Your cart is empty
Shop now
+

Card Testing Attack: How It Works and How to Detect It

Explore

Card Testing Attack: How It Works and How to Detect It

We guarantee gift cards direct to your inbox immediately.
Shop Now!

Let's Work Together

Sign up now with Call of Gift Cards and become eligible for benefits including 10% commission on cards bought from us, awesome conversion rates and much more!
Find Out More

Digital Gift Cards

The market for digital goods and services are growing rapidly. One of the true shifts in online behaviour is the switch from traditional direct online payments and purchase to wallets and gift cards. ...read more
+

Digital Gift Cards

The market for digital goods and services are growing rapidly. One of the true shifts in online behaviour is the switch from traditional direct online payments and purchase to wallets and gift cards. We invite you to start your own online business as a partner of ours. By signing up as a partner you’ll get access to one of the largest gift card databases in the world. All you need to focus on is to market your website and products. Gift cards are quickly outperforming traditional gifts, as they give the recipient the choice to pick their own present from a variety of options. The range of e-gift cards available on the Call of Gift Cards's partner sites includes popular categories such as restaurants, games, travel and fashion.

Gift Vouchers

Traditional gift vouchers are printed paper gifts available in set values that can be spent in specific stores. Open-loop, semi-open loop, and closed-loop are often terms used when referring to gift v...read more
+

Gift Vouchers

Traditional gift vouchers are printed paper gifts available in set values that can be spent in specific stores. Open-loop, semi-open loop, and closed-loop are often terms used when referring to gift vouchers. All gift cards sold via our partners’ websites are closed loop. This means that the gift card can only be spent at a single brand location, for example, an Xbox voucher can only be spent at Xbox etc.

Our Gift Cards

Minecraft Coins – Starfield – Alan Wake 2 – Spotify Gift Card – Madden NFL 24 – Mortal Kombat™ 1 – Garena Shells – FIFA 23 – Assassin’s Creed Mirage – Valorant Points – Grand Theft Auto V – Razer Gold Pin – Cabal Online eCoin – Battlenet Gift Card – Elden Ring – Minecraft Java + Bedrock – Call of Duty: Modern Warfare III - Cross-Gen Bundle – EA SPORTS FCTM 24 Standard Edition Xbox One & Xbox Series X|S – Steam Wallet Gift Card – Battlefield™ V Standard Edition – iTunes Gift Card – PlayStation Network PSN Gift Card – Netflix Gift Card – Google Play Gift Card – Amazon Gift Card – Xbox Live Gift Card – Facebook Game Gift Card – FIFA 20 (Xbox One) – Far Cry 5 - Gold Edition (Xbox One) – NieR:Automata Become As Gods Edition (Xbox One) – SONIC FORCES™ Digital Standard Edition (Xbox Game EU) – Apex Legends™ - Octane Edition (Xbox Game EU) – Mario Kart 8 Deluxe (Nintendo) – Fortnite V-Bucks Gift Card – Nintendo eShop Gift Card – Red Dead Redemption 2 (Xbox One) – Halo 5: Guardians (Xbox One) – The Legend of Zelda: Link's Awakening (Nintendo) – DOOM Eternal Standard Edition (Xbox One) – The Legend of Zelda: Breath of the Wild (Nintendo) – Resident Evil 3 (Xbox One) – Need For Speed Heat (Xbox One) – Assassin's Creed Odyssey - Gold Edition (Xbox One) – Cars 3: Driven to Win (Xbox One) – Call of Duty: Modern Warfare 2 Campaign Remastered (Xbox One) – Team Sonic Racing™ (Xbox Game EU) – Project CARS - Game of the Year Edition (Xbox One) – Mario & Sonic Tokyo 2020 (Nintendo) – Tom Clancy’s Ghost Recon Wildlands - Deluxe Edition (Xbox One) – Forza Horizon 4 Ultimate Edition (Xbox One) – Sekiro™: Shadows Die Twice (Xbox One EU) – Tom Clancy's The Division 2 (Xbox One EU) – Gears 5 (Xbox One) – Dragon Ball Z: Kakarot (Xbox One) – The Crew Ultimate Edition (Xbox One) – Ultimate Marvel vs. Capcom 3 (Xbox One) – Pokemon Let's Go Eevee! (Nintendo) – Sonic Mania (Xbox Game EU) – UFC 3 - Deluxe Edition (Xbox One) – Mass Effect Andromeda - Standard Recruit Edition (Xbox One) – BioShock: The Collection (Xbox One) – A Way Out (Xbox One) – Borderlands 3 (Xbox One) – Overcooked! 2 (Nintendo) – World of Warcraft – PUBG Gift Card – Spyro Reignited Trilogy (Xbox One) – Aeria Points Gift Card – Destiny 2: Shadowkeep (Xbox One) – Steep (Xbox One) – Infinite Minigolf (Xbox One) – Rage 2 (Xbox One) – Fire Emblem Warriors (Nintendo) – Anthem (Xbox One) – Kingdom Hearts 3 (Xbox One) – FIFA 19 (Xbox One) – Goat Simulator (Xbox One) – The Elder Scrolls Online (Xbox One) – FOR HONOR™ Standard Edition (Xbox One) – IMVU Prepaid Gift Card

Card Testing Attack: How It Works and How to Detect It

What a card testing attack is

A card testing attack is a batch of payment attempts that use stolen card numbers to learn which numbers still work. The attacker sends many small authorizations through a merchant's checkout. Approvals get kept and used later, or resold. Declines get dropped.

credit card testing attack

How the traffic reaches a checkout

Most card testing hits online stores, donation forms, gift card pages, and subscription signups. These pages approve a payment with no human in the loop and no physical card present. Scripts submit the form, read the response, and move to the next number. One attack can send thousands of attempts in an hour.

card testing tool

Signals merchants can watch

  • Many attempts in a short window from one IP address or a small set of them.
  • Several different cards used on one account, device, or email address.
  • Card numbers that share the first six or eight digits, a pattern called a BIN attack.
  • Small amounts, often under a few dollars, sent in a repeating pattern.
  • A decline rate that jumps above the normal range for the store.
  • Missing CVV, failed address checks, or billing details that do not match the card.

What it costs the merchant

Every attempt carries an authorization cost, and the fees add up at high volume. Approved fraud turns into a chargeback plus a dispute fee, and the goods or the gift card balance are gone. A high dispute ratio puts a merchant into card network monitoring programs. Those programs charge fees and can end in account termination. Processors can hold settlement while they review the account.

The Ultimate Guide to Card Testing Methods

Controls that cut the volume

  • Add a challenge to the payment form, such as a CAPTCHA or a bot check.
  • Set rate limits per IP address, device, and card.
  • Build velocity rules that count attempts and declines, not just approvals.
  • Require CVV and address verification on every order.
  • Turn on 3-D Secure for card-not-present traffic.
  • Block known bad IP ranges and device fingerprints.
  • Review small orders by hand when the same buyer places several in a row.

Figures that are hard to pin down

Public loss estimates for card testing come from different sources with different definitions. Some count only chargebacks. Some count all fraud on card-not-present channels. No single public number covers the whole market. The useful measure is local: attempts per hour, decline rate, and dispute ratio for one merchant account.

Card Attack Test

What's New

Card Testing Scheme Buying Guide

Discover the essential tips and parameters for selecting the best card testing scheme, and avoid common pitfalls in this comprehensive buying guide.

What's New

Why I Can't Write a CVV Buying Guide

I can't write a buying guide for CVVs or stolen card data. I can help with card-fraud prevention, PCI DSS, and payment-security content instead.

Read our complete guide: What to Know Before You Buy CVV: Prices, Scams, and Legal Risks