Card testing

APICurrent

You can simulate successful transactions, card errors, and 3DS scenarios to test your advanced credit and debit card integrations that use Orders API v2.

Know before you code

Before you trigger a simulation, you'll need to get an access token.
Test values are case sensitive.

Simulate successful card capture

To simulate a successful credit card capture, you can test using a test card number. Use any date in the future for the card expiry date. Use any four digit CVV number for American Express cards and any three digit CVV number for all other cards.

To simulate a successful credit card capture with integrations like Standard Payments or advanced credit and debit cards, first ensure the integration is in sandbox mode, using a sandbox client ID and communicating with api*.sandbox.paypal.com endpoints. Then use a test number from the table below and any date in the future for the expiration. The CVV can be any four-digit number for American Express and any three-digit number for all other brands.

Test cards

Use these test card numbers for positive testing of advanced credit and debit card payments in sandbox.

Test number	Card type
`371449635398431`	American Express
`376680816376961`	American Express
`36259600000004`	Diners Club
`6304000000000000`	Maestro
`5063516945005047`	Maestro
`2223000048400011`	Mastercard
`4005519200000004`	Visa
`4012000033330026`	Visa
`4012000077777777`	Visa
`4012888888881881`	Visa
`4217651111111119`	Visa
`4500600000000061`	Visa
`4772129056533503`	Visa
`4915805038587737`	Visa

See the 3DS Test Scenarios for additional test card numbers.

Simulate card errors

To simulate credit card failures, pass a rejection trigger in the First Name or Name on Card field in your existing advanced credit and debit card payment integration. You must use a Visa test card number, for example 4012 8888 8888 1881. Use any date in the future for the card expiry date and any three-digit number for the CVV field.

Example Response

The response shows success as the order gets created, but because a refusal was passed, the card payment status is DECLINED, and the processor_response codes show that the card is globally unavailable (AVS G), not processed (CVV P), and expired (response code 5400).

1{
2  "id": "3M049991JF5624929",
3  "status": "COMPLETED",
4  "payment_source": {
5    "card": {
6      "last_digits": "6889",
7      "brand": "VISA",
8      "type": "CREDIT"
9    }
10  },
11  "purchase_units": [
12    {
13      "reference_id": "default",
14      "payments": {
15        "captures": [
16          {
17            "id": "2FB04508RA686960W",
18            "status": "DECLINED",
19            "amount": {
20              "currency_code": "USD",
21              "value": "500.00"
22            },
23            "final_capture": true,
24            "disbursement_mode": "INSTANT",
25            "seller_protection": {
26              "status": "NOT_ELIGIBLE"
27            },
28            "seller_receivable_breakdown": {
29              "gross_amount": {
30                "currency_code": "USD",
31                "value": "500.00"
32              },
33              "paypal_fee": {
34                "currency_code": "USD",
35                "value": "13.44"
36              },
37              "net_amount": {
38                "currency_code": "USD",
39                "value": "486.56"
40              }
41            },
42            "links": [
43              {
44                "href": "https://api-m.sandbox.paypal.com/v2/payments/captures/2FB04508RA686960W",
45                "rel": "self",
46                "method": "GET"
47              },
48              {
49                "href": "https://api-m.sandbox.paypal.com/v2/payments/captures/2FB04508RA686960W/refund",
50                "rel": "refund",
51                "method": "POST"
52              },
53              {
54                "href": "https://api-m.sandbox.paypal.com/v2/checkout/orders/3M049991JF5624929",
55                "rel": "up",
56                "method": "GET"
57              }
58            ],
59            "create_time": "2022-08-09T22:20:05Z",
60            "update_time": "2022-08-09T22:20:05Z",
61            "processor_response": {
62              "avs_code": "G",
63              "cvv_code": "P",
64              "response_code": "0500"
65            }
66          }
67        ]
68      }
69    }
70  ],
71  "links": [
72    {
73      "href": "https://api-m.sandbox.paypal.com/v2/checkout/orders/3M049991JF5624929",
74      "rel": "self",
75      "method": "GET"
76    }
77  ]
78}

Rejection triggers

All test simulations show that the card is globally unavailable (AVS) and not processed (CVV), but the response-code value changes based on the test trigger you use.

Test name	Trigger	Processor response code
Fraudulent card	`CCREJECT-SF`	`9500`
Card is declined	`CCREJECT-BANK_ERROR`	`5100`
CVC check fails	`CCREJECT-CVV_F`	`00N7`
Card expired	`CCREJECT-EC`	`5400`
Luhn Check fails	`CCREJECT-IRC`	`5180`
Insufficient funds	`CCREJECT-IF`	`5120`
Card lost, stolen	`CCREJECT-LS`	`9520`
Card refused	`CCREJECT-REFUSED`	`0500`
Card invalid	`CCREJECT-IA`	`1330`

Processor response codes for non-PayPal payment processor errors.

Value	Description
`0000`	`APPROVED`
`00N7`	`CVV2_FAILURE_POSSIBLE_RETRY_WITH_CVV`
`0100`	`REFERRAL`
`0390`	`ACCOUNT_NOT_FOUND`
`0500`	`DO_NOT_HONOR`
`0580`	`UNAUTHORIZED_TRANSACTION`
`0800`	`BAD_RESPONSE_REVERSAL_REQUIRED`
`0880`	`CRYPTOGRAPHIC_FAILURE`
`0R00`	`CANCELLED_PAYMENT`
`1000`	`PARTIAL_AUTHORIZATION`
`10BR`	`ISSUER_REJECTED`
`1300`	`INVALID_DATA_FORMAT`
`1310`	`INVALID_AMOUNT`
`1312`	`INVALID_TRANSACTION_CARD_ISSUER_ACQUIRER`
`1317`	`INVALID_CAPTURE_DATE`
`1320`	`INVALID_CURRENCY_CODE`
`1330`	`INVALID_ACCOUNT`
`1335`	`INVALID_ACCOUNT_RECURRING`
`1340`	`INVALID_TERMINAL`
`1350`	`INVALID_MERCHANT`
`1360`	`BAD_PROCESSING_CODE`
`1370`	`INVALID_MCC`
`1380`	`INVALID_EXPIRATION`
`1382`	`INVALID_CARD_VERIFICATION_VALUE`
`1384`	`INVALID_LIFE_CYCLE_OF_TRANSACTION`
`1390`	`INVALID_ORDER`
`1393`	`TRANSACTION_CANNOT_BE_COMPLETED`
`5100`	`GENERIC_DECLINE`
`5110`	`CVV2_FAILURE`
`5120`	`INSUFFICIENT_FUNDS`
`5130`	`INVALID_PIN`
`5135`	`DECLINED_PIN_TRY_EXCEEDED`
`5140`	`CARD_CLOSED`
`5150`	`PICKUP_CARD_SPECIAL_CONDITIONS. Try using another card. Do not retry the same card`
`5160`	`UNAUTHORIZED_USER`
`5170`	`AVS_FAILURE`
`5180`	`INVALID_OR_RESTRICTED_CARD. Try using another card. Do not retry the same card`
`5190`	`SOFT_AVS`
`5200`	`DUPLICATE_TRANSACTION`
`5210`	`INVALID_TRANSACTION`
`5400`	`EXPIRED_CARD`
`5500`	`INCORRECT_PIN_REENTER`
`5650`	`DECLINED_SCA_REQUIRED`
`5700`	`TRANSACTION_NOT_PERMITTED. Outside of scope of accepted business`
`5710`	`TX_ATTEMPTS_EXCEED_LIMIT`
`5800`	`REVERSAL_REJECTED`
`5900`	`INVALID_ISSUE`
`5910`	`ISSUER_NOT_AVAILABLE_NOT_RETRIABLE`
`5920`	`ISSUER_NOT_AVAILABLE_RETRIABLE`
`5930`	`CARD_NOT_ACTIVATED`
`6300`	`ACCOUNT_NOT_ON_FILE`
`7600`	`APPROVED_NON_CAPTURE`
`7700`	`ERROR_3DS`
`7710`	`AUTHENTICATION_FAILED`
`7800`	`BIN_ERROR`
`7900`	`PIN_ERROR`
`8000`	`PROCESSOR_SYSTEM_ERROR`
`8010`	`HOST_KEY_ERROR`
`8020`	`CONFIGURATION_ERROR`
`8030`	`UNSUPPORTED_OPERATION`
`8100`	`FATAL_COMMUNICATION_ERROR`
`8110`	`RETRIABLE_COMMUNICATION_ERROR`
`8220`	`SYSTEM_UNAVAILABLE`
`9100`	`DECLINED_PLEASE_RETRY. Retry`
`9500`	`SUSPECTED_FRAUD. Try using another card. Do not retry the same card`
`9510`	`SECURITY_VIOLATION`
`9520`	`LOST_OR_STOLEN. Try using another card. Do not retry the same card`
`9530`	`HOLD_CALL_CENTER. The merchant must call the number on the back of the card. POS scenario`
`9540`	`REFUSED_CARD`
`9600`	`UNRECOGNIZED_RESPONSE_CODE`
`PCNR`	`CONTINGENCIES_NOT_RESOLVED`
`PCVV`	`CVV_FAILURE`
`PPAD`	`BILLING_ADDRESS`
`PPAE`	`AMEX_DISABLED`
`PPAG`	`ADULT_GAMING_UNSUPPORTED`
`PPAI`	`AMOUNT_INCOMPATIBLE`
`PPAR`	`AUTH_RESULT`
`PPAU`	`MCC_CODE`
`PPAV`	`ARC_AVS`
`PPAX`	`AMOUNT_EXCEEDED`
`PPBG`	`BAD_GAMING`
`PPC2`	`ARC_CVV`
`PPCE`	`CE_REGISTRATION_INCOMPLETE`
`PPCO`	`COUNTRY`
`PPCR`	`CREDIT_ERROR`
`PPCT`	`CARD_TYPE_UNSUPPORTED`
`PPCU`	`CURRENCY_USED_INVALID`
`PPD3`	`SECURE_ERROR_3DS`
`PPDC`	`DCC_UNSUPPORTED`
`PPDI`	`DINERS_REJECT`
`PPDV`	`AUTH_MESSAGE`
`PPEF`	`EXPIRED_FUNDING_INSTRUMENT`
`PPEL`	`EXCEEDS_FREQUENCY_LIMIT`
`PPER`	`INTERNAL_SYSTEM_ERROR`
`PPEX`	`EXPIRY_DATE`
`PPFE`	`FUNDING_SOURCE_ALREADY_EXISTS`
`PPFI`	`INVALID_FUNDING_INSTRUMENT`
`PPFR`	`RESTRICTED_FUNDING_INSTRUMENT`
`PPFV`	`FIELD_VALIDATION_FAILED`
`PPGR`	`GAMING_REFUND_ERROR`
`PPH1`	`H1_ERROR`
`PPIF`	`IDEMPOTENCY_FAILURE`
`PPII`	`INVALID_INPUT_FAILURE`
`PPIM`	`ID_MISMATCH`
`PPIT`	`INVALID_TRACE_ID`
`PPLR`	`LATE_REVERSAL`
`PPLS`	`LARGE_STATUS_CODE`
`PPMB`	`MISSING_BUSINESS_RULE_OR_DATA`
`PPMC`	`BLOCKED_Mastercard`
`PPMD`	`PPMD`
`PPNC`	`NOT_SUPPORTED_NRC`
`PPNL`	`EXCEEDS_NETWORK_FREQUENCY_LIMIT`
`PPNT`	`NETWORK_ERROR`
`PPPH`	`NO_PHONE_FOR_DCC_TRANSACTION`
`PPPI`	`INVALID_PRODUCT`
`PPPM`	`INVALID_PAYMENT_METHOD`
`PPQC`	`QUASI_CASH_UNSUPPORTED`
`PPRE`	`UNSUPPORT_REFUND_ON_PENDING_BC`
`PPRF`	`INVALID_PARENT_TRANSACTION_STATUS`
`PPRR`	`MERCHANT_NOT_REGISTERED`
`PPS0`	`BANKAUTH_ROW_MISMATCH`
`PPS1`	`BANKAUTH_ROW_SETTLED`
`PPS2`	`BANKAUTH_ROW_VOIDED`
`PPS3`	`BANKAUTH_EXPIRED`
`PPS4`	`CURRENCY_MISMATCH`
`PPS5`	`CREDITCARD_MISMATCH`
`PPS6`	`AMOUNT_MISMATCH`
`PPSC`	`ARC_SCORE`
`PPSD`	`STATUS_DESCRIPTION`
`PPSE`	`AMEX_DENIED`
`PPTE`	`VERIFICATION_TOKEN_EXPIRED`
`PPTF`	`INVALID_TRACE_REFERENCE`
`PPTI`	`INVALID_TRANSACTION_ID`
`PPTR`	`VERIFICATION_TOKEN_REVOKED`
`PPTT`	`TRANSACTION_TYPE_UNSUPPORTED`
`PPTV`	`INVALID_VERIFICATION_TOKEN`
`PPUA`	`USER_NOT_AUTHORIZED`
`PPUC`	`CURRENCY_CODE_UNSUPPORTED`
`PPUE`	`UNSUPPORT_ENTITY`
`PPUI`	`UNSUPPORT_INSTALLMENT`
`PPUP`	`UNSUPPORT_POS_FLAG`
`PPUR`	`UNSUPPORTED_REVERSAL`
`PPVC`	`VALIDATE_CURRENCY`
`PPVE`	`VALIDATION_ERROR`
`PPVT`	`VIRTUAL_TERMINAL_UNSUPPORTED`