PayPal Sandbox CVV: How Test Card Codes Work

What the CVV Field Does in the PayPal Sandbox

In the PayPal sandbox, the CVV field is a placeholder. Sandbox test cards are never routed to a real card issuer, so no card verification value is checked against a bank. Any three digits work for Visa, Mastercard, and Discover test cards. Any four digits work for American Express. There is no valid code to buy, generate, or look up. You type a number, the sandbox accepts it, and the test payment continues.

paypal sandbox cvv process

The card numbers themselves are published by PayPal on the Test Cards page of the developer dashboard. The list includes well known values such as 4111 1111 1111 1111 for Visa and 5555 5555 5555 4444 for Mastercard, plus separate numbers that trigger declines or 3D Secure prompts.

PayPal Sandbox CVV Overview Guide

Prerequisites

• A free PayPal Developer account
• One sandbox business account and one sandbox personal account
• Access to Testing Tools in the developer dashboard

Steps

1. Sign in to the PayPal Developer Dashboard.
2. Open Testing Tools, then select Sandbox Accounts.
3. Confirm a Business account exists to act as the merchant, or create one.
4. Create a Personal account to act as the buyer.
5. Open Testing Tools, then select Test Cards.
6. Copy the test card number for the card brand you want to simulate.
7. Load your checkout page and add an item so the payment screen appears.
8. Sign in with the sandbox personal account when the PayPal window opens.
9. Select the debit or credit card option.
10. Paste the test card number into the card number field.
11. Enter any three digits in the CVV field, or four digits for American Express.
12. Enter any expiration date in the future.
13. Fill the billing fields with the address stored on the sandbox buyer account.
14. Submit the payment.
15. Open the sandbox business account and confirm the transaction in the activity list.

Why the CVV Step Fails in a Sandbox Test

A rejected card in the sandbox usually points to something other than the code. Check these causes first.

PayPal Sandbox CVV Explanation

• The Card Verification Number field is empty or holds letters instead of digits.
• The card brand does not match the number format, such as a 15 digit Amex number with a 3 digit code.
• The expiration date is in the past.
• Test cards that only generate declines are being used for a success case.
• The billing address does not match the address on the sandbox buyer profile.

Real Card Data Does Not Belong in a Sandbox

Sandbox test cards exist so developers can test without touching live card networks. A real card number or CVV entered in a sandbox form gains nothing, since the sandbox cannot authorize it. Buying, selling, or holding card verification values from live accounts is a federal offense under 18 U.S.C. 1029, which covers trafficking in access devices. Never place a real card in a test form, and never run a published test card against a live payment page.