A debit card test is a small authorization request used to confirm that a card is open and able to approve a charge. Legitimate versions include $0 or $1 pending holds, micro-deposits used to link an external bank account, and merchant verification before a subscription begins. The same technique is abused by criminals who run stolen card numbers through a checkout page to learn which ones still approve.
Why do legitimate debit card tests happen?
Banks and merchants test a debit card to verify the number, expiration date, security code, and billing address match the account on file. A hotel, car rental agency, or gas station may place a temporary hold larger than the expected bill. Micro-deposits of a few cents are a standard way to prove ownership of an account before a transfer is enabled.
What is card testing fraud?
Card testing fraud happens when someone works through a list of stolen card numbers using small authorization attempts, then keeps the numbers that approve. Attackers prefer low dollar amounts and instantly delivered goods because the charge is less likely to be noticed or reversed in time. Once a number is confirmed, it is typically resold or used for larger purchases.
How do merchants detect card testing?
- Many declined transactions arriving from a narrow set of IP addresses or a single device fingerprint.
- A sudden burst of low-value orders in a short window, especially outside normal shopping hours.
- Multiple different card numbers tried in one session, or numbers that appear in sequence.
- Mismatched billing details, disposable email addresses, and repeated shipping information.
Rate limiting, address verification, and requiring the card security code on every attempt block most automated attacks. Fraud teams also watch approval-to-decline ratios, since a healthy checkout sees mostly approvals while an attack sees mostly declines.
How can I check that my own debit card works?
- Open your banking app and confirm the card status and available balance.
- Make a small purchase in person, or run a balance inquiry at an ATM.
- Call the number on the back of the card if a charge is declined without explanation.
If you see a small charge you do not recognize, freeze the card in your banking app and report it to the issuer right away.
Frequently asked questions
Does a $0 authorization mean my card was charged?
No. A $0 or $1 authorization is a temporary hold rather than a completed charge, and it usually falls off within a few business days.
Can a debit card test affect my credit?
No. Debit card activity is not reported to consumer credit bureaus, though an unpaid overdraft can affect your standing with the bank.
What should I do if my debit card number was tested?
Report the charge to your bank, request a replacement card and a new number, and review recent statements for anything else that does not match your records.
How long does a merchant have to verify a card?
Most issuers respond to an authorization request in seconds, but the hold itself can stay on the account for several days depending on the merchant and the bank.