Body

• event object Required

  Webhook event details.

  Hide event attributes Show event attributes object

  • id string Required

    Unique ID for this webhook event.

  • type string Required

    The type of event that occurred.

  • timestamp string(date-time) Required

    The time when the event was triggered (UTC).

• originalResponse object Required

  Represents the response to a physical card tokenization request.

  Hide originalResponse attributes Show originalResponse attributes object

  • id string

    Unique ID for this card tokenization transaction.

  • timestamp string(date-time)

    Transaction timestamp in UTC

  • type string

    Type of transaction

    Values are Sale, Auth, Capture, Refund, or Void.

  • status string

    The current status of the transaction

    Values are Created, Pending, Processing, or Completed.

  • accountHolder object

    Account holder information. Always returned for transactions. For Card Not Present transactions, includes full contact details.

    Hide accountHolder attributes Show accountHolder attributes object

    • id string Required

      Internal account holder ID assigned by the system

    • externalId string Required

      External account holder ID assigned by the integrator.

    • contact object

      Contact information for the account holder. Only returned for Card Not Present transactions.

      Hide contact attributes Show contact attributes object

      • name string
      • countryCode string
      • zipCode string
      • address string
      • state string
      • city string
  • paymentMethod object

    The tokenized card that was created.

    Example format: pmt_tkn_01JRZPRGFF4J2SZC3HMDBYEN2J

    Hide paymentMethod attributes Show paymentMethod attributes object

    • id string Required

      The unique identifier of the payment method. This ID has a prefix that makes it human-readable (pmt_trm_* for physical terminals, pmt_vrt_* for virtual card terminals, pmt_ach_* for virtual ACH terminals, pmt_tkn_* for tokenized cards), but applications should always use the type field to determine the payment method type rather than parsing this ID.

    • dateDeleted string(date-time)

      The date and time (UTC) when this payment method token was removed from the system using the Remove Token endpoint. This parameter will only be returned if the token was removed/deleted from the system.

      This field will be present in three scenarios:

      • As part of a successful Remove Token endpoint response
      • In token.removed webhook notifications
      • In List Transactions responses for transactions where the associated token was later removed

      When this field is present, sensitive card details (maskedCardNumber, cardExpDate) will be removed for security purposes, but all other transaction data remains intact.

    • type string Required

      The type of payment method:

      • Physical - A physical payment terminal for Card Present transactions
      • Virtual - A hosted payment form/iframe for Card Not Present transactions
      • VirtualAch - A hosted payment form/iframe for ACH (US) bank transfer transactions
      • Token - A tokenized card for card-on-file transactions

      Values are Physical, Virtual, VirtualAch, or Token.

    • currency string Required

      The currency of the payment method.

      Values are USD or CAD.

    • description string

      A human-readable name for the payment method.

    • billingContact object

      Billing contact information. Only returned for tokenized payment methods from Card Not Present transactions.

      Hide billingContact attributes Show billingContact attributes object

      • name string
      • countryCode string
      • zipCode string
      • address string
      • state string
      • city string
    • cardType string

      The type of card used for this transaction:

      • UNKNOWN - The card type is unknown
      • DEBIT - Debit Card
      • VISA - Visa Credit Card
      • MASTERCARD - MasterCard Credit Card
      • AMEX - American Express Credit Card
      • DINERS - Diners Club Credit Card
      • DISCOVER - Discover Credit Card
      • JCB - JCB Credit Card
      • UNIONPAY - UnionPay Credit Card
      • MAESTRO - Maestro Debit Card
      • GIFT - Gift Card
      • CASH - All-cash Transaction
      • EBT - Electronic Benefits Transfer Card
      • INTERAC - Interac (Canadian PIN-debit network), Card Present only
      • OTHER - Other tender types

      Values are UNKNOWN, DEBIT, VISA, MASTERCARD, AMEX, DINERS, DISCOVER, JCB, UNIONPAY, MAESTRO, GIFT, CASH, EBT, INTERAC, or OTHER.

    • maskedCardNumber string

      The masked card number. The format may vary (e.g. *********0011, 4*0011, etc.)

    • cardExpDate string

      The expiration date of the card in MMYY format.

    • accountType string

      Funding-source classification of this token-type payment method.

      • For card tokens: Credit or Debit.
      • For ACH tokens: Checking or Savings. May be null for older tokens that pre-date this field, for non-token payment methods, or when the source did not provide a classification.

      Values are Credit, Debit, Checking, or Savings.

  • referenceId string

    The reference ID for this transaction. This will either be the reference ID provided in the transaction request or, if no value was provided, a value generated automatically by the system. This reference ID can be used for processing captures and referenced refunds by including it in the originalReferenceId field of subsequent transactions.

    Maximum length is 100.

  • resultCode number

    Result codes:

    • 0 - Successful transaction request. (Check each transactionResponse's responseCode to determine if a transaction was approved or declined, card was tokenized, etc.)
    • 1003 - The payment terminal is busy or unavailable. (If this error persists, the user may need to close and re-open the Payment Application on the terminal or restart the terminal)
    • 1005 - The specified terminal could not be found.
    • 1010 - The transaction request is pending to become transaction.
    • 3000 - An unexpected error occurred. Please try again.
    • 3002 - The transaction could not be completed because the payment terminal could not find the related transaction.
    • 3005 - To resolve this error, power off your payment terminal, wait one minute and retry the transaction. If the error persists, please contact support.
    • 3006 - The transaction could not be completed because the payment terminal is low on battery.
    • 3009 - The transaction could not be completed because of network connectivity issues with the payment terminal. Please restore connectivity and try again.
    • 3010 - The transaction took too long and was cancelled by the application.
    • 3011 - Invalid transaction request. Please consult the documentation for valid transaction requests.
    • 3012 - Invalid transaction request. paymentMethodId is invalid.
    • 3013 - Invalid transaction request. The specified amount appears to be incorrect. Please retry with a smaller amount.
    • 3014 - Invalid amount. Please try your transaction again with an amount greater than $0.
    • 3020 - An unsupported transaction result was received.
    • 4001 - The transaction is being processed. This is returned for asynchronous bank transfer payment methods (e.g. ACH) while awaiting a final outcome.
    • 6800 - 3D Secure authentication was rejected by the issuer's ACS (card auth failed, security failure, stolen card, suspected fraud, etc.). Surfaced on declined CNP transactions when formConfig.enable3DSecure: true. See SDK Error Codes for guidance.
    • 6801 - 3D Secure authentication could not be completed because of an upstream technical issue (ACS timeout, directory server unreachable). Retry later or, if merchant policy allows, retry with 3DS disabled.
    • 6802 - The card is not enrolled in 3D Secure. Retry without 3DS (if allowed) to succeed.
    • 9998 - The system is not ready to process a transaction.
    • 9999 - An unknown error has occurred. If available, an auxiliary error code will be provided in the message.

    Values are 0, 1003, 1005, 1010, 3000, 3002, 3005, 3006, 3009, 3010, 3011, 3012, 3013, 3014, 3020, 4001, 6800, 6801, 6802, 9998, or 9999.

  • resultText string

    A message describing the result code in more detail.

  • requestedAmount number

    The amount sent in the transaction request. Will be 0 for token creation.

  • approvedAmount number

    The amount approved. Will be 0 for token creation.

  • transactionResponses array[object]

    A list of all transaction responses received during the $0 authorization verification of the card.

    Hide transactionResponses attributes Show transactionResponses attributes object

    A single Sale Transaction may result in multiple Responses.

    • responseCode number

      Response codes:

      • 0 - UNKNOWN
      • 1 - APPROVED - Transaction was approved
      • 2 - PARTIAL_APPROVED - Transaction was partially approved, but not for the full requested amount.
      • 10 - DECLINED - Transaction was declined by the issuer or bank. For Card-Present, the transaction can also be declined offline by the terminal.
      • 11 - INSUFFICIENT_FUNDS - Rejected due to insufficient funds in the account.
      • 12 - CARD_EXPIRED - The card used for the transaction has expired.
      • 13 - FRAUD_SUSPECTED - The transaction was flagged for potential fraud.
      • 14 - INVALID_PAYMENT_INFO - The provided information is invalid (e.g.: card number).
      • 15 - LIMIT_EXCEEDED - Rejected due to reaching a limit (e.g.: credit limit).
      • 16 - VERIFICATION_REQUIRED - Additional customer verification is required for the transaction to proceed (e.g.: 3D Secure).
      • 17 - AUTHENTICATION_FAILED - Rejected due to incorrect PIN or authentication failure.
      • 18 - POLICY_VIOLATION - Rejected due to a violation of the payment gateway's terms of service or policies.
      • 19 - BATCH_EMPTY - Indicates that the batch for processing is empty.
      • 20 - RECORD_NOT_FOUND - Indicates that the requested record for a transaction was not found (e.g.: to VOID a reference).
      • 21 - ALREADY_VOIDED - Indicates that the transaction has already been voided and cannot be processed again.
      • 50 - NETWORK_ERROR - Rejected due to network or communication issues with the payment gateway.
      • 51 - INVALID_ECR_PARAMETER - Payment Terminal or system-specific errors.
      • 52 - NOT_SUPPORTED - Rejected because the requested operation is not supported.
      • 53 - BUSY_OR_UNAVAILABLE - The Payment Terminal, Payment App or system is busy or unavailable.
      • 54 - CANCELLED - Cancelled by the user or merchant.
      • 55 - USER_CANCELLED - Specific to scenarios where the user cancels the transaction.
      • 56 - TIMED_OUT_ON_USER_INPUT - Failed to complete the transaction in time.

      Values are 0, 1, 2, 10, 11, 14, 15, 16, 17, 18, 19, 20, 21, 50, 51, 52, 53, 54, 55, or 56.

    • authCode string

      The authorization code provided by the card issuer, confirming transaction approval.

    • amountApproved number

      The amount approved for this transaction response.

    • approvedAmountBreakdown object

      A breakdown of approvedAmount, where each amounts approved on the payment terminal are returned separately. Only returned on Sale, Auth and Capture transactions.

      Hide approvedAmountBreakdown attributes Show approvedAmountBreakdown attributes object

      • amountGoodsAndServices number

        The approved amount for goods and services.

      • tax number

        The approved tax amount.

      • cashback number

        The approved cashback amount.

      • tip number

        The approved tip amount.

    • paymentMethod object

      The payment method used for this transaction response.

      Hide paymentMethod attributes Show paymentMethod attributes object

      • id string Required

        The unique identifier of the payment method. This ID has a prefix that makes it human-readable (pmt_trm_* for physical terminals, pmt_vrt_* for virtual card terminals, pmt_ach_* for virtual ACH terminals, pmt_tkn_* for tokenized cards), but applications should always use the type field to determine the payment method type rather than parsing this ID.

      • dateDeleted string(date-time)

        The date and time (UTC) when this payment method token was removed from the system using the Remove Token endpoint. This parameter will only be returned if the token was removed/deleted from the system.

        This field will be present in three scenarios:

        • As part of a successful Remove Token endpoint response
        • In token.removed webhook notifications
        • In List Transactions responses for transactions where the associated token was later removed

        When this field is present, sensitive card details (maskedCardNumber, cardExpDate) will be removed for security purposes, but all other transaction data remains intact.

      • type string Required

        The type of payment method:

        • Physical - A physical payment terminal for Card Present transactions
        • Virtual - A hosted payment form/iframe for Card Not Present transactions
        • VirtualAch - A hosted payment form/iframe for ACH (US) bank transfer transactions
        • Token - A tokenized card for card-on-file transactions

        Values are Physical, Virtual, VirtualAch, or Token.

      • currency string Required

        The currency of the payment method.

        Values are USD or CAD.

      • description string

        A human-readable name for the payment method.

      • billingContact object

        Billing contact information. Only returned for tokenized payment methods from Card Not Present transactions.

        Hide billingContact attributes Show billingContact attributes object

        • name string
        • countryCode string
        • zipCode string
        • address string
        • state string
        • city string
      • cardType string

        The type of card used for this transaction:

        • UNKNOWN - The card type is unknown
        • DEBIT - Debit Card
        • VISA - Visa Credit Card
        • MASTERCARD - MasterCard Credit Card
        • AMEX - American Express Credit Card
        • DINERS - Diners Club Credit Card
        • DISCOVER - Discover Credit Card
        • JCB - JCB Credit Card
        • UNIONPAY - UnionPay Credit Card
        • MAESTRO - Maestro Debit Card
        • GIFT - Gift Card
        • CASH - All-cash Transaction
        • EBT - Electronic Benefits Transfer Card
        • INTERAC - Interac (Canadian PIN-debit network), Card Present only
        • OTHER - Other tender types

        Values are UNKNOWN, DEBIT, VISA, MASTERCARD, AMEX, DINERS, DISCOVER, JCB, UNIONPAY, MAESTRO, GIFT, CASH, EBT, INTERAC, or OTHER.

      • maskedCardNumber string

        The masked card number. The format may vary (e.g. *********0011, 4*0011, etc.)

      • cardExpDate string

        The expiration date of the card in MMYY format.

      • accountType string

        Funding-source classification of this token-type payment method.

        • For card tokens: Credit or Debit.
        • For ACH tokens: Checking or Savings. May be null for older tokens that pre-date this field, for non-token payment methods, or when the source did not provide a classification.

        Values are Credit, Debit, Checking, or Savings.

    • cardType string

      The type of card used for this transaction:

      • UNKNOWN - The card type is unknown
      • DEBIT - Debit Card
      • VISA - Visa Credit Card
      • MASTERCARD - MasterCard Credit Card
      • AMEX - American Express Credit Card
      • DINERS - Diners Club Credit Card
      • DISCOVER - Discover Credit Card
      • JCB - JCB Credit Card
      • UNIONPAY - UnionPay Credit Card
      • MAESTRO - Maestro Debit Card
      • GIFT - Gift Card
      • CASH - All-cash Transaction
      • EBT - Electronic Benefits Transfer Card
      • INTERAC - Interac (Canadian PIN-debit network), Card Present only
      • OTHER - Other tender types

      Values are UNKNOWN, DEBIT, VISA, MASTERCARD, AMEX, DINERS, DISCOVER, JCB, UNIONPAY, MAESTRO, GIFT, CASH, EBT, INTERAC, or OTHER.

    • avsResult string

      The AVS (Address Verification Service) result. Typically returned on Card Not Present transactions.

      • A - Address matches, ZIP does not. The first five numerical characters contained in the address match those stored at the VIC or issuer's center. However, the ZIP code does not match.
      • E - Ineligible transaction.
      • N - Neither address nor ZIP matches. Neither the first five numerical characters contained in the address match with those stored at the VIC nor issuer's center nor the ZIP code match.
      • R - Retry (system unavailable or timed out).
      • S - Card type not supported. The card type for this transaction is not supported by AVS. AVS can verify addresses for Visa cards, MasterCard, proprietary cards, and private label transactions.
      • U - Address information unavailable.
      • G - Address information unavailable, International - Visa only, The address information was not available at the VIC or issuer's center.
      • W - Nine-digit ZIP match, address does not. The nine-digit Postal ZIP code matches that stored at the VIC or card issuer's centre. However, the first five numerical characters contained in the address do not match.
      • X - Exact match (nine digit ZIP and address). Both the nine-digit Postal ZIP code as well as the first five numerical characters contained in the address match.
      • Y - Address and five-digit ZIP match. Both the five-digit Postal ZIP code as well as the first five numerical characters contained in the address match.
      • Z - Five-digit ZIP matches, address does not. The five-digit Postal ZIP code matches that stored at the VIC or card issuer's centre.

      NOTE: Transactions can still be authorized if the AVS responses are no match or failure. AVS responses are for merchant information only, and usually do not influence the overall Authorization result. This can vary based on the Issuing Bank.

      Values are A, E, N, R, S, U, G, W, X, Y, or Z.

    • cvvResult string

      The CVV verification result. Typically returned on Card Not Present transactions.

      • M - CVV Match
      • N - CVV No Match
      • P - Not Processed
      • S - CVV should be on the card but the merchant indicates it is not.
      • U - User is unregistered

      NOTE: Transactions can still be authorized if the CVV responses are no match or failure. CVV responses are for merchant information only, and usually do not influence the overall Authorization result. This can vary based on the Issuing Bank.

      Values are M, N, P, S, or U.

    • accountType string

      The funding-source classification associated with the payment method used in this transaction.

      • For credit/debit cards: Credit or Debit (sourced from the WebSDK on CNP tokenization). May be null for older card transactions whose tokens pre-date this field, or when the source did not provide a classification.
      • For ACH/EFT bank accounts: Checking or Savings.

      Values are Credit, Debit, Checking, or Savings.

    • hostResponseText string

      A meaningful text explaining the response code from the host.

    • receipt object

      The receipt associated with this transaction. Returned for Card Present transactions.

      Hide receipt attribute Show receipt attribute object

      • lines array[string]

        The receipt lines.