Skip to main content

Automated Card Testing Alerts and Restrictions

Updated

Overview

Card testing is a type of fraud where fraudsters use automated tools to verify stolen card numbers through small online transactions. Our Automated Card Testing Detection system helps protect your business by automatically detecting suspicious card testing activity, sending you immediate alerts, and temporarily restricting your account to prevent damage. This feature ensures you can act quickly to safeguard your business.

What Is Card Testing Detection?

Card testing detection is an automated tool that monitors transactions in real time. When a suspicious pattern is detected—such as a high number of failed transactions in a short period—the system:

  • Immediately restricts your account to stop further activity.
  • Sends real-time alerts via text message and email to enrolled users.
  • Allows authorized users to quickly review the activity and restore transaction processing if appropriate.

When to Use This & Merchant Impacts

You don't need to manually enable this feature—it's built into the system for your protection.

Why it matters:

  • Protects your business from fraudulent charges.
  • Prevents excessive transaction fees from failed card attempts.
  • Minimizes potential account or brand damage.
  • Enables faster response without needing to contact support.

Prerequisites

To receive card testing alerts:

For Email Notifications:

  • User must have the "Receive Card Testing Notifications" permission.
  • Only users with "Access Administrative Options" can un-restrict the account via email link.

For Text (SMS) Notifications:

  • User must have the "Receive Card Testing Notifications" permission.
  • A mobile phone number must be saved in the user account settings.
  • Only users with "Access Administrative Options" can un-restrict via SMS link.

Note: Primary users are automatically given these permissions and prompted to provide their mobile number on their next login.

How It Works

  1. Detection Triggered: The system detects suspicious card testing activity and immediately restricts the account.
  2. Notifications Sent: Alerts go out via SMS and email to enrolled users.
  3. Take Action:
    • Follow the link in the alert to access a temporary landing page.
    • Review suspected fraud activity and confirm if the transactions were intentional or not.
    • If safe, you may un-restrict your account and resume processing.

SMS Enrollment Example:

  • On login, primary users will be prompted to enter a mobile number.
  • A confirmation text is sent.
  • Users confirm receipt in the portal.
  • Phone number re-confirmation is required every 3 months.

Managing User Alerts

To enable alerts for other users:

  • Go to Settings → User Accounts.
  • Click a username, enter their mobile number, and check "Receive Card Testing Notifications".
  • Click Save.

Only users with administrative permissions can un-restrict the account.

Responding to Alerts

When you receive an alert:

  1. Click the link in the email or text message (valid for 48 hours).
  2. You’ll be taken to a landing page showing:
    • How many transactions were attempted.
    • The percentage that were declined.
  3. Choose whether the transactions were intentional or fraudulent.

If Transactions Were Fraudulent:

  • Choose to un-restrict the account immediately, or keep it restricted while implementing additional fraud controls:
    • IP Restrictions
    • Require CVV or AVS (Address Verification)
    • Enable Two-Factor Authentication
    • Add separate users (avoid shared logins)
    • Enable fraud prevention tools (e.g., Fraud Prevention or Kount Fraud Manager)

If Transactions Were Intentional:

  • Confirm whether they were customer purchases or internal tests.
  • Submit the form to resume processing.
  • You’ll receive a confirmation with your Merchant Service Provider’s support contact.

Common Questions

Can I turn off card testing detection?
No. This fraud protection feature is automatic and cannot be disabled.

How long will the account stay restricted?
Until a user with the appropriate permissions un-restricts it via the provided link or portal.

What if I didn’t get the text message?
You’ll still receive an email alert. Make sure your mobile number is saved in your user profile.

Need Help?

If you have questions or need assistance managing card testing alerts or restrictions, please contact your Merchant Service Provider.