Elavon downloads and stores cookies on your device when you visit our website. We use these cookies to better understand and improve your browsing experience by identifying most visited pages, personalising content, and measuring site performance.

Essential cookies enable core functionality such as page navigation and access to secure areas. The website cannot function properly without these cookies; they can only be disabled by changing your browser preferences.

These are cookies that support site functionality that is visible or advantageous to you or your experience of the site, they enable websites to remember choices and provide a more personalized experience.   Functional cookies help to provide services that you request, such as language preference or layout.

Performance cookies help us to improve our website by collecting and reporting information on its usage (for example, which of our pages are most frequently visited).

These cookies and similar technologies gather information about your browsing habits. They remember that you've visited a website and share this information with other organisations, such as advertisers and platforms on which we advertise. They do this in order to provide you with ads that are more relevant to you and your interests. Although these cookies and similar technologies can track your visits to other websites, they don't usually know who you are. Without these cookies, online advertisements you encounter will be less relevant to you and your interests.

Cookie Settings

U.S. Bank Europe DAC. Registered in Ireland – Number 418442..  Registered Office: Block F1, Cherrywood Business Park, Dublin 18, D18 W2X7, Ireland.
U.S. Bank Europe DAC, trading as Elavon Merchant Services, is regulated by the Central Bank of Ireland.
 
U.S. Bank Europe DAC. Registered in Ireland with Companies Registration Office. The liability of the member is limited. United Kingdom branch registered in England and Wales under the number BR022122.
U.S. Bank Europe DAC, trading as Elavon Merchant Services, is a credit institution authorised and regulated by the Central Bank of Ireland.  Authorised by the Prudential Regulation Authority.  Subject to regulation by the Financial Conduct Authority and limited regulation by the Prudential Regulation Authority.  Details about the extent of our regulation by the Prudential Regulation Authority are available from us on request.

Most popular solutions

Additional solutions

Fusebox integration & options

Optional platform features

Documentation

North America

Europe

Regions

Checkout.js supports credit card, electronic check and gift card transactions.

## Credit card 

Select the transaction type and send it in the :magic-link[session token]{id="take-a-payment"} request. 

| Transaction type | Description |
|-------------------|-----------------------------------------------------|
| `ccsale` (Credit card sale) | Obtains real-time authorization for a credit card sale transaction and enters the transaction into the unsettled batch. Batch settlement can be done [manually](https://support.convergepay.com/s/article/Settle-a-Batch-Manually) or automatically. |
| `ccgettoken` (Credit card generate token) | Generates a token from a card number. The token generated can be used in place of a credit card number in any subsequent transactions made in :magic-link[transaction management]{id="transaction-management"}. |
| `ccauthonly` (Credit card authorization only) | Obtains a real-time authorization for a credit card transaction, guarantees that the funds are available on the card, and reduces the cardholder’s limit to buy for only a predetermined period (which is usually 7-10 days based on the credit card’s issuing bank). This transaction does not place the authorization in the settlement batch. To place the `ccauthonly` transaction in the open batch, use or XML API `cccomplete` or log in to Converge under Payments > Auth Only to convert to a sale or pend. |
| `ccverify` (Credit card verify) | Verifies the credit card account for AVS and CVV data. :magic-link[AVS]{id="response-codes#avs"} and :magic-link[CVV]{id="response-codes#cvv2cvc2"} are returned to indicate if the AVS and CVV data passed originally were correct and matched the cardholder statement billing address and the CVV value located on the card. |
| `ccaddrecurring` (Credit card add recurring) | Adds a credit card recurring record to the Converge recurring batch. Once added, the transaction will run automatically within the specified billing cycle on the scheduled payment day without the need to send it for authorization. Recurring transactions will run indefinitely, unless suspended by the user. |
| `ccaddinstall` (Credit card add installment) | Adds a credit card installment record to the Converge recurring batch. Once added, the transaction will run automatically within the specified billing cycle on the scheduled payment day without the need to send it for authorization. Installment transactions will run until the number of installments specified is reached. |

## Credit card tokens

Tokenization is a powerful security feature that allows you to support all existing business processes that require card data without the risk of holding card data and without any security implications therefore protecting the customers' confidential information. 

Tokenization eliminates the risk of storing sensitive data, and substantially reduces the liability and costs associated with PCI compliance. 

- Tokens are not unique if the same card is used multiple times. If the same card is added a second time, the same token will be used instead of generating a new one. 
- Tokens are unique for each merchant. For example, the same card will produce a different token for each merchant. 
- Merchants with multiple terminals sharing tokenization domains will receive the same token for a unique card and the token can be used across their stores if they wish to do so. 

**Requirements** 

Tokenization must be enabled. Verify by calling :magic-link[/VirtualMerchantDemo/accountxml.do]{id="api-reference#tag/Terminal-Management"} with transaction type `terminalsetup`. 

### Generate a card token
Converge provides the following ways to generate tokens: 

**Option 1.** Generate token while taking a payment/authorization request.

With this token generation method, you include the `ssl_get_token` parameter in the :magic-link[session token]{id="take-a-payment"} request of the following transactions:

- Credit Card Sale
- Credit Card Authorization Only
- Credit Card Add Recurring
- Credit Card Add Installment

**Option 2.** Generate a token without taking a payment/authorization.

With this token generation method, you send the transaction to request a token without a payment:

- Credit Card Generate Token 
- Credit Card Verify

Once a token has been generated, you can manage card tokens via :magic-link[transaction management]{id="transaction-management"} or [customer manager](https://support.convergepay.com/s/article/Customer-Manager).

### Store a card token 
There are two options to store tokenized cards:

**Option 1.** Converge managed tokens

Customer manager enables merchants to tokenize and store the customer's sensitive data and associated information on Elavon's secure servers, which simplifies their PCI-DSS compliance and the payment process for returning customers.  

With this token generation method, you include the `ssl_add_token` parameter in the :magic-link[session token]{id="take-a-payment"} request of the following transactions: 

- Credit Card Sale 
- Credit Card Authorization Only 
- Credit Card Add Recurring
- Credit Card Add Installment
- Credit Card Verify
- Credit Card Generate Token 

Converge will store the token and customer details in the Converge database for future transactions. When a token is used, the information stored in the profile will be included when the transaction is being authorized.

If you want to modify token payments via the API in transaction management, you will need to retain and include the following in future payments. 
- `ssl_merchant_initiated_unscheduled`
    - `Y` - If the merchant initiated this payment without cardholder consent (cancellation fee) AND this is NOT a recurring/installment transaction.
    - `N` - If the merchant initiated this payment without cardholder consent (subscriptions) AND this is a recurring/installment transaction.
    - `N` - If the cardholder initiated this payment as a one-time transaction.
    - `N` - If the cardholder initiated this payment for recurring/installment.
- `ssl_recurring_flag` (required if payment is recurring/installment)
    - `1` - recurring
    - `2` - installment 

For more information on managing tokenized cards see [customer manager](https://support.convergepay.com/s/article/Customer-Manager) and :magic-link[transaction management]{id="transaction-management"}.

**Option 2.** Merchant managed tokens

The token is not stored in Converge but instead in your own database. With this option, additional fields must be retained and included on all future payments.

- `ssl_exp_date` 
- `ssl_token` 
- `ssl_ps2000_data` 
- `ssl_approval_code`  
- `ssl_association_token `  
- `ssl_merchant_initiated_unscheduled`
    - `Y` - If the merchant initiated this payment without cardholder consent (cancellation fee) AND this is NOT a recurring/installment transaction.
    - `N` - If the merchant initiated this payment without cardholder consent (subscriptions) AND this is a recurring/installment transaction.
    - `N` - If the cardholder initiated this payment as a one-time transaction.
    - `N` - If the cardholder initiated this payment for recurring/installment.
- `ssl_recurring_flag` (required if payment is recurring/installment)
    - `1` - recurring
    - `2` - installment 

:::::notice{note}
If you already have a token with expiry date but do not have the `ssl_ps2000_data` or `ssl_approval_code` then you must store this data and include it the next time you use the token for processing. 
:::::

## Electronic check 

Electronic checks use the Automated Clearing House (ACH) to direct debit from a customer's checking account into a merchant's business bank account. 

**Requirements** 

- Electronic check enabled. Verify by calling :magic-link[/VirtualMerchantDemo/accountxml.do]{id="api-reference#tag/Terminal-Management"} with transaction type `terminalsetup`. 
- Region set to USA 

:::::notice{note}
 When testing ACH ECheck transactions, use the following test data:
- The routing number used for the demo environment is 490000018 
- The account number can be numeric up to 16 digits 
:::::

Select the transaction type and send it in the :magic-link[session token]{id="take-a-payment"} request of the following transactions: 

| Transaction type | Description |
|--------------------|---------------------------------------|
| `ecspurchase` (Electronic check purchase) | Debits the purchase amount from a checking account.  |
| `ecsaddrecurring` (Electronic check add recurring) | Adds an ACH ECheck recurring payment to the Converge recurring batch. Once added, the transaction will run automatically within the specified billing cycle on the scheduled payment day without the need to send it for authorization. Recurring transactions will run indefinitely, unless suspended by the user.  |

### Electronic check best practices 

Make sure the integrated application meets the following: 

- Amount of transaction 
- The effective date of transaction 
- The cardholder’s account number 
- The cardholder's financial institution routing number 
- Revocation language 
- Clear and expressed authorization language: 

**Example 1:** 

By Clicking the “I Agree” box below, you authorize (Merchant Name) to use information from your check to initiate a one-time fund transfer from your account or to process the payment as a check transaction or bank drawn draft from your account for the amount of (total amount here). If your payment is returned due to insufficient funds, you authorize us to make a one-time electronic funds transfer or to use a bank draft drawn from your account to collect a fee as allowed by state law. 

**Example 2:** 

I authorize (Merchant Name) to use information above to initiate an electronic fund transfer from my account or to process the payment as a check transaction or bank drawn draft from my account for the amount of (total amount here). If my payment is returned due to insufficient funds, I authorize (Merchant Name) to make a one- time electronic funds transfer or to use a bank draft drawn from my account to collect a fee as allowed by state law. 

**Example 3:** 

I authorize (Merchant Name) to use information above to initiate an electronic fund transfer from my bank account with account number (Masked Account Number) and routing number of (Masked Routing Number) or to process the payment as a check transaction or bank drawn draft from my account for the amount of (total amount here). If my payment is returned due to insufficient funds, I authorize (Merchant Name) to make a one-time electronic funds transfer or to use a bank draft drawn from my account to collect a fee as allowed by state law. 

**Authorization retention** 

Retain a copy of the authorization to the customer for all agreements, electronically or by paper, for two years after the termination or revocation of authorization, and be prepared to provide records upon request to demonstrate proof of WEB entry, or provide details of the transaction to show what was exchanged. 

**Minimize potential fraudulent ACH transactions** 

Use robust authentication methods to verify the identity of the cardholder before accepting transactions. Customers with an established business relationship with the cardholder, whether established online, in person, over the phone, or by some other method, can usually authenticate using shared secrets, such a PIN, password or previous transaction history. Examples include checking information against databases, asking a challenge question, sending a specific piece of information either online or offline, and asking to verify that information as a second step. 

TEL transactions may only be initiated when there is an existing relationship between the customer and cardholder, or when the cardholder initiated the call. 

**Solicitations** 

Merchants are prohibited from making direct payments on behalf of their cardholders. 

## Gift card  

Converge allows you to offer Gift/Loyalty cards options to customers within a single or multi-location environment. You can issue cards for any dollar amount. All transactions will be processed in real-time, and you can add or debit the balance from the cards. 

Contact support to create your card design and to order cards.  

Select the transaction type and send it in the :magic-link[session token]{id="take-a-payment"} request of the following transactions: 

| Transaction type | Description |
|-------------------|--------------------------------------------|
| `egcsale` (Electronic Gift Card Redemption) | Deducts the purchase amount from the balance of the gift card account.  |

Payment types