Cybersource test cards

Use these details to try payments in a Cybersource sandbox (test) account. They work only in the sandbox: never use them in live, and never put real card or bank details into a sandbox.

You need Cybersource sandbox credentials first: see Cybersource sandbox credentials.

• Any card below with an expiry date after today is approved. Cybersource says its sandbox’s responses mostly depend on the payment amount, and the decline, address check and CVC triggers depend on the processor your sandbox account uses: choose yours on the Testing guide. Enter the amount at the checkout as you’d normally type it (for example 1.00): we send it to Cybersource unchanged.
• For address check results, set Address Verification in the Cybersource connection settings to Full Address (incl. email), Full Address (relaxed) or Zip Only (relaxed), so that the checkout asks for a billing address and we send it. With Zip Only (relaxed), we send unknown for the street, city and state. With Disabled, no address is sent and address checks can’t be tested.
• Enter CVC triggers in the checkout’s CVC field.
• For 3D Secure, switch on Enable 3DS in the Cybersource connection settings (3-D Secure must also be enabled on your Cybersource account). We run 3D Secure only when the customer pays online, not for payments staff take over the phone or for scheduled payments. Use the expiry date given above the 3D Secure table (Test Cases for 3-D Secure 2.x).

Use any expiry date after today. If a CVC is needed, use any three digits, or four digits for American Express. Cybersource lists more cards on its testing guide.

Decline, address check and CVC results in Cybersource’s sandbox depend on the processor your sandbox account is set up with. Cybersource’s Testing guide lists the triggers for each processor: choose yours from the list on that page.

Use expiry month January and a year three years from now (for example, 01/2029 in 2026). Cybersource lists more card brands on its 3-D Secure test case pages.

We take Apple Pay and Google Pay as network tokens, through our own wallet integration rather than Cybersource’s. To test them, see Testing Apple Pay and Google Pay.