Skip to main content

Sandbox Environment

The Sandbox environment is a near-replica of PayU's production system, designed for integration and testing purposes. To access the test environment, register separately – an email address is enough. After you register and create a shop and a point of sale (POS), you can perform test transactions. Use them to simulate various scenarios and check your integration before you go live.

Traffic Limitations in the Sandbox Environment

The Sandbox environment is not designed for performance testing. If PayU detects excessive traffic, it temporarily blocks access and returns the HTTP 429 response code.

Sandbox Availability Status

You can check the availability of the Sandbox environment on the status page.

Testing Options​

To test the PayU integration in the Sandbox environment, you do not need your own account: you can use the public test point of sale (POS) with the keys listed below. We recommend creating your own account, though, to get a fully configurable Management Panel.

Public POS​

Below are the credentials for the public POS that you can use for testing purposes:

POS ID (pos_id): 300746
Second key (MD5): b6ca15b0d1020e8094d9b5f8d163db54
OAuth protocol - client_id: 300746
OAuth protocol - client_secret: 2ee86a66e5d97e3fadc400c9f19b065d

Your Sandbox Account​

To access your own test Management Panel, register in the Sandbox environment by providing your email address on the registration page. You receive an email with a link to set your password. Then log in with the same email address.

Available Functionalities​

Polish Transfers

  • mTransfer - mBank (m),
  • Płać z iPKO (p),
  • Pekao24Przelew - Bank Pekao (o).

Czech Transfers

  • Česká spořitelna (cs),
  • Komerční banka (kb),
  • QR Payment (qrcz).*

Slovak Transfers

  • (besteron) Tatra banka, a. s. (tatra),
  • Slovenská sporiteľňa, a. s. (sporo).

Romanian Transfers

  • Banca Transilvania (bts).

Additional (random) buyer data, which you can get by retrieving transaction data, is available only for the following methods:

  • Pekao24Przelew - Bank Pekao (o) (the next day),
  • Komerční banka (kb) (instantly).

*For the QR Payment method, only payment creation is supported. Authorization simulation is not available, and transactions in the Sandbox environment are not authorized.

Test Cards​

3DS 2 Support

OneClick payments with the test cards require a CVV unless specified otherwise in the Behavior column.


Due to SCA/PSD2 requirements, test cards with a default value in the 3DS Result column cannot be used to store the card/token.

All test cards support authentication via the 3DS 2 protocol, resulting in a successful frictionless authentication unless stated otherwise.

In practice, every order paid with a card token or a card number in plain text returns the WARNING_CONTINUE_3DS status, unless the order is out of the SCA scope (for example, recurring payments or MOTO).

To test card payments in the Sandbox environment, use the following cards.

MonthYearCVV3DS ResultBehavior
4444333322221111
12
29
123
default
Positive authorization.
5434021016824014
12
29
123
default
Positive authorization.
5598614816563766
12
29
123
default
Positive authorization.
5000105018126595
12
29
123
default
Negative authorization.
4000398284360
12
29
123
default
Negative authorization.
4245757666349685
12
29
123
Challenge
Positive authorization.
5150030090350186
12
29
123
3DS Method required and then successful frictionless.
Positive authorization.
4012001037141120
12
29
123
3DS Method and challenge required.
Positive authorization.
5100052384536834
12
29
123
Challenge params if sdk object sent in the order request.
Positive authorization.
5100052384536818
02
32
123
Challenge required / if no 3DS is used, returns soft decline (SSD).
Positive authorization.
5521455186577727
12
29
123
Frictionless negative authentication.
No authorization (authentication fails).
5405860937270285
12
29
123
default
50% chance for successful authorization.
4532598021104999
12
29
123
default
Successful authorization only for amount below 1000 minor units of given currency.
4210836393742163
12
29
123
Challenge
Successful authorization only for amount below 1000 minor units of given currency.
5436062405627681
12
29
123
Challenge
For amounts greater than 300 minor units, iframeAllowed takes a value of false.
4147139303693610
12
29
123
Challenge
3DS challenge is supported only when the Sandbox account is registered with Romania selected as the main market of operation.
4147139303693628
12
29
123
Challenge
3DS challenge is supported only when the Sandbox account is registered with Romania selected as the main market of operation.