The short answer to where to buy a test payment card is that you do not buy one. Payment processors publish sandbox card numbers for free in their developer documentation, and those numbers work only inside a test environment. If a seller asks for money in exchange for card numbers described as test cards, you are either paying for something already free or you are being sold card data taken from real accounts, which is a crime under federal law and in every US state. Go to the documentation of the gateway you already use, copy the numbers, and treat the purchase question as closed.

What a Test Payment Card Does

A test payment card is a number that a payment processor accepts in test mode, also called sandbox mode. It passes the same validation as a live card, including the Luhn check, the expiry check, and the card verification value check, but it never reaches an issuing bank and never moves money. Developers use these numbers to confirm that a checkout form validates input, that a decline shows the right message, and that a successful charge creates the order record the business expects.

What to Look For in a Set of Test Cards

Quality here means coverage, not price. A useful set covers approvals, declines, authentication challenges, and the card brands your customers carry.

  • Processor match. Numbers from one gateway often fail on another. Use the set published by the processor that holds your merchant account.
  • Decline scenarios. Look for cards that return specific error codes such as insufficient funds, expired card, incorrect CVC, and processing error.
  • 3D Secure coverage. Cards that trigger an authentication challenge and cards that pass without one.
  • Brand coverage. Visa, Mastercard, American Express, and Discover, plus any local debit brand you accept.
  • AVS and postal code pairs. Address verification tests need both matching and mismatching postal codes.
  • Currency support. If you sell in more than one currency, confirm the card works for each one you settle.

Parameter Bands

Test card numbers follow the same issuing ranges as live cards, so you can read brand and length at a glance.

  • Visa: starts with 4, 16 digits. The number 4242 4242 4242 4242 is the common approval case.
  • Mastercard: starts with 51 through 55, or with 2221 through 2720, 16 digits.
  • American Express: starts with 34 or 37, 15 digits, 4 digit CVC.
  • Discover: starts with 6011 or 65, 16 digits.
  • Expiry: any future date in test mode. CVC: any 3 digits, or 4 for American Express.

Pitfalls

  • Paying for numbers that the processor gives away.
  • Pasting test numbers into a live checkout on a site you do not own. That is an attempt at fraud, not testing.
  • Mixing test API keys with live keys, which produces confusing failures.
  • Assuming a test approval proves your live account is configured. Payouts, fees, and risk rules exist only in live mode.
  • Storing test credentials in shared documents or source control where they leak alongside live keys.
  • Trusting a brand sheet that lists one decline code and calling the coverage complete.

FAQ

Are test payment cards free?

Yes. Stripe, PayPal, Adyen, and other processors publish them at no cost in developer documentation.

Will a test card work on a real store?

No. Test numbers are rejected outside the sandbox. Any number that authorizes a real charge is a live card, and using one you do not own is illegal.

Do test cards exercise 3D Secure?

Some do. Processors publish separate numbers for challenge and frictionless flows, so check that list if authentication is part of your build.

Can I buy a set of test cards from a reseller?

There is no legitimate reseller market. Anything sold as a batch of card numbers for testing is either a copy of free documentation or stolen data.