Card Testing, Fake Refunds and Overpayment Scams Aimed at Merchants
Last verified: October 2026
A plain-English guide to the scams that target the owner taking the payment — card testing, fake refunds, and overpayment tricks — and the settings and rules that stop them. Want a hand locking your system down? My number is (330) 200-8042.
Scams Aimed at Merchants, at a Glance
Most fraud advice protects the shopper. This one protects you — the owner taking the payment. Card testing is a burst of tiny charges checking stolen cards; a fake refund is pressure to refund a sale that never happened; an overpayment scam asks you to 'send back the difference' a different way. All three rely on hurry and confusion, and all three fall apart against one rule: only refund to the original card and the original sale. There's a printable version up top.
Common Questions
1 What is card testing?
Criminals run a burst of tiny charges through a checkout to find which stolen card numbers still work. You'll see lots of small, similar charges and declines, often at odd hours. Turn on CVV and address checks, rate limits, and your processor's fraud screening to block it.
2 How do I stop a fake or forced refund?
Only refund to the original card and the original sale, and require manager approval on refunds. 'A manager already approved it' means go confirm it — not push the button.
3 Someone overpaid and wants the difference sent back a different way. Safe?
No. A card refund goes back to the same card, for no more than the original charge — never a different card, cash, or transfer. Only a scammer needs it any other way.
4 Who can issue refunds in my shop?
Only the people who truly need to. Limit refund permission, require manager approval above a small amount, and give each person their own login so every refund has a name on it.
5 A real customer disputed a real sale — is that one of these scams?
No, that's friendly fraud, handled as a chargeback with clear receipts and good records rather than blocked with settings. See our chargebacks guide.
6 I think I've been scammed — what now?
Call your processor right away; they can sometimes stop a transfer or reverse a payment. Write down what happened, loop in your bank if money left, and never send 'one more' payment to fix it.
Would You Rather I Just Help?
Scams aimed at merchants prey on hurry and kindness, not on clever hacking — which means a couple of settings and one firm refund rule stop almost all of them. I'll walk your system's fraud tools and refund permissions with you and train your crew, with nothing to sell you. $99 flat for a visit, 30-day come-back-free.
Would you rather I just do this for you?
No shame in it — plenty of folks would rather hand it off, and that's what I'm here for. I'll come to your home, set it up right, and make sure it's working before I leave. Flat $99 per visit — no jargon, no upsell, and every visit is 30-day come-back-free.
Not a hardware job? I can often fix it remotely for $49 — a secure screen-share, up to 2 hours, that you watch the whole time and can end whenever (included free for $39/mo Support Plan members, and it counts toward the $99 if it turns out I need to come out).