Get hosted checkout status

When a payment has been created during the hosted checkout session this object will return the details.

Object that contains the action, including the needed data, that you should perform next, like showing instruction, showing the transaction results or redirect to a third party to complete the payment

Action merchants needs to take in the online payment process. Possible values are:

• SHOW_INSTRUCTIONS - The customer needs to be shown payment instruction using the details found in showData. Alternatively the instructions can be rendered by us using the renderingData
• SHOW_TRANSACTION_RESULTS - The customer needs to be shown the transaction results using the details found in showData. Alternatively the instructions can be rendered by us using the renderingData

This property contains the blob with data for the instructions rendering service.

This service will be available at the following endpoint: http(s)://{{merchant specific subdomain}}.{{base MyCheckout hosted payment pages domain}}/instructions/{{merchantId}}/{{clientSessionId}}

This instructions page rendering service accepts the following parameters:

• instructionsRenderingData (required, the content of this property)
• locale (optional, if present overrides default locale, e.g. "en_GB")
• variant (optional, code of a variant, if present overrides default variant, e.g. "100")
• customerId (required for Pix, otherwise optional, the customerId from a client session)

You can offer a link to a customer to see an instructions page for a payment done earlier. Because of the size of the instructionsRenderingData this will need to be set in a web form as a value of a hidden field. Before presenting the link you need to obtain a clientSessionId by creating a session using the S2S API. You will need to use the MyCheckout hosted payment pages domain hosted in the same region as the API domain used for the createClientSession call.

The instructionsRenderingData is a String blob that is presented to you via the Server API as part of the merchantAction (if available, and non-redirect) in the JSON return values for the createPayment call or the getHostedCheckoutStatus call (merchantAction inside createdPaymentOutput when available). You are responsible to store the instructionsRenderingData blob in order to be able to present the instructions page at a later time, when this information might no longer be available through Server API calls.

Array of key value pairs of data that needs to be shown to the customer. This is returned for both the SHOW_INSTRUCTION as well as the SHOW_TRANSACTION_RESULTS actionType.
Note: The returned value for the key BARCODE is a base64 encoded gif image. By prepending 'data:image/gif;base64,' this value can be used as the source of an HTML inline image.

Name of the key or property

Value of the key or property

Indicates whether the customer ticked the "Remember my details for future purchases" checkbox on the MyCheckout hosted payment pages

Object that holds the payment data

Hosted Checkout specific information. Populated if the payment was created on the GlobalCollect platform through a Hosted Checkout.

The ID of the Hosted Checkout Session in which the payment was made.

Using the Configuration Center it is possible to create multiple variations of your MyCheckout payment pages. By specifying a specific variant you can force the use of another variant then the default. This allows you to test out the effect of certain changes to your hosted mandate pages in a controlled manner. Please note that you need to specify the ID of the variant.

Our unique payment transaction identifier.

Object containing payment details

Object containing amount and ISO currency code attributes

Amount in cents and always having 2 decimals

Three-letter ISO currency code representing the currency for the amount

Amount that has been paid

Amount that has been reversed

Object containing the bank transfer payment method details

Object containing the results of the fraud screening

Results from the fraud prevention check. Possible values are:

• accepted - Based on the checks performed the transaction can be accepted
• challenged - Based on the checks performed the transaction should be manually reviewed
• denied - Based on the checks performed the transaction should be rejected
• no-advice - No fraud check was requested/performed
• error - The fraud check resulted in an error and the fraud check was thus not performed

Object containing device fingerprinting details from InAuth

The type of device used by the customer. Example values:

• SMARTPHONE
• PERSONAL_COMPUTER
• TABLET
• WEARABLE_COMPUTER
• GAME_CONSOLE
• SMART_TV
• PDA
• OTHER
• UNKNOWN

This is the device fingerprint value. Based on the amount of data that the device fingerprint collector script was able to collect, this will be a proxy ID for the device used by the customer.

The score calculated on the basis of Anomalies, Velocity, Location, Integrity, List-Based, and Device Reputation. Range of the score is between 0 and 100. A lower value is better.

The true IP address as determined by inAuth. This might be different from the IP address that you are seeing on your side due to the proxy piercing technology deployed by inAuth.

The country of the customer based on the location of the True IP Address determined by inAuth.

This object contains the results of Microsoft Fraud Protection risk assessment. Microsoft collects transaction data points and uses Adaptive AI that continuously learns to protect you against payment fraud, and the device fingerprinting details from the Microsoft Device Fingerprinting service.

Name of the clause within the applied policy that was triggered during the evaluation of this transaction.

The country of the customer determined by Microsoft Device Fingerprinting.

This is the device fingerprint value. Based on the amount of data that the device fingerprint collector script was able to collect, this will be a proxy ID for the device used by the customer.

Result of the Microsoft Fraud Protection check. This contains the normalized fraud score from a scale of 0 to 100. A higher score indicates an increased risk of fraud.

Name of the policy that was applied on during the evaluation of this transaction.

The true IP address as determined by Microsoft Device Fingerprinting.

The type of device used by the customer.

Payment product identifier
Please see payment products for a full overview of possible values.

Object containing the card payment method details

Card Authorization code as returned by the acquirer

Object containing card details

The complete credit/debit card number

The card holder's name on the card.

Expiry date of the card
Format: MMYY

Fraud results contained in the CardFraudResults object

Result of the Address Verification Service checks. Possible values are:

• A - Address (Street) matches, Zip does not
• B - Street address match for international transactions—Postal code not verified due to incompatible formats
• C - Street address and postal code not verified for international transaction due to incompatible formats
• D - Street address and postal code match for international transaction, cardholder name is incorrect
• E - AVS error
• F - Address does match and five digit ZIP code does match (UK only)
• G - Address information is unavailable; international transaction; non-AVS participant
• H - Billing address and postal code match, cardholder name is incorrect (Amex)
• I - Address information not verified for international transaction
• K - Cardholder name matches (Amex)
• L - Cardholder name and postal code match (Amex)
• M - Cardholder name, street address, and postal code match for international transaction
• N - No Match on Address (Street) or Zip
• O - Cardholder name and address match (Amex)
• P - Postal codes match for international transaction—Street address not verified due to incompatible formats
• Q - Billing address matches, cardholder is incorrect (Amex)
• R - Retry, System unavailable or Timed out
• S - Service not supported by issuer
• U - Address information is unavailable
• W - 9 digit Zip matches, Address (Street) does not
• X - Exact AVS Match
• Y - Address (Street) and 5 digit Zip match
• Z - 5 digit Zip matches, Address (Street) does not
• 0 - No service available

Result of the Card Verification Value checks. Possible values are:

• M - CVV check performed and valid value
• N - CVV checked and no match
• P - CVV check not performed, not requested
• S - Cardholder claims no CVV code on card, issuer states CVV-code should be on card
• U - Issuer not certified for CVV2
• Y - Server provider did not respond
• 0 - No service available

Resulting advice of the fraud prevention checks. Possible values are:

• accepted - Based on the checks performed the transaction can be accepted
• challenged - Based on the checks performed the transaction should be manually reviewed
• denied - Based on the checks performed the transaction should be rejected
• no-advice - No fraud check was requested/performed
• error - The fraud check resulted an error. Note that the fraud check was thus not performed.

Results of Fraugster fraud prevention check. Fraugster collects transaction data points such as name, email address, billing, etc. to analyze whether or not the transaction is fraudulent.

Result of the Fraugster check Contains the investigation points used during the evaluation

Result of the Fraugster check Contains the overall Fraud score which is an integer between 0 and 99

Object containing device fingerprinting details from InAuth

The type of device used by the customer. Example values:

• SMARTPHONE
• PERSONAL_COMPUTER
• TABLET
• WEARABLE_COMPUTER
• GAME_CONSOLE
• SMART_TV
• PDA
• OTHER
• UNKNOWN

This is the device fingerprint value. Based on the amount of data that the device fingerprint collector script was able to collect, this will be a proxy ID for the device used by the customer.

The score calculated on the basis of Anomalies, Velocity, Location, Integrity, List-Based, and Device Reputation. Range of the score is between 0 and 100. A lower value is better.

The true IP address as determined by inAuth. This might be different from the IP address that you are seeing on your side due to the proxy piercing technology deployed by inAuth.

The country of the customer based on the location of the True IP Address determined by inAuth.

This object contains the results of Microsoft Fraud Protection risk assessment. Microsoft collects transaction data points and uses Adaptive AI that continuously learns to protect you against payment fraud, and the device fingerprinting details from the Microsoft Device Fingerprinting service.

Name of the clause within the applied policy that was triggered during the evaluation of this transaction.

The country of the customer determined by Microsoft Device Fingerprinting.

This is the device fingerprint value. Based on the amount of data that the device fingerprint collector script was able to collect, this will be a proxy ID for the device used by the customer.

Result of the Microsoft Fraud Protection check. This contains the normalized fraud score from a scale of 0 to 100. A higher score indicates an increased risk of fraud.

Name of the policy that was applied on during the evaluation of this transaction.

The true IP address as determined by Microsoft Device Fingerprinting.

The type of device used by the customer.

Additional response data returned by RetailDecisions

Result of the fraud service. Provides additional information about the fraud result

Returns the raw score of the neural

Result of the fraud service Represent sets of fraud rules returned during the evaluation of the transaction

The unique scheme transactionId of the initial transaction that was performed with SCA.
Should be stored by the merchant to allow it to be submitted in future transactions.

Indicates if a network token was used during the payment.

Payment product identifier
Please see payment products for a full overview of possible values.

The unique scheme transactionId of this transaction.
Should be stored by the merchant to allow it to be submitted in future transactions. Use this value in case the initialSchemeTransactionId property is empty.

3D Secure results object

Identifier of the authenticated transaction at the ACS/Issuer

Exemption code from Carte Bancaire (130) (unknown possible values so far -free format)

The amount for which this transaction has been authenticated.

Amount in cents and always having 2 decimals

Three-letter ISO currency code representing the currency for the amount

CAVV or AVV result indicating authentication validation value

The 3-D Secure Directory Server transaction ID that is used for the 3D Authentication

Indicates Authentication validation results returned after AuthenticationValidation

Object containing exemption output

Type of strong customer authentication (SCA) exemption that was raised towards the acquirer for this transaction.

The request exemption could not be granted. The reason why is returned in this property.

Type of strong customer authentication (SCA) exemption requested by you for this transaction.

Global score calculated by the Carte Bancaire (130) Scoring platform. Possible values from 0 to 99

Object containing 3-D Secure in-app SDK data

Universally unique transaction identifier assigned by the 3-D Secure SDK to identify this transaction.

Object containing data regarding the 3-D Secure authentication

The ACS Transaction ID for a prior 3-D Secure authenticated transaction (for example, the first recurring transaction that was authenticated with the customer)

Method of authentication used for this transaction. Possible values:

• frictionless = The authentication went without a challenge
• challenged = Cardholder was challenged
• avs-verified = The authentication was verified by AVS
• other = Another issuer method was used to authenticate this transaction

Timestamp in UTC (YYYYMMDDHHmm) of the 3-D Secure authentication of this transaction

The 3-D Secure version used for the authentication.

This property is used in the communication with the acquirer

The 3-D Secure Server transaction ID that is used for the 3-D Secure version 2 Authentication.

Transaction ID for the Authentication

If a token was used for or created during the payment, then the ID of that token.

Object containing the cash payment method details

Object containing the results of the fraud screening

Results from the fraud prevention check. Possible values are:

• accepted - Based on the checks performed the transaction can be accepted
• challenged - Based on the checks performed the transaction should be manually reviewed
• denied - Based on the checks performed the transaction should be rejected
• no-advice - No fraud check was requested/performed
• error - The fraud check resulted in an error and the fraud check was thus not performed

Object containing device fingerprinting details from InAuth

The type of device used by the customer. Example values:

• SMARTPHONE
• PERSONAL_COMPUTER
• TABLET
• WEARABLE_COMPUTER
• GAME_CONSOLE
• SMART_TV
• PDA
• OTHER
• UNKNOWN

This is the device fingerprint value. Based on the amount of data that the device fingerprint collector script was able to collect, this will be a proxy ID for the device used by the customer.

The score calculated on the basis of Anomalies, Velocity, Location, Integrity, List-Based, and Device Reputation. Range of the score is between 0 and 100. A lower value is better.

The true IP address as determined by inAuth. This might be different from the IP address that you are seeing on your side due to the proxy piercing technology deployed by inAuth.

The country of the customer based on the location of the True IP Address determined by inAuth.

This object contains the results of Microsoft Fraud Protection risk assessment. Microsoft collects transaction data points and uses Adaptive AI that continuously learns to protect you against payment fraud, and the device fingerprinting details from the Microsoft Device Fingerprinting service.

Name of the clause within the applied policy that was triggered during the evaluation of this transaction.

The country of the customer determined by Microsoft Device Fingerprinting.

This is the device fingerprint value. Based on the amount of data that the device fingerprint collector script was able to collect, this will be a proxy ID for the device used by the customer.

Result of the Microsoft Fraud Protection check. This contains the normalized fraud score from a scale of 0 to 100. A higher score indicates an increased risk of fraud.

Name of the policy that was applied on during the evaluation of this transaction.

The true IP address as determined by Microsoft Device Fingerprinting.

The type of device used by the customer.

Payment product identifier
Please see payment products for a full overview of possible values.

Object containing the non SEPA direct debit payment method details

Object containing the results of the fraud screening

Results from the fraud prevention check. Possible values are:

• accepted - Based on the checks performed the transaction can be accepted
• challenged - Based on the checks performed the transaction should be manually reviewed
• denied - Based on the checks performed the transaction should be rejected
• no-advice - No fraud check was requested/performed
• error - The fraud check resulted in an error and the fraud check was thus not performed

Object containing device fingerprinting details from InAuth

The type of device used by the customer. Example values:

• SMARTPHONE
• PERSONAL_COMPUTER
• TABLET
• WEARABLE_COMPUTER
• GAME_CONSOLE
• SMART_TV
• PDA
• OTHER
• UNKNOWN

This is the device fingerprint value. Based on the amount of data that the device fingerprint collector script was able to collect, this will be a proxy ID for the device used by the customer.

The score calculated on the basis of Anomalies, Velocity, Location, Integrity, List-Based, and Device Reputation. Range of the score is between 0 and 100. A lower value is better.

The true IP address as determined by inAuth. This might be different from the IP address that you are seeing on your side due to the proxy piercing technology deployed by inAuth.

The country of the customer based on the location of the True IP Address determined by inAuth.

This object contains the results of Microsoft Fraud Protection risk assessment. Microsoft collects transaction data points and uses Adaptive AI that continuously learns to protect you against payment fraud, and the device fingerprinting details from the Microsoft Device Fingerprinting service.

Name of the clause within the applied policy that was triggered during the evaluation of this transaction.

The country of the customer determined by Microsoft Device Fingerprinting.

This is the device fingerprint value. Based on the amount of data that the device fingerprint collector script was able to collect, this will be a proxy ID for the device used by the customer.

Result of the Microsoft Fraud Protection check. This contains the normalized fraud score from a scale of 0 to 100. A higher score indicates an increased risk of fraud.

Name of the policy that was applied on during the evaluation of this transaction.

The true IP address as determined by Microsoft Device Fingerprinting.

The type of device used by the customer.

Payment product identifier
Please see payment products for a full overview of possible values.

Object containing the e-invoice payment method details

Object containing the results of the fraud screening

Results from the fraud prevention check. Possible values are:

• accepted - Based on the checks performed the transaction can be accepted
• challenged - Based on the checks performed the transaction should be manually reviewed
• denied - Based on the checks performed the transaction should be rejected
• no-advice - No fraud check was requested/performed
• error - The fraud check resulted in an error and the fraud check was thus not performed

Object containing device fingerprinting details from InAuth

The type of device used by the customer. Example values:

• SMARTPHONE
• PERSONAL_COMPUTER
• TABLET
• WEARABLE_COMPUTER
• GAME_CONSOLE
• SMART_TV
• PDA
• OTHER
• UNKNOWN

This is the device fingerprint value. Based on the amount of data that the device fingerprint collector script was able to collect, this will be a proxy ID for the device used by the customer.

The score calculated on the basis of Anomalies, Velocity, Location, Integrity, List-Based, and Device Reputation. Range of the score is between 0 and 100. A lower value is better.

The true IP address as determined by inAuth. This might be different from the IP address that you are seeing on your side due to the proxy piercing technology deployed by inAuth.

The country of the customer based on the location of the True IP Address determined by inAuth.

This object contains the results of Microsoft Fraud Protection risk assessment. Microsoft collects transaction data points and uses Adaptive AI that continuously learns to protect you against payment fraud, and the device fingerprinting details from the Microsoft Device Fingerprinting service.

Name of the clause within the applied policy that was triggered during the evaluation of this transaction.

The country of the customer determined by Microsoft Device Fingerprinting.

This is the device fingerprint value. Based on the amount of data that the device fingerprint collector script was able to collect, this will be a proxy ID for the device used by the customer.

Result of the Microsoft Fraud Protection check. This contains the normalized fraud score from a scale of 0 to 100. A higher score indicates an increased risk of fraud.

Name of the policy that was applied on during the evaluation of this transaction.

The true IP address as determined by Microsoft Device Fingerprinting.

The type of device used by the customer.

AfterPay Installments (payment product 9000) specific details

The ID of the installment plan used for the payment.

Payment product identifier
Please see payment products for a full overview of possible values.

Object containing the invoice payment method details

Object containing the results of the fraud screening

Results from the fraud prevention check. Possible values are:

• accepted - Based on the checks performed the transaction can be accepted
• challenged - Based on the checks performed the transaction should be manually reviewed
• denied - Based on the checks performed the transaction should be rejected
• no-advice - No fraud check was requested/performed
• error - The fraud check resulted in an error and the fraud check was thus not performed

Object containing device fingerprinting details from InAuth

The type of device used by the customer. Example values:

• SMARTPHONE
• PERSONAL_COMPUTER
• TABLET
• WEARABLE_COMPUTER
• GAME_CONSOLE
• SMART_TV
• PDA
• OTHER
• UNKNOWN

This is the device fingerprint value. Based on the amount of data that the device fingerprint collector script was able to collect, this will be a proxy ID for the device used by the customer.

The score calculated on the basis of Anomalies, Velocity, Location, Integrity, List-Based, and Device Reputation. Range of the score is between 0 and 100. A lower value is better.

The true IP address as determined by inAuth. This might be different from the IP address that you are seeing on your side due to the proxy piercing technology deployed by inAuth.

The country of the customer based on the location of the True IP Address determined by inAuth.

This object contains the results of Microsoft Fraud Protection risk assessment. Microsoft collects transaction data points and uses Adaptive AI that continuously learns to protect you against payment fraud, and the device fingerprinting details from the Microsoft Device Fingerprinting service.

Name of the clause within the applied policy that was triggered during the evaluation of this transaction.

The country of the customer determined by Microsoft Device Fingerprinting.

This is the device fingerprint value. Based on the amount of data that the device fingerprint collector script was able to collect, this will be a proxy ID for the device used by the customer.

Result of the Microsoft Fraud Protection check. This contains the normalized fraud score from a scale of 0 to 100. A higher score indicates an increased risk of fraud.

Name of the policy that was applied on during the evaluation of this transaction.

The true IP address as determined by Microsoft Device Fingerprinting.

The type of device used by the customer.

Payment product identifier
Please see payment products for a full overview of possible values.

Object containing the mobile payment method details

Card Authorization code as returned by the acquirer

Fraud results contained in the CardFraudResults object

Result of the Address Verification Service checks. Possible values are:

• A - Address (Street) matches, Zip does not
• B - Street address match for international transactions—Postal code not verified due to incompatible formats
• C - Street address and postal code not verified for international transaction due to incompatible formats
• D - Street address and postal code match for international transaction, cardholder name is incorrect
• E - AVS error
• F - Address does match and five digit ZIP code does match (UK only)
• G - Address information is unavailable; international transaction; non-AVS participant
• H - Billing address and postal code match, cardholder name is incorrect (Amex)
• I - Address information not verified for international transaction
• K - Cardholder name matches (Amex)
• L - Cardholder name and postal code match (Amex)
• M - Cardholder name, street address, and postal code match for international transaction
• N - No Match on Address (Street) or Zip
• O - Cardholder name and address match (Amex)
• P - Postal codes match for international transaction—Street address not verified due to incompatible formats
• Q - Billing address matches, cardholder is incorrect (Amex)
• R - Retry, System unavailable or Timed out
• S - Service not supported by issuer
• U - Address information is unavailable
• W - 9 digit Zip matches, Address (Street) does not
• X - Exact AVS Match
• Y - Address (Street) and 5 digit Zip match
• Z - 5 digit Zip matches, Address (Street) does not
• 0 - No service available

Result of the Card Verification Value checks. Possible values are:

• M - CVV check performed and valid value
• N - CVV checked and no match
• P - CVV check not performed, not requested
• S - Cardholder claims no CVV code on card, issuer states CVV-code should be on card
• U - Issuer not certified for CVV2
• Y - Server provider did not respond
• 0 - No service available

Resulting advice of the fraud prevention checks. Possible values are:

• accepted - Based on the checks performed the transaction can be accepted
• challenged - Based on the checks performed the transaction should be manually reviewed
• denied - Based on the checks performed the transaction should be rejected
• no-advice - No fraud check was requested/performed
• error - The fraud check resulted an error. Note that the fraud check was thus not performed.

Results of Fraugster fraud prevention check. Fraugster collects transaction data points such as name, email address, billing, etc. to analyze whether or not the transaction is fraudulent.

Result of the Fraugster check Contains the investigation points used during the evaluation

Result of the Fraugster check Contains the overall Fraud score which is an integer between 0 and 99

Object containing device fingerprinting details from InAuth

The type of device used by the customer. Example values:

• SMARTPHONE
• PERSONAL_COMPUTER
• TABLET
• WEARABLE_COMPUTER
• GAME_CONSOLE
• SMART_TV
• PDA
• OTHER
• UNKNOWN

This is the device fingerprint value. Based on the amount of data that the device fingerprint collector script was able to collect, this will be a proxy ID for the device used by the customer.

The score calculated on the basis of Anomalies, Velocity, Location, Integrity, List-Based, and Device Reputation. Range of the score is between 0 and 100. A lower value is better.

The true IP address as determined by inAuth. This might be different from the IP address that you are seeing on your side due to the proxy piercing technology deployed by inAuth.

The country of the customer based on the location of the True IP Address determined by inAuth.

This object contains the results of Microsoft Fraud Protection risk assessment. Microsoft collects transaction data points and uses Adaptive AI that continuously learns to protect you against payment fraud, and the device fingerprinting details from the Microsoft Device Fingerprinting service.

Name of the clause within the applied policy that was triggered during the evaluation of this transaction.

The country of the customer determined by Microsoft Device Fingerprinting.

This is the device fingerprint value. Based on the amount of data that the device fingerprint collector script was able to collect, this will be a proxy ID for the device used by the customer.

Result of the Microsoft Fraud Protection check. This contains the normalized fraud score from a scale of 0 to 100. A higher score indicates an increased risk of fraud.

Name of the policy that was applied on during the evaluation of this transaction.

The true IP address as determined by Microsoft Device Fingerprinting.

The type of device used by the customer.

Additional response data returned by RetailDecisions

Result of the fraud service. Provides additional information about the fraud result

Returns the raw score of the neural

Result of the fraud service Represent sets of fraud rules returned during the evaluation of the transaction

The network that was used for the refund

Object containing payment details

The obfuscated DPAN. Only the last four digits are visible.

Expiry date of the tokenized card
Format: MMYY

Payment product identifier
Please see payment products for a full overview of possible values.

3D Secure results object

Identifier of the authenticated transaction at the ACS/Issuer

Exemption code from Carte Bancaire (130) (unknown possible values so far -free format)

The amount for which this transaction has been authenticated.

Amount in cents and always having 2 decimals

Three-letter ISO currency code representing the currency for the amount

CAVV or AVV result indicating authentication validation value

The 3-D Secure Directory Server transaction ID that is used for the 3D Authentication

Indicates Authentication validation results returned after AuthenticationValidation

Object containing exemption output

Type of strong customer authentication (SCA) exemption that was raised towards the acquirer for this transaction.

The request exemption could not be granted. The reason why is returned in this property.

Type of strong customer authentication (SCA) exemption requested by you for this transaction.

Global score calculated by the Carte Bancaire (130) Scoring platform. Possible values from 0 to 99

Object containing 3-D Secure in-app SDK data

Universally unique transaction identifier assigned by the 3-D Secure SDK to identify this transaction.

Object containing data regarding the 3-D Secure authentication

The ACS Transaction ID for a prior 3-D Secure authenticated transaction (for example, the first recurring transaction that was authenticated with the customer)

Method of authentication used for this transaction. Possible values:

• frictionless = The authentication went without a challenge
• challenged = Cardholder was challenged
• avs-verified = The authentication was verified by AVS
• other = Another issuer method was used to authenticate this transaction

Timestamp in UTC (YYYYMMDDHHmm) of the 3-D Secure authentication of this transaction

The 3-D Secure version used for the authentication.

This property is used in the communication with the acquirer

The 3-D Secure Server transaction ID that is used for the 3-D Secure version 2 Authentication.

Transaction ID for the Authentication

Object containing the redirect payment product details

Object that holds the Basic Bank Account Number (BBAN) data

Name of the account holder

Bank account number

Bank code

Name of the bank

Branch code

Bank check digit

ISO 3166-1 alpha-2 country code of the country where the bank account is held For UK payouts this value is automatically set to GB as only payouts to UK accounts are supported.

Object containing account holder name and IBAN information

Name in which the account is held.

The IBAN is the International Bank Account Number. It is an internationally agreed format for the BBAN and includes the ISO country code and two check digits.

The BIC is the Business Identifier Code, also known as SWIFT or Bank Identifier code. It is a code with an internationally agreed format to Identify a specific bank or even branch. The BIC contains 8 or 11 positions: the first 4 contain the bank code, followed by the country code and location code.

Object containing the results of the fraud screening

Results from the fraud prevention check. Possible values are:

• accepted - Based on the checks performed the transaction can be accepted
• challenged - Based on the checks performed the transaction should be manually reviewed
• denied - Based on the checks performed the transaction should be rejected
• no-advice - No fraud check was requested/performed
• error - The fraud check resulted in an error and the fraud check was thus not performed

Object containing device fingerprinting details from InAuth

The type of device used by the customer. Example values:

• SMARTPHONE
• PERSONAL_COMPUTER
• TABLET
• WEARABLE_COMPUTER
• GAME_CONSOLE
• SMART_TV
• PDA
• OTHER
• UNKNOWN

This is the device fingerprint value. Based on the amount of data that the device fingerprint collector script was able to collect, this will be a proxy ID for the device used by the customer.

The score calculated on the basis of Anomalies, Velocity, Location, Integrity, List-Based, and Device Reputation. Range of the score is between 0 and 100. A lower value is better.

The true IP address as determined by inAuth. This might be different from the IP address that you are seeing on your side due to the proxy piercing technology deployed by inAuth.

The country of the customer based on the location of the True IP Address determined by inAuth.

This object contains the results of Microsoft Fraud Protection risk assessment. Microsoft collects transaction data points and uses Adaptive AI that continuously learns to protect you against payment fraud, and the device fingerprinting details from the Microsoft Device Fingerprinting service.

Name of the clause within the applied policy that was triggered during the evaluation of this transaction.

The country of the customer determined by Microsoft Device Fingerprinting.

This is the device fingerprint value. Based on the amount of data that the device fingerprint collector script was able to collect, this will be a proxy ID for the device used by the customer.

Result of the Microsoft Fraud Protection check. This contains the normalized fraud score from a scale of 0 to 100. A higher score indicates an increased risk of fraud.

Name of the policy that was applied on during the evaluation of this transaction.

The true IP address as determined by Microsoft Device Fingerprinting.

The type of device used by the customer.

PostFinance Card (payment product 3201) specific details

Object containing card details

The complete credit/debit card number

The card holder's name on the card.

Expiry date of the card
Format: MMYY

Trustly (payment product 806) specific details

Object containing the billing address details of the customer

Additional address information. The additionalInfo is truncated after 10 characters for payments, refunds or payouts that are processed by the WL Online Payment Acceptance platform

City
Note: For payments with product 1503 the maximum length is not 40 but 20.

ISO 3166-1 alpha-2 country code

House number. The houseNumber is truncated after 10 characters for payments, refunds or payouts that are processed by the WL Online Payment Acceptance platform

Full name of the state or province

ISO 3166-2 alpha-3 state code
Notes:

• The maximum length for 3-D Secure version 2 is AN3 for payments that are processed by the GlobalCollect platform
• The maximum length for paymentProductId 1503 (Boleto) is AN2 for payments that are processed by the GlobalCollect platform
• The maximum length is 3 for payments that are processed by the WL Online Payment Acceptance platform

Streetname

Zip code
Note: For payments with product 1503 the maximum length is not 10 but 8.

Object containing the account details

The last digits of the account number

The name of the bank

The country of the clearing house

The ID number of the account holder

Sofort (payment product 836) specific details

Indicates if SofortBank could estabilish if the transaction could successfully be processed.

• 0 - You should wait for the transaction to be reported as paid before shipping any goods.
• 1 - You can ship the goods. In case the transaction is not reported as paid you can initiate a claims process with SofortBank.

PayPal (payment product 840) specific details

Object containing the billing address details of the customer

Additional address information. The additionalInfo is truncated after 10 characters for payments, refunds or payouts that are processed by the WL Online Payment Acceptance platform

City
Note: For payments with product 1503 the maximum length is not 40 but 20.

ISO 3166-1 alpha-2 country code

House number. The houseNumber is truncated after 10 characters for payments, refunds or payouts that are processed by the WL Online Payment Acceptance platform

Full name of the state or province

ISO 3166-2 alpha-3 state code
Notes:

• The maximum length for 3-D Secure version 2 is AN3 for payments that are processed by the GlobalCollect platform
• The maximum length for paymentProductId 1503 (Boleto) is AN2 for payments that are processed by the GlobalCollect platform
• The maximum length is 3 for payments that are processed by the WL Online Payment Acceptance platform

Streetname

Zip code
Note: For payments with product 1503 the maximum length is not 10 but 8.

Object containing the details of the PayPal account

Username with which the PayPal account holder has registered at PayPal

Identification of the PayPal recurring billing agreement

Name of the company in case the PayPal account is owned by a business

The phone number of the PayPal account holder

Country where the PayPal account is located

Status of the PayPal account.
Possible values are:

• verified - PayPal has verified the funding means for this account
• unverified - PayPal has not verified the funding means for this account

Status of the customer's shipping address as registered by PayPal
Possible values are:

• none - Status is unknown at PayPal
• confirmed - The address has been confirmed
• unconfirmed - The address has not been confirmed

First name of the PayPal account holder

The unique identifier of a PayPal account and will never change in the life cycle of a PayPal account

Surname of the PayPal account holder

Object containing the address details of the customer

Additional address information. The additionalInfo is truncated after 10 characters for payments, refunds or payouts that are processed by the WL Online Payment Acceptance platform

City
Note: For payments with product 1503 the maximum length is not 40 but 20.

ISO 3166-1 alpha-2 country code

House number. The houseNumber is truncated after 10 characters for payments, refunds or payouts that are processed by the WL Online Payment Acceptance platform

Full name of the state or province

ISO 3166-2 alpha-3 state code
Notes:

• The maximum length for 3-D Secure version 2 is AN3 for payments that are processed by the GlobalCollect platform
• The maximum length for paymentProductId 1503 (Boleto) is AN2 for payments that are processed by the GlobalCollect platform
• The maximum length is 3 for payments that are processed by the WL Online Payment Acceptance platform

Streetname

Zip code
Note: For payments with product 1503 the maximum length is not 10 but 8.

Protection Eligibility data of the PayPal customer

Possible values:

• Eligible
• PartiallyEligible
• Ineligible

Possible values:

• ItemNotReceivedEligible
• UnauthorizedPaymentEligible
• Ineligible

Payment product identifier
Please see payment products for a full overview of possible values.

ID of the token. This property is populated when the payment was done with a token or when the payment was tokenized.

Object containing the SEPA direct debit details

Object containing the results of the fraud screening

Results from the fraud prevention check. Possible values are:

• accepted - Based on the checks performed the transaction can be accepted
• challenged - Based on the checks performed the transaction should be manually reviewed
• denied - Based on the checks performed the transaction should be rejected
• no-advice - No fraud check was requested/performed
• error - The fraud check resulted in an error and the fraud check was thus not performed

Object containing device fingerprinting details from InAuth

The type of device used by the customer. Example values:

• SMARTPHONE
• PERSONAL_COMPUTER
• TABLET
• WEARABLE_COMPUTER
• GAME_CONSOLE
• SMART_TV
• PDA
• OTHER
• UNKNOWN

This is the device fingerprint value. Based on the amount of data that the device fingerprint collector script was able to collect, this will be a proxy ID for the device used by the customer.

The score calculated on the basis of Anomalies, Velocity, Location, Integrity, List-Based, and Device Reputation. Range of the score is between 0 and 100. A lower value is better.

The true IP address as determined by inAuth. This might be different from the IP address that you are seeing on your side due to the proxy piercing technology deployed by inAuth.

The country of the customer based on the location of the True IP Address determined by inAuth.

This object contains the results of Microsoft Fraud Protection risk assessment. Microsoft collects transaction data points and uses Adaptive AI that continuously learns to protect you against payment fraud, and the device fingerprinting details from the Microsoft Device Fingerprinting service.

Name of the clause within the applied policy that was triggered during the evaluation of this transaction.

The country of the customer determined by Microsoft Device Fingerprinting.

This is the device fingerprint value. Based on the amount of data that the device fingerprint collector script was able to collect, this will be a proxy ID for the device used by the customer.

Result of the Microsoft Fraud Protection check. This contains the normalized fraud score from a scale of 0 to 100. A higher score indicates an increased risk of fraud.

Name of the policy that was applied on during the evaluation of this transaction.

The true IP address as determined by Microsoft Device Fingerprinting.

The type of device used by the customer.

Output that is SEPA Direct Debit specific (i.e. the used mandate)

Unique reference to a Mandate

Payment product identifier
Please see payment products for a full overview of possible values.

ID of the token. This property is populated for the GlobalCollect payment platform when the payment was done with a token or when the payment was tokenized.

Payment method identifier used by the our payment engine with the following possible values:

• bankRefund
• bankTransfer
• card
• cash
• directDebit
• eInvoice
• invoice
• redirect

Object that holds all reference properties that are linked to this transaction

Your order ID for this transaction that is also returned in our report files

Your unique reference of the transaction that is also returned in our report files. This is almost always used for your reconciliation of our report files.

Payment Reference generated by WebCollect

Provides an additional means of reconciliation for Gateway merchants

Provides an additional means of reconciliation, this is the MerchantId used at the provider

Provides an additional means of reconciliation for Gateway merchants

When you did not supply a merchantReference for your payment, you need to fill this property with the reference of the original payment when you want to refund it

The reason description given for the reversedAmount property.

Current high-level status of the payment in a human-readable form. Possible values are :

• ACCOUNT_VERIFIED - The account has been verified using a validation services like 0$ auth
• CREATED - The transaction has been created. This is the initial state once a new payment is created.
• REDIRECTED - The customer has been redirected to a 3rd party to complete the authentication/payment
• PENDING_PAYMENT - Instructions have been provided and we are now waiting for the money to come in
• PENDING_FRAUD_APPROVAL - The transaction has been marked for manual review after an automatic fraud screening
• PENDING_APPROVAL - The transaction is awaiting approval from you to proceed with the capturing of the funds
• PENDING_COMPLETION - The transaction needs to be completed.
• PENDING_CAPTURE - The transaction is waiting for you to request one or more captures of the funds.
• REJECTED - The transaction has been rejected
• AUTHORIZATION_REQUESTED - we have requested an authorization against an asynchronous system and is awaiting its response
• CAPTURE_REQUESTED - The transaction is in the queue to be captured
• CAPTURED - The transaction has been captured and we have received online confirmation
• PAID - We have matched the incoming funds to the transaction
• CANCELLED - You have cancelled the transaction
• REJECTED_CAPTURE - We or one of our downstream acquirers/providers have rejected the capture request
• REVERSED - The transaction has been reversed
• CHARGEBACK_NOTIFICATION - We have received a notification of chargeback and this status informs you that your account will be debited for a particular transaction
• CHARGEBACKED - The transaction has been chargebacked
• REFUNDED - The transaction has been refunded

Please see Statuses for a full overview of possible values.

This object has the numeric representation of the current payment status, timestamp of last status change and performable action on the current payment resource. In case of failed payments and negative scenarios, detailed error information is listed.

Custom object contains the set of errors

Contains detailed information on one single error.

Category the error belongs to. The category should give an indication of the type of error you are dealing with. Possible values:

• CONNECT_PLATFORM_ERROR - indicating that a functional error has occurred in the Connect platform.
• PAYMENT_PLATFORM_ERROR - indicating that a functional error has occurred in the Payment platform.
• IO_ERROR - indicating that a technical error has occurred within the Connect platform or between Connect and any of the payment platforms or third party systems.

Error code

HTTP status code for this error that can be used to determine the type of error

ID of the error. This is a short human-readable message that briefly describes the error.

Human-readable error message that is not meant to be relayed to customer as it might tip off people who are trying to commit fraud

Returned only if the error relates to a value that was missing or incorrect.
Contains a location path to the value as a JSonata query.
Some common examples:

• a.b selects the value of property b of root property a,
• a[1] selects the first element of the array in root property a,
• a[b='some value'] selects all elements of the array in root property a that have a property b with value 'some value'.

ID of the request that can be used for debugging purposes

Indicates if the transaction has been authorized

• true
• false

Flag indicating if the payment can be cancelled

• true
• false

Flag indicating if the payment can be refunded

• true
• false

Flag indicating whether a rejected payment may be retried by the merchant without incurring a fee

• true
• false

This is the raw response returned by the acquirer. This property contains unprocessed data directly returned by the acquirer. It's recommended for data analysis only due to its dynamic nature, which may undergo future changes.

Name of the key or property