Test Credentials
Sandbox cards, ACH accounts, and AVS test data per provider. Copy any value with the icon button.
These values only work against each provider's sandbox / test environment. Charging them through a live credential will be declined as invalid card. For end-to-end exercises, use the Test Capture page with a credential whose mode is
test.Authorize.Net
ACH (eCheck.Net)
| Account number | 000123456789 | |
| Routing number | 122105812 | |
| Holder name | any name | |
| Account type | either checking or savings | |
| Currency | USD | |
| Country | US |
Credit card — generic data
Use any name, any future expiration (MM/YY), any 3-digit CVV, and any 5-digit ZIP unless testing AVS specifically.
Test card numbers
| Brand | PAN | |
|---|---|---|
| American Express | 370000000000002 | |
| China UnionPay | 6221499053360818 | |
| China UnionPay | 6262320002000067 | |
| China UnionPay | 6284480000000008 | |
| Discover | 6011000000000012 | |
| JCB | 3088000000000017 | |
| Diners Club / Carte Blanche | 38000000000006 | |
| Visa | 4007000000027 | |
| Visa | 4012888818888 | |
| Visa | 4111111111111111 | |
| Mastercard | 5424000000000015 | |
| Mastercard | 2223000010309703 | |
| Mastercard | 2223000010309711 |
AVS test ZIPs
| ZIP | Expected result |
|---|---|
| 46282 | AVS mismatch — declined (response_reason_code 27 → CPP invalid_card) |
| 46203 | ZIP no match, address yes — partial match |
| 46201 | ZIP yes, address no — partial match |
| 54321 | AVS unavailable — typically approves |
| any other 5-digit | AVS approves |
Test cards
Use any future expiration, any 3-digit CVC (4 for Amex), any postal code.
| Brand / behavior | PAN | |
|---|---|---|
| Visa (success) | 4242424242424242 | |
| Visa (debit) | 4000056655665556 | |
| Visa (declined: generic)Triggers card_declined / generic_decline | 4000000000000002 | |
| Visa (declined: insufficient funds) | 4000000000009995 | |
| Visa (declined: lost card) | 4000000000009987 | |
| Visa (3DS required)Triggers payment_intent.requires_action | 4000002500003155 | |
| Mastercard | 5555555555554444 | |
| Amex | 378282246310005 | |
| Discover | 6011111111111117 |
ACH (us_bank_account)
| Behavior | Routing | Account |
|---|---|---|
| Success (instant verification) | 110000000 | 000123456789 |
| Account closed | 110000000 | 000111111116 |
| No account | 110000000 | 000111111113 |
Test cards
Verify exact PANs against PaySafe's docs — they update the list periodically. Use any future expiration and any 3-digit CVV.
| Brand / behavior | PAN | |
|---|---|---|
| Visa (success) | 4111111111111111 | |
| Mastercard | 5454545454545454 | |
| Amex | 374200000000004 | |
| Visa (declined)Generic decline | 4000000000000002 |
Sandbox notes
- Sandbox emits SETTLEMENT_* events batched once daily ~midnight UK — INWH-30/31/32 tests need ~12-24h soak.
- SETTLEMENT_FAILED is rare per PaySafe support — not reliably reproducible in sandbox.
- ACH save_only is unsupported on the Payments API; use save_and_charge instead.
Test cards
Use any future expiration and CVV 123.
| Brand | PAN | |
|---|---|---|
| Visa | 4012888888881881 | |
| Mastercard | 5436886269848367 | |
| Amex | 345678901234564 |
Flow notes
- DPO uses a hosted-page redirect — the customer never enters card data into our PCA.
- BackURL callbacks are NOT signed; CPP re-verifies every event by calling DPO's verifyToken.
- Settlement reconciliation must be done in the DPO Merchant Portal (no API).