A free card test is a small authorization charge used to confirm that a payment card is active and the number is valid. Two different things get called this: merchant tools that check whether a checkout page works, and underground "card checker" sites that claim to validate card numbers at no cost. The second kind is carding fraud, and the sites behind it exist to collect the card data people paste into them.
What does a card test actually check?
A card test sends an authorization request to the card issuer and reads the response. That request can confirm several separate things, and each one fails on its own.
- Number format: the Luhn checksum, which catches typos and invented digits.
- Expiration date: an expired card returns a decline.
- CVV match: the 3 or 4 digit code on the card, verified by the issuer.
- Billing address: address verification (AVS) compares the street number and ZIP you enter against bank records.
- Available funds or credit: the issuer approves, declines, or holds the amount.
A free checker site cannot see issuer data. It has no connection to Visa, Mastercard, or any bank, so anything it shows you is invented or copied from a database it already holds.
Who runs card tests, and why?
Testing a payment card is a normal part of building and running an online store. The motives split into two groups that use the same mechanics.
Merchants and developers testing a checkout
Payment processors such as Stripe and Braintree publish test card numbers that only work in sandbox mode. Developers run those numbers through a staging checkout to confirm that declines, 3D Secure prompts, refunds, and webhooks all fire as expected. No real money moves, and no real card is touched.
Live merchants also run small authorization checks, often $0 or $1, to confirm a gateway is live after a config change. Those holds drop off within a few days.
Fraudsters testing stolen numbers
Carding crews buy batches of stolen card data and need to know which numbers still work before they cash out. They run low-value charges on gift card sites, donation pages, or their own payment pages, then sort the batch into live and dead cards. This is a small-charge fraud pattern, and it burns the merchant who processes it.
Why free card checker sites are a trap
Sites offering unlimited free card checks have no business model that survives without a victim. The victim is usually the person typing the numbers.
- Data harvesting: every number entered gets logged, bundled, and resold on the same dark web markets that sold it the first time.
- Fake results: a random green "valid" or red "dead" label keeps you typing in more cards.
- Phishing your own card: some checkers ask for your card and CVV to "verify" a small fee, then charge it.
- Malware: browser extensions and mobile apps that promise free checks often carry credential stealers or clipboard hijackers.
- Account bans: processors and platforms flag accounts tied to checker traffic and close them.
Is card testing illegal in the United States?
Testing a card you do not own or have permission to use is a federal crime under 18 U.S.C. § 1029, which covers fraudulent use of access devices. Penalties reach 10 to 15 years in prison plus fines, and the count rises with each card. Prosecutors charge card testing alongside wire fraud and identity theft when a scheme crosses state lines.
Buying card data is a separate charge. Holding stolen numbers, even without using them, supports the same prosecution. The FTC also brings civil actions against operations that run card testing attacks against merchants, because each test charge triggers chargeback fees that the merchant absorbs.
How to test your own card without paying a fee
If you want to confirm your own card works, you have free options that do not put your data at risk.
- Open your bank or card issuer app and check the current balance and any pending holds.
- Make a small purchase you planned anyway and watch the transaction post.
- Call the number on the back of your card and ask the issuer to confirm the account status.
- If you build software, use sandbox test cards from your payment processor instead of a live card.
- Set transaction alerts in your banking app so an unexpected $0 or $1 authorization shows up the same day.
What to do if someone tests your card
A small charge you do not recognize, often under $2, is the classic sign. Act on it before the big charge lands.
- Freeze the card in your issuer's app or call and report it as compromised.
- Request a new card number, not just a new expiration date.
- Dispute the test charge in writing so the issuer has a record.
- Report the incident to the FTC at ReportFraud.ftc.gov and to the FBI's IC3.
- Change passwords on shopping accounts that stored the card.
Frequently asked questions
Can I check if a card number is valid for free?
You can check your own card for free through your issuer's app, its phone line, or a small purchase. There is no free public service that tells you whether a stranger's card number is live, because that data sits behind bank systems that outsiders cannot query.
Do free card generators produce working numbers?
No. Generators run the Luhn formula to make a number that passes a format check, which is not the same as an open account. A generated number fails at the first real authorization request.
What happens to a card after a test charge?
The authorization places a temporary hold, usually $0 to $1, that drops off in a few days if the merchant voids it. On a stolen card, the fraudster moves to a larger purchase. On your card, it means the number leaked and the card should be replaced.