Short Answer

A debit card test is a low-value charge or authorization sent to a payment network to find out if a card number is live. The v9 tag is a version label used in forums that trade stolen card data. It has no official meaning. No bank, card network, or regulator uses that label. Testing a card you do not own is card fraud, and in the US it falls under 18 U.S.C. 1029.

debit card test v9

How a Test Charge Works

Card testers send a small authorization, often under $2, to a merchant checkout page. Three signals come back: an approval or decline, an address verification result, and a card security code result. A number that returns an approval gets used for larger purchases. A declined test costs the cardholder nothing. An approved test may show as a pending hold until it drops off.

debit card test v2

A related pattern is the BIN attack. A BIN is the first six to eight digits of a card number. Those digits identify the issuing bank. Attackers generate large blocks of numbers inside one BIN and run them against one merchant page. Issuers see thousands of declines on the same BIN in a short window.

more on this topic

What the Version Number Means

Forums that sell card data tag their posts with version numbers. A higher number marks a newer post. It does not mark a better method. Tags change when a forum renames a thread or a seller rebrands after a takedown. No public registry tracks the tags, and the payment industry does not use them. A search for a specific version returns forum chatter, not a standard.

Debit Card Test V6: Comprehensive Guide

Detection by Issuers and Merchants

• Velocity rules that flag many authorizations from one device, IP address, or email in a short window.
• Address verification and card security code checks, which fail on generated numbers.
• 3-D Secure prompts that route the transaction to the issuer for a password or app approval.
• Fraud models at processors that score approvals and declines across merchants.
• Chargeback monitoring. An acquirer can fine or terminate a merchant with a high fraud ratio.

US Law

18 U.S.C. 1029 covers access devices, a category that includes card numbers. A first offense carries up to 10 years in prison and a fine. The maximum rises to 15 years when the scheme exceeds $1,000 in a one-year period or when the defendant has two prior convictions under the statute. State laws add counts for identity theft and computer fraud. Buyers and sellers face the same federal charge.

If a Test Charge Appears on Your Card

Call the issuer using the number on the back of the card. Under Regulation E, liability for unauthorized debit transfers is $0 when the physical card was never lost or stolen and only the number was used. The $50 and $500 caps apply when the card itself is lost or stolen, and the caps depend on how fast you report. The Fair Credit Billing Act covers credit cards and caps liability at $50. Ask the issuer to close the account and issue a new number, and ask which recurring payments are tied to the old number. Report the event to the FTC and to the FBI's Internet Crime Complaint Center.

What This Page Does Not Do

This page does not list vendors, markets, or tools for buying or testing card numbers. Those sales are illegal in the US and most other countries, and the data sold in those markets belongs to people whose accounts were breached.