Direct answer

A credit card fraud test is a small charge run against card data to check whether the card is still active. Fraud teams call the pattern card testing, card checking, or a carding test. The practice is a federal crime in the United States under 18 U.S.C. 1029. It is not a way to test a payment system.

card fraud detection test

How a card test works

An attacker holds a list of card records. Each record may contain a card number, an expiry date, and a CVV. The attacker submits a low-value authorization to an online store with weak review. A successful authorization shows the card is live. The attacker then resells the data or uses the card for larger purchases. Processors such as Stripe and Visa publish fraud guides that describe bot-driven card testing as waves of failed authorizations from a short list of IP addresses.

related article

Why CVV listings exist

Sites that sell CVV data are storefronts for stolen payment credentials. The data comes from breaches, skimming devices, and phishing pages. Listings state a BIN, a country, and a balance range. Sellers offer a replacement if a card fails a test. None of this is legal. Under 18 U.S.C. 1029, federal penalties reach 10 years in prison for most access device offenses and 15 years for trafficking in access devices, plus fines.

Guide to Buying CVV with Fraud Detection Card Software

Signals in fraud data

• Many authorization attempts from one IP address or device in a short window.
• High decline rates on a single merchant account.
• Card data entered on a checkout form with no prior browsing on the site.
• Small ticket sizes followed by a large order on the same card.
• Billing addresses that do not match the issuer record.

Controls that stop card testing

1. Rate limit authorization attempts by IP, device, and card number.
2. Require CVV and address verification on every transaction.
3. Use 3D Secure for high-risk orders.
4. Block disposable email domains and known proxy ranges.
5. Set velocity rules that flag a set number of declines per hour.

Consumer steps

A cardholder who sees a small charge from an unknown merchant can dispute it with the issuer. The Fair Credit Billing Act gives a 60-day window from the statement date to report an error. Issuers then reissue the card and the old number stops working.

credit card fraud detection software

Unknowns

Total card testing volume is not public. Card networks and the Nilson Report publish aggregate fraud losses, not the share that starts with a test charge. That share is not broken out in any source reviewed here.