Straight answer

How do I stop card testing on my checkout?

The problem“Carders keep hitting my cheapest plan. Dozens of small payments, most declined, and now disputes. How do I stop it?”

Card testing is fraudsters checking stolen cards with small payments on your checkout. Stop it with a bot check on checkout, a limit on payment attempts per email and IP address, and no cheap plan or card-required trial for them to use. Refund and block the test payments quickly, before the card owners dispute them.

Reviewed by Panche Isajeski, founder of AgentaOS, 19+ years in payments, featured on Indie Hackers. Drawn from the questions founders post on Reddit and Indie Hackers. General information, not legal advice. Checked .

Step by step

Seven ways to stop it

How to stop card testing
StepHow
1. Spot itCard testing looks like a burst of small payments, most of them declined, often on your cheapest plan or a free trial that needs a card, from many cards but few emails, IP addresses or countries.
2. Add bot protection to checkoutPut a CAPTCHA or bot check in front of the checkout or the step that creates it. Most testing is automated, so this stops the bulk of it.
3. Limit attemptsCap how many payment attempts one email, IP address or account can make in an hour. Real buyers rarely try more than two or three cards.
4. Remove the cheapest targetA $1 trial or a very cheap plan is the easiest way to test a card. Raise the lowest price, or start trials without a card and ask for it at the first charge.
5. Ask buyers to sign in firstRequiring an account with a verified email before checkout slows bots down and gives you an email to block.
6. Refund and block fastRefund any test payments that went through before the card owner disputes them, and block the emails and IP addresses involved.
7. Let your payment provider screen fraudTurn on the fraud screening your processor or merchant of record offers. A merchant of record is the seller of record, so it also handles the disputes.
Next step

Disputes and refunds

Who handles a dispute, and what it costs on each provider: refunds and chargebacks with a merchant of record. Dispute fees by provider are in the fees table.

Raising your lowest price is the simplest fix, and it is worth checking anyway: I have users, why does no one pay?

Questions

Related questions

What is card testing?

Card testing is when fraudsters use your checkout to check which stolen card numbers still work, usually with many small payments. The working cards are then used elsewhere, and you get the declines, the disputes and the fees.

Why do card testers pick my cheap plan?

A cheap plan or a card-required free trial is the lowest-cost way to check a card. Raising the lowest price or starting trials without a card removes the easy target.

Does card testing cause chargebacks?

Yes. When the real card owners see the payments, they dispute them. Every dispute adds a fee and raises your dispute rate, which payment providers watch closely.

Does a merchant of record protect me from card testing?

It helps. A merchant of record is the seller of record, so it handles disputes and screens payments for fraud. You still keep the cheap targets and bot access closed on your side.

Free pricing review

Is your cheapest plan a target?

Paste your product link. Pricing Intelligence tells you what to charge and how to package it, including your lowest plan. Free, no card.

€0 account, no cardSell as an individual or a company