Choose from any of our gift cards to give to your loved ones
merchant card verification test
Redeem your gift cards at any of our Merchants
Merchant Card Verification Test: What It Checks and How to Run One
You can purchase a gift card from any of these locations
Onyx Gift Cards is a Grenadian company designed to introduce, market and manage gift cards systems in Grenada for retailers and corporations. We are enthusiastic about the effect and influence we will have on the local market. We intend to expand our systems regionally with a range of product offerings and services.
Gift cards are the preferred way of giving and receiving gifts. They carry a monetary value that can be redeemed for gifts at your favorite store.
Onyx GiftCards are “Open Gift Cards” which means that they can be redeemed at multiple merchant locations. They are standard credit card size, can fit into the average wallet and made of PVC plastic. Onyx GiftCards are Barcoded for security and safety for the consumer and bear a disclaimer at the back.
Onyx Giftcards can be bought with a branded Card backer which is black in colour and is designed to fit the card. There is an area to write a brief message to the recipient as well.
Card testing for merchant services is a fraud attack in which criminals push a high volume of small transactions through a merchant payment gateway to find out which stolen card numbers are still active. The goal is not to buy the product. It is to validate card data in bulk, then resell or monetize the working numbers elsewhere. For merchants and the service providers that board them, the attack appears as a sudden spike in low-value authorizations, a rising decline rate, and a wave of chargebacks weeks later.
Most card testing is automated. Bots submit hundreds or thousands of transactions in minutes, often from rotating IP addresses and disposable email domains.
Amounts are usually tiny, such as $0.10 to $2.00, because the fraudster only needs an approval or decline signal, not a completed sale.
The attack follows a repeatable sequence, and each stage leaves a different footprint in your authorization logs.
Fraudsters buy card numbers in bulk from underground markets, often as full data dumps that include the number, expiration date, and sometimes the CVV. Because the data comes from breaches and skimmers, much of it is stale.
Bots run the numbers against a checkout form or an API endpoint and record which ones return an approval code. Merchant accounts with weak bot defenses are preferred targets because the fraudster can test faster and cheaper.
Validated cards are sold at a premium or used for larger purchases, gift card loads, and digital goods. The original testing merchant absorbs the authorization fees and the eventual chargebacks.
Card networks hold acquirers and payment facilitators responsible for the fraud their merchants generate. Excessive fraud and chargeback volume can trigger monitoring programs, fines, reserve requirements, and eventually the termination of the merchant account or the entire portfolio.
Even a contained attack raises processing costs. Authorization fees apply to every attempt, and each successful small charge that is later disputed adds a chargeback fee that can exceed the transaction value many times over.
Layer controls at the gateway, the checkout page, and the rules engine. No single control catches everything.
PCI DSS v4.0 requires systems to limit the number of failed authentication attempts, which applies directly to login and checkout flows used by botnets. Card network fraud programs watch merchant-level fraud and chargeback ratios and can place a merchant in a monitoring program when thresholds are breached.
Acquirers and payment facilitators are expected to apply underwriting checks, transaction monitoring, and timely remediation for the merchants they sponsor.
Look at average order value, conversion behavior, and device reuse. A real promotion brings browsing sessions and repeat customers, while card testing brings instant checkouts from many devices with near-identical tiny amounts.
It reduces it but does not eliminate it. Some stolen data sets include the CVV, so merchants still need velocity limits and bot detection alongside verification checks.
Card networks generally flag merchant accounts when the monthly chargeback ratio approaches 1 percent of transactions or a comparable count threshold, depending on the program and card brand.
Voiding or refunding a suspicious authorization can reduce chargeback exposure, but the merchant should still document the event and tighten controls, because refunds do not remove the fraudster's ability to test again.
