Card Testing for Merchants: Spot It and Stop It

Our Cards

Choose from any of our gift cards to give to your loved ones

Top Pick for Merchant Card Validation Test

giftcardimage

Where to Use?

Redeem your gift cards at any of our Merchants

read more

Where to Buy?

You can purchase a gift card from any of these locations

merchant card testing system

ABOUT US

about

What is ONYX GiftCards?

Onyx Gift Cards is a Grenadian company designed to introduce, market and manage gift cards systems in Grenada for retailers and corporations. We are enthusiastic about the effect and influence we will have on the local market. We intend to expand our systems regionally with a range of product offerings and services.

What is a Gift Card?

Gift cards are the preferred way of giving and receiving gifts. They carry a monetary value that can be redeemed for gifts at your favorite store.
Onyx GiftCards are “Open Gift Cards” which means that they can be redeemed at multiple merchant locations. They are standard credit card size, can fit into the average wallet and made of PVC plastic. Onyx GiftCards are Barcoded for security and safety for the consumer and bear a disclaimer at the back.
Onyx Giftcards can be bought with a branded Card backer which is black in colour and is designed to fit the card. There is an area to write a brief message to the recipient as well.

How it Works?

  • Buy an Onyx Gift Card at these local stores
  • Give your gift card to friends, family, co-workers, etc.
  • The recipient can shop at our select merchants nationwide
  • Your friends, family, co-workers, etc. will present their gift card at checkout to pay for your item(s)
  • They will walk away happy with the best gift ever...the gift of Choice

Why ONYX GiftCards?

  • Save TIME. No need to run around looking for the perfect gift
  • Redeem from a variety of business island-wide. We will continue adding businesses as fast as ONYX grows.
  • ONYX Gift Cards do not expire
  • Cards are valued at convinient amounts to meet every need and occasion

Short answer: card testing is fraud where someone pushes stolen card numbers through your checkout to find out which ones still work. The attacker is not shopping. They are using your store as a validator, and the actual purchase happens somewhere else. For a merchant, it shows up as a burst of small orders, a pile of failed authorizations, chargebacks a few weeks later, and eventually fees or a review from your acquirer.

How the attack works

Someone buys or scrapes a list of card numbers, then needs to know which ones are live before selling them or using them on high-value goods. Testing a card on a real merchant is the cheapest way to check. Your store gets a handful of $1 donations, digital downloads, gift cards, or trial subscriptions, each on a different card, and the attacker keeps whichever ones authorize.

Most of the time it is automated. Bots hit your payment endpoint directly, sometimes skipping the cart entirely, and they come from rotating IPs and proxy pools. That is why the traffic often looks like a spike in failed checkouts rather than a spike in sales.

Warning signs in your order data

What it costs beyond the refunded orders

The stolen goods are the smallest part of the bill. Every disputed transaction carries a chargeback fee, and a high dispute ratio can put you into a card brand monitoring program. That means fines, a remediation plan, and a reserve held against future sales. Sustained abuse can end with your processing account closed, which is a far bigger problem than the fraud itself.

There is also a performance cost. Bot traffic to your payment endpoint burns server capacity, slows checkout for real customers, and pollutes your analytics, so your conversion data stops being trustworthy.

Defenses that work in layers

At checkout

On the payment side

In monitoring

If it already happened

  1. Block the offending IPs, devices, and email domains, then tighten the rules that let them through.
  2. Refund or void anything that has not shipped, and cancel pending digital deliveries.
  3. Pull the authorization logs and write down the timeline, volumes, and card patterns while the data is fresh.
  4. Contact your acquirer or processor before the chargebacks land. They can flag your account and often suggest rules that fit your volume.
  5. Expect disputes to follow for 30 to 120 days, and respond to each one with evidence.

The pattern repeats in waves, so treat the first hit as a reason to build detection rather than a one-off cleanup.

Contact Us

Latest

Latest

Requirements to Sell CVV Online

Discover the key requirements for selling CVV online and ensure you understand the legal and ethical implications involved.

Read our complete guide: Should You Buy CVV From a Card Shop? The Honest Buyer's Guide