card-testing

Stop card testing, bot traffic, and fake signups on any site. Device identity that survives cleared cookies and rotating IPs, velocity across device/subnet/ASN/BIN, and a reason code behind every verdict. Drop-in script tag, self-hosted, MIT.

PHP SDK for Maskbreak (Packagist sentinelsup/sdk). One call checks a visit for bots, fake browsers, VPNs and proxies and returns allow, review or block. No dependencies.

Free & open Stripe card-testing defense for Django — block card testing & stolen-card abuse before the charge and cut Radar / chargeback fees. A pre-charge fraud pre-check: IP + account + card throttles, exponential cooldowns, and a multi-card "gold signal". No Radar-for-Fraud-Teams needed. MIT.

Visa VAMP ratio calculator: (TC40 + TC15) ÷ settled card-not-present transactions, merchant and acquirer thresholds by region and month, enumeration ratio, portfolio CSV. Sourced, dependency-free JavaScript.

Autonomous Red-Team / Blue-Team Payment Fraud Simulation & Closed-Loop Defense Engine · Mastercard AI Defence Lab (GFF 2026) · Submitted by Kanak Sanjay Waradkar

Deterministic streaming detector for card-testing and velocity abuse on card authorization traffic. Rust core + bit-exact Python reference, temporal-split evaluation, false-positive cost in rupees. Precision 0.0824 at a realistic base rate; declines 1 in 71 legitimate customers. Not deployable as-is.

Merchant-side card-testing detection that shows its reasoning. Rules produce evidence, five explanations compete over it, and the model can ask for a review but never blocks a shopper — Razorpay Buildathon 2026, Track 02.

Pre-authorization behavioral risk system that detects automated card-testing sequences before a Razorpay payment order is created.

Block fake orders in WooCommerce