TitlePage CyberSource Verification Services

1 CyberSource Corporation HQ | Box 8999 | San Francisco, CA 94128-8999 | Phone: 800-530-9095 Title PageCyberSource Verification ServicesUsing the Simple Order APIJ anuary 20182 CyberSource Contact InformationFor general information about our company, products, and Services , go to sales questions about any CyberSource Service, email or call 650-432-7350 or 888-330-2300 (toll free in the United States).For support information about any CyberSource Service, visit the Support Center at 2018 CyberSource Corporation. All rights reserved. CyberSource Corporation (" CyberSource ") furnishes this document and the software described in this document under the applicable agreement between the reader of this document ("You") and CyberSource ("Agreement"). You may use this document and/or software only in accordance with the terms of the Agreement. Except as expressly set forth in the Agreement, the information contained in this document is subject to change without notice and therefore should not be interpreted in any way as a guarantee or warranty by CyberSource .

2 CyberSource assumes no responsibility or liability for any errors that may appear in this document. The copyrighted software that accompanies this document is licensed to You for use only in strict accordance with the Agreement. You should read the Agreement carefully before using the software. Except as permitted by the Agreement, You may not reproduce any part of this document, store this document in a retrieval system, or transmit this document, in any form or by any means, electronic, mechanical, recording, or otherwise, without the prior written consent of Rights LegendsFor Government or defense agencies. Use, duplication, or disclosure by the Government or defense agencies is subject to restrictions as set forth the Rights in Technical Data and Computer Software clause at DFARS and in similar clauses in the FAR and NASA FAR civilian agencies. Use, reproduction, or disclosure is subject to restrictions set forth in subparagraphs (a) through (d) of the Commercial Computer Software Restricted Rights clause at and the limitations set forth in CyberSource Corporation's standard commercial agreement for this software.

3 Unpublished rights reserved under the copyright laws of the United , , and The Power of Payment are registered trademarks of CyberSource Corporation. CyberSource , CyberSource Payment Manager, CyberSource Risk Manager, CyberSource Decision Manager, and CyberSource Connect are trademarks and/or service marks of CyberSource Corporation. All other brands and product names are trademarks or registered trademarks of their respective Services Using the Simple Order API|January 20183 CONTENTSC ontentsRecent Revisions to This Document6 About This Guide7 Audience and Purpose7 Scope7 Conventions8 Note and Important Statements8 Text and Command Conventions8 Related Documents9 Customer Support9 Chapter 1 Introducing Verification Services10 Delivery Address Verification10 Address Validation11 Address Standardization12 Countries Supported by Delivery Address Verification12 Status and Error Codes12 Export Compliance13 Chapter 2 Integrating Verification Services into Your Business14 Requesting Delivery Address Verification14 Interpreting the Delivery Address Verification Reply15 Returned Reply Fields15 Requesting Export Compliance17 Handling the Results of Denied Parties List Checks17 Excluding

4 Export Compliance Results18 Configuring Denied Parties List Matches19 Adjusting Name and Address Word Matching20 Defining Name and Address Matching Rules20 Verification Services Using the Simple Order API|January 20184 ContentsChapter 3 Testing Verification Services22 Requirements for Testing22 Testing Export Compliance23 Appendix AAPI Fields25 Formatting Restrictions25 Data Type Definitions25 Numbered Elements26 Request Fields27 Reply Fields34 Appendix BReason Codes39 Appendix CStatus and Error Codes42 Status Codes: Addresses42 Status Codes: International Addresses46 Error Codes: Addresses49 Error Codes: International Addresses50 Appendix DRequest and Reply Examples52 Delivery Address Verification Examples52 Name-Value Pair Request52 Name-Value Pair Reply53 XML Request53 XML Reply54 Export Compliance Examples55 Example of Declined Transactions55 Name-Value Pair Request55 Name-Value Pair Reply55 XML Request56 XML Reply57 Name and Address Word Matching Examples57 Name-Value Pair Request58 Name-Value Pair Reply58 XML Request59 XML Reply59 Verification Services Using the Simple Order API|January 20185 ContentsName and Address Matching Rule Examples60 Name-Value Pair Request60 XML Request61 Appendix EExport Compliance Standard Codes62 Denied Parties List Check Codes62 Product Codes64 Appendix FCountry and Territory Postal System Categories65 Category I-A65 Category I-B66 Category II66 Category III67 Category IV68 Appendix GRestricted and Denied Parties List74

5 Appendix HAddress Type79 Index80 Verification Services Using the Simple Order API|January 20186 REVISIONSR ecent Revisions to This DocumentReleaseChangesJanuary 2018 Added information about the CyberSource APIs to the CyberSource web site. See the CyberSource API Versions page. Added "Numbered Elements," page 26. Updated descriptions for the item-level request fields. See "Request Fields," page 27. September 2017 Updated Export Compliance to include support for more government agency lists. See "Handling the Results of Denied Parties List Checks," page 17. Revised the billTo_state field description to clarify that the field is only required if the value is CA or US. See billTo_state, page 28. Added the exportService_sanctionsLists API request field. See exportService_sanctionsLists, page 31. Added new international lists to the "Restricted and Denied Parties List," page 2017 Added details for testing Export Compliance.

6 See "Requirements for Testing," page 22. Updated billTo_company, billTo_firstName, and billTo_lastName fields to clarify that first name and last name or company name fields must be submitted. Updated Export Compliance samples. See "Request and Reply Examples," page 52. April 2016 Added note that Verification Services do not support relaxed requirements for address data. See "Integrating Verification Services into Your Business," page 14. Updated URL for testing. See "Requirements for Testing," page 2014 Corrected the length of the API request field billTo_customerID. Changed the number of characters from 50 to 100. See billTo_customerID, page 27. Corrected information about using addresses to trigger Denied Parties List matches with the Export Service. See "Export Compliance," page 13, and "Configuring Denied Parties List Matches," page 2014 Added the OFAC sublist, Foreign Sanctions Evaders, to the Restricted and Denied Parties List.

7 See Appendix G, "Restricted and Denied Parties List," on page Services Using the Simple Order API|January 20187 ABOUT GUIDEA bout This GuideAudience and PurposeThis guide is written for application developers who want to use the CyberSource Simple Order API to integrate address Verification or export compliance Verification Services into their order management CyberSource Verification Services requires software development skills. You must write code that uses the API request and reply fields to integrate Verification Services into your existing order management guide describes only the tasks and API fields you must use to integrate Verification Services into your order management system. It does not describe how to integrate other CyberSource Services . For that information, see "Related Documents," page Services Using the Simple Order API|January 20188 About This GuideConventionsNote and Important StatementsText and Command ConventionsNoteA Note contains helpful suggestions or references to material not contained in this Important statement contains information essential to successfully completing a task or learning a Field and service names; for example:Include the ics_applications field.

8 Items that you are instructed to act upon; for example:Click Filenames and pathnames. For example:Add the filter definition and mapping to your file. Placeholder variables for which you supply particular text XML elements. Code examples and samples. Text that you enter in an API environment; for example:Set the davService_run field to Services Using the Simple Order API|January 20189 About This GuideRelated Documents Getting Started with CyberSource Advanced for the Simple Order API describes how to get started using the Simple Order API. (PDF | HTML) Decision Manager Using the Simple Order API Developer Guide describes how to integrate Decision Manager, a fraud detection service, with your order management system. (PDF | HTML) Credit Card Services Using the Simple Order API describes how to integrate CyberSource payment processing Services into your business.

9 (PDF | HTML) Reporting Developers Guide describes how to view and configure Business Center reports. (PDF | HTML) The CyberSource API Versions page provides information about the CyberSource API to the Support Center for complete CyberSource technical documentation: SupportFor support information about any CyberSource service, visit the Support Center: Services Using the Simple Order API|January 201810 CHAPTER1 Introducing Verification ServicesCyberSource Verification Services are part of a suite of Services that include electronic payment and fraud management. Verification Services consist of two Services : Delivery Address Verification Export ComplianceDelivery Address VerificationDelivery Address Verification verifies a customer s delivery address during card-not-present transactions, and then it returns a result. The result contains an API-specific reply code and a status or error code that is specific to the results of address Verification .

10 Verification tests produce a valid address and an estimate of the risk associated with the address. As a result, your shipping and customer service costs caused by address errors can be Verification process consists of validation and standardization of submitted addresses. After a customer provides address information to your system, you send the address in a request to CyberSource for CyberSource Verification Services receives the address information in your request, the address is validated and standardized as described in the following are responsible for creating your order acceptance strategy. If you do not have the expertise, you are also responsible for seeking expert help outside of your company. CyberSource cannot make recommendations for your Services Using the Simple Order API|January 201811 Chapter 1 Introducing Verification ServicesAddress ValidationDuring validation, address information is corrected.