Prevent test cards from being added to production vault

We recently moved from QA to Production and we're currently testing.

We are using hosted tokenization iframe and the vault. We get the temp token and do a ResCardVerificationCC to get the issuer Id and then add to the vault.

I assumed that a test card like 4242424242424242 won't be accepted and added to a production store vault but it was added successfully.

What can we do to prevent this from happening?

  • When storing card in our vault via API (e.g. using ResAddToken), we don't do any checks with the card, but expect that you do validations on your side. So for example, only store the card in our vault if the resCardVerification approves, and your satisfied with other checks (e.g. CVD and AVS results).