Payment testing

We run payment, refund and subscription flows end to end with real cards.

CHECKS
41
DURATION
4–6 business days
PACKAGES
3
TOOLS
Real cards and wallets plus the provider dashboards

A sandbox makes everything look right; what surfaces once money actually moves is a different set of problems. 3-D Secure, bank declines, timeouts, double submits, partial refunds and subscription renewals are exercised with real cards and real bank responses.

From the checklist

41 check items

Successful payment and order integrity

Whether one payment makes one order, and what a double click, a back button or a refresh does.

Declines and interrupted payments

What is left behind after insufficient funds, a cancelled 3-D Secure step, a timeout or a closed tab.

Refunds, cancellations and partial refunds

Amount, timing and the accounting record; whether the balance after a partial refund is right.

Subscriptions and recurring charges

Renewal, upgrade, downgrade, card expiry and access after a cancellation.

DURATION
4–6 business days

How we run it

  1. We map the payments: which method, which currency, which bank, which flow.
  2. We run the happy path with real cards and confirm every charge separately in the provider dashboard.
  3. Then we break it: declines, timeouts, cancelled 3-D Secure, double submits, closed tabs, dropped connections.
  4. Refunds, partial refunds, cancellations and the subscription lifecycle are checked against amounts and dates.

What you get

  • A method × scenario matrix with the outcome of every cell
  • Provider transaction id, amount and screen recording for every finding
  • A reconciliation table of what was charged and what was refunded

Out of scope

  • This is not PCI DSS certification or an audit; we do not store card data.
  • Fees on test charges and refund timings follow your own provider agreement.
Typical finding mix

What this typically turns up

  • Coming back from the 3-D Secure screen marks the order paid with no charge taken
  • After a partial refund the invoice total still shows the original amount
  • An expired card ends access at once; no renewal attempt is ever made

Read a sample report

RESPONSE
Within 24 hours

Questions about this service

Is real money spent?

Yes, in small amounts. A sandbox cannot imitate a real bank decline, the 3-D Secure flow or how long a refund takes. Test charges are listed in the scope approval and refunded when the engagement ends.

Do you provide the cards?

We use the network’s test cards. If a method can only be opened at your own bank — a corporate card, a country-specific wallet — we ask you for that one.

Do you work against production?

If payments are genuinely to be tested, yes, against production. We place orders from flagged test accounts, log every transaction, and cancel or refund all of them at the end.

Don't test the next release alongside your users.

Sign up in the panel, pick what you want tested, pay. The first findings start landing in the same panel within hours.

SendTheCanary provides independent software testing for web, mobile and API products. Ten separate services from functional testing to payments and localization, run by a network of 4,700 testers and delivered as one report ranked by severity.