FROM CACHE - en_header

Using PayPal Pro UK for CC payments - No 3DS secure support in Shopify to meet the EU's PSD2 regs?

Solved
TeeKay
Explorer
50 1 48

I am using PayPal Website Payments Pro UK to accept card payments with the Shopify checkout.

 

The other week I received an email from PayPal telling me that come September 2019 I will need to have a checkout process that meets the new European PSD2 (The Payment Services Directive 2.0) standards of payment authentication when accepting card payments from my customers. Essentially the email linked over to the following page of the PayPal UK website:

 

https://www.paypal.com/uk/webapps/mpp/psd2

 

Yet there's no mention of 'Shopify' on that PayPal link above and equally so no mention of 'PSD2" anywhere on the Shopify website, or on here really (as far I can search anyway). For something so crucial, does anyone know what is happening at Shopify to prepares for the authentication requirements of the EU's new PSD2 directive (such as 3D secure support on the actual Shopify checkout etc.)?

 

Thanks in advance for any possible reassurance that you folks may bring to the table with this.

Accepted Solution (1)

Accepted Solutions
AidanG
Shopify Staff
Shopify Staff
5 1 4

This is an accepted solution.

That's great, thanks for letting us know about the issue.

Regarding Cardinal - you can sign up for the credentials through the link in your Settings > Payment Provider > Manage. There is a link to an FAQ and at the bottom of the page you can sign up for the credentials. There is a specific form there for PayPal. It might take a few days for Cardinal to issue those but if you haven't heard from them since April I would advise checking in or trying again.

 

Let me know if you have any problems.

Aidan

View solution in original post

Replies 64 (64)
Nick
Community Moderator
Community Moderator
4522 434 990

Hi @TeeKay,

 

Nick here from Shopify. 

 

Really great question and thanks for bringing this to our attention. I have not heard about this update from PayPal myself even as of yet. With situations with updates like this, the Shopify team normally work with the payment gateways to include the updates and make the transition process as seamless as possible from both parties. September 2019 is still a while away so I wouldn't expect any mention of this for another few months at least, but I will still investigate this internally to find out more. Should there be any updates at all on this which I can share with you, I will. 

 

Thanks again for reaching out about it though. 

 

All the best, Nick

Nick | Community Moderator @ Shopify 
 - Was my reply helpful? Click Like to let me know! 
 - Was your question answered? Mark it as an Accepted Solution
 - To learn more visit the Shopify Help Center or the Shopify Blog

TeeKay
Explorer
50 1 48
Thanks Nick

Slightly worrying that you hadn’t heard of this PayPal and PSD2 email about needing to comply. Nonetheless hopefully you do hear something of a positive nature regarding this very shortly, when which if you can post any such useful info here then it would be highly valued indeed.

Have a good day ahead Nick.
Nitsa
Pathfinder
83 0 34

 

I am also concerned. While September might be a while away implementation is a lot closer.

 

"While becoming compulsory in September 2019, payment service providers like card issuers will start implementing come April 2019."

 

https://https://www.paypal.com/uk/webapps/mpp/psd2

 

An update would be appreciated.

 

Nitsa
Pathfinder
83 0 34

To judge from the response that I have just received from support, they see this more as an opportunity for businesses to switch to Shopify payments because they certainly have no intention of being ready in April for this, they keep talking about September 2019, yet I just made a few telephone calls and there is no question that this is going to start impacting way before then. Not for the first time Shopify showing their US centric approach. Woo commerce looking more likely each day that passes.

TeeKay
Explorer
50 1 48

That's the first thing that crossed my mind when I got the email from PayPal i.e. Shopify may try and use this to transfer people onto to Shopify Payments. The trouble is that my products/industry is not supported my Stripe (Shopify payments) hence I cannot transfer to them even if I wanted to, I do not have that luxury.

 

I hope they (Shopify) get something sorted for this sooner rather than later...

 

TeeKay
Explorer
50 1 48

Hello Nitsa,

 

Did you find out anything more regarding Shopify and this upcoming PSD 2.0 regulation?

 

There's not really a lot of info on it at all from the eCommerce crowd, it seems to only really be covered in detail with banking websites and banking blogs.

 

Are you using PayPal PayFlow Pro (PayPal Payments Pro) whereby you have your customers enter their card details directly into the Shopify checkout?

 

Or are you solely using PayPal Express? Because if you are only using PayPal Express (i.e. whereby customers who want to pay by card use the PayPal 'guest' checkout' feature) then you don't need to worry about anything as PayPal will implement all the necessary authentication requirements within their 'Express' (offsite) payment gateway.

 

I'm currently using PayPal PayFlow Pro (PayPal Payments Pro) hence this upcoming PSD2 regulation is a substantial concern.

 

Many Thanks

 

 

Nitsa
Pathfinder
83 0 34

Hi Tee Kay,

Yes I am also with PayPal Payments Pro which is why I have had concerns. I had a call last week from PayPal business development asking me where I was with this and I told them the situation. They asked me to contact Cardinal Commerce who are handling 3DS on their behalf but they confirmed to me that Shopify is not compatible with them. In fact, Shopify is the only e-commerce site that is not. I know the reason for this well as it came up in another context some time ago. Basically, Shopify have their shopping cart/checkout "locked down" and do not allow any third party scripts to run on it. They will say this is for security reasons. This is not a view shared by other e-commerce providers.

 

Whatever.

 

I do know that that Visa and MasterCard will start implementing this from April for European issued cards. I have had conversations with Shopify support and their vagueness about it is enough to make me realise I have to take steps to switch away from Shopify. As always they are US centric in their approach to things, if this had been a US requirement, 3DS would have been in place yesterday. My best guess is that this is not going to happen, or if it does it will be too late for me as I have no intention of being caught with my pants down and so I will be moving.

I don't doubt that after this little exchange I will have another email inviting me to switch to Shopify payments rather than an email confirming that they will shortly have 3DS in place.

This might not have been of much comfort to you but it's where we are at at the moment.

Cheers

TeeKay
Explorer
50 1 48

Hi Nitsa,

 

I just emailed Cardinal Commerce about a couple of hours ago after feeling frustrated with lack of info on the WorldWideWeb, but from what you have just said it will most likely be a rather pointless email and of course a rather fruitless response from Cardinal.

 

I know that Shopify Payments (Stripe) has managed to implement 3DS recently, as you can read this here in the grey coloured box:

 

https://help.shopify.com/en/manual/payments/third-party-providers/3d-secure-checkout

 

So it seems as we both originally thought, Shopify will use this 3DS 2.0 regulation to get the last few people over onto Shopify Payments (Stripe).

 

I can't use Shopify Payments (Stripe), as mentioned previously; they do not support the type of product in which I retail (health industry), so that's simply not an option for me. If I could I would happily use Shopify Payments as it would save me a ton in the transaction fee charges from Shopify and I could accept ApplePay too. But it's not an option/luxury that I have frustratingly.

 

Can I ask; are you ok to use Shopify Payments (Stripe)? Or like myself are you also unable to use Shopify Payments (Stripe)? Or do you choose not to for alternative reasons to myself?

 

Thanks again

 

 

Nitsa
Pathfinder
83 0 34
Hi Tee Kay,

I can use Stripe but 80% of my customers use their own PayPal accounts to
pay rather than a debit/credit card, it's convenient for them and it's an
even higher percentage for European customers. Removing that convenience
can only hurt my sales.

That is not the only reason I am moving however. The blog function on
Shopify is like something from the middle ages. The monthly cost of plug
ins to run anything other than a basic site is extortionate. I know an app
developer who has what is essentially the same app on WordPress and
Shopify. The cost is $12 monthly on WordPress and $39 on Shopify.

There are more reasons but at the end of the day my business and Shopify
are no longer the best fit.

Good luck with whatever you decide.


TeeKay
Explorer
50 1 48

Yep I’m looking at the alternatives as we speak due to this complete lack of ability for me to comply with PSD2, all thanks to Shopify’s checkout limitations.

In your case, it’s worth mentioning that having Stripe does not mean you cannot have 'PayPal Express' too. 'PayPal Express' is one of only a couple of payment options in which Shopify allows merchants to have activated in addition to another payment 'primary' gateway.

Therefore if you used Stripe (this is of course assuming that Shopify Payments is available in your country of location) then you would be able to keep your PayPal Express option fully running, whilst also accepting cards with 3D-secure, not to mention ApplePay too. You would actually be at an advantage compared to using PayPal Website Payments Pro.

 

If I had that option I would do it in a heartbeat.

makemefeel
Tourist
3 0 1

I have the same problem there. I can't use shopify payment due to my industry but my provider (paymentsense) isn't 3D secured recognised with Shopify ... What am I suppose to do then? 

It took me days to understand why when 3d secure is on and payment sense claimed to me that I am secured, on another hand, it doesn't seem to be the case .. 

I had already a fraud and absolutely no idea on how to fix that ... 

I am quite surprised to see also that Shopify isn't prepared for the new law in September. Anyway, on the meantime I am not protected. 

 

 

 

 

freddie2244
New Member
1 0 0

Hi TeeKay, would you mind telling me how you integrated PayPal Website Payments Pro (UK) with your store? I am trying to set this up but can only see the option for PayPal Payflow Pro.

TeeKay
Explorer
50 1 48
TeeKay
Explorer
50 1 48

Hi Freddie,

 

You need to use the 'PayPal Payflow Pro' option as you mentioned.

 

Shopify no longer list it as 'PayPal Website Payments Pro (UK)', they used to in years past, however now it's just named 'PayPal Payflow Pro'. Don't ask me why.

 

Then all you need to do is to generate Payflow API Access credentials in your PayPal account and enter those into the necessary fields within the Shopify admin for the 'PayPal Payflow Pro' payment method. Check the tick boxes of which cards types you will accept (I believe only really Visa and MasterCard work unhindered for us UK based merchants anyway) and check the tick box on the 'PayPal Express' method too - assuming of course that you wish to accept payments via 'PayPal Express' alongside your card payments.

 

You're all done!

Moneyspyder
Shopify Partner
1 0 0

Hi Nick - hope all well?

 

Building on your email from Jan 2019, as it is July next week, please can you update all re Shopify's solution for PSD2, as we have a couple of new Shopify builds underway and my clients are asking what is what re PSD2.  

 

Many thanks for your time in advance here.  Kind regards 

TeeKay
Explorer
50 1 48

As far as I am aware, nothing has yet been rolled out to merchants as yet, but PayPal and Cardinal Commerce are apparently working on the 3DS app/plugin connector between Shopify's checkout and PayPal PayFlow Pro.

 

For the past 6 months I've been told repeatedly that this app/plugin will be completed and released well before the September 14th deadline.

 

As per PayPal - there's nothing to worry about and the Cardinal Commerce connector will be ready shortly.

 

Therefore I am trying to do just that, and not worry too much 🙂 --- albeit with only 40 days left before PSD2 is instated across the EU, I cannot help but feel a touch anxious.

 

Anyone else got something to add to this?

Nitsa
Pathfinder
83 0 34

Let's be clear about one thing, the lack of progress is not due to technical issues, after all every other e-commerce platform on the planet is already PSD2 compliant. I know from the conversation I had some time back with Cardinal who are implementing this for e-commerce platforms the fact that Shopify keep their checkout "locked down" is the big factor here, chances that this ends up like the MailChimp fiasco on shopify a few months ago is actually very high. Certainly the last email I had from them was no longer a clear-cut statement, in fact it was quite the opposite.

"To stay on your current gateway, we will be providing additional steps in the coming weeks with the gateways that meet the integration standards Shopify has determined necessary to comply."

Read that very carefully and I would not be surprised to receive another email that says something like "unfortunately shopify has determined that PayPal does not meet its integration standards etc"

Totally fed up with them anyway for a whole host of reasons and now getting ready to roll with Woo commerce.

I wish you luck!

AidanG
Shopify Staff
Shopify Staff
5 1 4

Merchants using Shopify Payments, Stripe, or PayPal Express are automatically compliant with PSD2.

Merchants using a third party gateway may be asked to sign up for Cardinal Commerce, a third party 3D Secure provider. You can add your Cardinal credentials in the Shopify Admin under Settings > Payment Provider > Manage. If you do not have credentials yet, you can fill out the application form that is also linked in the same admin section.

Merchants using PayPal Payflow Pro may not see an option to add their Cardinal credentials. In this case you should disable PayPal Payflow Pro and enable PayPal Website Payments Pro (UK) using the same Payflow Pro credentials. You will then see the Cardinal option.

If there is no option to integrate with Cardinal, then reach out to your payment gateway and ask if they are PSD2 compliant and working with Shopify. If not, then we recommend choosing an alternative gateway that is compliant.


TeeKay
Explorer
50 1 48

Hello AidanG

 

Thank you for the information.

 

Can you confirm with 100% certainty (i.e. before I start disconnecting PayPal PayFlow Pro) that PayPal Website Payments Pro (UK) is an option for payment gateways?

 

I remember when I looked about a year and a half ago in the gateways list in my admin 'Payment providers' settings, it was no longer offered, and in fact Shopify said it was no longer available and it's not on this list either for that matter: https://www.shopify.co.uk/payment-gateways/united-kingdom

 

So please can you confirm (again with 100% certainty) that "PayPal Website Payments Pro (UK)" is actually a selectable option? (i.e. that essentially it has now become available once again)

 

Thank you