Ben

• Aug 30th, 2011

 

On the client we make sure the field validations for the credit card number are based on card type . (Ex: VISA 16 digits, AMEX 15, etc)
Credit card expiry date should always be current date or above
Card number field should only accept Numerics
Card name or card number should not accept/run malicious code inputs example ("")
Credit card number should be masked once the user navigates from the page and return to the page to edit.

Server site:
Credit card date should be encrypted when storing and retriving from the data base

rajneesh

• May 22nd, 2013

 

Will check for-
Pincode (Security)
Card swipe (basic)
Error Message
Bill receipt
Message to Inbox (if possible and under requirement)
Language selection
Card type (saving, current etc)

Vaibhav

• May 3rd, 2016

 

There various scenarios where we can perform the card testing, Below are some scenarios.
1. Verify the Card Authorization is Approved when all card details are valid (Card No, Exp Date, CVV, PIN, Name etc.)
2. Verify the Card Auth is declined for expired card
3. Verify the card Auth is referred when insufficient information provided
4. Verify the Card Auth is declined for incorrect CVV
5. Verify the Card Auth is declined for wrong PIN
6. Verify that Card is blocked when auth is fired 3 times with invalid PIN.