PayPal IPN - 如果細節錯誤怎麼辦？

Question

在IPN文檔的最後它說以下內容：

Important: After you have authenticated an IPN message (that is, received a VERIFIED response from PayPal), you must perform these important checks before you can assume that the IPN is both legitimate and has not already been processed: 
1.Check that the payment_status is Completed. 
2.If the payment_status is Completed, check the txn_id against the previous PayPal transaction that you processed to ensure the IPN message is not a duplicate. 
3.Check that the receiver_email is an email address registered in your PayPal account. 
4.Check that the price (carried in mc_gross) and the currency (carried in mc_currency) are correct for the item (carried in item_name or item_number). 

什麼是你應該做的，如果這些檢查中的一個失敗？我們是否應該以某種方式調用PayPal API來「拒絕」交易？

Answer 1

大多數商店將標記的訂單/交易未通過這些檢查作爲「可能的欺詐」或沿着這些方向。 訂單狀態應該提高員工操作訂單的意識 - 仔細看一下應該顯示哪個檢查失敗並且可以啓動進一步的操作。

這可能包括退款交易到聯繫貝寶以進行可能的欺詐嘗試。在任何情況下，都應該檢查訂單，而不是將其視爲任何其他「已完成」訂單。

---

示例場景：

• 您正在使用未加密的網站付款標準，HTML表單來接收付款。

• 一個欺詐買方發現並開始修改項目的價格通過編輯提交的表單

• 您會收到順序支付，不要你的店鋪內檢查訂單的價值對交易

• 員工不發現這一點，被罰$出去支付價值200項0.01 $

---