How Checkout.com test cards work
Checkout.com test cards work in the sandbox environment (https://{prefix}.api.sandbox.checkout.com) with your sandbox API keys. Never use real card numbers there. The sandbox keeps payments for 30 days, so finish each test flow within that time.
Use any future expiry date (MM/YY or MM/YYYY) and any valid CVV: three digits for Visa and Mastercard, four for American Express. Some cards respond to the amount: 4242 4242 4242 4242 with an amount of 101 returns 20051 (insufficient funds), and cards 5333 1700 0000 0008 and 5318 7730 0000 0008 are approved up to 100.00 and declined above it.
When a 3D Secure test is challenged, you are redirected to a simulator page. Enter the password Checkout1! to complete it.
Decline and error response codes
Each card returns the response code shown. Checkout.com documents more cards per code, including Mastercard versions.
| Brand | Number | Result | Copy |
|---|---|---|---|
| Visa | 4276 0385 7859 6818 | 2005C – Transaction not supported / blocked by issuer | |
| Visa | 4152 8125 2183 3588 | 2009G – Blocked by cardholder / Contact cardholder | |
| Visa | 4734 8689 5873 3862 | 200N7 – Decline for CVV2 failure | |
| Visa | 4567 3613 2598 1788 | 200R3 – Issuer initiated a stop payment (revocation order) for all authorizations | |
| Visa | 4111 1111 1111 1129 | 20001 – Refer to card issuer | |
| Visa | 4024 0071 0357 3027 | 20012 – Invalid transaction | |
| Visa | 4485 3815 7718 2090 | 20014 – Invalid card number | |
| Visa | 4544 2491 6767 3670 | 20051 – Insufficient funds | |
| Visa | 4659 4658 8870 5671 | 20057 – Transaction not permitted to cardholder | |
| Visa | 4897 4535 6848 5113 | 20059 – Suspected fraud | |
| Visa | 4556 2945 9375 7189 | 20061 – Activity amount limit exceeded | |
| Visa | 4818 9242 5013 1070 | 20062 – Restricted card | |
| Visa | 4556 2537 5271 2245 | 20063 – Security violation | |
| Visa | 4095 2548 0264 2505 | 20068 – Response received too late / timeout | |
| Visa | 4532 8194 1348 7978 | 20078 – Blocked, first use – transaction from new cardholder, card not properly unblocked | |
| Visa | 4732 7893 6314 5785 | 20082 – No security model | |
| Visa | 4500 6228 6834 1387 | 20154 – 3DS authentication required | |
| Visa | 4024 0071 6218 5267 | 30015 – No such issuer | |
| Visa | 4941 2020 6099 9329 | 30041 – Lost card – pick up | |
| Visa | 4539 2536 5571 1767 | 30043 – Stolen card – pick up | |
| Mastercard | 5510 6963 0311 7979 | 20003 – Invalid merchant | |
| Mastercard | 5510 6963 0311 7987 | 20030 – Format error | |
| Mastercard | 5525 1921 4223 0028 | 20072 – Account not yet activated | |
| Mastercard | 5347 9650 9148 2021 | 20182 – Policy | |
| Mastercard | 5357 2198 2720 7436 | 20183 – Security | |
| Mastercard | 5525 1921 4223 0002 | 30046 – Closed account | |
| Visa | 4539 4679 8710 9256 | 20005 – Declined - Do not honour | |
| Visa | 4916 3017 2025 7093 | 20020 – Invalid response | |
| Visa | 4485 8998 0515 6040 | 200R1 – Issuer initiated a stop payment (revocation order) for this authorization |
3D Secure 2 test cards
Visa and Mastercard cards per 3DS2 outcome. Checkout.com also lists American Express, Cartes Bancaires and UnionPay cards for each outcome.
| Brand | Number | Result | Copy |
|---|---|---|---|
| Mastercard | 5588 6861 1642 6417 | frictionless: Authentication successful | |
| Visa | 4485 0403 7153 6584 | frictionless: Authentication successful | |
| Mastercard | 5309 9617 5546 4047 | frictionless: Not authenticated | |
| Visa | 4539 6283 4711 7863 | frictionless: Not authenticated | |
| Mastercard | 5234 1063 7865 7904 | frictionless: Authentication could not be performed | |
| Visa | 4024 0071 8664 5015 | frictionless: Authentication could not be performed | |
| Mastercard | 5558 4689 0277 4508 | frictionless: Attempted authentication | |
| Visa | 4556 5747 2232 5580 | frictionless: Attempted authentication | |
| Mastercard | 5596 0616 9067 0931 | frictionless: Authentication rejected | |
| Visa | 4275 7655 7431 9271 | frictionless: Authentication rejected | |
| Mastercard | 5352 1515 7000 3404 | frictionless: Card not enrolled | |
| Visa | 4484 0700 0003 5519 | frictionless: Card not enrolled | |
| Mastercard | 5291 1440 8357 3579 | frictionless: Error message during scheme communication | |
| Visa | 4452 9275 8821 0665 | frictionless: Error message during scheme communication | |
| Mastercard | 5121 0736 1148 7018 | frictionless: No associated 3DS method URL | |
| Visa | 4556 0859 5150 7152 | frictionless: No associated 3DS method URL | |
| Mastercard | 5385 3083 6013 5181 | challenge: Authentication successful | |
| Mastercard | 5518 8324 0060 6463 | challenge: Authentication attempted | |
| Visa | 4152 8685 5277 3614 | challenge: Authentication attempted | |
| Mastercard | 5258 9015 0774 1160 | challenge: Not authenticated | |
| Visa | 4243 7542 7170 0719 | challenge: Not authenticated | |
| Mastercard | 5569 7577 3478 5691 | challenge: Authentication could not be performed | |
| Visa | 4447 3367 7537 8848 | challenge: Authentication could not be performed | |
| Mastercard | 5572 4084 2218 9334 | challenge: Error message during scheme communication | |
| Visa | 4539 9292 0712 0660 | challenge: Error message during scheme communication | |
| Mastercard | 5259 4102 2071 4099 | challenge: No associated 3DS method URL | |
| Visa | 4485 5979 2948 6000 | challenge: No associated 3DS method URL |
Other test triggers
- Amounts:
4242 4242 4242 4242with amount 101 → 20051 Insufficient funds.5333 1700 0000 0008and5318 7730 0000 0008→ approved up to 100.00, 20051 above. - CVV results (with
4659 1055 6905 1157or5305 4847 4880 0098): CVV 204 → D (did not match), empty → N, 205 → P (not performed), 202 → U (issuer does not support CVV); any other 3-digit value matches. - AVS results: put
Test_A,Test_N,Test_R,Test_U,Test_YorTest_Zinbilling_address.address_line1(with a ZIP) to get that AVS code. - Expired card: create an instrument with a past expiry date; the payment returns 20054. Update it to a future date and it returns 10000.
- 3DS not enabled: sending
3ds.enabled: truewith a non-enrolled card returns 20150.
Testing Checkout.com payments step by step
- Create a sandbox account and generate secret and public keys in the Dashboard.
- Tokenize a card with Frames or Flow, or send the card in the payment request, and pay with an approved card.
- Repeat with the decline cards to cover the response codes your app maps to messages.
- Send
3ds.enabled: truewith the 3DS cards and complete the challenge withCheckout1!. - Test CVV results with
4659 1055 6905 1157(Visa): CVV 204 does not match, 205 is not checked, 202 is not supported by the issuer.
Common errors and fixes
- 20150 “Card not 3D-Secure enabled”
- You sent
3ds.enabled: truewith a card that isn’t enrolled. Use a card from the 3DS table. - Unexpected 20051
- Check the amount: some test cards decline above 100.00, and 4242 4242 4242 4242 declines at 101.
- Payment missing after a month
- The sandbox keeps payments for 30 days.
Sources
Every number on this page was copied from Checkout.com’s official documentation and passes the Luhn check. Checked October 2026; gateways change their test data from time to time, so if a number stops working, check the source:
- Checkout.com docs – Test cards
- Checkout.com docs – Simulate card verification outcomes
- Checkout.com docs – AVS check testing
- Checkout.com docs – Payments testing
- Checkout.com docs – API response codes
Frequently asked questions
What is the Checkout.com test card number?
4242 4242 4242 4242 (Visa) is approved with any future expiry date and any CVV — except with an amount of 101, which returns insufficient funds.
What is the Checkout.com 3DS test password?
Checkout1! on the 3D Secure simulator page.
How do I test a decline in the Checkout.com sandbox?
Use a card from the decline table, for example 4544 2491 6767 3670 for 20051 (insufficient funds) or 4539 4679 8710 9256 for 20005 (do not honour).
Can I use these test cards on another gateway?
Usually not. Each gateway only recognises its own documented test numbers in its own sandbox. Some numbers, such as 4111 1111 1111 1111, appear in several lists, but the results they trigger differ. For format-only testing on your own forms, use our card generator.