Every authorization attempt carries gateway and network fees, whether it approves or declines. A testing wave is thousands of attempts, and each one lands on your statement. Here is the fee stack, then a calculator you can put your own numbers into.
These are pass-through fees from published network schedules. They are charged when the authorization request reaches the network, so a declined card test is billed just like a real order. Your gateway's own per-attempt fee sits on top, and varies by contract.
Enter the attempts from one card-testing event. Priced on Visa rails; Mastercard's schedule is comparable. Nothing leaves your browser.
~3.5% in a real attack we analyzed. Approvals never settle, so Misuse of Auth bills them.
At minimum, in network and processing fees — before any chargeback losses or VAMP exposure.
A single enumeration run is rarely a one-off. Attackers probe in waves, so the real figure compounds across events. This estimate is a floor, not a forecast.
Enter an attempt count to see the floor.
Gateway-native scoring runs after the attempt is already there, so the per-attempt fees are charged whether it blocks the card or not. Cardvera sits in front of the gateway and turns card testing away before the meter starts.
See what this looks like on your own traffic. Tell us what you're seeing and we'll walk you through where Cardvera turns card testing away, before the meter starts.
No spam. No drip campaigns. Just a reply from a human.