I am having the same problem...
All was working well with sandbox.
I am now using the "live" credentials NOT sand box username, password and signature.
I have triple checked in checkout.php and confirm.php.
Is it anywhere else?
Where all does this need to be changed?
Thanks in advance...