Core advice: you do not buy test credit card numbers. Every major payment processor publishes them at no cost in its developer documentation, and they only resolve inside a sandbox or test mode. If a website offers to sell you a "test card" or a CVV, the digits are either meaningless or stolen. There is no legitimate market where a working card number and its security code are sold to a stranger.

test credit card number

What a test credit card actually is

A test card is a published card number that a processor routes to a simulated authorization engine instead of the real card networks. Developers use it to force approvals, declines, authentication challenges, and error states without moving money. The number passes a Luhn check so a payment form will accept it, but no account sits behind it. That is the entire product. It costs nothing because it is documentation, not inventory.

related article

What to look for in a test card set

• Coverage of each network you accept: Visa, Mastercard, American Express, Discover, and any regional brand your customers carry.
• Behavior triggers with a separate number for approval, generic decline, insufficient funds, expired card, incorrect security code, and processor error.
• 3D Secure scenarios, including challenge flow, frictionless flow, and authentication failure.
• Address verification and security code response codes, so you can reproduce mismatches on purpose.
• Regional and currency variants that reflect where your buyers pay from.
• Versioned documentation with a date on it, so you can tell whether a number still works after a processor update.

Parameter bands to expect

• Visa: test numbers start with 4 and run 16 digits.
• Mastercard: test numbers start with 51 through 55, or fall in the 2221 to 2720 range.
• American Express: 15 digits, starting with 34 or 37, with a 4 digit security code.
• Discover: starts with 6011, 65, or the 644 to 649 range.
• Expiry: any future date in test mode, though some processors require a specific date to trigger an expiration scenario.
• Security code: any 3 digits for most networks, 4 for American Express, unless you are testing a mismatch on purpose.

Pitfalls to avoid

• Using a live API key with a test number. It fails, and repeated attempts can trip fraud controls on your own merchant account.
• Assuming sandbox behavior predicts production. A simulated approval says nothing about issuer approvals or chargeback risk.
• Copying numbers from a forum, video, or reseller page instead of your processor's own docs. Stale numbers produce confusing errors and wasted debugging time.
• Storing security codes anywhere, including a test database that mirrors your production schema. Sensitive authentication data should not be retained after authorization.
• Treating a card shop as a shortcut. Trafficking in real card numbers is a federal crime in the United States and a violation of every card network's operating rules.

FAQ

Do I need to pay for test card numbers?

No. Processors, gateways, and acquirers publish them free. A paywall is a strong signal that the seller has no relationship with a processor.

related article

Can a test card be used for a real purchase?

No. Test numbers route to a simulator and live systems reject them.

read more

What if a site sells CVVs and calls them test cards?

That is stolen card data with a friendlier label. Walk away and report it.

How often do test numbers change?

Rarely, but processors do retire numbers. Check the current documentation before each integration build or regression run.