Choose from any of our gift cards to give to your loved ones
Redeem your gift cards at any of our Merchants
Onyx Gift Cards is a Grenadian company designed to introduce, market and manage gift cards systems in Grenada for retailers and corporations. We are enthusiastic about the effect and influence we will have on the local market. We intend to expand our systems regionally with a range of product offerings and services.
Gift cards are the preferred way of giving and receiving gifts. They carry a monetary value that can be redeemed for gifts at your favorite store.
Onyx GiftCards are “Open Gift Cards” which means that they can be redeemed at multiple merchant locations. They are standard credit card size, can fit into the average wallet and made of PVC plastic. Onyx GiftCards are Barcoded for security and safety for the consumer and bear a disclaimer at the back.
Onyx Giftcards can be bought with a branded Card backer which is black in colour and is designed to fit the card. There is an area to write a brief message to the recipient as well.
Card testing patterns are recognizable surges in authorization traffic: many low-value or rapidly repeated attempts, an unusually high decline rate, cards drawn from a narrow set of BINs, and requests arriving faster than a real customer could type. Merchants spot them because the activity clusters within minutes, comes from a small pool of IP addresses, and rarely converts into normal purchases. The pattern matters more than any single transaction, since each individual attempt usually looks ordinary.
A card testing pattern is the fingerprint left behind when someone runs a large number of card numbers through a payment page to learn which ones still authorize. The goal is not to buy anything. The goal is to sort live card numbers from dead ones before using them somewhere else.
Because the attacker does not care about the merchandise, the behavior deviates from genuine shopping in measurable ways: tiny baskets, abandoned carts, repeated retries on the same card, and identical device or network traits across many attempts.
Most attacks show two or more of the signals below at the same time. One signal alone is weak evidence; several together are difficult to explain as normal customer behavior.
Dozens or hundreds of orders land in a short window, each for an amount low enough that a real cardholder would not notice a charge. Low-value authorization requests also have a better chance of succeeding, which is why the amounts stay small.
Your authorization request volume jumps while approval rates collapse. A checkout page that normally approves most attempts suddenly shows decline ratios far outside its baseline, which points to card numbers being enumerated rather than customers being served.
Attempts concentrate in a handful of issuing banks, and card numbers may run in sequence or share a common prefix. That clustering is not something organic traffic produces, because real cardholders hold cards from many different issuers.
Billing addresses do not match the card's issuing country, email domains are disposable, and the same device fingerprint appears across many different names. Address verification and CVV results trend toward partial or failed matches across the burst.
Requests arrive from a small set of IP addresses, data center ranges, or a single autonomous system. Headless browsers and scripted sessions often skip the ordinary page sequence, hitting the payment step without loading the cart or product pages first.
This is the most common target because the merchant never sees the card. Look for bursts of guest checkouts with no account history and shipping details that change between attempts.
Attackers sometimes validate cards through a zero-dollar authorization attached to a signup. A spike in new accounts that never activate, combined with many cards tied to the same device, fits that shape.
Instant-delivery products and donation forms are attractive because there is no fulfillment risk to the attacker. Watch for many small gifts or downloads from a single network range in a short period.
The direct losses are usually small, but the indirect damage is not. Processors charge per authorization request, so a large burst generates real fees even when every attempt is declined. Networks also monitor fraud-to-sales ratios, and sustained abuse can trigger additional scrutiny or higher pricing.
No. Attackers adjust amounts, and a blanket rule on order value will reject legitimate low-ticket sales. Effective controls combine velocity limits, device intelligence, and issuer authentication instead of a single threshold.
The underlying signals are consistent, but the surface details shift with your checkout flow and traffic mix. Rebuild your baseline after any major change to the payment page, or you will mistake your own redesign for an attack.
