A card tester is a tool, script, or service that checks whether payment card data or a card-reading device behaves as expected. In legitimate use, a card tester runs inside a payment provider's sandbox with published test card numbers, or it validates point-of-sale hardware and card readers. It is not a way to check whether a real card number or CVV is live, and using one for that purpose is a crime.

What does a card tester actually check?

Legitimate testers verify format and flow, not whether a stranger's account has money in it. They confirm that a number passes the Luhn checksum, that the expiry date is a valid future date, that the field lengths match the card brand, and that your checkout code handles a decline, an address verification mismatch, or a CVV failure. Payment gateways publish sample numbers for exactly this work.

A tester can also mean a physical device. Retail technicians use terminal testers to confirm that a card reader powers on, reads a magnetic stripe or chip, and returns the right response to the POS software.

How do developers test card payments safely?

1. Open a sandbox or test-mode account with your payment processor.
2. Use only the test card numbers the processor publishes for each brand and each failure scenario.
3. Trigger declines, expired-card responses, and verification mismatches to see how your UI reacts.
4. Keep test keys out of production and never log full card data.

Sandbox testing removes the need to touch real card numbers at all. That is the point, and it is also what keeps a business inside PCI DSS scope.

Is it legal to test card numbers?

Testing your own card on your own merchant account is fine. Testing card data that belongs to someone else, or data bought from a CVV seller, is access device fraud and identity theft under US federal law. There is no legitimate version of a tool that validates stolen card numbers.

Why buying or selling CVVs is not a shortcut

Card verification values are security features that issuers prohibit merchants from storing after authorization. Any marketplace offering CVVs is trading stolen credentials, and buyers are routinely defrauded with dead or already-flagged numbers. A card tester cannot rescue a stolen number, because the first real authorization is the event that triggers the fraud alert and the account closure.

What is a test card number?

A test card number is a published placeholder, such as the sample numbers Stripe and other gateways list, that only works in a sandbox environment. It behaves like a real card for coding purposes and charges nothing.

Can a card tester tell me if a card is valid?

Only a live authorization from the issuing bank can confirm a real card. No legitimate tool can check a real card number without the cardholder's participation, and tools that claim to do so are fraud instruments.

What should I use to test my checkout page?

Use your processor's sandbox, its published test cards, and its simulator for declines and verification failures. Document the scenarios you test so you can repeat them after any code change.