationYear>2015</expirationYear>
<cardType>001</cardType>
</card>
<ccAuthService run="true"/>
</requestMessage>
Credit Card Services Using the Simple Order API | September 2019 428
Appendix B Examples
Note
<c:replyMessage xmlns:c="urn:schemas-cybersource-com:transaction-data-1.23">
<c:merchantReferenceCode>482046C3A7E94F5</c:merchantReferenceCode>
<c:requestID>0305782650000167905080</c:requestID>
<c:decision>ACCEPT</c:decision>
<c:reasonCode>100</c:reasonCode>
<c:purchaseTotals>
<c:currency>USD</c:currency>
</c:purchaseTotals>
<c:ccAuthReply>
<c:reasonCode>100</c:reasonCode>
<c:amount>49.95</c:amount>
<c:authorizationCode>123456</c:authorizationCode>
<c:avsCode>Y</c:avsCode>
<c:avsCodeRaw>YYY</c:avsCodeRaw>
<c:processorResponse>A</c:processorResponse>
<c:reconciliationID>ABCDE12345FGHIJ67890</c:reconciliationID>
<c:accountBalance>50.05</c:accountBalance>
<c:paymentNetworkTransactionID>3312345</c:paymentNetworkTransactionID>
<c:cardCategory>F^</c:cardCategory>
<c:cardGroup>0</c:cardGroup>
</c:ccAuthReply>
</c:replyMessage>
<requestMessage xmlns="urn:schemas-cybersource-com:transaction-data-1.37">
<merchantID>Napa Valley Vacations</merchantID>
<merchantReferenceCode>482046C3A7E94F5BD1FE3C66C</merchantReferenceCode>
<item id="0">
<unitPrice>49.95</unitPrice>
<quantity>1</quantity>
</item>
<purchaseTotals>
<currency>USD</currency>
</purchaseTotals>
<ccCaptureService run="true">
<authRequestID>0305782650000167905080</authRequestID>
</ccCaptureService>
</requestMessage>
Credit Card Services Using the Simple Order API | September 2019 429
Appendix B Examples
<c:replyMessage xmlns:c="urn:schemas-cybersource-com:transaction-data-1.37">
<c:merchantReferenceCode>482046C3A7E94F5BD1FE3C66C</c:merchantReferenceCode>
<c:requestID>1019827520348290570293</c:requestID>
<c:decision>ACCEPT</c:decision>
<c:reasonCode>100</c:reasonCode>
<c:purchaseTotals>
<c:currency>USD</c:currency>
</c:purchaseTotals>
<c:ccCaptureReply>
<c:reasonCode>100</c:reasonCode>
<c:amount>49.95</c:amount>
<c:reconciliationID>1094820975023470</c:reconciliationID>
</c:ccCaptureReply>
</c:replyMessage>
<requestMessage xmlns="urn:schemas-cybersource-com:transaction-data-1.86">
<merchantID>Napa Valley Vacations</merchantID>
<merchantReferenceCode>482046C3A7E94F5BDC66C</merchantReferenceCode>
<purchaseTotals>
<currency>EUR</currency>
<grandTotalAmount>1694.00</grandTotalAmount>
</purchaseTotals>
<ccCreditService run="true">
<captureRequestID>1019827520348290570293</captureRequestID>
</ccCreditService>
</requestMessage>
<c:replyMessage xmlns:c="urn:schemas-cybersource-com:transaction-data-1.86">
<c:merchantReferenceCode>482046C3A75BD1FE3C66C</c:merchantReferenceCode>
<c:requestID>9057101982752034820293</c:requestID>
<c:decision>ACCEPT</c:decision>
<c:reasonCode>100</c:reasonCode>
<c:purchaseTotals>
<c:currency>EUR</c:currency>
</c:purchaseTotals>
<c:ccCreditReply>
<c:reasonCode>100</c:reasonCode>
<c:amount>1694.00</c:amount>
<c:reconciliationID>C3A7E94F5BD1FE3C64820466C</c:reconciliationID>
</c:ccCreditReply>
</c:replyMessage>
Credit Card Services Using the Simple Order API | September 2019 430
Appendix B Examples
<requestMessage xmlns="urn:schemas-cybersource-com:transaction-data-1.32">
<merchantID>Foster City Flowers</merchantID>
<merchantReferenceCode>0123456789</merchantReferenceCode>
<billTo>
<firstName>John</firstName>
<lastName>Doe</lastName>
<street1>1295 Charleston Road</street1>
<city>Mountain View</city>
<state>CA</state>
<postalCode>94043</postalCode>
<country>US</country>
<phoneNumber>650-965-6000</phoneNumber>
<email>[email protected]</email>
<ipAddress>10.7.7.7</ipAddress>
</billTo>
<shipTo>
<firstName>Jane</firstName>
<lastName>Smith</lastName>
<street1>1234 ABCD Street</street1>
<city>Mountain View</city>
<state>CA</state>
<postalCode>94043</postalCode>
<country>US</country>
</shipTo>
<item id="0">
<unitPrice>12.34</unitPrice>
</item>
<item id="1">
<unitPrice>56.78</unitPrice>
</item>
<purchaseTotals>
<currency>USD</currency>
</purchaseTotals>
<card>
<accountNumber>4111111111111111</accountNumber>
<expirationMonth>12</expirationMonth>
<expirationYear>2020</expirationYear>
<cvNumber>1234</cvNumber>
<cardType>001</cardType>
</card>
<ccAuthService run="true">
<cavv>PpmBUYXt2uytV6p12345KuImAb8XgnOk</cavv>
<commerceIndicator>vbv</commerceIndicator>
<xid>WhPlErd9WE1234562pb1yFjFHlewUIQwQ</xid>
<veresEnrolled>Y</veresEnrolled>
<paresStatus>Y</paresStatus>
</ccAuthService>
</requestMessage>
Credit Card Services Using the Simple Order API | September 2019 431
Appendix B Examples
<c:replyMessage xmlns:c="urn:schemas-cybersource-com:transaction-data-1.32">
<c:merchantReferenceCode>0123456789</c:merchantReferenceCode>
<c:requestID>1921312345620167904567</c:requestID>
<c:decision>ACCEPT</c:decision>
<c:reasonCode>100</c:reasonCode>
<c:purchaseTotals>
<c:currency>USD</c:currency>
</c:purchaseTotals>
<c:ccAuthReply>
<c:reasonCode>100</c:reasonCode>
<c:amount>69.12</c:amount>
<c:authorizationCode>ABC12345</c:authorizationCode>
<c:avsCode>2</c:avsCode>
<c:cvCode>2</c:cvCode>
<c:cvCodeRaw>Q</c:cvCodeRaw>
<c:processorResponse>0</c:processorResponse>
<c:reconciliationID>19119123438</c:reconciliationID>
</c:ccAuthReply>
</c:replyMessage>
Credit Card Services Using the Simple Order API | September 2019 432
Appendix B Examples
Cielo Examples
Example 58 Automatic Capture Request with Elo
<requestMessage xmlns="urn:schemas-cybersource-com:transaction-data-1.111">
<merchantID>Foster City Flowers</merchantID>
<merchantReferenceCode>Transaction-Cielo-NTA-3</merchantReferenceCode>
<billTo>
<firstName>Júlia</firstName>
<lastName>Fernández</lastName>
<buildingNumber>1024</buildingNumber>
<street1>R. Augustã</street1>
<street2>Bloco 01</street2>
<city>São Paulo</city>
<district>Bela Vista</district>
<state>SP</state>
<postalCode>01310-000</postalCode>
<country>BR</country>
<phoneNumber>999-999-9999</phoneNumber>
<email>[email protected]</email>
</billTo>
<purchaseTotals>
<currency>usd</currency>
<grandTotalAmount>104.00</grandTotalAmount>
</purchaseTotals>
<card>
<accountNumber>1234567812345678</accountNumber>
<expirationMonth>03</expirationMonth>
<expirationYear>2031</expirationYear>
<cardType>054</cardType>
</card>
<ccAuthService run="true">
<authType>AUTOCAPTURE</authType>
</ccAuthService>
<ccCaptureService run="true"></ccCaptureService>
</requestMessage>
Credit Card Services Using the Simple Order API | September 2019 433
Appendix B Examples
<c:replyMessage xmlns:c="urn:schemas-cybersource-com:transaction-data-1.111">
<c:merchantReferenceCode>Transaction-Cielo-NTA-3</c:merchantReferenceCode>
<c:requestID>4231489930765000001540</c:requestID>
<c:decision>ACCEPT</c:decision>
<c:reasonCode>100</c:reasonCode>
<c:purchaseTotals>
<c:currency>usd</c:currency>
</c:purchaseTotals>
<c:ccAuthReply>
<c:reasonCode>100</c:reasonCode>
<c:amount>104.00</c:amount>
<c:authorizationCode>123456</c:authorizationCode>
<c:avsCode>Y</c:avsCode>
<c:avsCodeRaw>CC</c:avsCodeRaw>
<c:processorResponse>00</c:processorResponse>
<c:reconciliationID>Auth12345678</c:reconciliationID>
<c:paymentNetworkTransactionID>333138</c:paymentNetworkTransactionID>
<c:processorTransactionID>00142308609746028231</c:processorTransactionID>
</c:ccAuthReply>
<c:ccCaptureReply>
<c:reasonCode>100</c:reasonCode>
<c:amount>104.00</c:amount>
<c:reconciliationID>Auth12345678</c:reconciliationID>
</c:ccCaptureReply>
</c:replyMessage>
Credit Card Services Using the Simple Order API | September 2019 434
Appendix B Examples
<requestMessage xmlns="urn:schemas-cybersource-com:transaction-data-1.111">
<merchantID>Foster City Flowers</merchantID>
<merchantReferenceCode>Transaction-Cielo-NTA-4</merchantReferenceCode>
<billTo>
<firstName>Júlia</firstName>
<lastName>Fernández</lastName>
<buildingNumber>1024</buildingNumber>
<street1>R. Augustã</street1>
<street2>Bloco 01</street2>
<city>São Paulo</city>
<district>Bela Vista</district>
<state>SP</state>
<postalCode>01310-000</postalCode>
<country>BR</country>
<phoneNumber>999-999-9999</phoneNumber>
<email>[email protected]</email>
</billTo>
<purchaseTotals>
<currency>brl</currency>
<grandTotalAmount>106.00</grandTotalAmount>
</purchaseTotals>
<card>
<accountNumber>123456781234567812</accountNumber>
<expirationMonth>03</expirationMonth>
<expirationYear>2031</expirationYear>
<cvIndicator>1</cvIndicator>
<cvNumber>123</cvNumber>
<cardType>042</cardType>
</card>
<ucaf>
<authenticationData>WhPlErd9WE2pb1yFjFHlewUIQwQ=</authenticationData>
<collectionIndicator>2</collectionIndicator>
</ucaf>
<ccAuthService run="true">
<commerceIndicator>spa</commerceIndicator>
<xid>lEmYpm61EduaVZjPG1/HsgkAAQc=</xid>
<overridePaymentMethod>DB</overridePaymentMethod>
</ccAuthService>
<ccCaptureService run="true"></ccCaptureService>
</requestMessage>
Credit Card Services Using the Simple Order API | September 2019 435
Appendix B Examples
<c:replyMessage xmlns:c="urn:schemas-cybersource-com:transaction-data-1.111">
<c:merchantReferenceCode>Transaction-Cielo-NTA-4</c:merchantReferenceCode>
<c:requestID>4231489990775000001540</c:requestID>
<c:decision>ACCEPT</c:decision>
<c:reasonCode>100</c:reasonCode>
<c:purchaseTotals>
<c:currency>brl</c:currency>
</c:purchaseTotals>
<c:ccAuthReply>
<c:reasonCode>100</c:reasonCode>
<c:amount>106.00</c:amount>
<c:authorizationCode>123456</c:authorizationCode>
<c:avsCode>Y</c:avsCode>
<c:avsCodeRaw>CC</c:avsCodeRaw>
<c:processorResponse>00</c:processorResponse>
<c:reconciliationID>Auth12345678</c:reconciliationID>
<c:paymentNetworkTransactionID>333138</c:paymentNetworkTransactionID>
<c:processorTransactionID>00142308609746028231</c:processorTransactionID>
</c:ccAuthReply>
<c:ccCaptureReply>
<c:reasonCode>100</c:reasonCode>
<c:amount>106.00</c:amount>
<c:reconciliationID>Auth12345678</c:reconciliationID>
</c:ccCaptureReply>
</c:replyMessage>
Credit Card Services Using the Simple Order API | September 2019 436
Appendix B Examples
<requestMessage xmlns="urn:schemas-cybersource-com:transaction-data-1.111">
<merchantID>Foster City Flowers</merchantID>
<merchantReferenceCode>Transaction-Cielo-NTA-1</merchantReferenceCode>
<billTo>
<firstName>Júlia</firstName>
<lastName>Fernández</lastName>
<buildingNumber>1024</buildingNumber>
<street1>R. Augustã</street1>
<street2>Bloco 01</street2>
<city>São Paulo</city>
<district>Bela Vista</district>
<state>SP</state>
<postalCode>01310-000</postalCode>
<country>BR</country>
<phoneNumber>999-999-9999</phoneNumber>
<email>[email protected]</email>
</billTo>
<item id="0">
<unitPrice>51025.00</unitPrice>
<quantity>1</quantity>
</item>
<purchaseTotals>
<currency>brl</currency>
</purchaseTotals>
<installment>
<totalCount>4</totalCount>
<planType>1</planType>
</installment>
<card>
<accountNumber>4111111111111111</accountNumber>
<expirationMonth>12</expirationMonth>
<expirationYear>2018</expirationYear>
<cardType>001</cardType>
</card>
<ccAuthService run="true"></ccAuthService>
</requestMessage>
Credit Card Services Using the Simple Order API | September 2019 437
Appendix B Examples
<c:replyMessage xmlns:c="urn:schemas-cybersource-com:transaction-data-1.111">
<c:merchantReferenceCode>Transaction-Cielo-NTA-1</c:merchantReferenceCode>
<c:requestID>4231493140785000001540</c:requestID>
<c:decision>ACCEPT</c:decision>
<c:reasonCode>100</c:reasonCode>
<c:purchaseTotals>
<c:currency>brl</c:currency>
</c:purchaseTotals>
<c:ccAuthReply>
<c:reasonCode>100</c:reasonCode>
<c:amount>51025.00</c:amount>
<c:authorizationCode>123456</c:authorizationCode>
<c:avsCode>Y</c:avsCode>
<c:avsCodeRaw>CC</c:avsCodeRaw>
<c:processorResponse>00</c:processorResponse>
<c:reconciliationID>Auth12345678</c:reconciliationID>
<c:paymentNetworkTransactionID>333138</c:paymentNetworkTransactionID>
<c:processorTransactionID>00142308609746028231</c:processorTransactionID>
</c:ccAuthReply>
</c:replyMessage>
Credit Card Services Using the Simple Order API | September 2019 438
Appendix B Examples
Example 64 Credit Card Authorization Request for Redecard in Brazil with AVS
<requestMessage xmlns="urn:schemas-cybersource-com:transaction-data-1.41">
<merchantID>Foster City Flowers</merchantID>
<merchantReferenceCode>1234567890</merchantReferenceCode>
<billTo>
<firstName>Adriana</firstName>
<lastName>Tavares da Silva</lastName>
<street1>Rua da Quitanda 187</street1>
<city>Rio de Janeiro</city>
<postalCode>20091-005</postalCode>
<country>BR</country>
<phoneNumber>+552121114700</phoneNumber>
<email>[email protected]</email>
<personalID>987654321</personalID>
<buildingNumber>187</buildingNumber>
</billTo>
<item id="0"><unitPrice>49.95</unitPrice></item>
<purchaseTotals><currency>BRL</currency></purchaseTotals>
<card>
<accountNumber>5432543254325432</accountNumber>
<expirationMonth>12</expirationMonth>
<expirationYear>2015</expirationYear>
<cardType>052</cardType>
</card>
<ccAuthService run="true"/>
</requestMessage>
<c:replyMessage xmlns:c="urn:schemas-cybersource-com:transaction-data-1.41">
<c:merchantReferenceCode>1234567</c:merchantReferenceCode>
<c:requestID>12345678901234567890</c:requestID>
<c:decision>ACCEPT</c:decision>
<c:reasonCode>100</c:reasonCode>
<c:purchaseTotals><c:currency>BRL</c:currency></c:purchaseTotals>
<c:ccAuthReply>
<c:reasonCode>100</c:reasonCode>
<c:amount>49.95</c:amount>
<c:authorizationCode>123456</c:authorizationCode>
<c:avsCode>V</c:avsCode>
<c:personalIDCode>Y</c:personalIDCode>
<c:reconciliationID>19119123456</c:reconciliationID>
</c:ccAuthReply>
</c:replyMessage>
Credit Card Services Using the Simple Order API | September 2019 439
Appendix B Examples
<requestMessage xmlns="urn:schemas-cybersource-com:transaction-data-1.23">
<merchantID>Napa Valley Vacations</merchantID>
<merchantReferenceCode>33557799</merchantReferenceCode>
<purchaseTotals>
<currency>USD</currency>
<grandTotalAmount>101.00</grandTotalAmount>
</purchaseTotals>
<ccIncrementalAuthService run="true">
<authRequestID>3434254100000181552556</authRequestID>
</ccIncrementalAuthService>
<subsequentAuthReason>2</subsequentAuthReason>
</requestMessage>
<c:replyMessage xmlns:c="urn:schemas-cybersource-com:transaction-data-1.23">
<c:merchantReferenceCode>482046C3A7E94F5</c:merchantReferenceCode>
<c:requestID>0305782650000167905080</c:requestID>
<c:decision>ACCEPT</c:decision>
<c:reasonCode>100</c:reasonCode>
<c:purchaseTotals>
<c:currency>USD</c:currency>
</c:purchaseTotals>
<c:ccIncrementalAuthReply>
<c:reasonCode>100</c:reasonCode>
<c:amount>101.00</c:amount>
<c:authorizationCode>831000</c:authorizationCode>
<c:processorResponse>A</c:processorResponse>
<c:reconciliationID>3524892270000181552556</c:reconciliationID>
<c:paymentNetworkTransactionID>016153570198200</c:paymentNetworkTransactionID>
<c:cardCategory>J1</c:cardCategory>
</c:ccIncrementalAuthReply>
<c:receiptNumber>841215</c:receiptNumber>
<c:additionalData>00612012345678910000000008160003359</c:additionalData>
</c:replyMessage>
Credit Card Services Using the Simple Order API | September 2019 440
Appendix B Examples
<requestMessage xmlns="urn:schemas-cybersource-com:transaction-data-1.52">
<merchantID>Foster City Flowers</merchantID>
<merchantReferenceCode>AB1234.1-1</merchantReferenceCode>
<billTo>
<firstName>John</firstName>
<lastName>Smith</lastName>
<street1>201 S. Division St.</street1>
<street2>Suite 500</street2>
<city>Ann Arbor</city>
<state>MI</state>
<postalCode>48104-2201</postalCode>
<country>US</country>
<phoneNumber>123-456-7890</phoneNumber>
<email>[email protected]</email>
</billTo>
<purchaseTotals>
<currency>USD</currency>
<grandTotalAmount>1500.00</grandTotalAmount>
</purchaseTotals>
<card>
<accountNumber>4111111111111111</accountNumber>
<expirationMonth>12</expirationMonth>
<expirationYear>2015</expirationYear>
<cvNumber>xxx</cvNumber>
<cardType>001</cardType>
</card>
<ccAuthService run="true"/>
</requestMessage>
Credit Card Services Using the Simple Order API | September 2019 441
Appendix B Examples
Note
<c:replyMessage xmlns:c="urn:schemas-cybersource-com:transaction-data-1.52">
<c:merchantReferenceCode>AB1234.1-1</c:merchantReferenceCode>
<c:requestID>2688497722340000852964</c:requestID>
<c:decision>ACCEPT</c:decision>
<c:reasonCode>100</c:reasonCode>
<c:purchaseTotals><c:currency>USD</c:currency></c:purchaseTotals>
<c:ccAuthReply>
<c:reasonCode>100</c:reasonCode>
<c:amount>1500.00</c:amount>
<c:authorizationCode>831000</c:authorizationCode>
<c:avsCode>A</c:avsCode>
<c:avsCodeRaw>A</c:avsCodeRaw>
<c:cvCode>3</c:cvCode>
<c:processorResponse>000</c:processorResponse>
<c:reconciliationID>ABCDE12345FGHIJ67890</c:reconciliationID>
<c:merchantAdviceCode>00</c:merchantAdviceCode>
<c:accountBalance>23.62</c:accountBalance>
<c:paymentNetworkTransactionID>3312345</c:paymentNetworkTransactionID>
<c:cardCategory>J1</c:cardCategory>
<c:accountBalanceCurrency>USD</c:accountBalanceCurrency>
<c:accountBalanceSign>positive</c:accountBalanceSign>
<c:cardGroup>0</c:cardGroup>
</c:ccAuthReply>
</c:replyMessage>
Credit Card Services Using the Simple Order API | September 2019 442
Appendix B Examples
<requestMessage xmlns="urn:schemas-cybersource-com:transaction-data-1.52">
<merchantID>Foster City Flowers</merchantID>
<merchantReferenceCode>AB1234.1-1</merchantReferenceCode>
<billTo>
<firstName>John</firstName>
<lastName>Smith</lastName>
<street1>201 S. Division St.</street1>
<street2>Suite 500</street2>
<city>Ann Arbor</city>
<state>MI</state>
<postalCode>48104-2201</postalCode>
<country>US</country>
<phoneNumber>123-456-7890</phoneNumber>
<email>[email protected]</email>
</billTo>
<purchaseTotals>
<currency>USD</currency>
<grandTotalAmount>1401.00</grandTotalAmount>
</purchaseTotals>
<card>
<accountNumber>4111111111111111</accountNumber>
<expirationMonth>12</expirationMonth>
<expirationYear>2015</expirationYear>
<cvNumber>xxx</cvNumber>
<cardType>001</cardType>
</card>
<ccAuthService run="true"/>
</requestMessage>
Credit Card Services Using the Simple Order API | September 2019 443
Appendix B Examples
Note
<c:replyMessage xmlns:c="urn:schemas-cybersource-com:transaction-data-1.52">
<c:merchantReferenceCode>AB1234.1-1</c:merchantReferenceCode>
<c:requestID>2688497722340000852964</c:requestID>
<c:decision>REJECT</c:decision>
<c:reasonCode>110</c:reasonCode>
<c:purchaseTotals><c:currency>USD</c:currency></c:purchaseTotals>
<c:ccAuthReply>
<c:reasonCode>110</c:reasonCode>
<c:amount>500.00</c:amount>
<c:authorizationCode>831000</c:authorizationCode>
<c:avsCode>A</c:avsCode>
<c:avsCodeRaw>A</c:avsCodeRaw>
<c:cvCode>3</c:cvCode>
<c:processorResponse>010</c:processorResponse>
<c:reconciliationID>ABCDE12345FGHIJ67890</c:reconciliationID>
<c:merchantAdviceCode>00</c:merchantAdviceCode>
<c:paymentNetworkTransactionID>3312345</c:paymentNetworkTransactionID>
<c:cardCategory>J1</c:cardCategory>
<c:requestAmount>1401.00</c:requestAmount>
<c:requestCurrency>USD</c:requestCurrency>
<c:cardGroup>0</c:cardGroup>
</c:ccAuthReply>
</c:replyMessage>
Credit Card Services Using the Simple Order API | September 2019 444
Appendix B Examples
RuPay Examples
Example 72 Credit Card Authorization Request
<requestMessage xmlns="urn:schemas-cybersource-com:transaction-data-1.151">
<merchantID>RuPayMerchant1</merchantID>
<merchantReferenceCode>ABCDE12345</merchantReferenceCode>
<billTo>
<firstName>Jane</firstName>
<lastName>Smith</lastName>
<street1>123 Main Street</street1>
<city>Any Town</city>
<state>CA</state>
<postalCode>99999-1234</postalCode>
<country>IN</country>
<phoneNumber>999-999-9999</phoneNumber>
<email>[email protected]</email>
<ipAddress>123.4.567.89</ipAddress>
</billTo>
<purchaseTotals>
<currency>INR</currency>
<grandTotalAmount>120.00</grandTotalAmount>
</purchaseTotals>
<card>
<accountNumber>5088888888888</accountNumber>
<expirationMonth>12</expirationMonth>
<expirationYear>2025</expirationYear>
<cvNumber>123</cvNumber>
<cardType>061</cardType>
</card>
<ccAuthService run="true">
<cavv>XYZAV54321XYZAV54321XYZAV54321XYZAV54321</cavv>
<commerceIndicator>rpy</commerceIndicator>
<xid>ODI4MTEyMjU5ODAy</xid>
</ccAuthService>
</requestMessage>
Credit Card Services Using the Simple Order API | September 2019 445
Appendix B Examples
<c:replyMessage xmlns:c="urn:schemas-cybersource-com:transaction-data-1.151">
<c:merchantReferenceCode>ABCDE12345</c:merchantReferenceCode>
<c:requestID>5391708182936018401540</c:requestID>
<c:decision>ACCEPT</c:decision>
<c:reasonCode>100</c:reasonCode>
<c:purchaseTotals>
<c:currency>INR</c:currency>
</c:purchaseTotals>
<c:ccAuthReply>
<c:reasonCode>100</c:reasonCode>
<c:amount>120.00</c:amount>
<c:authorizationCode>183217</c:authorizationCode>
<c:processorResponse>ABCDE12345</c:processorResponse>
<c:reconciliationID>1094820975023470</c:reconciliationID>
</c:ccAuthReply>
</c:replyMessage>
<requestMessage xmlns="urn:schemas-cybersource-com:transaction-data-1.151">
<merchantID>RuPayMerchant1</merchantID>
<merchantReferenceCode>ABCDE12345</merchantReferenceCode>
<ccCheckStatusService run="true">
<authRequestID>5391708182936018401540</authRequestID>
</ccCheckStatusService>
</requestMessage>
<c:replyMessage xmlns:c="urn:schemas-cybersource-com:transaction-data-1.151">
<c:merchantReferenceCode>ABCDE12345</c:merchantReferenceCode>
<c:requestID>3951708182936018401450</c:requestID>
<c:decision>ACCEPT</c:decision>
<c:reasonCode>100</c:reasonCode>
<c:ccCheckStatusReply>
<c:reasonCode>100</c:reasonCode>
<c:paymentStatus>AUTHORIZED</c:paymentStatus>
<c:authorizationCode>183217</c:authorizationCode>
</c:ccCheckStatusReply>
</c:replyMessage>
Credit Card Services Using the Simple Order API | September 2019 446
Appendix B Examples
Split-Shipment Examples
<requestMessage xmlns="urn:schemas-cybersource-com:transaction-data-1.40">
<merchantID>Foster City Flowers</merchantID>
<merchantReferenceCode>482046C3A7E94F5BD1</merchantReferenceCode>
<billTo>
<firstName>John</firstName>
<lastName>Doe</lastName>
<street1>1295 Charleston Rd.</street1>
<city>Mountain View</city>
<state>CA</state>
<postalCode>94043</postalCode>
<country>US</country>
<phoneNumber>650-965-6000</phoneNumber>
<email>[email protected]</email>
</billTo>
<item id="0">
<unitPrice>49.95</unitPrice>
<quantity>1</quantity>
</item>
<purchaseTotals>
<currency>USD</currency>
</purchaseTotals>
<card>
<accountNumber>4111111111111111</accountNumber>
<expirationMonth>12</expirationMonth>
<expirationYear>2015</expirationYear>
<cardType>001</cardType>
</card>
<ccAuthService run="true"/>
</requestMessage>
Credit Card Services Using the Simple Order API | September 2019 447
Appendix B Examples
Note
<c:replyMessage xmlns:c="urn:schemas-cybersource-com:transaction-data-1.40">
<c:merchantReferenceCode>482046C3A7E94F5BD1</c:merchantReferenceCode>
<c:requestID>0305782650000167905080</c:requestID>
<c:decision>ACCEPT</c:decision>
<c:reasonCode>100</c:reasonCode>
<c:purchaseTotals>
<c:currency>USD</c:currency>
</c:purchaseTotals>
<c:ccAuthReply>
<c:reasonCode>100</c:reasonCode>
<c:amount>49.95</c:amount>
<c:authorizationCode>123456</c:authorizationCode>
<c:avsCode>Y</c:avsCode>
<c:avsCodeRaw>YYY</c:avsCodeRaw>
<c:processorResponse>A</c:processorResponse>
<c:reconciliationID>ABCDE12345FGHIJ67890</c:reconciliationID>
<c:paymentNetworkTransactionID>3312345</c:paymentNetworkTransactionID>
<c:cardCategory>F^</c:cardCategory>
<c:cardGroup>0</c:cardGroup>
</c:ccAuthReply>
</c:replyMessage>
Credit Card Services Using the Simple Order API | September 2019 448
Appendix B Examples
<requestMessage xmlns="urn:schemas-cybersource-com:transaction-data-1.40">
<merchantID>Foster City Flowers</merchantID>
<merchantReferenceCode>482046C3A7E94F5BD1</merchantReferenceCode>
<billTo>
<firstName>John</firstName>
<lastName>Doe</lastName>
<street1>1295 Charleston Rd.</street1>
<city>Mountain View</city>
<state>CA</state>
<postalCode>94043</postalCode>
<country>US</country>
<phoneNumber>650-965-6000</phoneNumber>
<email>[email protected]</email>
</billTo>
<item id="0">
<unitPrice>49.95</unitPrice>
<quantity>1</quantity>
</item>
<purchaseTotals>
<currency>USD</currency>
</purchaseTotals>
<card>
<accountNumber>4111111111111111</accountNumber>
<expirationMonth>12</expirationMonth>
<expirationYear>2015</expirationYear>
<cardType>001</cardType>
</card>
<linkToRequest>0305782650000167905080</linkToRequest>
<ccAuthService run="true"/>
<ccCaptureService run="true"/>
</requestMessage>
Credit Card Services Using the Simple Order API | September 2019 449
Appendix B Examples
Note
<c:replyMessage xmlns:c="urn:schemas-cybersource-com:transaction-data-1.40">
<c:merchantReferenceCode>482046C3A7E94F5BD1</c:merchantReferenceCode>
<c:requestID>0305782650000167905080</c:requestID>
<c:decision>ACCEPT</c:decision>
<c:reasonCode>100</c:reasonCode>
<c:purchaseTotals>
<c:currency>USD</c:currency>
</c:purchaseTotals>
<c:ccAuthReply>
<c:reasonCode>100</c:reasonCode>
<c:amount>49.95</c:amount>
<c:authorizationCode>123456</c:authorizationCode>
<c:avsCode>Y</c:avsCode>
<c:avsCodeRaw>YYY</c:avsCodeRaw>
<c:processorResponse>A</c:processorResponse>
<c:reconciliationID>ABCDE12345FGHIJ67890</c:reconciliationID>
<c:paymentNetworkTransactionID>3312345</c:paymentNetworkTransactionID>
<c:cardCategory>F^</c:cardCategory>
<c:cardGroup>0</c:cardGroup>
</c:ccAuthReply>
<c:ccCaptureReply>
<c:reasonCode>100</c:reasonCode>
<c:amount>49.95</c:amount>
<c:reconciliationID>02850840187309570</c:reconciliationID>
</c:ccCaptureReply>
</c:replyMessage>
Credit Card Services Using the Simple Order API | September 2019 450
Appendix B Examples
<requestMessage xmlns="urn:schemas-cybersource-com:transaction-data-1.40">
<merchantID>Foster City Flowers</merchantID>
<merchantReferenceCode>482046C3A7E94F5BD1</merchantReferenceCode>
<billTo>
<firstName>John</firstName>
<lastName>Doe</lastName>
<street1>1295 Charleston Rd.</street1>
<city>Mountain View</city>
<state>CA</state>
<postalCode>94043</postalCode>
<country>US</country>
<phoneNumber>650-965-6000</phoneNumber>
<email>[email protected]</email>
</billTo>
<item id="0">
<unitPrice>52.00</unitPrice>
<quantity>1</quantity>
</item>
<item id="1">
<unitPrice>16.00</unitPrice>
<quantity>1</quantity>
</item>
<purchaseTotals>
<currency>USD</currency>
</purchaseTotals>
<card>
<accountNumber>4111111111111111</accountNumber>
<expirationMonth>12</expirationMonth>
<expirationYear>2015</expirationYear>
<cardType>001</cardType>
</card>
<ccAuthService run="true"/>
</requestMessage>
Credit Card Services Using the Simple Order API | September 2019 451
Appendix B Examples
Note
<c:replyMessage xmlns:c="urn:schemas-cybersource-com:transaction-data-1.40">
<c:merchantReferenceCode>482046C3A7E94F5BD1</c:merchantReferenceCode>
<c:requestID>0305782650000167905080</c:requestID>
<c:decision>ACCEPT</c:decision>
<c:reasonCode>100</c:reasonCode>
<c:purchaseTotals>
<c:currency>USD</c:currency>
</c:purchaseTotals>
<c:ccAuthReply>
<c:reasonCode>100</c:reasonCode>
<c:amount>68.00</c:amount>
<c:authorizationCode>123456</c:authorizationCode>
<c:avsCode>Y</c:avsCode>
<c:avsCodeRaw>YYY</c:avsCodeRaw>
<c:processorResponse>A</c:processorResponse>
<c:reconciliationID>ABCDE12345FGHIJ67890</c:reconciliationID>
<c:paymentNetworkTransactionID>3312345</c:paymentNetworkTransactionID>
<c:cardCategory>F^</c:cardCategory>
<c:cardGroup>0</c:cardGroup>
</c:ccAuthReply>
</c:replyMessage>
<requestMessage xmlns="urn:schemas-cybersource-com:transaction-data-1.40">
<merchantID>Foster City Flowers</merchantID>
<merchantReferenceCode>482046C3A7E94F5BD1</merchantReferenceCode>
<item id="0">
<unitPrice>52.00</unitPrice>
<quantity>1</quantity>
</item>
<purchaseTotals>
<currency>USD</currency>
</purchaseTotals>
<ccCaptureService run="true">
<authRequestID>0305782650000167905080</authRequestID>
</ccCaptureService>
</requestMessage>
Credit Card Services Using the Simple Order API | September 2019 452
Appendix B Examples
<c:replyMessage xmlns:c="urn:schemas-cybersource-com:transaction-data-1.40">
<c:merchantReferenceCode>482046C3A7E94F5BD1</c:merchantReferenceCode>
<c:requestID>1019827520348290570293</c:requestID>
<c:decision>ACCEPT</c:decision>
<c:reasonCode>100</c:reasonCode>
<c:purchaseTotals>
<c:currency>USD</c:currency>
</c:purchaseTotals>
<c:ccCaptureReply>
<c:reasonCode>100</c:reasonCode>
<c:amount>52.00</c:amount>
<c:reconciliationID>02850840187309570</c:reconciliationID>
</c:ccCaptureReply>
</c:replyMessage>
<requestMessage xmlns="urn:schemas-cybersource-com:transaction-data-1.40">
<merchantID>Foster City Flowers</merchantID>
<merchantReferenceCode>482046C3A7E94F5BD1</merchantReferenceCode>
<item id="0">
<unitPrice>16.00</unitPrice>
<quantity>1</quantity>
</item>
<purchaseTotals>
<currency>USD</currency>
</purchaseTotals>
<ccCaptureService run="true">
<authRequestID>0305782650000167905080</authRequestID>
</ccCaptureService>
</requestMessage>
<c:replyMessage xmlns:c="urn:schemas-cybersource-com:transaction-data-1.40">
<c:merchantReferenceCode>482046C3A7E94F5BD1</c:merchantReferenceCode>
<c:requestID>1019827520348290570293</c:requestID>
<c:decision>ACCEPT</c:decision>
<c:reasonCode>100</c:reasonCode>
<c:purchaseTotals>
<c:currency>USD</c:currency>
</c:purchaseTotals>
<c:ccCaptureReply>
<c:reasonCode>100</c:reasonCode>
<c:amount>16.00</c:amount>
<c:reconciliationID>sl59vu2nh4ek9lq</c:reconciliationID>
</c:ccCaptureReply>
</c:replyMessage>
Credit Card Services Using the Simple Order API | September 2019 453
Appendix B Examples
<requestMessage xmlns="urn:schemas-cybersource-com:transaction-data-1.40">
<merchantID>Foster City Flowers</merchantID>
<merchantReferenceCode>482046C3A7E94F5BD1</merchantReferenceCode>
<billTo>
<firstName>John</firstName>
<lastName>Doe</lastName>
<street1>1295 Charleston Rd.</street1>
<city>Mountain View</city>
<state>CA</state>
<postalCode>94043</postalCode>
<country>US</country>
<phoneNumber>650-965-6000</phoneNumber>
<email>[email protected]</email>
</billTo>
<item id="0">
<unitPrice>49.95</unitPrice>
<quantity>1</quantity>
</item>
<purchaseTotals>
<currency>USD</currency>
</purchaseTotals>
<card>
<accountNumber>4111111111111111</accountNumber>
<expirationMonth>12</expirationMonth>
<expirationYear>2015</expirationYear>
<cardType>001</cardType>
</card>
<ccAuthService run="true"/>
</requestMessage>
Credit Card Services Using the Simple Order API | September 2019 454
Appendix B Examples
Note
<c:replyMessage xmlns:c="urn:schemas-cybersource-com:transaction-data-1.40">
<c:merchantReferenceCode>482046C3A7E94F5BD1</c:merchantReferenceCode>
<c:requestID>0305782650000167905080</c:requestID>
<c:decision>ACCEPT</c:decision>
<c:reasonCode>100</c:reasonCode>
<c:purchaseTotals>
<c:currency>USD</c:currency>
</c:purchaseTotals>
<c:ccAuthReply>
<c:reasonCode>100</c:reasonCode>
<c:amount>49.95</c:amount>
<c:authorizationCode>123456</c:authorizationCode>
<c:avsCode>Y</c:avsCode>
<c:avsCodeRaw>YYY</c:avsCodeRaw>
<c:processorResponse>A</c:processorResponse>
<c:reconciliationID>ABCDE12345FGHIJ67890</c:reconciliationID>
<c:paymentNetworkTransactionID>3312345</c:paymentNetworkTransactionID>
<c:cardCategory>F^</c:cardCategory>
<c:cardGroup>0</c:cardGroup>
</c:ccAuthReply>
</c:replyMessage>
Credit Card Services Using the Simple Order API | September 2019 455
Appendix B Examples
<requestMessage xmlns="urn:schemas-cybersource-com:transaction-data-1.40">
<merchantID>Foster City Flowers</merchantID>
<merchantReferenceCode>482046C3A7E94F5BD1</merchantReferenceCode>
<billTo>
<firstName>John</firstName>
<lastName>Doe</lastName>
<street1>1295 Charleston Rd.</street1>
<city>Mountain View</city>
<state>CA</state>
<postalCode>94043</postalCode>
<country>US</country>
<phoneNumber>650-965-6000</phoneNumber>
<email>[email protected]</email>
</billTo>
<item id="0">
<unitPrice>49.95</unitPrice>
<quantity>1</quantity>
</item>
<purchaseTotals>
<currency>USD</currency>
</purchaseTotals>
<card>
<accountNumber>4111111111111111</accountNumber>
<expirationMonth>12</expirationMonth>
<expirationYear>2015</expirationYear>
<cardType>001</cardType>
</card>
<linkToRequest>0305782650000167905080</linkToRequest>
<ccAuthService run="true"/>
</requestMessage>
Credit Card Services Using the Simple Order API | September 2019 456
Appendix B Examples
Note
<c:replyMessage xmlns:c="urn:schemas-cybersource-com:transaction-data-1.40">
<c:merchantReferenceCode>482046C3A7E94F5BD1</c:merchantReferenceCode>
<c:requestID>1416783769994859</c:requestID>
<c:decision>ACCEPT</c:decision>
<c:reasonCode>100</c:reasonCode>
<c:purchaseTotals>
<c:currency>USD</c:currency>
</c:purchaseTotals>
<c:ccAuthReply>
<c:reasonCode>100</c:reasonCode>
<c:amount>49.95</c:amount>
<c:authorizationCode>123456</c:authorizationCode>
<c:avsCode>Y</c:avsCode>
<c:avsCodeRaw>YYY</c:avsCodeRaw>
<c:processorResponse>A</c:processorResponse>
<c:reconciliationID>ABCDE12345FGHIJ67890</c:reconciliationID>
<c:paymentNetworkTransactionID>3312345</c:paymentNetworkTransactionID>
<c:cardCategory>F^</c:cardCategory>
<c:cardGroup>0</c:cardGroup>
</c:ccAuthReply>
</c:replyMessage>
<requestMessage xmlns="urn:schemas-cybersource-com:transaction-data-1.40">
<merchantID>Foster City Flowers</merchantID>
<merchantReferenceCode>482046C3A7E94F5BD1</merchantReferenceCode>
<item id="0">
<unitPrice>49.95</unitPrice>
<quantity>1</quantity>
</item>
<purchaseTotals>
<currency>USD</currency>
</purchaseTotals>
<ccCaptureService run="true">
<authRequestID>1416783769994859</authRequestID>
</ccCaptureService>
</requestMessage>
Credit Card Services Using the Simple Order API | September 2019 457
Appendix B Examples
<c:replyMessage xmlns:c="urn:schemas-cybersource-com:transaction-data-1.40">
<c:merchantReferenceCode>482046C3A7E94F5BD1</c:merchantReferenceCode>
<c:requestID>1019827520348290570293</c:requestID>
<c:decision>ACCEPT</c:decision>
<c:reasonCode>100</c:reasonCode>
<c:purchaseTotals>
<c:currency>USD</c:currency>
</c:purchaseTotals>
<c:ccCaptureReply>
<c:reasonCode>100</c:reasonCode>
<c:amount>49.95</c:amount>
<c:reconciliationID>02850840187309570</c:reconciliationID>
</c:ccCaptureReply>
</c:replyMessage>
<requestMessage xmlns="urn:schemas-cybersource-com:transaction-data-1.105">
<merchantID>Foster_City_Flowers</merchantID>
<merchantReferenceCode>123456</merchantReferenceCode>
<purchaseTotals>
<currency>USD</currency>
<grandTotalAmount>25.00</grandTotalAmount>
</purchaseTotals>
<ccAuthService_run="true"/>
<paymentSolution>visacheckout</paymentSolution>
<vc><orderID>335161017227386762</orderID></vc>
</requestMessage>
Credit Card Services Using the Simple Order API | September 2019 458
Appendix B Examples
Note
<c:replyMessage xmlns:c="urn:schemas-cybersource-com:transaction-data-1.105">
<c:merchantReferenceCode>123456</c:merchantReferenceCode>
<c:requestID>4068437426340172492292</c:requestID>
<c:decision>ACCEPT</c:decision>
<c:reasonCode>100</c:reasonCode>
<c:purchaseTotals>
<c:currency>USD</c:currency>
</c:purchaseTotals>
<c:ccAuthReply>
<c:reasonCode>100</c:reasonCode>
<c:amount>25.00</c:amount>
<c:authorizationCode>831000</c:authorizationCode>
<c:avsCode>Y</c:avsCode>
<c:avsCodeRaw>Y</c:avsCodeRaw>
<c:processorResponse>00</c:processorResponse>
<c:reconciliationID>ABCDE12345FGHIJ67890</c:reconciliationID>
<c:paymentNetworkTransactionID>3312345</c:paymentNetworkTransactionID>
<c:cardCategory>F^</c:cardCategory>
<c:cardGroup>0</c:cardGroup>
</c:ccAuthReply>
</c:replyMessage>
Credit Card Services Using the Simple Order API | September 2019 459
Appendix B Examples
<requestMessage xmlns="urn:schemas-cybersource-com:transaction-data-1.151">
<merchantID>My_Store</merchantID>
<merchantReferenceCode>Order_158</merchantReferenceCode>
<invoiceHeader>
<merchantDescriptor>Business_Name</merchantDescriptor>
<merchantDescriptorContact>999-999-9999</merchantDescriptorContact>
<merchantDescriptorAlternate>[email protected]</merchantDescriptorAlternate>
<merchantDescriptorCity>Business_City</merchantDescriptorCity>
</invoiceHeader>
<billTo>
<firstName>Jane</firstName>
<middleName>Anne</middleName>
<lastName>Smith</lastName>
<street1>1234 Main St.</street1>
<street2>Suite 500</street2>
<city>Foster City</city>
<state>CA</state>
<postalCode>94404</postalCode>
<country>US</country>
<phoneNumber>650-999-9999</phoneNumber>
<email>[email protected]</email>
<ipAddress>111.111.111.111</ipAddress>
<customerID>Customer_1234</customerID>
</billTo>
<purchaseTotals>
<currency>USD</currency>
<grandTotalAmount>5000</grandTotalAmount>
</purchaseTotals>
<pos>
<entryMode>keyed</entryMode>
<cardPresent>y</cardPresent>
<terminalCapability>2</terminalCapability>
</pos>
<card>
<accountNumber>4111111111111111</accountNumber>
<expirationMonth>12</expirationMonth>
<expirationYear>2022</expirationYear>
<cvIndicator>1</cvIndicator>
<cvNumber>000</cvNumber>
</card>
<ccAuthService run="true">
<commerceIndicator>retail</commerceIndicator>
<leastCostRouting>y</leastCostRouting>
</ccAuthService>
<ccCaptureService run="true"/>
<reportGroup>Report_Group_1234</reportGroup>
</requestMessage>
Credit Card Services Using the Simple Order API | September 2019 460
Appendix B Examples
<c:replyMessage xmlns:c="urn:schemas-cybersource-com:transaction-data-1.151">
<c:merchantReferenceCode>Order_158</c:merchantReferenceCode>
<c:requestID>5459942086076547903095</c:requestID>
<c:decision>ACCEPT</c:decision>
<c:reasonCode>100</c:reasonCode>
<c:purchaseTotals>
<c:currency>USD</c:currency>
</c:purchaseTotals>
<c:ccAuthReply>
<c:reasonCode>100</c:reasonCode>
<c:amount>5000.00</c:amount>
<c:authorizationCode>123456</c:authorizationCode>
<c:avsCode>Y</c:avsCode>
<c:avsCodeRaw>00</c:avsCodeRaw>
<c:cvCode>M</c:cvCode>
<c:cvCodeRaw>M</c:cvCodeRaw>
<c:processorResponse>000</c:processorResponse>
<c:reconciliationID>5459942086076547903095</c:reconciliationID>
<c:accountBalance>0.00</c:accountBalance>
<c:paymentNetworkTransactionID>1234567890123456</c:paymentNetworkTransactionID>
<c:cardCategory>PREPAID</c:cardCategory>
<c:affluenceIndicator>MASS AFFLUENT</c:affluenceIndicator>
<c:cardIssuerCountry>USA</c:cardIssuerCountry>
<c:processorTransactionID>1234567</c:processorTransactionID>
</c:ccAuthReply>
<c:ccCaptureReply>
<c:reasonCode>100</c:reasonCode>
<c:amount>5000.00</c:amount>
<c:reconciliationID>5459942086076547903095</c:reconciliationID>
</c:ccCaptureReply>
<c:card>
<c:cardType>001</c:cardType>
<c:suffix>1111</c:suffix>
<c:virtual>true</c:virtual>
<c:prepaidReloadable>NO</c:prepaidReloadable>
<c:prepaidType>GIFT</c:prepaidType>
</c:card>
</c:replyMessage>
Credit Card Services Using the Simple Order API | September 2019 461
APPENDIX
Additional Amount Types
C
Additional amount types are used with additional amounts, which are described in
"Additional Amounts," page 116.
Credit Card Services Using the Simple Order API | September 2019 462
Appendix C Additional Amount Types
Credit Card Services Using the Simple Order API | September 2019 463
Appendix C Additional Amount Types
Credit Card Services Using the Simple Order API | September 2019 464
Appendix C Additional Amount Types
Credit Card Services Using the Simple Order API | September 2019 465
Appendix C Additional Amount Types
Taxes Code
Airport tax 015
Circulation of merchandise and service tax (ICMS) 007
Consumption tax 002
Exempt—no GST charged 068
Goods and services tax (GST) 001
Harmonized sales tax (HST) 005
Income security and reform tax (ISR Income Tax) 011
Industrialized products federal tributary tax (IPI Federal Tributary) 008
Inland revenue income tax (IR Income Tax) 009
Insurance premium tax (IPT) 006
International students and scholars income tax (ISS Income Tax) 010
Miscellaneous tax 046
Occupancy tax 012
Provincial sales tax (PST) 003
Quebec sales tax (QST) 004
Room tax 013
Sales tax 056
Stamp duty 067
Surcharge tax 014
Ticket tax 043
Value added tax (VAT) 057
Credit Card Services Using the Simple Order API | September 2019 466
APPENDIX
American Express SafeKey
Response Codes
D
Response Description
Code
1 CAVV failed validation and authentication.
2 CAVV passed validation and authentication.
3 CAVV passed the validation attempt.
4 CAVV failed the validation attempt.
7 CAVV failed the validation attempt and the issuer is available.
8 CAVV passed the validation attempt and the issuer is available.
9 CAVV failed the validation attempt and the issuer is not available.
A CAVV passed the validation attempt and the issuer is not available.
U Issuer does not participate or 3D secure data was not used.
99 An unknown value was returned from the processor.
Credit Card Services Using the Simple Order API | September 2019 467
APPENDIX
AVS Codes
E
Table 61 AVS Codes for Cielo 3.0 and CyberSource Latin American
Processing
Code Description
D Partial match: postal code and address match.
E Not supported: AVS is not supported for this card type.
or
Invalid: the acquirer returned an unrecognized value for the AVS response.
F Partial match: postal code matches, but CPF and address do not match. 1
G Not supported: AVS not supported or not verified.
I No match: AVS information is not available.
K Partial match: CPF matches, but postal code and address do not match. 1
L Partial match: postal code and CPF match, but address does not match. 1
N No match: postal code, CPF, and address do not match. 1
1 CPF (Cadastro de Pessoas Fisicas) is required only for Redecard in Brazil.
Credit Card Services Using the Simple Order API | September 2019 468
Appendix E AVS Codes
Table 61 AVS Codes for Cielo 3.0 and CyberSource Latin American
Processing (Continued)
Code Description
O Partial match: CPF and address match, but postal code does not match. 1
R Not supported: your implementation does not support AVS.
or
System unavailable.
T Partial match: address matches, but postal code and CPF do not match. 1
V Match: postal code, CPF, and address match. 1
1 CPF (Cadastro de Pessoas Fisicas) is required only for Redecard in Brazil.
Credit Card Services Using the Simple Order API | September 2019 469
Appendix E AVS Codes
Code Description
A Partial match: street address matches, but 5-digit and 9-digit postal codes do not match.
B Partial match: street address matches, but postal code is not verified. Returned only for
Visa cards not issued in the U.S.
C No match: street address and postal code do not match. Returned only for Visa cards
not issued in the U.S.
D&M Match: street address and postal code match. Returned only for Visa cards not issued in
the U.S.
E Invalid: AVS data is invalid or AVS is not allowed for this card type.
F Partial match: card member’s name does not match, but billing postal code matches.
G Not supported: issuing bank outside the U.S. does not support AVS.
H Partial match: card member’s name does not match, but street address and postal code
match. Returned only for the American Express card type.
I No match: address not verified. Returned only for Visa cards not issued in the U.S.
K Partial match: card member’s name matches, but billing address and billing postal code
do not match. Returned only for the American Express card type.
Credit Card Services Using the Simple Order API | September 2019 470
Appendix E AVS Codes
Code Description
L Partial match: card member’s name and billing postal code match, but billing address
does not match. Returned only for the American Express card type.
M See the entry for D & M.
N No match: one of the following:
Street address and postal code do not match.
Card member’s name, street address, and postal code do not match. Returned only
for the American Express card type.
O Partial match: card member’s name and billing address match, but billing postal code
does not match. Returned only for the American Express card type.
P Partial match: postal code matches, but street address not verified. Returned only for
Visa cards not issued in the U.S.
R System unavailable.
S Not supported: issuing bank in the U.S. does not support AVS.
T Partial match: card member’s name does not match, but street address matches.
Returned only for the American Express card type.
U System unavailable: address information unavailable for one of these reasons:
The U.S. bank does not support AVS outside the U.S.
The AVS in a U.S. bank is not functioning properly.
V Match: card member’s name, billing address, and billing postal code match. Returned
only for the American Express card type.
W Partial match: street address does not match, but 9-digit postal code matches.
X Match: street address and 9-digit postal code match.
Y Match: street address and 5-digit postal code match.
Z Partial match: street address does not match, but 5-digit postal code matches.
1 Not supported: one of the following:
AVS is not supported for this processor or card type.
AVS is disabled for your CyberSource account. To enable AVS, contact CyberSource
Customer Support.
2 Unrecognized: the processor returned an unrecognized value for the AVS response.
3 Match: address is confirmed. Returned only for PayPal Express Checkout.
4 No match: address is not confirmed. Returned only for PayPal Express Checkout.
5 No match: no AVS code was returned by the processor.
Credit Card Services Using the Simple Order API | September 2019 471
APPENDIX
Business Application
Identifiers
F
Identifier Description
AA Account to account
BB Business to business
BI Bank-initiated money transfer
BP Non-card bill payment
CC Cash claim
CI Cash in
CO Cash out
CP Card bill payment
FD Funds disbursement (general)
GD Government disbursement
GP Gambling payout other than online gambling
LO Loyalty and offers
MA Mobile air time payment
MD Merchant disbursement
MI Merchant-initiated money transfer
MP Face-to-face merchant payment
OG Online gambling payout
PD Payroll pension disbursement
PG Payment to government
PP Person to person
PS Payment for goods and services (general)
TU Top-up for enhanced prepaid loads
WT Wallet transfer
Credit Card Services Using the Simple Order API | September 2019 472
APPENDIX
Card Types
G
The following table lists the card type values to use in ccAuthService and
ccCreditService requests. To see which cards can be handled by each processor, see
"Payment Processors," page 32.
CyberSource strongly recommends that you send the card type even if it is
optional for your processor and card type. Omitting the card type can cause the
Important transaction to be processed with the wrong card type.
004 Discover
005 Diners Club: see "Discover Acquisitions and Alliances," page 23.
007 JCB1
014 EnRoute1
021 JAL1
Credit Card Services Using the Simple Order API | September 2019 473
Appendix G Card Types
040 UATP1
050 Hipercard2,3
051 Aura
054 Elo3
061 RuPay
Credit Card Services Using the Simple Order API | September 2019 474
APPENDIX
Chargeback Reason Codes
H
Reason Description
Code
30 Services Not Provided or Merchandise Not Received
31 Error in Addition
41 Cancelled Recurring Transaction
50 Credit Posted as Purchase
53 Not as Described
56 Defective Merchandise
60 Requested Copy Illegible
61 Fraudulent Mail/Phone Order Transaction
71 Authorization Request Declined / Authorization Declined
72 No Authorization / Transaction Exceeds Floor Limit
74 Late Presentment
75 Cardholder Does Not Recognize the Transaction
79 Requested Transaction Information Not Received
82 Duplicate Processing
83 Nonpossession of Card
85 Credit Not Processed
86 Paid by Other Means
90 Nonreceipt of Merchandise
Credit Card Services Using the Simple Order API | September 2019 475
Appendix H Chargeback Reason Codes
Reason Description
Code
01 Requested Transaction Data Not Received
02 Requested Item Illegible
08 Requested / Required Authorization Not Obtained
12 Account Number Not on File
31 Transaction Amount Differs
34 Duplicate Processing
35 Card Not Valid or Expired
37 Fraudulent Mail/Phone Order Transaction
41 Cancelled Recurring Transaction
42 Late Presentment
47 Exceeds Floor Limit, Not Authorized, and Fraudulent Transactions
50 Credit Posted as a Debit
53 Cardholder Dispute Defective / Not as Described
54 Cardholder Dispute-Not Elsewhere (U.S. only)
55 Nonreceipt of Merchandise
59 Services Not Rendered
60 Credit Not Processed
63 Cardholder Does Not Recognize - Potential Fraud
Credit Card Services Using the Simple Order API | September 2019 476
APPENDIX
Commerce Indicators
I
The commerce indicator is a request value that you send in the ccAuthService_
commerceIndicator and ccCreditService_commerceIndicator fields.
Values Description
aesk See "American Express SafeKey," page 187.
and
aesk_attempted
install See "Installment Payments," page 145.
and
install_internet
internet (default for E-commerce order placed using a web site. On Ingenico
authorizations) ePayments, internet is supported only for Cartes Bancaires
transactions.
Note Ingenico ePayments was previously called Global Collect.
js See "JCB J/Secure," page 188.
and
js_attempted
moto Mail order or telephone order. Not supported on Cielo or UATP.
On Ingenico ePayments, moto is supported only for Cartes
Bancaires transactions.
Note Ingenico ePayments was previously called Global Collect.
moto_cc Mail order or telephone order from a call center. This value is
available only on the Asia, Middle East, and Africa Gateway.
pb See "ProtectBuy," page 195.
and
pb_attempted
recurring See "Recurring Payments," page 207.
and
recurring—U.S. transaction or non-U.S. mail order /
recurring_internet
telephone order (MOTO) transaction
recurring_internet—non-U.S. e-commerce (Internet)
transaction
retail See Card-Present Processing Using the Simple Order API.
Credit Card Services Using the Simple Order API | September 2019 477
Appendix I Commerce Indicators
Values Description
spa See "Mastercard Identity Check," page 189.
and
spa_failure
vbv, See "Visa Secure," page 197.
vbv_attempted,
and
vbv_failure
Credit Card Services Using the Simple Order API | September 2019 478
APPENDIX
CVN Codes
J
Code Description
D The transaction was determined to be suspicious by the issuing bank.
I The CVN failed the processor's data validation check.
M The CVN matched.
N The CVN did not match.
P The CVN was not processed by the processor for an unspecified reason.
S The CVN is on the card but was not included in the request.
U Card verification is not supported by the issuing bank.
X Card verification is not supported by the payment card company.
1 Card verification is not supported for this processor or card type.
2 An unrecognized result code was returned by the processor for the card
verification response.
3 No result code was returned by the processor.
Credit Card Services Using the Simple Order API | September 2019 479
APPENDIX
CyberSource through
VisaNet Acquirers
K
The Visa Electron card type is processed the same way that the Visa debit card
is processed. Use card type value 001 (Visa) for Visa Electron.
Note
Agricultural Bank of China (ABC): Visa, Mastercard, American Express, JCB, Diners Club
Australia and New Zealand Banking Group Limited (ANZ): Visa, Mastercard
Credit Card Services Using the Simple Order API | September 2019 480
Appendix K CyberSource through VisaNet Acquirers
Barclays Bank of Ghana Limited, Barclays Bank of Tanzania Limited, and Barclays
Bank of Uganda Limited: Visa, Mastercard, American Express
Commercial Bank of Qatar: Visa, Mastercard, American Express, JCB, Diners Club
Credit Card Services Using the Simple Order API | September 2019 481
Appendix K CyberSource through VisaNet Acquirers
In India, the only supported card types are Visa and Mastercard. All three
card types (Visa, Mastercard, JCB) are supported in all other countries that
Note Global Payments Asia Pacific covers.
Habib Bank Ltd. (HBL): Visa, Mastercard, American Express, JCB, Diners Club
National Bank of Abu Dhabi (NBAD): Visa, Mastercard, JCB, Diners Club
Credit Card Services Using the Simple Order API | September 2019 482
Appendix K CyberSource through VisaNet Acquirers
Qatar National Bank (QNB Group): Visa, Mastercard, American Express, JCB,
Diners Club
United Overseas Bank (UOB) in Singapore and Vietnam: Visa, Mastercard, JCB
Credit Card Services Using the Simple Order API | September 2019 483
APPENDIX
Expert Monitoring Solutions
(EMS) Reason Codes
L
The following table describes the reason codes returned in positions 4 through 5 of the
ccAuthReply_emsTransactionRiskScore field. See "Mastercard Expert Monitoring
Solutions (EMS)," page 168.
Reason Description
Code
01 Suspicious cross border activity
02 Suspicious transaction
03 High number of transactions
04 High number of transactions at an unattended terminal
05 Suspicious recent history of transactions
06 Suspicious activity and high number of transactions
07 Suspicious cardholder not present activity
08 Suspicious activity and low number of transactions
09 Suspicious service station activity
10 Suspicious online activity
11 High amount transaction or high cumulated amount recently spent
12 Suspicious gambling activity
13 Suspicious phone or mail order activity
14 Suspicious grocery store activity
15 High risk country
16 High amount, high number of transactions, and cross border
17 Suspicious activity including previous declined transactions
18 Suspicious airline activity
19 Score forced to be 001 because the transaction being scored was a 04xx
message
20 Not a financial transaction
21 Abnormal geographic activity
22 Abnormal, high frequency at the same MCC
Credit Card Services Using the Simple Order API | September 2019 484
Appendix L Expert Monitoring Solutions (EMS) Reason Codes
Reason Description
Code
23 High amount recent ATM activity
24 Suspicious recent ATM activity or suspicious ATM activity following a recent
abnormal activity
25 Suspicious telecom activity
26 High number of international ATM transactions
27 High cumulated withdrawal amount on international ATM
28 High velocity of domestic ATM transactions
29 High risk MCC
Credit Card Services Using the Simple Order API | September 2019 485
APPENDIX
Electronic Verification
Response Codes
M
See "Electronic Verification (EV)," page 94, for a list of the fields in which the Electronic
Verification response codes are returned. The following table describes the mapped
response codes.
Response Description
Code
F First name matches; last name does not match.
L Last name matches; first name does not match.
M First name and last name match.
N No, the data does not match.
P The processor did not return verification information.
R The system is unavailable, so retry.
S The verification service is not available.
U Verification information is not available.
Y Yes, the data matches.
1 Electronic verification did not generate a response.
2 The processor returned an unrecognized value.
Credit Card Services Using the Simple Order API | September 2019 486
APPENDIX
Formats for Discretionary
Data
N
This appendix provides examples of the formats for discretionary data for specific
acquirers. In request messages, you can include discretionary data in the issuer_
additionalData field. In reply messages, discretionary data can be sent to you in the same
field.
CyberSource recommends that you contact your acquirer for information about
the formats to use.
Note
VC10000000050000
Credit Card Services Using the Simple Order API | September 2019 487
Appendix N Formats for Discretionary Data
00612012345678910000000008160003359
Credit Card Services Using the Simple Order API | September 2019 488
APPENDIX
Frequently Asked Questions
O
Credit Card Services Using the Simple Order API | September 2019 489
Appendix O Frequently Asked Questions
If you believe that an authorization expired, you can request a new authorization, then
capture the new authorization. However, the new authorization could be denied if the
customer’s credit limit has been exceeded, if the card has expired, or if the card has been
cancelled.
If your processor does not support authorization reversals and you need to reverse an
authorization, contact the customer’s issuing bank or wait for the authorization to expire.
How can I prevent my customers from clicking the “Buy” button more than
once?
Use one or more of these options:
After a customer clicks the “Buy” button, send the customer to a new web page
After a customer clicks the “Buy” button, hide or disable the button
The Support Center provides sample JavaScript code to disable the “Buy” button after a
customer clicks it. The code is available at:
http://www.cybersource.com/support_center/implementation/best_practices/
view.xml?page_id=415
Credit Card Services Using the Simple Order API | September 2019 490
Appendix O Frequently Asked Questions
Can I change the company name and phone number that appears on my
customers’ payment card statements?
CyberSource permits you to change these values, which are called merchant descriptors,
when you use a payment processor that supports this feature. After your processor
configures the merchant descriptors for your account, you can choose which merchant
descriptor to use every time you request a transaction. You must also contact
CyberSource and your processor to specify default merchant descriptors for your account.
See "Merchant Descriptors," page 169.
Credit Card Services Using the Simple Order API | September 2019 491
APPENDIX
Ingenico ePayments Credit
Card Reversals
P
Note
Credit card reversals and requests for information, which are also called retrieval
requests, are business transactions initiated by your customers through their banks.
The information in this section is generally applicable to all card types and all operating
regions although certain details can vary.
1 The acquiring bank notifies Ingenico ePayments of your customer’s request for
information.
2 Ingenico ePayments searches for refunds already processed for the transaction identified
by your customer.
3 Ingenico ePayments responds to the acquiring bank stating “already refunded.” Ingenico
ePayments does not take any further action because the information request has been
satisfied. Requests for information are not documented within any report.
Credit Card Services Using the Simple Order API | September 2019 492
Appendix P Ingenico ePayments Credit Card Reversals
4 If Ingenico ePayments’s research determines that a refund for the inquiry has not been
initiated, Ingenico ePayments forwards the retrieval request to you. All requests received
before midnight PT (Pacific Time) are forwarded to you by 0800 PT by email with a
request for additional information. See "Request for Information Example," page 496.
When you receive a request for information, you must respond promptly and with as much
detail as possible:
2 Ingenico ePayments forwards your response by email to the acquiring bank which then
communicates with your customer’s issuing bank.
3 If the information in the response is sufficient in the judgment of the issuing bank or
customer in accordance with Mastercard/Visa/American Express rules, the chargeback is
not executed. The dispute is dropped without further notification to the acquirer, Ingenico
ePayments, or you.
Chargebacks
If one of the following situations occurs, then the issuing bank sends a chargeback
(refund) to the customer’s card and debits your account.:
You do not send your response in a timely manner
The information does not satisfy the reasons defined by the card type
Your customer submits a valid claim for refund
If the information you provided in response to the request for information is not satisfactory
or if your customer decides to charge the item back for any reason as defined by the
specific card types, the issuing bank executes a chargeback. This adverse movement of
funds is unavoidable, but can be reversed in some cases. See "Representments,"
page 494.
Credit Card Services Using the Simple Order API | September 2019 493
Appendix P Ingenico ePayments Credit Card Reversals
If Ingenico ePayments receives a chargeback by 0800 PT, the amount of the chargeback
is deducted from your account the next business day and is reflected in:
The Transaction Search in the Business Center
The Payment Events Report for that processing day
The chargeback entry includes the reason code for the chargeback. The card types do not
circulate lists of reason codes to merchants. However, notable merchant banks freely
provide detailed explanations of chargeback reason codes on their web sites. This
document provides:
"Chargeback Reason Codes for Visa," page 475
"Chargeback Reason Codes for Mastercard," page 476
Whenever you receive a chargeback, your account is debited by the full or partial
transaction amount associated with the chargeback. Chargebacks are deducted from the
funding you would normally receive.
Representments
When you or Ingenico ePayments disputes the legitimacy of a chargeback, a
representment case is initiated:
As in all representment cases, there is no assurance that the issuing bank will reverse the
chargeback even in the face of the evidence. However, the chances of success are
excellent. Submitting a representment case does not automatically result in the debiting of
your customer’s account and the crediting of yours.
2 If you want to challenge a chargeback, in other words represent it, then you must do so
very quickly. To optimize your chances for success, you must document your facts and
submit them to Ingenico ePayments in five or fewer days after receiving notification of the
chargeback.
Credit Card Services Using the Simple Order API | September 2019 494
Appendix P Ingenico ePayments Credit Card Reversals
3 If your representment case is approved by your customer’s issuing bank, the bank notifies
you by refunding your account for amount of the chargeback. Although it is inconvenient,
the payment card companies and issuing banks do not provide any other method of
notification.
The notification appears as a chargeback withdrawal that is noted in the Payment Events
Report. This event generally takes place 11 to 15 business days after you submit the
representment case information to Ingenico ePayments. A chargeback withdrawal credits
the financial status and the subsequent funding event.
Credit Card Services Using the Simple Order API | September 2019 495
Appendix P Ingenico ePayments Credit Card Reversals
Dear Sir/Madam,
With regards to the transactions below, we have been requested by the cardholders/
cardholders’ banks to provide photocopies of the transaction receipts.
Please reply within 5 days from the date of this e-mail with:
Merchant Reference :
Contract-ID : XXXX
Transaction history
--------------------------------------------------------------
--------------------------------------------------------------
Credit Card Services Using the Simple Order API | September 2019 496
Appendix P Ingenico ePayments Credit Card Reversals
Visa and Mastercard International Rules and Regulations specify that Ingenico
ePayments's bank must provide a copy of a sales voucher when requested by a
cardholder or bank. Under these regulations, failure to provide a fully legible transaction
receipt will result in the item being returned unpaid to you. In the event that this
transaction was hand keyed into your terminal, you must also supply us with a copy of
the manual imprinted voucher you took, to prove the presence of the card.
Remember to keep all original vouchers for 12 months as per your merchant
agreement.
Kind regards,
Dispute Management
Ingenico ePayments
P.O. Box 2001
2130 GE Hoofddorp
The Netherlands
Fax: +31 23 554 8663
Email: [email protected]
Credit Card Services Using the Simple Order API | September 2019 497
APPENDIX
Network Transaction
Identifiers
Q
American Express: American Express generates this value. It is included in all replies
from the American Express Global Network (AEGN).
Mastercard: This value is the qualification information for the Mastercard Interchange
Compliance (MIC) program. It is used for all Mastercard responses coming from
Banknet through Visa to certified acquirers. Format:
Bits 1-4: Banknet date
Bits 5-7: Mastercard product ID. See "Mastercard Product IDs," page 501.
Bits 8-13: Banknet reference number generated by Mastercard for each transaction
Bits 14-15: Spaces
Visa and Other Card Types: The payment card company generates this value. It is
unique for each original authorization and identifies a transaction throughout its life
cycle.
GPN
For GPN, the following values are returned for each card type:
American Express: The payment card company generates this value. CyberSource
saves this value and sends it to the processor in all subsequent capture requests.
Discover: The payment card company generates this value. CyberSource saves this
value and sends it to the processor in all subsequent requests for full authorization
reversals and captures.
Credit Card Services Using the Simple Order API | September 2019 498
Appendix Q Network Transaction Identifiers
Mastercard: The payment card company generates this value. CyberSource saves it
and sends it to the processor in all subsequent requests for full authorization reversals
and captures. Format:
Bits 1-9: Banknet reference number generated by Mastercard for each transaction
Bits 10-13: Banknet date
Bits 14-15: Spaces
Visa: The payment card company generates this value. CyberSource saves it and
sends it to the processor in all subsequent requests for full authorization reversals and
captures.
Credit Card Services Using the Simple Order API | September 2019 499
APPENDIX
Product Codes
R
The following table lists the values you can use for the product code in the item_#_
productCode request field.
Credit Card Services Using the Simple Order API | September 2019 500
APPENDIX
Product IDs
S
For descriptions of the Visa product IDs, see the Product ID table on the Visa Request &
Response Codes web page:
https://developer.visa.com/guides/request_response_codes
Mastercard can introduce new values for this field without advance notice. See
the Mastercard technical documentation for additional information.
Note CyberSource through VisaNet does not edit or validate field content.
Credit Card Services Using the Simple Order API | September 2019 501
Appendix S Product IDs
Credit Card Services Using the Simple Order API | September 2019 502
Appendix S Product IDs
Credit Card Services Using the Simple Order API | September 2019 503
Appendix S Product IDs
Credit Card Services Using the Simple Order API | September 2019 504
APPENDIX
Visa Secure
Response Codes
T
Response Description
Code
0 CAVV not validated because erroneous data was submitted.
1 CAVV failed validation and authentication.
2 CAVV passed validation and authentication.
3 CAVV passed the validation attempt.
4 CAVV failed the validation attempt.
6 CAVV not validated because the issuer does not participate.
7 CAVV failed the validation attempt and the issuer is available.
8 CAVV passed the validation attempt and the issuer is available.
9 CAVV failed the validation attempt and the issuer is not available.
A CAVV passed the validation attempt and the issuer is not available.
B CAVV passed the validation with information only; no liability shift.
C CAVV attempted but not validated; issuer did not return CAVV code.
D CAVV not validated or authenticated; issuer did not return CAVV code.
I Invalid security data.
U Issuer does not participate or 3-D secure data was not used.
99 An unknown value was returned from the processor.
Credit Card Services Using the Simple Order API | September 2019 505
APPENDIX
Values for the Wallet Type
Field
U
The wallet type is sent in the wallet_type field in authorization requests and credit
requests. Possible value are:
101: Masterpass remote payment. The customer created the wallet by manually
interacting with a customer-controlled device such as a computer, tablet, or phone.
This value is supported only for Masterpass transactions on Chase Paymentech
Solutions and CyberSource through VisaNet.
102: Masterpass remote near field communication (NFC) payment. The customer
created the wallet by tapping a PayPass card or customer-controlled device at a
contactless card reader. This value is supported only for card-present Masterpass
transactions on CyberSource through VisaNet.
103: Masterpass Apple Pay payment. The payment was made with a combination of
Masterpass and Apple Pay. This value is supported only for Masterpass Apple Pay
transactions on CyberSource through VisaNet. See Apple Pay Using the Simple
Order API.
216: Masterpass Google Pay payment. The payment was made with a combination of
Masterpass and Google Pay. This value is supported only for Masterpass Google Pay
transactions on CyberSource through VisaNet. See Google Pay Using the Simple
Order API.
217: Masterpass Samsung Pay payment. The payment was made with a combination
of Masterpass and Samsung Pay. This value is supported only for Masterpass
Samsung Pay transactions on CyberSource through VisaNet. See Samsung Pay
Using the Simple Order API.
SDW: Staged digital wallet. An issuer or operator created the wallet. This value is
supported only for Masterpass transactions on Chase Paymentech Solutions.
VCIND: Visa Checkout or Visa Secure Remote Commerce payment. This value is
supported only on CyberSource through VisaNet, FDC Compass, FDC Nashville
Global, FDI Australia, and TSYS Acquiring Solutions. See the Visa Checkout and Visa
Secure Remote Commerce web page.
For additional information about the wallet_type field, see Appendix A, "API Fields," on
page 240.
Credit Card Services Using the Simple Order API | September 2019 506
INDEX
Index
AB C D E F G H I J K L M N O P Q R S T U V W X Y Z
A AIBMS
authorizations 38
AAV 189
AVS 88
AAV+ 93 captures 61
account authentication values 189 card types 33
account balances 111 credits 78
CVNs 97
acquirers 32
forced captures 142
acquiring banks 28 full authorization reversals 53
additional amounts 116 Mastercard Identity Check 189
Address Verification System merchant-initiated transactions 173
AAV+ 93 multiple partial captures 71
codes 468 recurring payments 207
described 88 subsequent authorizations 173
Enhanced 93 verbal authorizations 101
and recurring payments 214 Visa Secure 197
relaxed requirements 91 voids 85
zero amount authorizations 231
aggregator 117
airline data 126
aggregator support 117
American Express
payment card company 29
SafeKey response codes 467
SafeKey, described 186
American Express Brighton
authorizations 38
AVS 88
captures 61
card types 33
credits 78
CVNs 97
recurring payments 207
verbal authorizations 101
voids 85
Credit Card Services Using the Simple Order API | September 2019 507
Index
A B C D E F G H I J K L M N O P Q R S T U V W X Y Z
Credit Card Services Using the Simple Order API | September 2019 508
Index
A B C D E F G H I J K L M N O P Q R S T U V W X Y Z
authorizations B
checking status of 44
credits for 84 balance inquiries 128
described 38 balance responses 111
examples, name-value pairs 403 Barclays
examples, XML 428 ARAV 59
expiration of 490 authorizations 38
for zero amounts 231 automatic authorization reversals 69
partial 105 AVS 88
verbal 101 captures 61
See also ccAuthService card types 33
authorizations, incremental 45 cash advances 132
automatic authorization reversals 69 credits 78
CVNs 97
automatic captures 40
final authorization indicator 138
automatic interchange optimization 70 full authorization reversals 53
AVS Mastercard Identity Check 189
AAV+ 93 merchant-initiated transactions 173
codes 468 multiple partial captures 71
described 88 recipients 206
Enhanced 93 recurring payments 208
and recurring payments 214 subsequent authorizations 173
relaxed requirements 91 verbal authorizations 101
AVS only 231 Visa Secure 197
voids 85
zero amount authorizations 231
Bill Payment program
Mastercard 167
Visa 229
BNDES 129
bundled requests 40
business cards 167
business rules 92
Credit Card Services Using the Simple Order API | September 2019 509
Index
A B C D E F G H I J K L M N O P Q R S T U V W X Y Z
C ccAuthService
described 38
captures requesting 41
after void 86 required fields 42
automatic 40
ccCaptureService
described 61
described 61
examples, name-value pairs 403
requesting 62
examples, XML 428
required fields 63
multiple 71
partial 71 ccCheckStatusService
See also ccCaptureService required fields 44
standard 40 ccCreditService
card associations 29 described 78
requesting 79
card identification digits. See CVNs
required fields 80
card type indicators 130
characters
card validation codes. See CVNs
multibyte 240
card verification numbers. See CVNs special 240
cardholder authentication verification values chargebacks
API fields 273 described 29
for American Express SafeKey 188, 196 fees 28
for JCB J/Secure 199 for Ingenico ePayments 492
for ProtectBuy 199 reason codes for Mastercard 476
for Visa Secure 199 reason codes for Visa 475
Cardnet. See LloydsTSB Cardnet Chase Pay 132
card-not-present transactions 26
card-on-file transactions 173
card-present data 130
card-present transactions 26
Carte Bancaire 21
cash advances 132
CAVV
API fields 273
for American Express SafeKey 188, 196
for JCB J/Secure 199
for ProtectBuy 199
for Visa Secure 199
ccAuthReversalService
described 52
requesting 57
required fields 58
Credit Card Services Using the Simple Order API | September 2019 510
Index
A B C D E F G H I J K L M N O P Q R S T U V W X Y Z
Credit Card Services Using the Simple Order API | September 2019 511
Index
A B C D E F G H I J K L M N O P Q R S T U V W X Y Z
Credit Card Services Using the Simple Order API | September 2019 512
Index
A B C D E F G H I J K L M N O P Q R S T U V W X Y Z
D Elavon Americas
American Express SafeKey 187
data types 241 authorization only 127
date and time formats 365 automatic authorization reversals 69
DCC 133 AVS 90
debit cards 22 balance inquiries 128
balance responses 112
Debt Repayment program (Visa) 230
captures 61
digital wallets 506 card types 34
Diners Club credits 78
acquisition by Discover 23 CVNs 98
ProtectBuy 186 final authorization indicator 138
Discover forced captures 143
acquisitions and alliances 23 full authorization reversals 54
payment card company 29 JCB J/Secure 188
ProtectBuy 186 Mastercard Identity Check 189
Masterpass 169
dynamic currency conversion (DCC) 133
merchant-initiated reversals 170
merchant-initiated transactions 173
E multiple partial captures 71
E4X 185 partial authorizations 106
recurring payments 210
ECI
subsequent authorizations 173
API fields 274
verbal authorizations 102
for American Express SafeKey 188, 196
Visa Secure 197
for JCB J/Secure 200
voids 85
for Mastercard Identity Check 192
zero amount authorizations 232
for ProtectBuy 200
for Visa Secure 200 electronic commerce indicators
values 477 API fields 274
Elavon for American Express SafeKey 188, 196
for JCB J/Secure 200
AVS 90
card types 34 for Mastercard Identity Check 192
credits 78 for ProtectBuy 200
for Visa Secure 200
CVNs 98
final authorization indicator 138 values 477
full authorization reversals 54 Electronic Verification
Mastercard Identity Check 189 described 94
multiple partial captures 71 response codes 486
recipients 206 EMS 168
recurring payments 210 encoded account numbers 137
verbal authorizations 102
encryption 137
Visa Secure 197
zero amount authorizations 232 Enhanced AVS 93
Credit Card Services Using the Simple Order API | September 2019 513
Index
A B C D E F G H I J K L M N O P Q R S T U V W X Y Z
Credit Card Services Using the Simple Order API | September 2019 514
Index
A B C D E F G H I J K L M N O P Q R S T U V W X Y Z
Credit Card Services Using the Simple Order API | September 2019 515
Index
A B C D E F G H I J K L M N O P Q R S T U V W X Y Z
Credit Card Services Using the Simple Order API | September 2019 516
Index
A B C D E F G H I J K L M N O P Q R S T U V W X Y Z
H I
HBoS Identity Check 186
ARAV 59 incremental authorizations 45
authorizations 38
Ingenico ePayments
AVS 90
authorizations 38
captures 61
captures 61
card types 35
card types 35
credits 78
chargebacks 492
CVNs 98
credits 78
final authorization indicator 138
CVNs 98
full authorization reversals 55
JCB J/Secure 188
Mastercard Identity Check 189
Mastercard Identity Check 189
merchant-initiated transactions 174
recurring payments 211
recipients 206
representments 494
recurring payments 211
requests for information 492
subsequent authorizations 174
retrieval requests 492
verbal authorizations 102
transaction reversals 492
Visa Secure 197
Visa Secure 197
voids 85
zero amount authorizations 234 installment payments 145
Credit Card Services Using the Simple Order API | September 2019 517
Index
A B C D E F G H I J K L M N O P Q R S T U V W X Y Z
Credit Card Services Using the Simple Order API | September 2019 518
Index
A B C D E F G H I J K L M N O P Q R S T U V W X Y Z
Lynk Moneris
authorizations 38 authorizations 38
AVS 91 AVS 91
captures 61 captures 61
card types 36 card types 36
credits 78 credits 78
CVNs 98 CVNs 98
verbal authorizations 102 full authorization reversals 56
Mastercard Identity Check 189
M recurring payments 211
verbal authorizations 102
mada cards 24 Visa Secure 198
Maestro (UK Domestic) cards 115 voids 85
Mastercard zero amount authorizations 234
Bill Payment program 167 multibyte characters 240
BIN range 25 multi-currency 185
Expert Monitoring Solutions (EMS) 168
multiple captures 71
Identity Check 186
Masterpass 506
payment card company 29 N
Paypass 506 network tokenization 204
Masterpass network transaction identifiers 498
described 169
values for wallet_type field 506
merchant banks 28
merchant-initiated reversals 170
merchant-initiated transactions 173
merchant-initiated voids 170
micropayments 185
Credit Card Services Using the Simple Order API | September 2019 519
Index
A B C D E F G H I J K L M N O P Q R S T U V W X Y Z
O OmniPay-Ireland
authorizations 38
OmniPay. See Lloyds-OmniPay automatic authorization reversals 69
OmniPay Direct AVS 91
ARAV 60 captures 61
authorizations 38 card types 36
automatic authorization reversals 69 credits 78
AVS 91 CVNs 99
captures 61 final authorization indicator 138
card types 36 installment payments 147
credits 78 Mastercard Identity Check 190
CVNs 99 multiple partial captures 71
final authorization indicator 138 recurring payments 211
forced captures 143 verbal authorizations 102
full authorization reversals 56 Visa Bill Payments 229
Mastercard Identity Check 1.0 190 Visa Secure 198
Mastercard Identity Check 2.0 190 voids 85
Masterpass 169 zero amount authorizations 235
merchant-initiated reversals 170 open to buy 38
merchant-initiated transactions 174
order tracking 30
multiple partial captures 71
recurring payments 211
subsequent authorizations 174 P
verbal authorizations 102 partial authorization reversals 69
Visa Secure 198
partial authorizations
voids 85
described 105
zero amount authorizations 235
examples, name-value pairs 412
examples, XML 441
partial captures 71
partial shipments
described 220
examples, name-value pairs 417
examples, XML 447
PayEase China Processing 36
payer authentication 186
payment aggregator 117
payment card companies 29
payment card numbers for testing 238
payment network tokenization 204
payment network transaction identifiers 498
payment processors 32
Credit Card Services Using the Simple Order API | September 2019 520
Index
A B C D E F G H I J K L M N O P Q R S T U V W X Y Z
Credit Card Services Using the Simple Order API | September 2019 521
Index
A B C D E F G H I J K L M N O P Q R S T U V W X Y Z
Credit Card Services Using the Simple Order API | September 2019 522
Index
A B C D E F G H I J K L M N O P Q R S T U V W X Y Z
Credit Card Services Using the Simple Order API | September 2019 523
Index
A B C D E F G H I J K L M N O P Q R S T U V W X Y Z
U W
UATP wallets 506
authorizations 38 Worldpay VAP
captures 61 ARAV 60
card types 37 authorizations 38
credits 78 AVS 91
verbal authorizations 102 balance responses 114
voids 85 captures 61
UCAF card type indicators (CTIs) 130
API fields 358 card types 37
for Mastercard Identity Check 194 credits 78
universal cardholder authentication fields CVNs 99
API fields 358 Electronic Verification 94
for Mastercard Identity Check 194 final authorization indicator 139
full authorization reversals 57
UTC (in authorization reply) 365
installment payments 148
least-cost routing 164
V Mastercard Identity Check 190
verbal authorizations 101 multiple partial captures 72
partial authorizations 106
Visa
recurring payments 212
Bill Payment program 229
report groups 217
Debt Repayments 230
verbal authorizations 102
payment card company 29
Visa Secure 198
Visa Secure response codes 505
voids 85
Visa Secure, described 186
zero amount authorizations 236
Visa Checkout 229
Visa Secure X
described 186
response codes 505 XID
Visa Secure Remote Commerce 229 API field 284
for American Express SafeKey 188, 196
Vital. See TSYS Acquiring Solutions
for JCB J/Secure 203
voids, merchant-initiated 170 for Mastercard Identity Check 195
voidService for ProtectBuy 203
described 85 for Visa Secure 203
requesting 86
required fields 87 Z
zero amount authorizations 231
Credit Card Services Using the Simple Order API | September 2019 524