Reply
Highlighted
Member
Posts: 2
Registered: ‎12-19-2019

Invalid billing address in Credit Card Authorization resulting in approved transaction

Hello,

 

My team and I are trying to use https://developer.authorize.net/api/reference/#payment-transactions-authorize-a-credit-card to authorize a credit card (but not charge it).  For context we're implementing the PHP SDK in a custom Drupal 7 module. 

After our initial sandbox tests we switched over to the live API. However, using the live API I am a getting successful transaction response regardless of whether or not I use the correct billing address with the credit card number I am testing with. Shouldn't we be getting a response of 2 (This transaction has been declined.) rather than a response of 1 (This transaction has been approved)?

Also in my email notification after each test I'm getting some weird results:

Slightly incorrect version of my real billing address - Address Verification : Street Address: Match -- First 5 Digits of Zip: Match

 

A previous home address never used for the card - Address Verification : Street Address: Match -- First 5 Digits of Zip: Match

Address of a random restaurant - Address Verification : Street Address: No Match -- First 5 Digits of Zip: Match

Am I misunderstanding how the Credit Card Authorization API works? All we want to do is verify that a credit card number matches the provided billing address but not charge a card. We're also not looking to create a customer profile if that matters. 

Thank you so much for any help you can offer!

Highlighted
Member
Posts: 2
Registered: ‎12-19-2019

Re: Invalid billing address in Credit Card Authorization resulting in approved transaction

Update:

I'm a little embarassed but I wanted to reply with the solution to this issue after more carefully reading the docs https://developer.authorize.net/api/reference/#payment-transactions-authorize-a-credit-card

We were able to use the avsResultCode https://www.dropbox.com/s/kx5k3jn5vj18ng1/Screenshot%202019-12-24%2009.56.45.png?dl=0 to verify that both the street address AND the zip code match so if anyone wants to do the same thats the data you need to check against.