Virtual Terminal User Guide

Payment solutions for online commerce Virtual Terminal User Guide Copyright PayPoint.net 2010 This document contains the proprietary information of PayPoint.net and may not be reproduced in any form or disclosed to any third party without the expressed written permission of a duly authorised representative of PayPoint.net Limited. Registered in England No: 3539217. VAT Reg. No: 680 1343 55

PayPoint.net Virtual Terminal User Guide v1.1 31st August 2010 Table of Contents 1 Introduction...3 1.1 Signing Up...3 1.2 SECNet News...3 2 Manual Payments Step-by-Step...3 2.1 Transaction Details...3 2.2 Card Details...3 2.3 Billing Address...4 2.4 Schedule Additional Transactions...4 2.5 Options (Advanced)...4 3 Transaction Manager...4 3.1 Refund Transactions...4 3.2 Repeat Transactions...5 4 Account Options...5 4.1 CV2-AVS Options...5 5 User...6 5.1 Adding New Users...6 5.2 Restricting User Actions...6 5.3 Auditing User Activity...6 Table of Figures Figure 1:Successful Transaction...4 Figure 2:Failed Transaction...4

1 Introduction 1.1 Signing Up After choosing the Virtual Terminal Package, you will be sent an email inviting you to become a user of SECNet, which is where the Manual Payments page is located. The e-mail will contain a temporary (one-time only) password to allow you to log in for the first time. You will need to change the password as soon as you have logged in successfully. Your new password should contain: A minimum of eight characters A maximum of twelve characters At least one upper case letter At least one lower case letter At least one punctuation mark At least one digit Please remember to change your password at least once every 90 days, or it will expire and your user account will be locked. If this does happen, you can use the 'Forgotten or Expired Password' link on the Merchant Login page to reset it. 1.2 SECNet News On the Home page of SECNet, you can see the latest few items of News. Please keep an eye on this news; it could be important. 2 Manual Payments Step-by-Step Click Transaction from the top menu and then Manual Payments on the left hand side of the screen. 2.1 Transaction Details Order number can be anything you like to uniquely identify this transaction, or you can choose Auto Fill to automatically generate an ID. Please be aware that spaces in order numbers will be replaced with underscores. While most characters are acceptable, it is best to stick to letters, numbers and the underscore as special characters may cause surprising behaviours. The + symbol, for example will be stripped out. Usage type in most cases can be left as Mail Order / Telephone Order. Currency should generally be left as GBP unless you have spoken to your bank about accepting other currencies. This can then be set to which ever currencies are enabled on your account. Amount is the total you would like to charge the customer. It should be to two decimal places, as in pounds and pence. If you tick the enter order details box, then you can enter individual product information which will be stored on PayPoint.net's servers for you to look at later. 2.2 Card Details The next step is to enter the card holder's name and choose the card type from the drop down list. Now enter the card number the customer has provided which is between 13 and 19 digits long depending on the card. If the card has a start date, please enter it. This is usually only for debit cards and can be left blank for credit cards. The card's expiry date is entered next and is mandatory for all cards. The CV2 number is the 3 digit number on the back of the card, or the extra 4 digits on the front of American Express cards. While this is not absolutely mandatory for MOTO transactions, please note that your acquiring bank (The provider of your Internet Merchant Number) may impose an extra charge for transactions where this is missing; they are counted as 'nonsecure'. When your account is first set-up, CV2 is required for all transactions, but you can over ride this using the CV2AVS settings. Nb. See the Account Options section for CV2 settings. If the card has an issue number, please enter this into the Issue Number box. This only applies to debit cards.

2.3 Billing Address It is a good idea to enter the billing address if you have it. This will be stored in our database and displayed in the Transaction Manager. Nb. You can check the first line of the billing address and the postcode using the Address Verification Service (UK addresses only). See the Account Options section for AVS settings. The next stage is to enter the shipping address if it is different to the billing address. Simply untick the appropriate box and enter the relevant details. Completing the billing and shipping addresses will refine the accuracy of the 3rd man scoring. 2.4 Schedule Additional Transactions If you are planning on Scheduling a transaction, you can enter the details in the Scheduled Transactions section. From here you can specify the date to take first scheduled payment. This date should be in the future, eg. next week or month. Nb. When you click the 'submit' button, the card will be charged. The scheduled payment will then begin on the date specified. You can then choose the period which specifies how often this payment should be taken. Number of payments controls how many times the payment should be taken. You can use -1 to have the payment continue indefinitely. Finally, the amount specifies how much the customer is charged on each scheduled transaction. Please note that the amount the card is to be charged initially is entered in the Transaction Details section; see above. So you could charge the customer 10 initially and then have a recurring payment for say 5. 2.5 Options (Advanced) The options box is generally left blank but you can specify specific options if your PayPoint.net account supports them. Now you can click submit and wait for the transaction to be Authorised or Declined by the bank. The success or failure of your transaction is indicated by a message similar to these; Figure 1: Successful Transaction Transaction successful. Response / bank auth code: 9999 Figure 2: Failed Transaction Transaction not successful. Failure Message text available. (Code: N) Failure Message: Declined 3 Transaction Manager From within SECNet, click 'Transaction' on the top menu, and you can use the Transaction Manager to generate a report. You could at this point enter the transaction ID or a specific date for the transaction you wish to locate. Make sure you press 'Display on Screen' to view the transaction(s). 3.1 Refund Transactions You can refund transactions from the Transaction Manager. Follow the directions above, and you should then see the transaction or list of transactions to refund. If you click on one of the transactions, it will open out and show you more information. At the bottom of this you will find a number of links, one of them is 'refund'.

Simply click this link and a new window will open allowing you to perform a complete or partial refund. Alternatively, if you know the Transaction ID (Order Number) of the transaction you wish to refund, you could select 'Refund Transaction' from the grey menu on the left. You will then be asked for three parameters; Transaction ID, New Transaction ID and Amount. The Transaction ID relates to the number and/or letter combination associated with the transaction you wish to refund. The New Transaction ID is best set to something like the original transaction ID with REFUND added to it. This makes it easy to identify later on. It can of course be any number and letter combination you like. The Amount box should be set to the amount you wish to refund the customer. This can be the whole amount or you can perform a number of partial refunds. All you need to do now is press Process Refund! 3.2 Repeat Transactions Repeat transactions allow you to bill regular customers again, without having to store their card details yourself. You can perform Repeat Transactions from within the Transaction Manager report in a similar way to Refunds, or select Repeat Transaction from the left hand menu. You will be presented with 6 fields: Transaction ID* New Transaction ID* Amount of New Transaction* New Expiry Date(If Applicable) New Order Lines(If Applicable) Options(If Applicable) You should set Transaction ID to the unique ID of the transaction you wish to repeat. New transaction ID can be any combination of letters and numbers you like to uniquely identify the transaction once it has been repeated. It is advised that you call this the original transaction ID with REPEAT after it to help identify the transaction. Amount of new transaction specifies how much you would like to authorise. This can be any amount you wish to charge the customer. New expiry date should only be used if the original expiry date of the card has been reached, otherwise it can be left blank. New order lines is optional and can be used to add product information. Options is another optional field and can be supplied with options if they are available in your account. In most cases you can simply leave this blank. With the form completed, please press Process Repeat to repeat the original transaction. 4 Account Options 4.1 CV2-AVS Options PayPoint.net provides as standard, transmission for AVS (address and post code verification) and CV2 (last 3 digit's on the reverse of the card) for ALL acquiring banks. These checks are not actually performed by PayPoint.net, but by the credit card issuers and are therefore dependant upon whether or not the issuer for the particular credit card being used supports it. The results of these CV2 and AVS checks are displayed on the Transaction Manager Page. You can choose to check just the CV2, or the House Number and the Postcode too, by checking the appropriate boxes. Nb. There is a now a default requirement for CV2 to be passed on all transactions. This is to conform Visa's mandate that the CSC* be provided with all Visa ecommerce transactions effective from 1st June 2009. This will be over-written by the choices you make on this page, as described below. (*CSC - Card Security Code, also referred to as CV2, CVV, CAVV - the three digits on the rear of the card or four digits on the front of American Express cards)

Default - Fail a transaction if the supplied CV2/AVS parameters do not match those maintained by the bank OR if the bank failed to check them. (If CV2/AVS are not supplied the transaction will still be processed) Non-Strict - Fail a transaction if the supplied CV2/AVS parameters do not match those maintained by the bank. (If CV2/AVS not supplied OR not checked by bank, the transaction will be processed) Strict - CV2/AVS parameters must be supplied and must match the CV2/AVS parameters maintained by the bank for the transaction to be processed. 5 User 5.1 Adding New Users If your account is a multi user account, then multiple users can be permitted to access it in SECNet with permission for the actions that can be performed by those user accounts defined through the use of roles (see Restricting User Actions). While logged into SECNet, click 'User' from the menu bar. Now click 'Assign Roles' on the left hand side of the screen and, if you have more than one account, enter the PayPoint.net merchant ID of the account you want to grant access to. When you click Find Account, it should bring up a list of users already on the account. Now click, Invite New User, and complete the Name, E-Mail Address and Message fields in the New User Invitation. Be careful to spell the e-mail address correctly or the wrong person may be invited to your account. Click 'Send Invitation'. The invited user will receive an e-mail with further instructions. If they have already signed up in SECNet, they will be asked to click a link to accept the invitation. If they haven't signed up already, they will be asked to sign-up to SECNet to enable them to accept the invitation. Once they have accepted the invitation, you will be able to assign a role to their User Account which will allow them to view and action your account details in accordance with the permissions you have set. 5.2 Restricting User Actions The ability of users with access to your account to carry out actions within SECNet is controlled through the use of roles. You can create multiple roles within SECNet and assign one or more of the roles you create to each individual User Account to allow the users to perform certain actions and restrict other actions. To create and manage roles; while logged into SECNet, click 'User' from the menu bar. In the left menu bar, click 'Role Manager'. You can create new roles by clicking the 'Create New Roles' button. 5.3 Auditing User Activity If you have a multi user account you can see which of your users has made each transaction (or change to the account settings) in the Audit Trail. Simply select a date range, and click 'Find Audit Trail'.