# Testing

Test your 3DS integration on the Try environment using the magic values provided below. Send requests and see simulated responses.

For the [Android/iOS SDK](/products/3ds/android-ios), the environment must be set to `CardinalEnvironment.STAGING` as part of the `CardinalConfigurationParameters` to use the test values on the Access Try environment.

### Tokens

If you're creating tokens containing the test card numbers you must delete the token before creating another with the same PAN. You are prevented from creating another token using the same PAN. As an alternative, you can also change the `namespace` used as part of the token creation.

### Liability shift

Liability shift is confirmed on payment authorization. The test card number tables show the different scenarios and the likely liability shift based on the authentication details provided (e.g. authenticationValue, eci, transactionId).

## Test Card Number

Use different card numbers to alter the 3DS authentication outcome.

Do not mix the old test values used for API v1/v2 with the new ones for API v3 or you will get unexpected scenario outcomes. Set the `cardHolderName` to any other value e.g. `Bob Smith`

Always use a test card number from the tables below. Using a number not listed will result in the challenge failing to load for both web and SDK.

EMV 3DS version 2.1.0 will be sunset December 2024. The majority of authentications are already 2.2.0.

table
thead
tr
th
Test Scenario
th
Description
th
Test Values (2.1.0)
th
Test Values (2.2.0)
th
Authentication Result
th
Verification Result
th
Action
tbody
tr
td
b
Successful Authentication (Frictionless)
td
Issuer assessment resulted in a frictionless 3DS authentication
td
ul
li
Visa: 
br
code
4000000000001000
li
Mastercard: 
br
code
5200000000001005
li
AMEX: 
br
code
340000000001007
li
Discover/Diners: 
br
code
6011000000001002
li
JCB: 
br
code
3337000000000008
li
CB (Visa): 
br
code
4000000000003006
li
CB (Mastercard): 
br
code
5200000000003001
td
ul
li
Visa: 
br
code
4000000000002701
li
Mastercard: 
br
code
5200000000002235
li
AMEX: 
br
code
340000000002708
li
Discover/Diners: 
br
code
6011000000002117
li
JCB: 
br
code
3338000000000296
li
CB (Visa): 
br
code
4000000000004970
li
CB (Mastercard): 
br
code
5200000000004801
td
b
outcome:
 authenticated
br
br
b
eci:
ul
li
05 - Visa/AMEX/Discover (Diners Cub)/JCB/Cartes Bancaires (Visa)
li
02 - Mastercard/Cartes Bancaires (MC)
br
br
b
authenticationValue (cavv):
 returned 
        
br
br
b
liability shift:
 yes 
        
td
N/A
td
Apply authentication object in payment request, proceed with payment authorization
tr
td
b
Failed Frictionless Authentication
td
Issuer failed the authentication without providing the option for a challenge.
td
ul
li
Visa: 
br
code
4000000000001018
li
Mastercard: 
br
code
5200000000001013
li
AMEX: 
br
code
340000000001015
li
Discover/Diners: 
br
code
6011000000001010
li
JCB: 
br
code
3337000000000990
li
CB (Visa): 
br
code
4000000000003014
li
CB (Mastercard): 
br
code
5200000000003019
td
ul
li
Visa: 
br
code
4000000000002925
li
Mastercard: 
br
code
5200000000002276
li
AMEX: 
br
code
340000000002096
li
Discover/Diners: 
br
code
6011000000002364
li
JCB: 
br
code
3338000000000361
li
CB (Visa): 
br
code
4000000000004574
li
CB (Mastercard): 
br
code
5200000000004538
td
b
outcome:
 authenticationFailed
br
br
b
eci:
ul
li
07 - Visa/AMEX/Discover (Diners Cub)/JCB/Cartes Bancaires (Visa)
li
00 - Mastercard/Cartes Bancaires (MC)
br
br
b
authenticationValue (cavv):
 Not returned 
        
br
br
b
liability shift:
 no 
        
td
N/A
td
Do not proceed with payment authorization. Either retry 3DS or prompt for another form of payment.
tr
td
b
Attempts Stand-In Frictionless Authentication
td
Cardholder is enrolled in 3DS but the issuer does not support. This results in the issuer stand-in for the authentication
td
ul
li
Visa: 
br
code
4000000000001026
li
Mastercard: 
br
code
5200000000001021
li
AMEX: 
br
code
340000000001023
li
Discover/Diners: 
br
code
6011000000001028
li
JCB: 
br
code
3337000000007045
li
CB (Visa): 
br
code
4000000000003022
li
CB (Mastercard): 
br
code
5200000000003027
td
ul
li
Visa: 
br
code
4000000000002719
li
Mastercard: 
br
code
5200000000002482
li
AMEX: 
br
code
340000000002872
li
Discover/Diners: 
br
code
6011000000002646
li
JCB: 
br
code
3338000000000585
li
CB (Visa): 
br
code
4000000000004111
li
CB (Mastercard): 
br
code
5200000000004587
td
b
outcome:
 authenticated
br
br
b
eci:
ul
li
06 - Visa/AMEX/Discover (Diners Cub)/JCB/Cartes Bancaires (Visa)
li
01 - Mastercard/Cartes Bancaires (MC)
br
br
b
authenticationValue (cavv):
 Not returned 
        
br
br
b
liability shift:
 yes 
        
td
N/A
td
Apply authentication object in payment request, proceed with payment authorization
tr
td
b
Authentication Unavailable (issuer)
td
Cardholder is enrolled but authentication is unavailable
td
ul
li
Visa: 
code
4000000000001034
li
Mastercard: 
code
5200000000001039
li
AMEX: 
code
340000000001031
li
Discover/Diners: 
code
6011000000001036
li
JCB: 
code
3337000000000735
li
CB (Visa): 
code
4000000000003030
li
CB (Mastercard): 
code
5200000000003035
td
ul
li
Visa: 
code
4000000000002313
li
Mastercard: 
code
5200000000002268
li
AMEX: 
code
340000000002922
li
Discover/Diners: 
code
6011000000002612
li
JCB: 
code
3338000000000221
li
CB (Visa): 
code
4000000000004160
li
CB (Mastercard): 
code
5200000000004306
td
b
outcome:
 unavailable
br
br
b
eci:
ul
li
07 - Visa/AMEX/Discover (Diners Cub)/JCB/Cartes Bancaires (Visa)
li
00 - Mastercard/Cartes Bancaires (MC)
br
br
b
authenticationValue (cavv):
 Not returned 
        
br
br
b
liability shift:
 no 
        
td
N/A
td
Proceed as non-authenticated transaction or retry authentication request
tr
td
b
Authentication Rejected
td
Authentication rejected by the issuer, no challenge is offered
td
ul
li
Visa: 
code
4000000000001042
li
Mastercard: 
code
5200000000001047
li
AMEX: 
code
340000000001049
li
Discover/Diners: 
code
6011000000001044
li
JCB: 
code
3337000000000321
li
CB (Visa): 
code
4000000000003048
li
CB (Mastercard): 
code
5200000000003043
td
ul
li
Visa: 
code
4000000000002537
li
Mastercard: 
code
5200000000002185
li
AMEX: 
code
340000000002062
li
Discover/Diners: 
code
6011000000002711
li
JCB: 
code
3338000000000734
li
CB (Visa): 
code
4000000000004517
li
CB (Mastercard): 
code
5200000000004405
td
b
outcome:
 authenticationFailed
br
br
b
eci:
ul
li
07 - Visa/AMEX/Discover (Diners Cub)/JCB/Cartes Bancaires (Visa)
li
00 - Mastercard/Cartes Bancaires (MC)
br
br
b
authenticationValue (cavv):
 Not returned 
        
br
br
b
liability shift:
 no 
        
td
N/A
td
Do not proceed with payment authorization. Either retry 3DS or prompt for another form of payment.
tr
td
b
Authentication Unavailable (system error)
td
Authentication rejected by the issuer, no challenge is offered
td
ul
li
Visa: 
code
4000000000001059
li
Mastercard: 
code
5200000000001054
li
AMEX: 
code
340000000001056
li
Discover/Diners: 
code
6011000000001051
li
JCB: 
code
3337000000006765
li
CB (Visa): 
code
4000000000003055
li
CB (Mastercard): 
code
5200000000003050
td
ul
li
Visa: 
code
4000000000002990
li
Mastercard: 
code
5200000000002409
li
AMEX: 
code
340000000002468
li
Discover/Diners: 
code
6011000000002836
li
JCB: 
code
3338000000000940
li
CB (Visa): 
code
4000000000004285
li
CB (Mastercard): 
code
5200000000004090
td
b
outcome:
 unavailable
br
br
b
eci:
ul
li
07 - Visa/AMEX/Discover (Diners Cub)/JCB/Cartes Bancaires (Visa)
li
00 - Mastercard/Cartes Bancaires (MC)
br
br
b
authenticationValue (cavv):
 Not returned 
        
br
br
b
liability shift:
 no 
        
td
N/A
td
Proceed as non-authenticated transaction or retry authentication request
tr
td
b
Authentication Error
td
Error whilst attempting authentication
td
ul
li
Visa: 
code
4000000000001067
li
Mastercard: 
code
5200000000001062
li
AMEX: 
code
340000000001064
li
Discover/Diners: 
code
6011000000001069
li
JCB: 
code
3337000000000016
li
CB (Visa): 
code
4000000000003063
li
CB (Mastercard): 
code
5200000000003068
td
ul
li
Visa: 
code
4000000000002446
li
Mastercard: 
code
5200000000002037
li
AMEX: 
code
340000000002732
li
Discover/Diners: 
code
6011000000002315
li
JCB: 
code
3338000000000650
li
CB (Visa): 
code
4000000000004194
li
CB (Mastercard): 
code
5200000000004058
td
b
outcome:
 unavailable
br
br
b
eci:
ul
li
07 - Visa/AMEX/Discover (Diners Cub)/JCB/Cartes Bancaires (Visa)
li
00 - Mastercard/Cartes Bancaires (MC)
br
br
b
authenticationValue (cavv):
 Not returned 
        
br
br
b
liability shift:
 no 
        
td
N/A
td
Proceed as non-authenticated transaction or retry authentication request
tr
td
b
Authentication Timeout
br
td
Timeout during the authentication request
br
br
b
Note:
 If authenticationOutage is enabled the same test values will return the scenario below.
td
ul
li
Visa: 
code
4000000000001075
li
Mastercard: 
code
5200000000001070
li
AMEX: 
code
340000000001072
li
Discover/Diners: 
code
6011000000001077
li
JCB: 
code
3337000000000081
li
CB (Visa): 
code
4000000000003071
li
CB (Mastercard): 
code
5200000000003076
td
ul
li
Visa: 
code
4000000000002354
li
Mastercard: 
code
5200000000002326
li
AMEX: 
code
340000000002047
li
Discover/Diners: 
code
6011000000002869
li
JCB: 
code
3338000000000577
li
CB (Visa): 
code
4000000000004277
li
CB (Mastercard): 
code
5200000000004694
td
b
outcome:
 unavailable
br
br
b
eci:
ul
li
07 - Visa/AMEX/Discover (Diners Cub)/JCB/Cartes Bancaires (Visa)
li
00 - Mastercard/Cartes Bancaires (MC)
br
br
b
authenticationValue (cavv):
 Not returned 
        
br
br
b
liability shift:
 no 
        
td
N/A
td
Proceed as non-authenticated transaction or retry authentication request
tr
td
b
Authentication Outage
td
Recognized downstream issue/timeout (e.g. Visa/Mastercard/ACS provider)
br
br
(Additional set-up required. Speak to your Implementation Manager for more information)
td
ul
li
Visa: 
code
4000000000001075
li
Mastercard: 
code
5200000000001070
li
AMEX: 
code
340000000001072
li
Discover/Diners: 
code
6011000000001077
li
JCB: 
code
3337000000000081
li
CB (Visa): 
code
4000000000003071
li
CB (Mastercard): 
code
5200000000003076
td
ul
li
Visa: 
code
4000000000002354
li
Mastercard: 
code
5200000000002326
li
AMEX: 
code
340000000002047
li
Discover/Diners: 
code
6011000000002869
li
JCB: 
code
3338000000000577
li
CB (Visa): 
code
4000000000004277
li
CB (Mastercard): 
code
5200000000004694
td
b
outcome:
 authenticationOutage
br
br
br
br
b
authenticationValue (cavv):
 Not returned 
        
br
br
b
liability shift:
 no 
        
td
N/A
td
Proceed as non-authenticated transaction and apply `authenticationOutage` exemption or retry authentication request
tr
td
b
Successful Authentication (Challenged)
td
Issuer prompts a challenge in authentication, customer responds successfully
td
ul
li
Visa: 
code
4000000000001091
li
Mastercard: 
code
5200000000001096
li
AMEX: 
code
340000000001098
li
Discover/Diners: 
code
6011000000001093
li
JCB: 
code
3337000000200004
li
CB (Visa): 
code
4000000000003139
li
CB (Mastercard): 
code
5200000000003092
td
ul
li
Visa: 
code
 4000000000002503
li
Mastercard: 
code
5200000000002151
li
AMEX: 
code
340000000002534
li
Discover/Diners: 
code
6011000000002265
li
JCB: 
code
3338000000000569
li
CB (Visa): 
code
4000000000004855
li
CB (Mastercard): 
code
5200000000004074
td
b
outcome:
 challenged
br
br
td
b
outcome:
 authenticated
br
br
b
eci:
ul
li
05 - Visa/AMEX/Discover (Diners Cub)/JCB/Cartes Bancaires (Visa)
li
02 - Mastercard/Cartes Bancaires (MC)
br
br
b
authenticationValue (cavv):
 returned 
        
br
br
b
liability shift:
 yes 
        
td
Apply authentication object in payment request, proceed with payment authorization
tr
td
b
Failed Challenged Authentication
td
Issuer prompts a challenge in authentication, customer responds with incorrect details (e.g. OTP, fingerprint etc)
td
ul
li
Visa: 
code
4000000000001109
li
Mastercard: 
code
5200000000001104
li
AMEX: 
code
340000000001106
li
Discover/Diners: 
code
6011000000001101
li
JCB: 
code
3337000000200087
li
CB (Visa): 
code
4000000000003097
li
CB (Mastercard): 
code
5200000000003100
td
ul
li
Visa: 
code
4000000000002370
li
Mastercard: 
code
5200000000002490
li
AMEX: 
code
340000000002237
li
Discover/Diners: 
code
6011000000002695
li
JCB: 
code
3338000000000874
li
CB (Visa): 
code
4000000000004293
li
CB (Mastercard): 
code
5200000000004041
td
b
outcome:
 challenged
br
br
td
b
outcome:
 authenticationFailed
br
br
b
eci:
ul
li
07 - Visa/AMEX/Discover (Diners Cub)/JCB/Cartes Bancaires (Visa)
li
00 - Mastercard/Cartes Bancaires (MC)
br
br
b
authenticationValue (cavv):
 Not returned 
        
br
br
b
liability shift:
 no 
        
td
Do not proceed with payment authorization. Either retry 3DS or prompt for another form of payment.
tr
td
b
Verification Unavailable
td
Authentication data following a challenge cannot be retrieved
td
ul
li
Visa: 
code
4000000000001117
li
Mastercard: 
code
5200000000001112
li
AMEX: 
code
340000000001114
li
Discover/Diners: 
code
6011000000001119
li
JCB: 
code
3337000000200079
li
CB (Visa): 
code
4000000000003105
li
CB (Mastercard): 
code
5200000000003118
td
ul
li
Visa: 
code
4000000000002420
li
Mastercard: 
code
5200000000002664
li
AMEX: 
code
340000000002484
li
Discover/Diners: 
code
6011000000002851
li
JCB: 
code
3338000000000981
li
CB (Visa): 
code
4000000000004640
li
CB (Mastercard): 
code
5200000000004124
td
b
outcome:
 challenged
br
br
td
b
outcome:
 unavailable
br
br
b
eci:
ul
li
07 - Visa/AMEX/Discover (Diners Cub)/JCB/Cartes Bancaires (Visa)
li
00 - Mastercard/Cartes Bancaires (MC)
br
br
b
authenticationValue (cavv):
 Not returned 
        
br
br
b
liability shift:
 no 
        
td
Proceed as non-authenticated transaction or retry verification request
tr
td
b
Verification Error
td
Error whilst attempting verification
td
ul
li
Visa: 
code
4000000000001125
li
Mastercard: 
code
5200000000001120
li
AMEX: 
code
340000000001122
li
Discover/Diners: 
code
6011000000001127
li
JCB: 
code
3337000000200046
li
CB (Visa): 
code
4000000000003113
li
CB (Mastercard): 
code
5200000000003126
td
ul
li
Visa: 
code
4000000000002644
li
Mastercard: 
code
5200000000002656
li
AMEX: 
code
340000000002351
li
Discover/Diners: 
code
6011000000002570
li
JCB: 
code
3338000000000676
li
CB (Visa): 
code
4000000000004913
li
CB (Mastercard): 
code
5200000000004611
td
b
outcome:
 challenged
br
br
td
b
outcome:
 unavailable
br
br
b
eci:
ul
li
07 - Visa/AMEX/Discover (Diners Cub)/JCB/Cartes Bancaires (Visa)
li
00 - Mastercard/Cartes Bancaires (MC)
br
br
b
authenticationValue (cavv):
 Not returned 
        
br
br
b
liability shift:
 no 
        
td
Proceed as non-authenticated transaction or retry verification request
tr
td
b
Bypass
td
Bypass the consumer authentication flow via Cardinal Rules Engine configuration. Returned if 3DS premium is enabled or when there is a timeout connecting to the 3DS directory server.
td
ul
li
Visa: 
code
4000000000001083
li
Mastercard: 
code
5200000000001088
li
AMEX: 
code
340000000001080
li
Discover/Diners: 
code
6011000000001085
li
JCB: 
code
3337000000000537
li
CB (Visa): 
code
4000000000003089
li
CB (Mastercard): 
code
5200000000003084
td
ul
li
Visa: 
code
4000000000002560
li
Mastercard: 
code
5200000000002508
li
AMEX: 
code
340000000002948
li
Discover/Diners: 
code
6011000000002976
li
JCB: 
code
3338000000000122
li
CB (Visa): 
code
4000000000004400
li
CB (Mastercard): 
code
5200000000004991
td
b
outcome:
 bypassed
br
br
b
eci:
ul
li
07 - Visa/AMEX/Discover (Diners Cub)/JCB/Cartes Bancaires (Visa)
li
00 - Mastercard/Cartes Bancaires (MC)
br
br
b
authenticationValue (cavv):
 Not returned 
        
br
br
b
liability shift:
 no 
        
td
N/A
td
Proceed as non-authenticated transaction
### Common Issues

| Issue | Cause |
|  --- | --- |
| Mobile SDK: challenge page fails to load, producing one of the following errors Android SDK returns: `20606 (Payload Validation failed)``Invalid Signature. Your request contains an invalid signature.` | You must use version 3 of the API with the mobile SDK on Try and ensure you use the updated test card values below.You cannot use a made up card number. You must use a test card value below or the challenge will not display correctly.  |
| Web Integration: challenge page fails to load | Ensure you're using the correct API version and Test values. API version 3 uses the card numbers below. API [version 1 and 2](/products/3ds/v2/testing) use the cardholder name.You cannot use a made up card number. You must use a test card value below or the challenge will not display correctly.  |
| Issuer Challenge page fails to load on live (400 response) | You have 30 seconds to submit the challenge form (using the JWT) before it expires. On the Try environment this is 10 minutes. |


### Test device data form

The form below allows you to submit the 3DS device data details provided in the API response. You then receive the sessionId/collectionReference, back in the postMessage, for use in the [authentication](/products/3ds/web/authentication) request. This is useful if using tools such as postman/insomnia to test your integration.

Access 3ds - Device Data Collection form
### Test challenge form

The form below allows you to submit the 3DS challenge details provided in the API response and display the [issuer challenge](/products/3ds/web/challenge-verification). This is useful if using tools such as postman/insomnia to test your integration.

Access 3ds - Device Data Collection form