Unauthorized Payment - You can not imagine how frustrated I am right now.

[jonnyohio]

I have a pro account and I just spent hours integrating the REST API into my web app so I could take credit cards directly from my customers instead of them going through PayPal only.  I am using the Vault for security reasons, and successfully billed test cards in the Sandbox.  All seemed to work great!  Until I switched to live and now all I get is Unauthorized Payment with a real credit card. I'm in the United States.  What am I missing?

I've searched and all I find are old posts and no helpful answers.  I tried generating new client and secret and making sure everything was enabled.  I have no restrictions on my account and I've been able to take direct card payments in the past with the classic api.

[Snow-Cat]

The better place to ask for help is the Merchant Support Community which is monitored by other Developers and PayPal Techs, hopefully someone there can assist.

[jonnyohio]

Anyone else searching for this here is an update and some info, since all my searches didn't turn up any useful information.

I contacted technical support because it appears the documentation is not accurate.   The REST API direct card payments is deprecated, it tells you that, but what it does not tell you is that being able to use a card token to charge a card stored in the vault is also deprecated (at least for the United States apparently, maybe not for UK I don't know).  So even though you can store cards in the Vault all you want, update them, etc.,  you will never be able to charge them.  Do NOT use the REST API.  It is a waste of your time, and does nothing useful if you are looking to take credit cards on your website and build a useful solution.  If you have access to the classic API, use that for now, or if you have access to Payflow, use that.  You can signup for Braintree, but reading through those API docs, seems to indicate that there are numerous functions still in development.

Turned out for my case I am still setup for the classic api and can continue to use that (I have an older account).  So I'm good to go!