# Test cards

Use the test cards provided to test response code outcomes and simulate different payment flows. We provide test card numbers for:

- Credit cards
- Debit cards
- Prepaid cards

> **Note**
>
> Never test using real card numbers or card details in your sandbox environment.

To use the test cards, make a [card payment request](https://www.checkout.com/docs/payments/accept-payments/accept-a-payment-using-the-payments-api.md#Request_a_payment_with_full_card_details) with:

- The card number listed in the table and the response code you want to test
- Any valid three-digit card verification value (CVV) for Visa and Mastercard cards, or four-digit CVV for American Express cards
- Any future card expiry date, in the format `MM/YY` or `MM/YYYY`

> **Information**
>
> The sandbox environment stores payments for 30 days. You must complete a test payment flow within 30 days of creating it.

---

## Response code tests

Use the following test cards to simulate a subset of our [API response codes](https://www.checkout.com/docs/resources/codes/api-response-codes.md).

**Visa**

| Response code | Description | Card number | Country code |
| --- | --- | --- | --- |
| `2005C` | Transaction not supported / blocked by issuer | `4276038578596818` | `US` |
| `2009G` | Blocked by cardholder / Contact cardholder | `4152812521833588` | `US` |
| `200N7` | Decline for CVV2 failure | `4734868958733862` | `US` |
| `200R3` | Issuer initiated a stop payment (revocation order) for all authorizations | `4567361325981788` | `GB` |
| `20001` | Refer to card issuer | `4111111111111129` | `US` |
| `20012` | Invalid transaction | `4024007103573027` | `US` |
| `20012` | Invalid transaction | `4158596042924182` | `GB` |
| `20014` | Invalid card number | `4485381577182090` | `US` |
| `20051` | Insufficient funds | `4544249167673670` | `GB` |
| `20057` | Transaction not permitted to cardholder | `4659465888705671`<br><br>For [Account Funding Transactions (AFTs)](https://www.checkout.com/docs/payments/manage-payments/perform-an-account-funding-transaction.md) | `GB` |
| `20057` | Transaction not permitted to cardholder | `4151512736305999`<br><br>For non-AFTs | `GB` |
| `20059` | Suspected fraud | `4897453568485113` | `US` |
| `20059` | Suspected fraud | `4000144348235050`<br><br>Prepaid card | – |
| `20061` | Activity amount limit exceeded | `4556294593757189` | `UY` |
| `20062` | Restricted card | `4818924250131070` | `GB` |
| `20063` | Security violation | `4556253752712245` | `US` |
| `20068` | One of:<br><br>- Response received too late, or there was a timeout<br>- Transaction rejected<br>- Internal error | `4095254802642505` | `US` |
| `20078` | Blocked, first use – transaction from new cardholder, card not properly unblocked | `4532819413487978` | `US` |
| `20082` | No security model | `4732789363145785` | `PR` |
| `20082` | No security model | `4000140542610783`<br><br>Prepaid card | – |
| `20154` | 3DS authentication required | `4500622868341387` | `CA` |
| `30015` | No such issuer | `4024007162185267` | `US` |
| `30015` | No such issuer | `4655710037275959` | `GB` |
| `30041` | Lost card – pick up | `4941202060999329` | `GB` |
| `30041` | Lost card – pick up | `4658620059821613` | `GB` |
| `30043` | Stolen card – pick up | `4539253655711767` | `IE` |
| `30043` | Stolen card – pick up | `4745820750643143` | `GB` |
| `20109` | One of:<br><br>- The authorization was previously reversed or voided.<br>- The capture amount is larger than the initial authorization amount. | `4000140543766022` | – |

**Mastercard**

| Response code | Description | Card number | Country code |
| --- | --- | --- | --- |
| `20003` | Invalid merchant | `5510696303117979` | – |
| `20012` | Invalid transaction | `5148447461737269` | `US` |
| `20030` | Format error | `5510696303117987` | – |
| `20051` | Insufficient funds | `5437821135399682` | `TW` |
| `20057` | Transaction not permitted to cardholder | `5355224542121849`<br><br>For AFTs | `GB` |
| `20057` | Transaction not permitted to cardholder | `5355222710253469`<br><br>For non-AFTs | `GB` |
| `20061` | Activity amount limit exceeded | `5420951756276171` | `TN` |
| `20062` | Restricted card | `5279988405398834` | `JP` |
| `20068` | One of:<br><br>- Response received too late, or there was a timeout<br>- Transaction rejected<br>- Internal error | `5265162270587964` | `US` |
| `20072` | Account not yet activated | `5525192142230028` | – |
| `20182` | Policy | `5347965091482021` | `BR` |
| `20183` | Security | `5357219827207436` | `BG` |
| `30041` | Lost card – pick up | `5363450180402239` | `PH` |
| `30043` | Stolen card – pick up | `5355222710255852` | `GB` |
| `30046` | Closed account | `5525192142230002` | – |
| `30046` | Closed account | `5355222710255878` | `GB` |

### Request example

```json
{
  "source": {
    "type": "card",
    "number": "4544249167673670",
    "cvv": "100",
    "expiry_month": 12,
    "expiry_year": 2030
  },
  "currency": "USD",
  "amount": 100,
  "processing_channel_id": "pc_dkgoofpvuwuerekvd4ssr6jwom"
}
```

### Response example

```json
{
  "id": "pay_aqwuar5sjb5upkupgywyzapfii",
  "action_id": "act_aqwuar5sjb5upkupgywyzapfii",
  "currency": "USD",
  "amount": 100,
  "approved": false,
  "status": "Declined",
  "response_code": "20051",
  "source": {
    "type": "card",
    "expiry_month": 12,
    "expiry_year": 2030,
    "last4": "3670",
    "fingerprint": "F31828E2BDABAE63EB694903825CDD36041CC6ED461440B81415895855502832",
    "bin": "424242"
  },
  "processed_on": "2023-01-17T17:41:52Z",
  "_links": {
    "self": {
      "href": "https://{prefix}.api.sandbox.checkout.com/payments/pay_aqwuar5sjb5upkupgywyzapfii"
    },
    "actions": {
      "href": "https://{prefix}.api.sandbox.checkout.com/payments/pay_aqwuar5sjb5upkupgywyzapfii/actions"
    }
  }
}
```

---

## Default cards and responses

To simulate a payment, use one of the following test cards:

**Visa**

| Card type | Card number | Response code | Country code |
| --- | --- | --- | --- |
| Credit | `4000020000000000` | `10000` | `US` |
| Credit | `4242424242424242` | `10000` | `GB` |
| Credit | `4242424242424242`<br>Set payment `amount` to `101`. | `20051` | `GB` |
| Credit | `4273149019799094`<br><br>For card verifications only. Capture and Void actions are declined for this card. | `10000` | `TR` |
| Credit | `4539467987109256` | `20005` | `ES` |
| Credit | `4024007181869214` | `20005` | `US` |
| Credit | `4916301720257093` | `20020` | `US` |
| Credit | `4485899805156040` | `200R1` | `US` |
| Debit | `4659105569051157` | `10000` | `GB` |
| Debit | `4095254802642505` | `20068` | `US` |
| Prepaid | `4000148147058142` | `20020` | – |

**Mastercard**

| Card type | Card number | Response code | Country code |
| --- | --- | --- | --- |
| Credit | `5436031030606378` | `10000` | `MU` |
| Credit | `5585076576791786` | `20005` | `HU` |
| Debit | `5305484748800098` | `10000` | `DE` |

**American Express**

| Card type | Card number | Response code | Country code |
| --- | --- | --- | --- |
| Credit | `345678901234564` | `10000` | `ES` |
| Credit | `341829238058580` | `20005` | `US` |

**Cartes Bancaires**

| Card type | Card number | Response code | Country code |
| --- | --- | --- | --- |
| Debit | `4010061700000021` | `10000` | `FR` |

**Discover**

| Card type | Card number | Response code | Country code |
| --- | --- | --- | --- |
| Credit | `6011111111111117` | `10000` | `US` |
| N/A | `6011111111111118` | `20005` | `US` |
| Credit | `6011201559638046790` | `20005` | `US` |
| Credit | `6445979375892355607` | `10000` | `US` |

**Diners**

| Card type | Card number | Response code | Country code |
| --- | --- | --- | --- |
| Credit | `36160940933914` | `10000` | `KR` |
| Credit | `36160912071610` | `20005` | `KR` |

**Japan Credit Bureau (EEA & UK only)**

| Card type | Card number | Response code | Country code |
| --- | --- | --- | --- |
| Credit | `3530111333300000` | `10000` | `JP` |
| Credit | `3582069482684995` | `10000` | `JP` |
| Credit | `3528257085901927` | `20005` | `JP` |
| Credit | `3566027046765007` | `10000` | `JP` |

---

## 3D Secure test cards

Use these test cards to simulate different 3D Secure (3DS) authentication flows and results.

You can use:

- Any valid three-digit CVV for Visa and Mastercard, or four-digit CVV for American Express
- Any future expiry date, in the format `MM/YY` or `MM/YYYY`

If your 3DS authentication test is challenged, and you're redirected to the 3DS simulator page, enter the password `Checkout1!`.

You can also use all cards on this page as valid [network tokens](https://www.checkout.com/docs/payments/accept-payments/accept-a-payment-using-the-payments-api.md#Request_a_payment_with_a_network_token).

![Screenshot of 3DS simulator with prompt to enter password](https://www.checkout.com/docs/NAS/Testing/3ds-simulation.png)

---

### 3DS2 frictionless flow

| Card scheme | Card type | Card number | Country code | Result |
| --- | --- | --- | --- | --- |
| American Express | Credit | `345678901234564` | `ES` | Authentication successful |
| Cartes Bancaires or Mastercard | Credit | `5137210000000018` | `FR` | Authentication successful |
| Cartes Bancaires or Visa | Credit | `4010056200000018` | `FR` | Authentication successful |
| Mastercard | Credit | `5588686116426417` | `CN` | Authentication successful |
| UnionPay International | Debit | `6224120000000094` | `CN` | Authentication successful |
| Visa | Credit | `4485040371536584` | `US` | Authentication successful |
| American Express | Credit | `371064645462927` | `US` | Not authenticated |
| Cartes Bancaires or Mastercard | Credit | `5132562600000029` | `FR` | Not authenticated |
| Cartes Bancaires or Visa | Credit | `4022050100000000` | `FR` | Not authenticated |
| Mastercard | Credit | `5309961755464047` | `BR` | Not authenticated |
| UnionPay International | Debit | `6224120000000086` | `CN` | Not authenticated |
| Visa | Debit | `4539628347117863` | `AD` | Not authenticated |
| American Express | Credit | `344282679519362` | `US` | Authentication could not be performed |
| Cartes Bancaires or Mastercard | Credit | `5132562600000011` | `FR` | Authentication could not be performed |
| Cartes Bancaires or Visa | Credit | `4022050100000018` | `FR` | Authentication could not be performed |
| Mastercard | Credit | `5234106378657904` | `KR` | Authentication could not be performed |
| UnionPay International | Debit | `6224120000000078` | `CN` | Authentication could not be performed |
| Visa | Credit | `4024007186645015` | `US` | Authentication could not be performed |
| Cartes Bancaires or Mastercard | Credit | `5132562600000029` | `FR` | Attempted authentication |
| Cartes Bancaires or Visa | Credit | `4022050100000026` | `FR` | Attempted authentication |
| Mastercard | Debit | `5558468902774508` | `KE` | Attempted authentication |
| UnionPay International | Debit | `6224120000000029` | `CN` | Attempted authentication |
| Visa | Credit | `4556574722325580` | `PT` | Attempted authentication |
| American Express | Credit | `343397288296672` | `US` | Authentication rejected |
| Mastercard | Debit | `5596061690670931` | `IN` | Authentication rejected |
| UnionPay International | Debit | `6224120000000011` | `CN` | Authentication rejected |
| Visa | Credit | `4275765574319271` | `JP` | Authentication rejected |
| American Express | Credit | `378282246310005` | `US` | Card not enrolled |
| Cartes Bancaires or Mastercard | Credit | `5132562600000045` | `FR` | Card not enrolled |
| Cartes Bancaires or Visa | Credit | `4022050100000182` | `FR` | Card not enrolled |
| Mastercard | Debit | `5352151570003404` | `FR` | Card not enrolled |
| Visa | Credit | `4484070000035519` | `GB` | Card not enrolled |
| American Express | Credit | `378702153281139` | `US` | Error message during scheme communication |
| Cartes Bancaires or Mastercard | Credit | `5132562600000060` | `FR` | Error message during scheme communication |
| Cartes Bancaires or Visa | Credit | `4022050100000133` | `FR` | Error message during scheme communication |
| Mastercard | Credit | `5291144083573579` | `US` | Error message during scheme communication |
| Visa | Credit | `4452927588210665` | `US` | Error message during scheme communication |
| American Express | Credit | `340282533032846` | `US` | No associated 3DS method URL |
| Diners Club International (DCI) | Credit | `36747880216043` | `US` | No associated 3DS method URL |
| JCB | Credit | `3528982710432481` | `JP` | No associated 3DS method URL |
| Mastercard | Credit | `5121073611487018` | `US` | No associated 3DS method URL |
| UnionPay International | Debit | `6224120000000110` | `CN` | No associated 3DS method URL |
| Visa | Credit | `4556085951507152` | `ES` | No associated 3DS method URL |

---

### 3DS2 challenge flow

| Card scheme | Card type | Card number | Country code | Result |
| --- | --- | --- | --- | --- |
| American Express | Credit | `372688581899681` | `US` | Authentication successful |
| Cartes Bancaires or Mastercard | Credit | `5137210000000158` | `FR` | Authentication successful |
| Cartes Bancaires or Visa | Debit | `4010061700000021` | `FR` | Authentication successful |
| Mastercard | Credit | `5385308360135181` | `US` | Authentication successful |
| UnionPay International | Debit | `6224120000000003` | `CN` | Authentication successful |
| American Express | Credit | `346126139326850` | `US` | Authentication attempted |
| Cartes Bancaires or Mastercard | Credit | `5341034800000008` | `FR` | Authentication attempted |
| Cartes Bancaires or Visa | Credit | `4150561000000001` | `FR` | Authentication attempted |
| Mastercard | Debit | `5518832400606463` | `US` | Authentication attempted |
| UnionPay International | Debit | `6224120000000060` | `CN` | Authentication attempted |
| Visa | Credit | `4152868552773614` | `BH` | Authentication attempted |
| American Express | Credit | `375982239796002` | `US` | Authentication rejected |
| Cartes Bancaires or Mastercard | Credit | `5341034800000016` | `FR` | Authentication rejected |
| UnionPay International | Debit | `6224120000000052` | `CN` | Authentication rejected |
| Cartes Bancaires or Visa | Credit | `4150561000000019` | `FR` | Authentication rejected |
| American Express | Credit | `347411540178242` | `US` | Not authenticated |
| Cartes Bancaires or Mastercard | Credit | `5341034800000024` | `FR` | Not authenticated |
| Cartes Bancaires or Visa | Credit | `4150561000000027` | `FR` | Not authenticated |
| Mastercard | Credit | `5258901507741160` | `CA` | Not authenticated |
| UnionPay International | Debit | `6224120000000045` | `CN` | Not authenticated |
| Visa | Credit | `4243754271700719` | `US` | Not authenticated |
| American Express | Credit | `377990956548835` | `US` | Authentication could not be performed |
| Cartes Bancaires or Mastercard | Credit | `5341034800000032` | `FR` | Authentication could not be performed |
| Cartes Bancaires or Visa | Credit | `4150561000000035` | `FR` | Authentication could not be performed |
| Mastercard | Credit | `5569757734785691` | `US` | Authentication could not be performed |
| UnionPay International | Debit | `6224120000000037` | `CN` | Authentication could not be performed |
| Visa | Debit | `4447336775378848` | `US` | Authentication could not be performed |
| Cartes Bancaires or Mastercard | Credit | `5341034800000040` | `FR` | Error message during scheme communication |
| Cartes Bancaires or Visa | Credit | `4150561000000043` | `FR` | Error message during scheme communication |
| Mastercard | Prepaid | `5572408422189334` | `IE` | Error message during scheme communication |
| Visa | Credit | `4539929207120660` | `IN` | Error message during scheme communication |
| American Express | Credit | `372310461284948` | `US` | No associated 3DS method URL |
| Cartes Bancaires or Mastercard | Credit | `5341034800000057` | `FR` | No associated 3DS method URL |
| Cartes Bancaires or Visa | Credit | `4150561000000183` | `FR` | No associated 3DS method URL |
| Diners Club International (DCI) | Credit | `36138956596288` | `AT` | No associated 3DS method URL |
| JCB | Credit | `3528682570029332` | `JP` | No associated 3DS method URL |
| Mastercard | Credit | `5259410220714099` | `US` | No associated 3DS method URL |
| UnionPay International | Debit | `6224120000000128` | `CN` | No associated 3DS method URL |
| Visa | Credit | `4485597929486000` | `US` | No associated 3DS method URL |

---

### Non-3D Secure enabled cards

The following cards are not enabled for 3D Secure. If you request a payment with `3ds.enabled: true`:

- The `response_code` field returns the code `20150`.
- The `response_summary` field returns the value `Card not 3D-Secure enabled`.

For more information, see [Response code testing](https://www.checkout.com/docs/developer-resources/testing/test-cards.md#Response_code_tests).

| Card scheme | Card type | Card number | CVV | Country code |
| --- | --- | --- | --- | --- |
| JCB (UK only) | Credit | `3530111333300000` | `100` | `JP` |
| Mastercard | Debit | `5352151570003404` | `100` | `FR` |
| Visa | Credit | `4532432452900131` | `257` | `DE` |

---

## Amount-based approval and insufficient funds

To simulate an authorization that depends on the payment amount, use the following test cards. If you set:

- `amount` to `100.00` or less – The payment is approved.
- `amount` to a value greater than `100.00` – The payment is declined with the `20051 - Insufficient funds` response code.

| Card number | Scheme | Country code |
| --- | --- | --- |
| `5333170000000008` | Mastercard | `IT` |
| `5318773000000008` | Mastercard | `US` |

---

## Approved card verification with declined authorization

To simulate a card verification, use the following cards. If you set:

- `amount` to `0` – The card verification is successful.
- `amount` to a value greater than `0` – The authorization request is declined with the corresponding response code.

For more information, see [Card verification](https://www.checkout.com/docs/payments/authenticate-payments/card-verification.md).

| Card number | Response code | Description | Country code |
| --- | --- | --- | --- |
| `4644968546281686` | `20012` | Invalid transaction | `GB` |
| `5355228287185489` | `20012` | Invalid transaction | `GB` |
| `4546381219393284` | `20051` | Insufficient funds | `GB` |
| `5355229757805879` | `20051` | Insufficient funds | `GB` |
| `4325350188287824` | `20051` | Insufficient funds | `GB` |
| `4543611423334994` | `20061` | Activity amount limit exceeded | `GB` |
| `5355222589678168` | `20061` | Activity amount limit exceeded | `GB` |
| `4394666298116207` | `20061` | Activity amount limit exceeded | `GB` |
| `4857662623668665` | `20062` | Restricted card | `GB` |
| `5355225201525238` | `20062` | Restricted card | `GB` |
| `4021277034700287` | `20062` | Restricted card | `GB` |
| `4407108123937239` | `20063` | Security violation | `GB` |
| `5355226042898974` | `20063` | Security violation | `GB` |

---

## Incremental authorization

Use any of the following Visa or Mastercard cards to simulate declined incremental authorizations.

For more information, see [Request an incremental authorization](https://www.checkout.com/docs/payments/accept-payments/authorize-a-payment.md#Request_an_incremental_authorization).

**Visa**

| Card number | Response code | Error code | Country code |
| --- | --- | --- | --- |
| `4659959652550685` | N/A | `incremental_authorization_unsupported` | `NO` |
| `4446900535698356` | N/A | `incremental_authorization_restricted_for_mcc` | `US` |
| `4140253846048187` | `20005` | N/A | `KR` |
| `4556447238607884` | `20068` | N/A | `GR` |

**Mastercard**

| Card number | Response code | Error code | Country code |
| --- | --- | --- | --- |
| `5436031030606386` | `20005` | N/A | N/A |

---

## Declined authorization with expired payment instrument

You can simulate a payment with an expired payment instrument by updating the instrument details and then reattempting the payment.

1. [Create a payment instrument](https://api-reference.checkout.com/tag/Instruments/#operation/createAnInstrument) using one of the following test card numbers and set the expiry date to any date in the past, in the format `MM/YY` or `MM/YYYY`:

| Card scheme | Card type | Card number | CVV |
| --- | --- | --- | --- |
| Visa | Debit | `4532446037926437` | Any three-digit number |
| Visa | Debit | `4724117215951699` | Any three-digit number |
| Visa | Prepaid card | `4000141680788456` | Any three-digit number |
| Mastercard | Debit | `5287286878576972` | Any four-digit number |

2. [Request a payment](https://api-reference.checkout.com/tag/Payments/#operation/requestAPaymentOrPayout) using the payment instrument. <br>The payment fails and returns the response code `20054` because the card is expired.
3. [Update the payment instrument](https://api-reference.checkout.com/tag/Instruments/#operation/updateInstrument) and set the new expiry date to any date in the future, in the format `MM/YY` or `MM/YYYY`. <br>In your production environment, you would contact your customer and ask them to provide updated payment details.
4. Request a new payment using the updated payment instrument. <br>The payment succeeds and returns the response code `10000`.

---

## Card payout test cards

Use the following consumer debit test cards to simulate different response code outcomes for a payout:

**Visa**

| Response code | Card number | Country code |
| --- | --- | --- |
| `10000` | `4921817844445119` | `GB` |
| `10000` | `4978313915783283` | `FR` |
| `10000` | `4076613139850359` | `SG` |
| `10000` | `4024764449971519` | `US` |
| `20005` | `4818192525595285` | `GB` |
| `20005` | `4558473893020179` | `FR` |
| `20005` | `4811553373235190` | `SG` |
| `20005` | `4610179846730147` | `US` |
| `20057` | `4818192160565981` | `GB` |
| `20057` | `4975992266555193` | `FR` |
| `20057` | `4815649658513826` | `SG` |
| `20057` | `4610174464118832` | `US` |

**Mastercard**

| Response code | Card number | Country code |
| --- | --- | --- |
| `10000` | `5355224968521878` | `GB` |
| `10000` | `5132728491870081` | `FR` |
| `10000` | `5526303170157160` | `SG` |
| `10000` | `5318773012490080` | `US` |
| `20005` | `5574357535453624` | `GB` |
| `20005` | `5132724072801678` | `FR` |
| `20005` | `5274926611111018` | `SG` |
| `20005` | `5109110000000030` | `US` |
| `20057` | `5355224739676852` | `GB` |
| `20057` | `5136406072992030` | `FR` |
| `20057` | `5274926611111026` | `SG` |
| `20057` | `5109119931560251` | `US` |