# TN3176: Troubleshooting Apple Pay payment processing issues Diagnose errors that occur when processing Apple Pay payments, identify common causes, and explore potential solutions. ## Overview This technote covers debugging common Apple Pay payment processing issues. When an Apple Pay payment is requested by your app or website, Apple sends an encrypted payment token to you to verify its signature, decrypt its payment data, and validate the transaction. Often, these payment processing issues are caused by an invalid [payment processing certificate](https://developer.apple.com/help/account/configure-app-capabilities/configure-apple-pay#create-a-payment-processing-certificate), or by mishandling payment data by you or your payment service provider (PSP). ## Possible reasons for payment service provider errors while handling the Apple Pay payment token Payment token validation that fail for your PSP are often due to an issue with your payment processing certificate or the format of your token. In either case, your PSP may be able to provide additional insight. Please confirm the following with your PSP: - The merchant ID value used throughout Apple Pay must be identical to the one you created in your Apple Developer account. If it is different, Apple will not be able to to decrypt the payment data. - The merchant ID is associated with the correct payment processing certificate. - The payment processing certificate is in an active state in your Apple Developer account. - The [`merchantCapabilities`](https://developer.apple.com/documentation/apple_pay_on_the_web/applepaypaymentrequest/1916123-merchantcapabilities) array of the `ApplePayPaymentRequest` contains only `supports3DS`. - Your PSP is sending the authorization message in the format required by each payment network. For more information about configuring your merchant identifier (ID) and certificates required for Apple Pay, see [Configuring Your Environment](https://developer.apple.com/documentation/apple_pay_on_the_web/configuring_your_environment). ## Possible reasons for payment token decryption errors You validate a transaction by verifying the signature, decrypting the payment data, and verifying additional transaction details. A payment token’s payment data is encrypted using either elliptic curve cryptography (ECC) or RSA encryption. The encryption algorith used is based on the merchant capabilities of the initial payment request. The payment token can be decrypted by the merchant with the certificate private key or by the PSP on behalf of the merchant. For China mainland, decrypt via RSA; otherwise decrypt via ECC. If you experience payment token-related decryption issues, please confirm the following: - The PSP routes the payment to the correct payment network. - The tokenization of the payment data doesn’t take too long or hasn’t timed out. - The decrypted data is a valid JSON object. - You receive a parseable JSON output when you attempt to decrypt a payment token, indicating a possible a key mismatch. - No payment with the same `transactionId` shows as processed, indicating a transaction you’ve already credited. - The merchant ID that you share with PSP is identical to the one you created in your Apple Developer account. For more information, see [Payment token format reference](https://developer.apple.com/documentation/passkit_apple_pay_and_wallet/apple_pay/payment_token_format_reference). ## Possible reasons for payment token processing errors Once decrypted, the payment token is passed to the PSP for processing. If you experience payment token-related processing issues, please confirm the following: - The cryptogram format is valid. For example, the `merchantCapabilities` property includes `supports3DS` (as well as `supportsEMV`, if you support China Union Pay transactions). - Your PSP has assigned the correct Electronic Commerce Indicator (ECI) values for the transcation. - Your certificate signing request (CSR) Apple uses to encrypt the payment token was generated for the correct environment (sandbox or production). and not mismatched. - You aren’t reusing a previously processed payment token. Cryptograms are single-use and cannot be used over multiple transactions. ## Revision History - **2024-06-25** First published. ## See Also [TN3173: Troubleshooting issues with your Apple Pay merchant identifier configuration](/documentation/Technotes/tn3173-troubleshooting-issues-with-your-apple-pay-merchant-id-configuration) Diagnose errors due to invalid Apple Pay merchant identifier configurations by identifying the underlying causes of common errors and explore their potential solutions. [TN3174: Diagnosing issues with the Apple Pay payment sheet on your website](/documentation/Technotes/tn3174-diagnosing-issues-with-the-apple-pay-payment-sheet-on-your-website) Diagnose errors received while presenting the Apple Pay payment sheet on your website by identifying the underlying causes of common errors and explore their potential solutions. [TN3175: Diagnosing issues with displaying the Apple Pay button on your website](/documentation/Technotes/tn3175-diagnosing-issues-with-displaying-the-apple-pay-button-on-your-website) Diagnose common errors received while displaying the Apple Pay button on your website by identifying the underlying causes, and explore potential solutions. [TN3206: Updating Apple Pay certificates](/documentation/Technotes/tn3206-updating-apple-pay-certificates) Learn how to create, manage, and rotate Apple Pay certificates to maintain uninterrupted payment processing. --- Copyright © 2026 Apple Inc. All rights reserved. | [Terms of Use](https://www.apple.com/legal/internet-services/terms/site.html) | [Privacy Policy](https://www.apple.com/privacy/privacy-policy)