Skip to content
Status

Opayo test cards

Use these details to try payments in an Opayo sandbox (test) account. They work only in the sandbox: never use them in live, and never put real card or bank details into a sandbox.

Opayo only runs 3D Secure, address and CVC checks when they’re switched on for the sandbox account. Opayo’s sandbox profiles show both: one with these checks off, and one where they’re on and payments that fail them are rejected. See Connecting Opayo for connecting the account.

  • The card number sets whether the payment is approved: Opayo approves its listed test cards and declines any other number (Test in Sandbox).
  • The name on the card sets the 3D Secure result (Test in Sandbox). The checkout has no separate name-on-card field: we send Opayo the customer’s first and last name together. Enter the value, for example CHALLENGE, as the customer’s first name and leave the last name empty: if both are filled in, Opayo receives both and the trigger won’t match. We only send 3D Secure details on online payments, so phone (MOTO) payments aren’t authenticated.
  • 3D Secure, address and CVC checks follow the settings on the Opayo account: we don’t switch them on or off, except that we skip the address and CVC checks on a saved card paid without a CVC (Test in Sandbox).
  • To pass the address check, switch on Require address (AVS) in the Opayo connection here, then enter 88 as billing address line 1 and 412 as the postcode at checkout. With the setting off, we send Opayo a placeholder address instead, which fails the address check. In our own tests, a payment with that placeholder was rejected on Opayo’s sandbox profile with address and CVC checks on.
  • Enter the amount as normal, for example 100.00: Opayo has no amount triggers for cards.

Use any expiry date and the CVC 123 (1234 for American Express).

Opayo’s Test in Sandbox page says to use any expiry date “up to today’s date”, which reads as a date in the past, while its Opayo Direct Testing page says any expiry date. Our own tests with Opayo’s sandbox use 12/30.

Card Number Notes
Visa 4929 0000 0000 6 Used in our own tests with the name CHALLENGE
Visa Debit 4462 0000 0000 0003 Used in our own tests: approved with address and CVC checks on
Mastercard 5186 1506 6000 0009
Mastercard 5186 1506 6000 0207 Used in our own tests: approved with address and CVC checks on
Debit Mastercard 5185 6900 6000 0001 Used in our own tests
Maestro 6759 0000 0000 5 UK issued
American Express 3742 000000 00004 CVC 1234
Diners Club / Discover 3600 0000 0000 08

Opayo lists more cards on its Test in Sandbox page.

Number or trigger Result
4929 6021 1008 5639 (Visa, CVC 123) Declined by the bank
5403 8149 4860 8092 (Mastercard, CVC 123) Declined by the bank
Any card number not listed by Opayo Declined

The name on the card sets the 3D Secure result. Use one of the cards above, and enter one of these as the customer’s first name, with the last name left empty.

Name on card Result
SUCCESSFUL Frictionless: authenticated
CHALLENGE Challenge: enter challenge as the password to authenticate. Any other password fails
NOTAUTH Frictionless: not authenticated
PROOFATTEMPT Authentication attempted but not completed: treated as authenticated
NOTENROLLED Authentication couldn’t be performed
REJECT Authentication rejected by the issuer
TECHDIFFICULTIES Authentication couldn’t be completed
ERROR Authentication error
Value Result
Billing address line 1 88 and postcode 412 Address checks pass
Any other billing address line 1 or postcode Address checks don’t match: approved or rejected, depending on the account’s check settings
CVC 123 (1234 for American Express) CVC check passes

Was this page helpful?