# BS Payone test cards

> Test card numbers, bank accounts and other details for BS Payone's sandbox, and the result each one gives.

Use these details to try payments in a BS Payone sandbox (test) account. They work only in the sandbox: never use them in live, and never put real card or bank details into a sandbox.

Some results are set by the payment amount rather than the card. Cards, PayPal and SEPA must each be enabled in the [BS Payone connection](/payment-providers/bs-payone-connect/) before you can test them.

:::note[Where these details come from]
These are PAYONE's test details, not ours. They were copied from PAYONE's [3D-Secure](https://docs.payone.com/security-risk-management/3d-secure), [PAYONE Direct Debit](https://docs.payone.com/payment-methods/payone-direct-debit), [Bank Account Check](https://docs.payone.com/advanced-features/bank-account-check) and [PayPal](https://docs.payone.com/payment-methods/paypal) pages on 19 October 2026, and were correct on that date as far as those pages show. PAYONE can change or withdraw them at any time, and we can't confirm that they work. Check PAYONE's pages for the current details, and ask PAYONE if one doesn't behave as described.
:::

## How to choose a test result

- Switch on **Enable cards**, **Enable PayPal** or **Enable SEPA** in the [BS Payone connection](/payment-providers/bs-payone-connect/) for each method you want to test.
- For cards, the card number sets the result, and some amounts force an error with any card ([3D-Secure](https://docs.payone.com/security-risk-management/3d-secure)). Enter the amount as you would normally, for example `100.51`: we convert it to cents (`10051`) for PAYONE.
- The billing country matters if PAYONE's BIN country check is on: `4111 1111 1111 1111` is only accepted for Germany. We send the billing country entered at checkout, or Germany if there isn't one.
- For SEPA, the IBAN sets the result ([PAYONE Direct Debit](https://docs.payone.com/payment-methods/payone-direct-debit)). Type IBANs without spaces. The checkout checks IBANs, but lets PAYONE's test IBANs below through even where their check digits are wrong, as long as they start with a capital `DE` and have no spaces.
- For PayPal, pay with a buyer account from your own PayPal sandbox ([PayPal](https://docs.payone.com/payment-methods/paypal)).

## Cards

Use any future expiry date and any three-digit CVC (four digits for American Express).

### Successful payments

These cards are approved without 3D Secure.

| Card | Number | Notes |
| --- | --- | --- |
| Visa | `4111 1111 1111 1111` | If PAYONE's BIN country check is on, only accepted for Germany |
| Mastercard | `5500 0000 0000 0004` | |
| American Express | `3400 000000 00009` | CVC must be four digits, for example `1234` |
| JCB | `3528 0000 0000 0007` | |
| Diners Club | `3000 0000 0000 04` | |
| Discover | `6011 1111 1111 1117` | |

Our own card tests with PAYONE's sandbox don't currently pass: a payment with `4111 1111 1111 1111` returns "Successful 3D Secure authentication required" instead of an approval. We can't confirm that these cards are approved without 3D Secure here.

PAYONE's only Maestro test card is for 3D Secure 1, which it no longer accepts, so there's no Maestro card to test with. PAYONE lists more cards on its [3D-Secure](https://docs.payone.com/security-risk-management/3d-secure) page.

### Declines and errors

| Number or trigger | Result |
| --- | --- |
| `4301 1111 0000 0200` | Declined: authorisation declined (error 2) |
| `4301 1111 0000 0705` | Declined: CVC missing or invalid (error 7) |
| `4301 1111 0000 1307` | Declined: limit exceeded (error 13) |
| `4301 1111 0000 1406` | Declined: invalid card (error 14) |
| `4301 1111 0000 4301` | Declined: stolen card (error 43) |
| `4222 2222 0000 5100` | Declined: limit exceeded or insufficient funds (error 51) |
| `4222 2222 0000 6108` | Declined: card blocked (error 61) |
| `4301 1111 0000 0101` | Declined: card issuer temporarily not available (error 1) |
| `4301 1111 0007 0104` | Declined: rejected by PAYONE's BIN check (error 701) |
| Amount `100.51`, any card | Error: limit exceeded or insufficient funds (error 51) |
| Amount `100.61`, any card | Error: card blocked (error 61) |
| Amount `100.65`, any card | Error: card used too often (error 65) |
| Amount `109.02`, any card | Error: unknown error at an external service provider (error 902) |

PAYONE lists these amounts in cents (`10051` is 100.51) and asks you not to use other amounts for these tests, as the result can't be guaranteed.

### 3D Secure

Use any future expiry date and any three-digit CVC (four digits for American Express). When you're challenged, the password is `12345`.

| Number | Result |
| --- | --- |
| `4716 9719 4035 3559` (Visa) | Challenge: password `12345` succeeds. Anything else fails |
| `5404 1277 2073 9582` (Mastercard) | Challenge: password `12345` succeeds. Anything else fails |
| `3751 447260 36141` (American Express) | Challenge: password `12345` succeeds. Anything else fails |
| `4532 9934 6219 1243` (Visa) | Frictionless: approved |
| `5227 2481 8991 5672` (Mastercard) | Frictionless: approved |
| `3431 112167 81956` (American Express) | Frictionless: approved |
| `4499 5100 9639 2186` (Visa) | Frictionless: declined |
| `5535 3437 7324 2596` (Mastercard) | Frictionless: declined |
| `3743 094044 65067` (American Express) | Frictionless: declined |

## SEPA Direct Debit

Enter just the IBAN, without spaces: in test mode PAYONE adds the BIC (`TESTTEST`) itself. PAYONE's test IBANs aren't valid in live mode, and PAYONE says some deliberately have the wrong check digits. The checkout normally rejects an IBAN with wrong check digits, but it accepts all of PAYONE's test IBANs below, so you can use them here. Type them without spaces and with a capital `DE`, or the checkout rejects the returned-debit IBANs.

| IBAN | Result |
| --- | --- |
| `DE85 1234 5678 2599 1000 03` (Germany) | Collected |
| `AT96 3500 0001 2345 6789` (Austria) | Collected |
| `GB33 BUKB 2020 1555 5555 55` (UK) | Accepted. Used in our own tests |
| `DE70 1203 0000 0111 1111 12` | Returned: insufficient funds |
| `DE70 1203 0000 0111 1111 13` | Returned: the payer objects to the direct debit |
| `DE70 1203 0000 0111 1111 14` | Returned: account expired |
| `DE70 1203 0000 0111 1111 15` | Returned: account number or name doesn't match, is incorrect, or is a savings account |
| `DE70 1203 0000 0111 1111 16` | Returned: no direct debit |
| `DE70 1203 0000 0111 1111 17` | Returned: the payer recalls the direct debit |
| `DE70 1203 0000 0111 1111 18` | Returned: the executing bank returns the direct debit |

If you want to test SEPA from start to finish rather than a particular result, PAYONE says any correctly formatted IBAN will do.

## PayPal

PAYONE doesn't publish fixed PayPal test details. Create your own buyer test accounts in a PayPal sandbox at [developer.paypal.com](https://developer.paypal.com), and pay with one of them at checkout. For end-to-end tests you also need a PayPal sandbox merchant account, which PAYONE's Merchant Service adds to your PAYONE account on request.