Skip to main content

Advanced AVS and CSC testing

Use these card details to simulate various AVS and CSC outcomes in the test environment.

Written by Alex McGowan
Updated over a week ago

The following is used for API testing. Enter the exact details from the table to return a Matched Value Outcome as shown.

⚠️ Warning: These are test cards only. Don't attempt test transactions through a live system. The acquiring bank can terminate your account for misusing test card numbers.

Type

Card Number

House Number

Postcode**

CSC

AVS CSC Result (see Results Explained)

Matched Value Outcome

Message*

Visa Debit

4137 3356 0011 7780

111800

Not Checked By Bank

Auth

Visa Debit

4137 3356 0011 7780

15

11

555

222800

All Match

Auth

Visa Debit

4137 3356 0011 7780

16

11

555

224800

House #Fail/Postcode OK

Auth

Visa Debit

4137 3356 0011 7780

789

211000

CSC Match

Auth

Visa Debit

4137 3356 0011 7780

556

422800

CSC Fail

Decline

Visa Debit

4137 3356 0011 7780

12

555

242800

Postcode Fail

Decline

Visa Debit

4137 3356 0011 7780

12

556

442800

CSC and Postcode Fail

Decline

Visa Debit

4137 3356 0011 7780

16

11

556

424800

CSC and House #Fail

Decline

Visa Debit

4137 3356 0011 7780

16

12

555

244800

Address and Postcode Fail

Decline

Visa Debit

4137 3356 0011 7780

16

12

556

444800

All Values Fail

Decline


* The Pay360 Authorisation System automatically declines and reverses transactions depending on the AVS CSC results. Declined transactions won't complete, whereas auth returns with an Auth code.

This emulates what happens in the Live environment. Response codes or messages are seen if making a payment directly against an API – front-end systems, such as the Payment Portal, won't display the specific error, but show either a payment declined or a system error page.

Details on the reason for payment declined should never be known to the cardholder.

** Only the numerics of a postcode are used when performing Address Verification – when submitting a payment using a payment API, only the numerics are to be provided in the request.

For payments taken via a Payment Portal, a full postcode needs to be entered, but the specific letters used are irrelevant.

For example, if the table above lists the postcode as “46”, a tester could enter either “OL4 6BT” or “SK4 6KL” and both would result in a match.


AVS / CSC Results Explained

AVS/CSC results are encoded in a six-digit string as follows:

Digit 1

CSC check result:
1 => Not checked
2 => Matched
4 => Not matched

Digit 2

Postcode check result as above

Digit 3

Address check result as above

Digit 4

Authorising entity

Digit 5

Always 0

Digit 6

Always 0

E.g. 211000 => CSC matched, address and postcode not checked.

Did this answer your question?