PayPal - The card you entered cannot be used for this payment.

Zencart 1.3.8a

Commerce on all of my sites has stopped. 2 Customers called in and said they were getting this message, so I got their credit card info and tried it myself.

Checkout goes just like normal, then when I enter CC and phone number at PayPal and click "Review and Continue" I get this message.

The card you entered cannot be used for this payment. Please enter a different credit or debit card number.tried two different sites and two different customer accounts and credit cards.

We have not processed an order in over a week.

The only payment method active is "Paypal Express Checkout" and "Zen Free Charge Card"

Made NO Changes, no upgrades, nothing different and all sites have been working swell for years.

HELP

Since you are being rejected while on PayPal's website, you need to ask them for support.

You can phone them, email them, even log a ticket online at https://www.paypal.com/mts ... or all of the above.

Did that, they said they can see nothing wrong with my account. the tech said that they HAD an issue with cards being rejected, but he said that issue was fixed.

Just wondering if anyone else is experiencing any issues like this.

Zencart 1.3.8a

You might have been hacked ...

Kim:

You might have been hacked ...
OK, that doesn't explain anything. I know there are updates that have not been applied, but to leave an open ended statement like that helps no one.

How does my particular situation apply to the patches and hacks known to date?

It may or may not.

But it's still an entirely valid statement, whether it applies to the error message you're getting or not.

Yes, I know the upgrades should have been done a long time ago. I guess the real question is "Is this a symptom of a known hack attempt or not"

Known or not - you have a problem and should be treating it as a hack because you are using an outdated version of Zen Cart with known vulnerablities.

Stuff4Toys:

Yes, I know the upgrades should have been done a long time ago. I guess the real question is "Is this a symptom of a known hack attempt or not"
I already answered your question: The error message you are receiving on PayPal's site is coming from PayPal. You need them to support you on this issue.

In addition, IF you've been hacked, then it's possible that whoever hacked you might have tampered with the code that submits data to PayPal and thus is altering the data sent, which could result in PayPal rejecting the invalid data.

So, the need to upgrade still remains.