A self-contained, virtual testing environment.
3D Secure test scenarios
DocsCurrentADVANCED
Last updated: Oct 29th, 12:41pm
Test cases and card details for purchase flows
The PayPal sandbox supports end-to-end testing for purchase flows using payment methods issued by Visa, Mastercard, American Express, Discover, Diners, and other card brands.
Use the test cards in the following table to:
- Simulate a purchase.
- Generate a 3D Secure response.
The test cards in this section only work for purchase flows. Don’t use the cards in this section to test Save payment methods. See Test cases and card details for Save payment methods.
Find test cases and card details for the following countries:
- United States
- Great Britain
- China
- Australia
- France
- Germany
- Italy
- Japan
- Mexico
- Spain
Tip: Enter a future expiration date and any 3-digit CVV, or 4-digit CVV for American Express, to proceed.
| Scenario | Test cards | API response |
|---|---|---|
| Test Case 1: Successful Frictionless Authentication |
Visa: Mastercard: Discover: JCB: Diners: CUP: |
"authentication_result": { "liability_shift": "POSSIBLE","enrollment_status": "Y","authentication_status": "Y" } |
| Test Case 2: Failed Frictionless Authentication |
Visa: Mastercard: Discover: JCB: Diners: CUP: |
"authentication_result": { "liability_shift": "NO","enrollment_status": "Y","authentication_status": "N" } |
| Test Case 3: Attempts Stand-In Frictionless Authentication |
Visa: Mastercard: Discover: JCB: Diners: CUP: |
"authentication_result": { "liability_shift": "POSSIBLE","enrollment_status": "Y","authentication_status": "A" } |
| Test Case 4: Unavailable Frictionless Authentication |
Visa: Mastercard: Discover: JCB: Diners: CUP: |
"authentication_result": { "liability_shift": "NO","enrollment_status": "Y","authentication_status": "U" } |
| Test Case 5: Rejected Frictionless Authentication |
Visa: Mastercard: Discover: JCB: Diners: CUP: |
"authentication_result": { "liability_shift": "NO","enrollment_status": "Y","authentication_status": "R" } |
| Test Case 6: Authentication Not Available on Lookup |
Visa: Mastercard: Discover: JCB: Diners: CUP: |
"authentication_result": { "liability_shift": "NO","enrollment_status": "U" } |
| Test Case 7: Successful Step-up Authentication |
Visa: Mastercard: Discover: JCB: Diners: CUP: |
"authentication_result": { "liability_shift": "POSSIBLE","enrollment_status": "Y","authentication_status": "Y" } |
| Test Case 8: Failed Step-Up Authentication |
Visa: Mastercard: Discover: JCB: Diners: CUP: |
"authentication_result": { "liability_shift": "NO","enrollment_status": "Y","authentication_status": "N" } |
| Test Case 9: Step-Up Authentication is Unavailable |
Visa: Mastercard: Discover: JCB: Diners: CUP: |
"authentication_result": { "liability_shift": "NO","enrollment_status": "Y","authentication_status": "U" } |
| Scenario | Test cards | API response |
|---|---|---|
| Test Case 1: Successful Frictionless Authentication |
Visa: Mastercard: |
"authentication_result": { "liability_shift": "POSSIBLE","enrollment_status": "Y","authentication_status": "Y" } |
| Test Case 2: Failed Frictionless Authentication |
Visa: Mastercard: |
"authentication_result": { "liability_shift": "NO","enrollment_status": "Y","authentication_status": "N" } |
| Test Case 3: Attempts Stand-In Frictionless Authentication |
Visa: Mastercard: |
"authentication_result": { "liability_shift": "POSSIBLE","enrollment_status": "Y","authentication_status": "A" } |
| Test Case 4: Unavailable Frictionless Authentication |
Visa: Mastercard: |
"authentication_result": { "liability_shift": "NO","enrollment_status": "Y","authentication_status": "U" } |
| Test Case 5: Rejected Frictionless Authentication |
Visa: Mastercard: |
"authentication_result": { "liability_shift": "NO","enrollment_status": "Y","authentication_status": "R" } |
| Test Case 6: Authentication Not Available on Lookup |
Visa: Mastercard: |
"authentication_result": { "liability_shift": "NO","enrollment_status": "U" } |
| Test Case 7: Successful Step-up Authentication |
Visa: Mastercard: |
"authentication_result": { "liability_shift": "POSSIBLE","enrollment_status": "Y","authentication_status": "Y" } |
| Test Case 8: Failed Step-Up Authentication |
Visa: Mastercard: |
"authentication_result": { "liability_shift": "NO","enrollment_status": "Y","authentication_status": "N" } |
| Test Case 9: Step-Up Authentication is Unavailable |
Visa: Mastercard: |
"authentication_result": { "liability_shift": "NO","enrollment_status": "Y","authentication_status": "U" } |
Test cases and card details for Save payment methods
The PayPal sandbox supports end-to-end testing for saving payment methods issued by Visa, Mastercard, American Express, Discover, and ELO.
Use the test cards in the following table to:
- Simulate saving a payment method during purchase or for purchase later.
- Generate a 3D Secure response.
The test cards in this section only work for the Payment Method Tokens v3 API. Don’t use the cards in this section to test purchase flows. See Test cases and card details for purchase flows.
Important: For expiration year values for all test cards in the table below, use the current year + 3 years. The expiration month should always be 01.
| Scenario | Test cards | API response |
|---|---|---|
|
Test Case 1: Successful No-Challenge Authentication Cardholder enrolled, authentication successful, and signature verification successful. |
Visa
|
authenticate_successful |
|
Test Case 2: Failed No-Challenge Authentication Cardholder enrolled, authentication unsuccessful. Merchants should prompt customers for another form of payment. |
Visa
|
authenticate_frictionless_failed |
|
Test Case 3: Attempt No-Challenge Authentication The provided card brand authenticated this 3D Secure transaction without password confirmation from the customer. |
Visa
|
authenticate_attempt_successful |
|
Test Case 4: Unavailable No-Challenge Authentication from the Issuer Authentication unavailable for this transaction. |
Visa
|
authenticate_unable_to_authenticate |
|
Test Case 5: Rejected No-Challenge Authentication by the Issuer Authentication unsuccessful. Merchants should prompt customers for another form of payment. |
Visa
|
authenticate_rejected |
|
Test Case 6: Authentication Not Available on Lookup Authentication unavailable for this transaction. |
Visa
|
authentication_unavailable |
|
Test Case 7: Error on Lookup An error occurred while attempting to lookup enrollment. |
Visa
|
lookup_error |
|
Test Case 8: Timeout on Lookup Attempting to lookup enrollment resulted in a timeout. |
Visa
|
lookup_failed_acs_error |
|
Test Case 9: Bypassed Authentication Bypass used to simulate a scenario where merchant has elected to bypass the consumer authentication flow via CardinalCommerce Rules Engine configuration. |
Visa
|
lookup_bypassed |
|
Test Case 10: Successful Challenge Authentication Cardholder enrolled, authentication successful, and signature verification successful. |
Visa
|
authenticate_successful |
|
Test Case 11: Failed Challenge Authentication Cardholder enrolled, authentication unsuccessful. Merchants should prompt customers for another form of payment. |
Visa
|
challenge_required |
|
Test Case 12: Challenge Authentication is Unavailable Authentication unavailable for this transaction. |
Visa
|
challenge_required |
|
Test Case 13: Error on Authentication An error occurred while attempting to authenticate. Alternatively, merchants can ask customers for an alternative form of payment. |
Visa
|
authenticate_error |
|
Test Case 14: Data Only Successful The data-only 3D Secure call was successfully created. The dataOnlyRequestedflag
must be sent to receive a successful response.
|
MasterCard
|
data_only_successful |
|
Test Case 15: Authentication Unsuccessful Authentication unsuccessful. Merchants should prompt customers for another form of payment. |
Visa
|
authenticate_rejected |