Google Pay™

General information

Google Pay™ is an easy, fast and secure way to pay for your purchases in online-stores and apps. When paying through the Google Pay service, the card number is not transmitted, instead, the generated virtual account number (DPAN) is used.

Before starting the integration, you need to familiarize yourself with two general documents provided by Google itself for customers who want to use their services:

· Terms of Service

· Acceptable Use Policy

Google Pay API's Developer Documentation Checklist

• Google Pay Web developer documentation

• Google Pay Web integration checklist

• Google Pay Web Brand Guidelines

Integration with Google Pay™ through the PSP payment page

If you use the PSP payment page, then additional registration in Google services is not required, just leave a request to connect Google Pay™ with your key account manager.

When you use the PSP payment page, the device will automatically check the possibility of paying through the Google Pay service. The button “Pay with Google Pay” will be displayed, if the client's device or browser supports this feature.

Server-to-server integration (Third party processor)

With such an integration, you will need to register with the Google Pay™ service.

If you are considering not transferring the token, and decrypting it yourself using the tools of your services, then you will need to transfer the decrypted data in the API request in the secure3d parameter.

Additional capabilities

Integration with the merchant's website

For working with this type of integration, you need full integration in the Google Pay™ service. After going through a full integration cycle, the merchant needs to transfer only the received token from his website.

Integration process:

1. Get from the PSP Support team GatewayMerchantID;

2. Register as a Developer (need to add a link) on the Google Pay™ portal;

3. Carry out a full cycle of integration with Google Pay™ on your website;

4. Pass testing and get commercial access to Google Pay™;

5. Submit the necessary information for integration to the PSP for setup.

After receiving the token from Google Pay™ on their website, the merchant passes it to the PSP payment gateway via an API request. Then the token is decrypted and the result will be sent back.

The operation of this method is described in the API documentation (here) in the section ‘Authorization with the transfer of an encrypted token (POST/orders/token_pay)’.

Payments with 3-D Secure for Google Pay™

Google Pay™ uses 2 types of cards:

· CRYPTOGRAM_3DS - cards that are stored as tokens on a specific user's device. The token stores the virtual card number and expiration date, so such cards do not participate in 3-D Secure verification.

· PAN_ONLY - cards available on any user's devices. The token stores the data of the physical card: number and expiration date, so 3-D Secure authentication is required for this type of card.

The procedure for 3-D Secure authentication does not differ from the standard and is described in API documentation (link) in the section ‘Authorize’ (POST /orders/authorize).

Google Pay request object

{
  "type": "CARD",
  "parameters": {
    "allowedAuthMethods": ["PAN_ONLY", "CRYPTOGRAM_3DS"],
    "allowedCardNetworks": ["VISA", "MASTERCARD"]
  },
  "tokenizationSpecification": {
    "type": "PAYMENT_GATEWAY",
    "parameters": {
      "gateway": "<your Google-registered gateway name>",
      "gatewayMerchantId": "<GatewayMerchantID provided by PSP>"
    }
  }
}

Supported authentication methods:

• PAN_ONLY

• CRYPTOGRAM_3DS

Supported card networks:

• VISA

• MASTERCARD

Where:

• gateway - is the Google Pay gateway identifier registered for the PSP;

• gatewayMerchantId - is the merchant identifier issued by the PSP for Google Pay integration.

Additional

Brand guidelines – https://developers.google.com/pay/api/android/guides/brand-guidelines