PayPal IPN update Bug with PENDING status updating Nop to PAID

Hello,

This may be a result of a new feature with PayPal, but with their Fraud Filters, you can set a transaction to be flagged for review, in which case you have to manually review it and then manually Accept or Decline it.

I just had one of these happen recently and noticed that Nop doesn't recognize the distinction and updates the payment status to Paid before you have accepted the transaction in PayPal. Until you have accepted it, you do not receive the funds and in the event you reject it, well you don't either.

So as it is marked as paid, you would very likely ship it, and could be out the money. I've highlighted the particular points of interest related to this below:

Paypal IPN:
mc_gross: 1946.55
protection_eligibility: Ineligible
address_status: unconfirmed
payer_id: UTTTTTTTTTT
address_street: xxxxxxxx
payment_date: 05%3A38%3A03+Jul+12%2C+2016+PDT
payment_status: Pending
charset: windows-1252
address_zip: xxxxx
first_name: xxxxxxx
address_country_code: US
address_name: xxxxx
notify_version: 3.8
custom: xxxxxx-55c7-45e0-a21d-f64e10230650
payer_status: unverified
business: xxxxxxx
fraud_management_pending_filters_1: Suspected+Freight+Forwarder+Check
address_country: United+States
address_city: xxxxx
quantity: 1
verify_sign: xxxxxxxx2lPznAKSs-wlpyyCqzYgN4mthnxIT2hTL
payer_email: xxxxx
txn_id: xxxxxxxEL119610T
payment_type: instant
last_name: xxxxx
address_state: xxxx
receiver_email: xxxxxx
receiver_id: Axxxxxx
pending_reason: address
txn_type: web_accept
item_name:
mc_currency: USD
item_number:
residence_country: US
receipt_id: xxxxxxx-7486
transaction_subject:
payment_gross: 1946.55
ipn_track_id: xxxxx36a14bd0
New payment status: Pending

How to handle:
There exists a Pending payment status, but you may have (at least we do) many Pending payment status orders as when someone chooses to pay via paypal standard and then never completes the paypal payment process...so some other way to differentiate from that would be great. Ideally, there'd be a new status Requires Review...or some way to really call out that you need to manually review it.

chadwixk wrote:
You've written that new payment status is set to "Paid". But according to your log it's still "Pending".

Could you please share the same log (three records) from PayPal:
1. The first one when such payment is done by a customer.
2. The second one when you manually do NOT accept it in PayPal admin area.
2. The third one when you manually accept it in PayPal admin area.

Sorry, I wasn't clear.
In Nop, the status is Paid, despite the fact that in the Order Note with the "Pending" IPN message the last line states "New payment status: Pending", but in fact the actual Nop payment status was PAID. And I know this was the case because the order got downloaded into our current shipping system, ShipWorks, which only downloads "Paid" statuses.

I actually accidentally Accepted the payment, so I have that IPN in Nop. Here it is:

mc_gross=1946.55
&protection_eligibility=Ineligible
&address_status=unconfirmed
&payer_id=xxxxV2AMZGQ
&tax=0.00
&address_street=xxxx st
&payment_date=05:38:03 Jul 12, 2016 PDT
&payment_status=Completed
&charset=windows-1252
&address_zip=13669
&first_name=xxxx
&mc_fee=43.17
&address_country_code=US
&address_name=xxx
&notify_version=3.8
&custom=xxxx-55c7-45e0-a21d-f64e10230650
&payer_status=unverified
&fraud_management_pending_filters_1=Suspected Freight Forwarder Check
&address_country=United States
&address_city=xxxx
&quantity=1
&verify_sign=xxxxx2h15bc.MLFXy52cAQSg0QcxWILqIicS.gN41zNNHP8n
&payer_email=xxxxxcom
&txn_id=xxxx119610T
&payment_type=instant
&last_name=hodgins
&address_state=xx
&receiver_email=xxxxx@extremeledlightbars.com
&payment_fee=43.17
&receiver_id=xxxRJP54KA4
&txn_type=web_accept
&item_name=
&mc_currency=USD
&item_number=
&residence_country=US
&receipt_id=xxxx0608-5323-7486
&handling_amount=0.00
&transaction_subject=
&payment_gross=1946.55
&shipping=0.00
&ipn_track_id=xxxc647eb6f
New payment status: Paid < - Nop order note

I cannot generate a Reject message as I already accepted it, and then immediately issued a full refund via Nop.

chadwixk wrote:
So you have accepted the payment. Hence the payment status was set to "Paid". And it's correct.

So it's absolutely not clear what exactly the issue is. Could you please provide a complete list of steps to reproduce it?

Here is the issue boiled down to its essentials:
1.) Order is placed in Nop
2.) Paypal returns IPN of PENDING status
3.) NOP updates Order Payment status to PAID
4.) You ship product that was never actually paid for

chadwixk wrote:
Thanks. So you don't approve and reject the payment in PayPal control panel? An order automatically marked as paid immediately when payed by a customer? Please confirm

chadwixk wrote:
Could you please let me know when these filters can be enabled?

Correct. I did not approve or reject the pending payment in the PayPal portal.
The Nop order went to "Paid" directly as a result from the "Pending" IPN before accepting or rejecting.

OK. Thanks. I'll investigate it (work item)

I was a bit not clear with two IPN results you posted here. Could you please share IPN log here made before accepting or rejecting?

Andrei, it is the one in my very first post above.

Sorry. But its absolutely not clear for me now. Its "New payment status" is "Pending" (not "Paid"). This order is NOT marked as paid (immediately after placing the order).