Test Card Number Guide: Safe Sandbox Testing Without Buying CVV
Use free test card numbers from your payment processor. Learn parameter bands, pitfalls, and why buying CVV data is illegal and unsafe.
Redeem your gift cards at any of our Merchants
Onyx Gift Cards is a Grenadian company designed to introduce, market and manage gift cards systems in Grenada for retailers and corporations. We are enthusiastic about the effect and influence we will have on the local market. We intend to expand our systems regionally with a range of product offerings and services.
Gift cards are the preferred way of giving and receiving gifts. They carry a monetary value that can be redeemed for gifts at your favorite store.
Onyx GiftCards are “Open Gift Cards” which means that they can be redeemed at multiple merchant locations. They are standard credit card size, can fit into the average wallet and made of PVC plastic. Onyx GiftCards are Barcoded for security and safety for the consumer and bear a disclaimer at the back.
Onyx Giftcards can be bought with a branded Card backer which is black in colour and is designed to fit the card. There is an area to write a brief message to the recipient as well.
Card testing is the practice of pushing a stolen or made-up card number through a small charge to find out whether the account is still open. People searching "card test latest" usually want one of two things: the newest version of that attack, or the newest way to stop it. This covers it from the merchant side, because that is where the damage lands.
One test is small. A dollar, sometimes less. The charge often goes to a donation page, a digital gift card, a subscription trial, or anything that delivers value before a chargeback shows up. If the charge clears, the number is live and gets sold or reused. If it declines, it gets thrown away.
The single test is not the problem. Volume is. Modern testing runs thousands of attempts in minutes through residential proxies and headless browsers, so the traffic looks like ordinary shoppers from ordinary places.
The attack gets cheaper every year. Bot infrastructure rents by the hour. Checkout pages are easy to script against, and plenty of small stores have no rate limiting at all. When I read breach write-ups, the pattern that repeats is not a clever exploit. It is a boring payment form being submitted faster than any human could.
Every declined attempt still costs a gateway call. Every approved one costs the goods, the interchange fee, and then a chargeback fee when the real cardholder disputes it. Enough of them and the processor moves the account into a monitoring program, holds funds, or drops it entirely. That last part is what kills small sellers.
No single control stops this. What works is layers: a bot challenge on the payment step, velocity limits per card and per IP, 3-D Secure on high-risk orders, address verification, and a rule that flags any order below a set dollar amount from a first-time customer. Blocking individual card numbers does nothing, since the numbers change constantly.
In the US, buying or using card numbers you do not own falls under access device fraud, 18 U.S.C. 1029, and the penalties scale with volume. Card testing rings get prosecuted as conspiracies. It is not a gray area, and "I only tested them" is not a defense.