Payment Link Card Test
Securely test your payment link card with our comprehensive guide.
Redeem your gift cards at any of our Merchants
You can purchase a gift card from any of these locations
Onyx Gift Cards is a Grenadian company designed to introduce, market and manage gift cards systems in Grenada for retailers and corporations. We are enthusiastic about the effect and influence we will have on the local market. We intend to expand our systems regionally with a range of product offerings and services.
Gift cards are the preferred way of giving and receiving gifts. They carry a monetary value that can be redeemed for gifts at your favorite store.
Onyx GiftCards are “Open Gift Cards” which means that they can be redeemed at multiple merchant locations. They are standard credit card size, can fit into the average wallet and made of PVC plastic. Onyx GiftCards are Barcoded for security and safety for the consumer and bear a disclaimer at the back.
Onyx Giftcards can be bought with a branded Card backer which is black in colour and is designed to fit the card. There is an area to write a brief message to the recipient as well.
A card test link is a checkout page, donation form, or payment endpoint that someone uses to check whether a stolen card number still works. The "link" part matters. Attackers do not need the merchant's permission or a real customer. They only need a live payment form that will return an answer: approved, declined, or something in between. That answer is the product. A card that authorizes gets passed along to be used for larger purchases. A card that declines gets discarded.
So the traffic hitting that page is not shopping. It is validation.
From the outside it can look like a good day. Order counts jump. Then the decline rate jumps with it. When I review a fraud dashboard during an active test, the shape is usually obvious once you know what you are looking at.
None of these alone proves an attack. Together they usually do.
A one dollar charge is less likely to trip a cardholder's alert threshold than a large one, and it costs the attacker almost nothing to try thousands of them. The goal is volume and speed, not revenue. That is also why card testing often targets small merchants, nonprofits, and platforms where onboarding is light and a payment form can be reached without an account.
The cheapest fix is usually the velocity limit. Most testing runs burn themselves out when the page stops answering fast enough to be useful.
Even when every test transaction is declined, you still pay. Authorization attempts carry fees from some processors. High decline rates damage your standing with your acquirer and can trigger a review or a reserve. Chargebacks from the cards that did go through land on you weeks later, after the goods shipped. And a payment page that gets flagged as a testing ground is a payment page that can get shut off.
Small unauthorized charges are a common first sign that a card number is in circulation. Report them to the issuer even if the amount is trivial. Ask for the card to be reissued, and consider a fraud alert or credit freeze if other accounts may be exposed. Do not wait for a large charge to show up before acting.
A card test link is an abuse of a working payment form. The people using it want a fast yes or no about a card they do not own. Merchants beat it by making that answer slow, expensive, and noisy, and by watching decline patterns closely enough to react the same day.