Cardable Sites in 2026: 40 Stores That Still Process Without OTP

A cardable site is one that will still take an order without asking for an OTP. That is the whole definition. It says nothing about whether the order ships, whether the merchant reviews it, or whether your address will match.

Forty targets below, sorted by how forgiving they are in November 2026. We test these in rotation; the ones that harden get moved down and eventually out. The order is the useful part, not the length.

How these are graded

Three factors: does it process without a challenge on a non-VBV card, how strict is the address check, and how likely is a post-order review. Targets that fail the first are not on the list. Targets that pass the first but fail hard on the second sit at the bottom.

Categories where the merchant ships physical goods carry a separate risk: a processed order is not a delivered order. Digital and instant categories convert to cash faster and are worth more per attempt.

Tier one: softest, use these to test

Food delivery and small digital. Low values, low scrutiny, fast confirmation. This is where a new BIN gets proven.

1. DoorDash – non-VBV cards pass on small orders routinely. Billing address barely checked. Guest checkout possible.
2. Uber Eats – same profile. Slightly more account-side friction, order under $40.
3. Grubhub – region-locked, so the proxy has to be in the right metro. Soft when it is.
4. Postmates – soft, thin coverage outside major cities.
5. Instacart – soft on small baskets, requires a ZIP match. Groceries deliver to a drop easily.
6. Domino’s – per-franchise behaviour, some stores hard-challenge. Order for collection where possible.
7. Papa John’s – consistently soft, low ceiling.
8. Subway app orders – very low values, near-zero review.

Tier two: digital goods, fast cash

Gift cards and top-ups. Instant delivery means instant liquidity, which is why they are also the most-requested categories in the scene and therefore watched most closely.

9. Steam wallet – top-ups clear on soft BINs, and the wallet balance sells on. See the Steam method.
10. Amazon gift cards – digital delivery, harsh on repeat attempts from one account.
11. Apple gift cards – soft when bought inside the app, harder on web.
12. Google Play credit – low values, forgiving, small ceiling.
13. PlayStation Store – wallet top-ups, region locked to the account.
14. Xbox / Microsoft Store – similar, slightly harder on new accounts.
15. Nintendo eShop – soft, low ceiling, region strict.
16. Spotify gift cards – cheap, easy, tiny margin.
17. Uber credit top-ups – reusable balance, converts quickly.
18. Airbnb gift cards – fits the travel vertical, moderate check.

Tier three: retail with a real ceiling

Clothing, homeware and general retail. Address checks get stricter here and the order needs to go to a drop you actually control.

19. H&M – soft on small orders, review on anything over $200.
20. Zara – address strict, size the order under $150.
21. Uniqlo – soft, good for a $100 basket.
22. ASOS – moderate, holds on non-VBV cards at low value.
23. Gap – forgiving, wide product range.
24. Old Navy – same estate, cheaper stock, less review.
25. Nike – harder, bot traffic trained it. Under $180 only.
26. Adidas – similar, slightly softer than Nike.
27. Foot Locker – moderate, shoes resell well.
28. IKEA – heavy delivery, high values, hard address check.
29. Wayfair – soft on the card, brutal on delivery windows.
30. Target – moderate, store pickup is the safer route.
31. Walmart – notorious for cancellations, pickup only.
32. Sephora – soft, small baskets, easily resold stock.
33. Ulta – soft, same profile as Sephora.

Tier four: electronics and travel

High values, high scrutiny. Expect a percentage of challenges even on good BINs and use a matched address every time.

34. Best Buy – soft on small, verified on pickup. See the method.
35. Newegg – component stock, moderate check.
36. B&H – strict on first order, fine afterwards.
37. Booking.com – soft on card, punishing on cancellations.
38. Expedia – moderate, refundable fares are the play.
39. Hopper – app-first, softer than the web.
40. Airbnb – hard, account-side checks dominate. Prepare for a document step.

What the tiers really tell you

That value and scrutiny move together, and there is no target where both are high. If you want volume, stay in tier one and two. If you want one big score, accept a 50% challenge rate in tier four and match everything perfectly.

Also: a target being cardable says nothing about it being worth carding. Sephora at $60 is easy and the goods resell at half. Best Buy at $700 is harder and resells at 70%. Work out the expected value before picking, not after.

Category pages: food, gift cards, clothing, no address check, no CVV.