# Fortis test cards

> Test card numbers, bank accounts and other details for Fortis's sandbox, and the result each one gives.

Use these details to try payments in a Fortis sandbox (test) account. They work only in the sandbox: never use them in live, and never put real card or bank details into a sandbox.

Card declines and errors are triggered by the payment amount, and address and CVC results by the address and CVC you enter.

:::note[Where these details come from]
These are Fortis's test details, not ours. They were copied from Fortis's [Test Data](https://docs.fortispay.com/developers/api/test-data) page on 19 October 2026, and were correct on that date as far as that page shows. Fortis can change or withdraw them at any time, and we can't confirm that they work. Check Fortis's page for the current details, and ask Fortis if one doesn't behave as described.
:::

## How to choose a test result

- The amount sets card declines and errors ([Test Data](https://docs.fortispay.com/developers/api/test-data)). Enter it at the checkout as shown in the table, for example `6.16`.
- The street and ZIP code set the address check result. Set **Address Validation** in the Fortis connection settings to **Enabled**, so that the checkout asks for the street and ZIP code; **Zip Only** asks for the ZIP code only, and with **Disabled** the checkout doesn't ask for an address, so the address triggers can't be used. With **Enabled** or **Zip Only**, we ask Fortis to decline a payment whose address check fails, so use the matching address for payments you want approved.
- The CVC sets the CVC check result: enter it in the checkout's CVC field. For payments the customer makes online with a CVC, we switch on Fortis's `auto_decline_cvv`, so the CVC values marked "Declined if `auto_decline_cvv` is turned on" decline. We switch it off for payments staff take over the phone and for payments with a saved card.
- For ACH, choose your Fortis ACH product under **Transaction Service - ACH** in the Fortis connection settings (it's **Disabled** until you do).

## Cards

Use the expiry date 12/27, which Fortis gives for every card, and CVC `999` (`1234` for American Express), which Fortis lists as a matching CVC. Fortis doesn't list Diners Club or JCB test cards.

### Successful payments

| Card | Number | Notes |
| --- | --- | --- |
| Visa | `4111 1111 1111 1111` | |
| Visa | `4012 8888 8888 1881` | |
| Visa (corporate or purchasing) | `4005 5622 3121 2149` | |
| Mastercard | `5454 5454 5454 5454` | |
| Mastercard (corporate or purchasing) | `5405 2222 2222 2226` | |
| American Express | `3714 496353 98431` | Four-digit CVC |
| Discover | `6011 0009 9550 0000` | |

### Declines and errors

Use any test card above with these amounts. Fortis lists more amounts on its testing page.

| Number or trigger | Result |
| --- | --- |
| Amount `5.00` | Declined (DENY) |
| Amount `5.10` | Declined: call the issuer (CALL) |
| Amount `5.20` | Declined: pick up card (PKUP) |
| Amount `5.30` | Declined: retry (RETRY) |
| Amount `6.01` | Declined: generic failure (GENERICFAIL) |
| Amount `6.06` | Declined: pick up card, lost (PICKUP_LOST) |
| Amount `6.07` | Declined: pick up card, stolen (PICKUP_STOLEN) |
| Amount `6.13` | Declined: CVC error (CID_ERROR) |
| Amount `6.15` | Declined: do not honour (DO NOT HONOR) |
| Amount `6.16` | Declined: insufficient funds (INSUFFICIENT_FUNDS) |
| Amount `6.22` | Declined: card expired (CARD_EXPIRED) |
| Amount `6.25` | Declined: card not permitted (NOT_PERMITTED_CARD) |
| Amount `6.27` | Error: system error (SYSTEM_ERROR) |
| Amount `6.31` | Declined: account closed (ACCOUNT_CLOSED) |
| Amount `2.01` | Partial approval: only $1.00 approved (PARTIAL_AUTH) |
| Amount `9.05` | Approved when authorised, then declined when captured |
| Amount from `8.00` to `8.99` | The response is delayed by the number of cents in seconds (for example, `8.30` waits 30 seconds) |

### Address and CVC checks

If you don't send an address or CVC, that check fails but the payment isn't declined.

| Value | Result |
| --- | --- |
| Street `5800 NW 39th AVE`, ZIP code `32606` | Address check matches |
| Street `2831 NW 41st St STE J`, ZIP code `32615` | Address check fails, and the payment is declined |
| Any other address | Address check fails, but the payment isn't declined |
| CVC `999` (`1234` for American Express) | CVC matches |
| CVC `123` (`9999` for American Express) | CVC doesn't match, but the payment isn't declined |
| CVC `124` (`9998` for American Express) | CVC not processed. Declined if `auto_decline_cvv` is turned on. Our own tests with Fortis's sandbox use CVC `124` to get a decline |
| CVC `125` (`9997` for American Express) | CVC not on card or illegible. Declined if `auto_decline_cvv` is turned on |
| CVC `126` (`9996` for American Express) | Issuer doesn't take part in CVC checks. Declined if `auto_decline_cvv` is turned on |

## ACH (US bank accounts)

ACH payments aren't approved in real time like cards: Fortis says a failure takes 1 to 4 business days to come back. Fortis doesn't list ACH return triggers.

| Routing number | Account number | Result |
| --- | --- | --- |
| Any valid US routing number, for example `072000326` (Chase Bank) | Any number of 4 to 17 digits | Accepted |
| `021000021` | `123123123` (savings) | Accepted. Used in our own tests |