# Testing

Test your 3DS integration on the Try environment using the magic values provided below. Send requests and see simulated responses.

For the [Android/iOS SDK](/access/products/3ds/android-ios), the environment must be set to `CardinalEnvironment.STAGING` as part of the `CardinalConfigurationParameters` to use the test values on the Access Try environment.

### Tokens

If you're creating tokens containing the test card numbers you must delete the token before creating another with the same PAN. You are prevented from creating another token using the same PAN. As an alternative, you can also change the `namespace` used as part of the token creation.

### Liability shift

Liability shift is confirmed on payment authorization. The test card number tables show the different scenarios and the likely liability shift based on the authentication details provided (e.g. authenticationValue, eci, transactionId).

## Test Card Number

Use different card numbers to alter the 3DS authentication outcome.

Please read if receiving error responses:
* You **must** use a test card number from the table below. Using a number not listed here will result in the challenge failing to load for both web and SDK.
* Do not mix the old test values used for API v1/v2 with the new ones for API v3 or you will get unexpected scenario outcomes. Set the `cardHolderName` to any other value e.g. `Bob Smith`


table
thead
tr
th
Test Scenario
th
Description
th
Test Values (2.2.0)
th
Authentication Result
th
Verification Result
th
Action
tbody
tr
td
b
Successful Authentication (Frictionless)
td
Issuer assessment resulted in a frictionless 3DS authentication
td
ul
li
Visa: 
br
code
4000000000002701
li
Mastercard: 
br
code
5200000000002235
li
AMEX: 
br
code
340000000002708
li
Discover/Diners: 
br
code
6011000000002117
li
JCB: 
br
code
3338000000000296
li
CB (Visa): 
br
code
4000000000004970
li
CB (Mastercard): 
br
code
5200000000004801
td
b
outcome:
 authenticated
br
br
b
eci:
ul
li
05 - Visa/AMEX/Discover (Diners Cub)/JCB/Cartes Bancaires (Visa)
li
02 - Mastercard/Cartes Bancaires (MC)
br
br
b
authenticationValue (cavv):
 returned 
        
br
br
b
liability shift:
 yes 
        
td
N/A
td
Apply authentication object in payment request, proceed with payment authorization
tr
td
b
Failed Frictionless Authentication
td
Issuer failed the authentication without providing the option for a challenge.
td
ul
li
Visa: 
br
code
4000000000002925
li
Mastercard: 
br
code
5200000000002276
li
AMEX: 
br
code
340000000002096
li
Discover/Diners: 
br
code
6011000000002364
li
JCB: 
br
code
3338000000000361
li
CB (Visa): 
br
code
4000000000004574
li
CB (Mastercard): 
br
code
5200000000004538
td
b
outcome:
 authenticationFailed
br
br
b
eci:
ul
li
07 - Visa/AMEX/Discover (Diners Cub)/JCB/Cartes Bancaires (Visa)
li
00 - Mastercard/Cartes Bancaires (MC)
br
br
b
authenticationValue (cavv):
 Not returned 
        
br
br
b
liability shift:
 no 
        
td
N/A
td
Do not proceed with payment authorization. Either retry 3DS or prompt for another form of payment.
tr
td
b
Attempts Stand-In Frictionless Authentication
td
Cardholder is enrolled in 3DS but the issuer does not support. This results in the issuer stand-in for the authentication
td
ul
li
Visa: 
br
code
4000000000002719
li
Mastercard: 
br
code
5200000000002482
li
AMEX: 
br
code
340000000002872
li
Discover/Diners: 
br
code
6011000000002646
li
JCB: 
br
code
3338000000000585
li
CB (Visa): 
br
code
4000000000004111
li
CB (Mastercard): 
br
code
5200000000004587
td
b
outcome:
 authenticated
br
br
b
eci:
ul
li
06 - Visa/AMEX/Discover (Diners Cub)/JCB/Cartes Bancaires (Visa)
li
01 - Mastercard/Cartes Bancaires (MC)
br
br
b
authenticationValue (cavv):
 Not returned 
        
br
br
b
liability shift:
 yes 
        
td
N/A
td
Apply authentication object in payment request, proceed with payment authorization
tr
td
b
Authentication Unavailable (issuer)
td
Cardholder is enrolled but authentication is unavailable
td
ul
li
Visa: 
code
4000000000002313
li
Mastercard: 
code
5200000000002268
li
AMEX: 
code
340000000002922
li
Discover/Diners: 
code
6011000000002612
li
JCB: 
code
3338000000000221
li
CB (Visa): 
code
4000000000004160
li
CB (Mastercard): 
code
5200000000004306
td
b
outcome:
 unavailable
br
br
b
eci:
ul
li
07 - Visa/AMEX/Discover (Diners Cub)/JCB/Cartes Bancaires (Visa)
li
00 - Mastercard/Cartes Bancaires (MC)
br
br
b
authenticationValue (cavv):
 Not returned 
        
br
br
b
liability shift:
 no 
        
td
N/A
td
Proceed as non-authenticated transaction or retry authentication request
tr
td
b
Authentication Rejected
td
Authentication rejected by the issuer, no challenge is offered
td
ul
li
Visa: 
code
4000000000002537
li
Mastercard: 
code
5200000000002185
li
AMEX: 
code
340000000002062
li
Discover/Diners: 
code
6011000000002711
li
JCB: 
code
3338000000000734
li
CB (Visa): 
code
4000000000004517
li
CB (Mastercard): 
code
5200000000004405
td
b
outcome:
 authenticationFailed
br
br
b
eci:
ul
li
07 - Visa/AMEX/Discover (Diners Cub)/JCB/Cartes Bancaires (Visa)
li
00 - Mastercard/Cartes Bancaires (MC)
br
br
b
authenticationValue (cavv):
 Not returned 
        
br
br
b
liability shift:
 no 
        
td
N/A
td
Do not proceed with payment authorization. Either retry 3DS or prompt for another form of payment.
tr
td
b
Authentication Unavailable (system error)
td
Authentication rejected by the issuer, no challenge is offered
td
ul
li
Visa: 
code
4000000000002990
li
Mastercard: 
code
5200000000002409
li
AMEX: 
code
340000000002468
li
Discover/Diners: 
code
6011000000002836
li
JCB: 
code
3338000000000940
li
CB (Visa): 
code
4000000000004285
li
CB (Mastercard): 
code
5200000000004090
td
b
outcome:
 unavailable
br
br
b
eci:
ul
li
07 - Visa/AMEX/Discover (Diners Cub)/JCB/Cartes Bancaires (Visa)
li
00 - Mastercard/Cartes Bancaires (MC)
br
br
b
authenticationValue (cavv):
 Not returned 
        
br
br
b
liability shift:
 no 
        
td
N/A
td
Proceed as non-authenticated transaction or retry authentication request
tr
td
b
Authentication Error
td
Error whilst attempting authentication
td
ul
li
Visa: 
code
4000000000002446
li
Mastercard: 
code
5200000000002037
li
AMEX: 
code
340000000002732
li
Discover/Diners: 
code
6011000000002315
li
JCB: 
code
3338000000000650
li
CB (Visa): 
code
4000000000004194
li
CB (Mastercard): 
code
5200000000004058
td
b
outcome:
 unavailable
br
br
b
eci:
ul
li
07 - Visa/AMEX/Discover (Diners Cub)/JCB/Cartes Bancaires (Visa)
li
00 - Mastercard/Cartes Bancaires (MC)
br
br
b
authenticationValue (cavv):
 Not returned 
        
br
br
b
liability shift:
 no 
        
td
N/A
td
Proceed as non-authenticated transaction or retry authentication request
tr
td
b
Authentication Timeout
br
td
Timeout during the authentication request
br
br
b
Note:
 If authenticationOutage is enabled the same test values will return the scenario below.
td
ul
li
Visa: 
code
4000000000002354
li
Mastercard: 
code
5200000000002326
li
AMEX: 
code
340000000002047
li
Discover/Diners: 
code
6011000000002869
li
JCB: 
code
3338000000000577
li
CB (Visa): 
code
4000000000004277
li
CB (Mastercard): 
code
5200000000004694
td
b
outcome:
 unavailable
br
br
b
eci:
ul
li
07 - Visa/AMEX/Discover (Diners Cub)/JCB/Cartes Bancaires (Visa)
li
00 - Mastercard/Cartes Bancaires (MC)
br
br
b
authenticationValue (cavv):
 Not returned 
        
br
br
b
liability shift:
 no 
        
td
N/A
td
Proceed as non-authenticated transaction or retry authentication request
tr
td
b
Authentication Outage
td
Recognized downstream issue/timeout (e.g. Visa/Mastercard/ACS provider)
br
br
(Additional set-up required. Speak to your Implementation Manager for more information)
td
ul
li
Visa: 
code
4000000000002354
li
Mastercard: 
code
5200000000002326
li
AMEX: 
code
340000000002047
li
Discover/Diners: 
code
6011000000002869
li
JCB: 
code
3338000000000577
li
CB (Visa): 
code
4000000000004277
li
CB (Mastercard): 
code
5200000000004694
td
b
outcome:
 authenticationOutage
br
br
br
br
b
authenticationValue (cavv):
 Not returned 
        
br
br
b
liability shift:
 no 
        
td
N/A
td
Proceed as non-authenticated transaction and apply `authenticationOutage` exemption or retry authentication request
tr
td
b
Successful Authentication (Challenged)
td
Issuer prompts a challenge in authentication, customer responds successfully
td
ul
li
Visa: 
code
 4000000000002503
li
Mastercard: 
code
5200000000002151
li
AMEX: 
code
340000000002534
li
Discover/Diners: 
code
6011000000002265
li
JCB: 
code
3338000000000569
li
CB (Visa): 
code
4000000000004855
li
CB (Mastercard): 
code
5200000000004074
td
b
outcome:
 challenged
br
br
td
b
outcome:
 authenticated
br
br
b
eci:
ul
li
05 - Visa/AMEX/Discover (Diners Cub)/JCB/Cartes Bancaires (Visa)
li
02 - Mastercard/Cartes Bancaires (MC)
br
br
b
authenticationValue (cavv):
 returned 
        
br
br
b
liability shift:
 yes 
        
td
Apply authentication object in payment request, proceed with payment authorization
tr
td
b
Failed Challenged Authentication
td
Issuer prompts a challenge in authentication, customer responds with incorrect details (e.g. OTP, fingerprint etc)
td
ul
li
Visa: 
code
4000000000002370
li
Mastercard: 
code
5200000000002490
li
AMEX: 
code
340000000002237
li
Discover/Diners: 
code
6011000000002695
li
JCB: 
code
3338000000000874
li
CB (Visa): 
code
4000000000004293
li
CB (Mastercard): 
code
5200000000004041
td
b
outcome:
 challenged
br
br
td
b
outcome:
 authenticationFailed
br
br
b
eci:
ul
li
07 - Visa/AMEX/Discover (Diners Cub)/JCB/Cartes Bancaires (Visa)
li
00 - Mastercard/Cartes Bancaires (MC)
br
br
b
authenticationValue (cavv):
 Not returned 
        
br
br
b
liability shift:
 no 
        
td
Do not proceed with payment authorization. Either retry 3DS or prompt for another form of payment.
tr
td
b
Verification Unavailable
td
Authentication data following a challenge cannot be retrieved
td
ul
li
Visa: 
code
4000000000002420
li
Mastercard: 
code
5200000000002664
li
AMEX: 
code
340000000002484
li
Discover/Diners: 
code
6011000000002851
li
JCB: 
code
3338000000000981
li
CB (Visa): 
code
4000000000004640
li
CB (Mastercard): 
code
5200000000004124
td
b
outcome:
 challenged
br
br
td
b
outcome:
 unavailable
br
br
b
eci:
ul
li
07 - Visa/AMEX/Discover (Diners Cub)/JCB/Cartes Bancaires (Visa)
li
00 - Mastercard/Cartes Bancaires (MC)
br
br
b
authenticationValue (cavv):
 Not returned 
        
br
br
b
liability shift:
 no 
        
td
Proceed as non-authenticated transaction or retry verification request
tr
td
b
Verification Error
td
Error whilst attempting verification
td
ul
li
Visa: 
code
4000000000002644
li
Mastercard: 
code
5200000000002656
li
AMEX: 
code
340000000002351
li
Discover/Diners: 
code
6011000000002570
li
JCB: 
code
3338000000000676
li
CB (Visa): 
code
4000000000004913
li
CB (Mastercard): 
code
5200000000004611
td
b
outcome:
 challenged
br
br
td
b
outcome:
 unavailable
br
br
b
eci:
ul
li
07 - Visa/AMEX/Discover (Diners Cub)/JCB/Cartes Bancaires (Visa)
li
00 - Mastercard/Cartes Bancaires (MC)
br
br
b
authenticationValue (cavv):
 Not returned 
        
br
br
b
liability shift:
 no 
        
td
Proceed as non-authenticated transaction or retry verification request
tr
td
b
Bypass
td
Bypass the consumer authentication flow via Cardinal Rules Engine configuration. Returned if 3DS premium is enabled or when there is a timeout connecting to the 3DS directory server.
td
ul
li
Visa: 
code
4000000000002560
li
Mastercard: 
code
5200000000002508
li
AMEX: 
code
340000000002948
li
Discover/Diners: 
code
6011000000002976
li
JCB: 
code
3338000000000122
li
CB (Visa): 
code
4000000000004400
li
CB (Mastercard): 
code
5200000000004991
td
b
outcome:
 bypassed
br
br
b
eci:
ul
li
07 - Visa/AMEX/Discover (Diners Cub)/JCB/Cartes Bancaires (Visa)
li
00 - Mastercard/Cartes Bancaires (MC)
br
br
b
authenticationValue (cavv):
 Not returned 
        
br
br
b
liability shift:
 no 
        
td
N/A
td
Proceed as non-authenticated transaction
### Common Issues

| Issue | Cause |
|  --- | --- |
| Mobile SDK: challenge page fails to load, producing one of the following errors Android SDK returns: `20606 (Payload Validation failed)``Invalid Signature. Your request contains an invalid signature.` | You must use version 3 of the API with the mobile SDK on Try and ensure you use the updated test card values below.You cannot use a made up card number. You must use a test card value below or the challenge will not display correctly.  |
| Web Integration: challenge page fails to load | Ensure you're using the correct API version and Test values. API version 3 uses the card numbers below. API [version 1 and 2](/access/products/3ds/v2/testing) use the cardholder name.You cannot use a made up card number. You must use a test card value below or the challenge will not display correctly.  |
| Issuer Challenge page fails to load on live (400 response) | You have 30 seconds to submit the challenge form (using the JWT) before it expires. On the Try environment this is 10 minutes. |


### Test device data form

The form below allows you to submit the 3DS device data details provided in the API response. You then receive the sessionId/collectionReference, back in the postMessage, for use in the [authentication](/access/products/3ds/web/authentication) request. This is useful if using tools such as postman/insomnia to test your integration.

Access 3ds - Device Data Collection form
### Test challenge form

The form below allows you to submit the 3DS challenge details provided in the API response and display the [issuer challenge](/access/products/3ds/web/challenge-verification). This is useful if using tools such as postman/insomnia to test your integration.

Access 3ds - Device Data Collection form