The ccof:customer-card-id-requires-verification is what you’ll pass in as the source_id to simulate a challenge since any source_id generated from Apple Pay won’t trigger a verification in sandbox. We’re constantly working to improve our features based on feedback like this, so I’ll be sure to share your request to the API product team. 