The bot attempts a small "hold" or authorization on the card (often $0.00 or $1.00) through a payment gateway like Stripe, Braintree, or PayPal to see if it is approved.