Sandbox gateway

When developing or testing, unless you are testing how a specific gateway behaves, we recommend you use the Sandbox Gateway. It is only listed on accounts in sandbox mode and needs no credentials.

Gateway options

You don’t need to change any settings unless you are testing a specific scenario. Enable Cards is selected when you first connect.

Option	Description
Enable Cards	Allows credit and debit cards at checkout.
Enable ACH	Allows ACH (US bank debit) at checkout. ACH is available for USD payments only.
Enable SEPA	Allows SEPA (euro bank debit) at checkout. SEPA is available for EUR payments only.
Enable Hosted	Emulates a hosted checkout: a pay button that opens a popup window with a third-party checkout, as with GoCardless, Mollie or PayPal. In the emulator you choose whether the payment succeeds or is declined.
Developer Mode	Shows a number of advanced options. If you are not developing an integration, don’t use it.

If you select Developer Mode, these options become available:

Option	Description
Disable Network Tokenisation	Turns off network token payments, which wallets such as Apple Pay and Google Pay use. Network tokenisation is on unless you select this.
Disable Save Card	Emulates a payment processor that doesn’t support saving cards.
Pending	Emulates a payment processor that doesn’t authorise a payment immediately but returns a PENDING status. Enter the number of Seconds the payment stays PENDING (for example 600 for 10 minutes).
JS Wrapper	Emulates a payment processor that needs to inject its own JavaScript library into the checkout page.
Require 3DS Window	Emulates a payment processor that requires 3D Secure to be hosted outside an iframe.
Require Account Name	Emulates a payment processor that requires an account name to authorise a payment.
Require address (AVS)	Emulates a payment processor that requires a billing address to authorise a payment.
Require CVC	Emulates a payment processor that requires a CVC to authorise a payment.
Require Email	Emulates a payment processor that requires an email address to authorise a payment.
Require Phone	Emulates a payment processor that requires a phone number to authorise a payment.
Require Line Items	Emulates a payment processor that requires line items to authorise a payment.

Note: If you are using Shuttle’s checkout, most developer options are handled for you. You should still handle a PENDING response from the checkout, and the approval or decline webhook that follows.

Test cards

Each card below tests one scenario. Test at least every card that isn’t simply approved, or, if you are building your own checkout, every card in the list.

For every card:

• Expiry: any date that hasn’t passed. An expired date is declined.
• CVC: 3 digits, or 4 digits for American Express. A CVC of any other length is declined.
• A card number that isn’t in these tables is declined as not a test card.

PAN	Outcome
4242424242424242	Approved - Visa
4111111111111111	Approved - Visa
4000056655665556	Approved - Visa
5555555555554444	Approved - Mastercard
2223003122003222	Approved - Mastercard, “2” range
5200828282828210	Approved - Mastercard, “52” range
5105105105105100	Approved - Mastercard, “51” range
378282246310005	Approved - American Express
371449635398431	Approved - American Express
6011111111111117	Approved - Discover
6011000990139424	Approved - Discover
3056930009020004	Approved - Diners Club
36227206271667	Approved - Diners Club, 14 digits
3566002020360505	Approved - JCB
6200000000000005	Approved - UnionPay
4444333322221111	Approved when keyed; declined (DECLINED_CALL_BANK, insufficient funds) when charged as a saved card. Use it to test a recurring payment failing
4012000077777777	Approved after 30 seconds
4000000000000663	Approved - Visa. Every refund is declined
4000000000000077	Declined (DECLINED) - invalid CVC
4000003720000278	Declined (DECLINED_CALL_BANK) - insufficient funds
4000000000000093	Declined (DECLINED_BLOCKED) - stolen card
4000000000000010	Declined (DECLINED_ERROR) - merchant account locked
4000000000000028	Declined (DECLINED_RETRY) - rate limit exceeded
4000000000000036	Unresolved (UNRESOLVED) - it isn’t clear whether the payment went through

CVC triggers

On any test card except American Express, these CVC values force an outcome, whatever the card would otherwise do. Use them to test every outcome with one card, or when you can only use certain card numbers, such as on a phone carrier’s test connector.

CVC	Outcome
900	Pending (PENDING)
901	Declined (DECLINED)
902	Declined (DECLINED_ERROR)
903	Declined (DECLINED_RETRY)
904	Declined (DECLINED_CALL_BANK)
905	Declined (DECLINED_BLOCKED)
906	Unresolved (UNRESOLVED)

Wallet declines

When an Apple Pay or Google Pay payment reaches the Sandbox Gateway as wallet card details rather than a network token, an amount ending in .01 (for example 10.01) is declined. Any other amount is approved.

3D Secure test cards

3D Secure is only requested for online (ecommerce) payments. The 3D Secure window lets you choose the result of the challenge: Emulate Success, Emulate Failure or Emulate Retry. On other payments, such as payments taken over the phone, these cards behave without a challenge.

PAN	Outcome
4000000000003220	Visa. Requires 3D Secure, then approved
4000000000000044	Visa. Requires 3D Secure, then approved; declined (DECLINED_CALL_BANK, insufficient funds) when charged as a saved card
4000008400001629	Visa. A payment is declined (DECLINED) without a challenge; saving the card without a payment requires 3D Secure

Test ACH accounts

ACH payments must be in USD; any other currency is declined. Use any account type and any name on the account.

Routing number	Account number	Outcome
110000000	000123456789	Approved
110000000	000111111116	Declined - failure upon use
110000000	000111111113	Declined - account closed
110000000	000222222227	Declined (DECLINED_CALL_BANK) - insufficient funds
110000000	000333333335	Declined - debit not authorised
110000000	000444444440	Declined - invalid currency

Any other routing and account number is declined.

Test SEPA accounts

SEPA payments must be in EUR; any other currency is declined.

IBAN	Outcome
GB82WEST12345698765432	Approved
GB55WEST12345698765433	Declined

Any other IBAN is declined.