Take the 2-minute tour ×
Web Applications Stack Exchange is a question and answer site for power users of web applications. It's 100% free, no registration required.

In our app, customers put in their own unique API credentials for Authorize.Net. So basically, each customer account has a different Login ID and Transaction Key, as supplied by Authorize.Net. We're a shopping cart type product.

We have problems with customers entering the wrong thing or not copy/pasting the Login Id or Transaction Key correctly.

We'd like to give them a "Test My Settings" button that confirms if they entered everything correctly. What's the best way of doing this?

Obviously, we don't want to actually bill a credit card. And we can't use the Test API since their credentials only work in the live system.

Should we try voiding a random transaction ID (something obviously wrong like "abc123") and check if they get the correct "Transaction ID does not exist" message? Basically, if we did this, we'd be looking for an authentication message to see if the credentials get bounced before it even tries to void the fake transaction.

Is there a better way of doing this? We have a pretty high rate (about 5-10%) where people enter the wrong thing even though we give them very specific instructions on where to find it.

I'm also concerned that if we do attempt to void a fake transaction in order to validate the credentials, Authorize.Net may flag our IP addresses as malicious.

I've asked this question on the Authorize.Net forums as well but received no answer.

share|improve this question

2 Answers 2

I emailed their support about this and they recommended the solution below, which is a great way of doing it:

"Send a request to the reporting API and see if you get an error message for invalid credentials. If you don't then their information is correct."

share|improve this answer
Can you state the source, please? –  Alex Oct 31 '11 at 9:42
"Someone at Authorize.Net" is the source. I asked their support team, and that response was emailed back. –  wahtimswa1970 Nov 1 '11 at 13:14

Bank of America has an interesting way of testing whether or not a scheduled wire-transfer is setup correctly. They make a small charge of less than $1 to the persons account and then send an email to the person to verify the amount of the charge and then after verifying they undo the charge. That is how they verify everything works.

share|improve this answer
That's not relevant to this. I'm talking about Authorize.Net which is a payment gateway. You're talking about a bank ACH transfer verification. –  wahtimswa1970 Nov 13 '10 at 13:35
i understand that. i was just giving a new idea that isn't directly related to Authorize.Net, but a idea that would theoretically work via any payment gateway, including Authorize.Net. –  djangofan Dec 1 '10 at 18:43

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.