Answer
A card fraud test transaction is a small authorization to a payment card. The charge checks if the card is active. Amounts range from $0.01 to $5. The test confirms the card number, expiration date, and CVV. An approval means the card is live. Criminals then use the card for purchases or cash out. The practice is illegal.
How test transactions appear
Test transactions hit merchant accounts, payment processors, and card networks. They target online stores with weak address verification and no CVV requirement. A single card may get 1 to 3 test charges. A batch may hit 100 to 10,000 cards in minutes. Small dollar amounts and repeated attempts are signals.
Detection signals
- Many small authorizations from one IP address or device.
- Multiple cards used on one account in a short window.
- Billing address and shipping address mismatch.
- CVV and AVS failures followed by approvals.
- High decline rates then one approval.
- Orders from proxy servers, data centers, or known fraud IPs.
Merchant and issuer response
Issuers run machine models on authorization streams. They score velocity, merchant category, geolocation, and device data. A score above a set threshold blocks the card or sends a step-up check. Merchants can require CVV, use 3-D Secure, set velocity limits, and block high-risk IPs. Payment processors share fraud data with networks. Visa and Mastercard publish rules for card testing.
Legal status
Card testing is a federal crime in the United States. 18 U.S.C. § 1029 covers access devices and fraud. Penalties include fines and prison. The FTC and FBI track card testing rings. Consumers can report unauthorized charges to their bank and the FTC. Do not use a card that is not yours. Do not test cards. The data here is for detection and prevention.