Card Testing

The Short Life of a Stolen Card

What 18.8 million tested payment cards reveal about how fraudsters validate stolen card data, and how little time defenders actually have.

Executive Summary

Four out of five stolen payment cards are tested on a single day and never touched again. For most cards, the first sighting is the only warning anyone will ever get.

Card testing sits between a card being stolen and a card being spent. Before anyone buys anything with compromised card data, they need to know it works, so they push it through a payment endpoint and read the response. Every one of those attempts is observable, and across millions of them a consistent operating pattern emerges.

Learn more →