A card test chargeback is a dispute filed against a small charge that a fraudster ran to check whether a stolen card number still works. The cardholder never approved the purchase, so they contact their bank and the charge comes back, along with a dispute fee. Most of these disputes hit digital goods, donations, and free-trial signups because nothing ships and nobody notices the order.
Why card testing creates chargebacks
Card testers push hundreds of small authorizations through a checkout in minutes to sort live cards from dead ones. Each approved test becomes a real line item on a stranger's statement. When that stranger opens a banking app and sees a $1.07 charge from a store they have never used, they dispute it.
One dispute is noise. Ten thousand tests in a weekend is a dispute spike that trips network monitoring and puts your processing account at risk.
What does a card test chargeback cost you?
- The sale amount, which is small by design.
- A chargeback fee, often $15 to $100 per dispute.
- The product or credit you already gave away.
- Fines and monitoring fees once your dispute ratio passes network limits.
- Staff time to pull records and answer each case.
The fee costs more than the order. That math is why blocking tests beats fighting disputes after the fact.
Warning signs of card testing in your order flow
- Bursts of orders from one IP address or device fingerprint.
- Many card numbers used in a short window, often from the same IP range.
- Repeated amounts, like twenty $1.00 orders in an hour.
- Failed authorization attempts that outnumber successful ones.
- Emails that look random or use throwaway domains.
- CVV or address verification failures on most attempts.
- Orders for the cheapest item or the smallest top-up you sell.
How do you stop card test chargebacks?
- Cap checkout attempts per IP, device, and card BIN per hour. Rate limits kill scripted testing.
- Require CVV and address verification on every order, including small ones.
- Add a CAPTCHA or bot check to checkout and account signup pages.
- Block or review traffic from proxy, VPN, and hosting provider ranges.
- Set a minimum order value, or route small orders through 3-D Secure.
- Turn on the fraud rules your processor already offers before writing your own.
- Review dispute data every week. A monthly review lets a wave run for four weeks.
Refunds are a tool too. If a small order looks like a test, refund it before the cardholder disputes it. A refund costs you the processing fee. A chargeback costs the fee plus the dispute fee plus a mark against your ratio.
What are the network dispute thresholds?
Visa and Mastercard run monitoring programs that watch your dispute ratio: disputes divided by total transactions. Visa has flagged merchants near a 0.9% ratio with 100 or more disputes in a month, and Mastercard sets its own limits. Program rules change, so confirm the current numbers with your acquirer. Crossing a threshold brings fines, a remediation plan, and in bad cases, loss of the account.
Who pays for a card test chargeback?
The merchant does, in nearly every case. The issuer credits the cardholder, then pulls the funds from your acquirer, who passes the debit and a fee to you. Liability shift changes that: when an order goes through 3-D Secure and the issuer approves it, fraud liability moves to the issuer.
That is one reason 3-D Secure on small orders pays off. The trade is extra checkout friction, which can cost conversions on legitimate sales.
Frequently asked questions
Does one card test chargeback matter?
On its own, no. One dispute on one small order will not move your ratio. The risk is volume, because testers do not stop at one card.
Can you win a card test chargeback?
Almost never, and the effort costs more than the disputed amount. The cardholder did not authorize the charge, so the case is weak from the start. Spend the time on prevention instead.
How long until card test chargebacks arrive?
Most show up 30 to 120 days after the charge. A testing wave in March can hit your dispute ratio in June, which makes the cause hard to spot if you do not keep records.
Do small charges count against my dispute ratio?
Yes. Ratios count disputes and transactions, not dollar amounts. A $0.99 dispute weighs the same as a $900 one.
Is card testing the same as friendly fraud?
No. Card testing is fraud by a stranger who never held the card. Friendly fraud is a real customer disputing a charge they made, often because they forgot it or hoped to keep the goods.
What to do when a card test chargeback lands
Pull the order record and check the IP, device, email, and card BIN against your other orders. One order tied to a testing wave tells you which rule to tighten. Respond to the dispute if the deadline allows, but treat the case as a signal, not a fight.
Then close the hole. Add the offending IP range to your blocklist, tighten your rate limits, and watch your dispute count for the next two months. Card testers move to whoever leaves the door open, and the merchant who closes it fast stops paying for the test.