EN 
ZH 
As a customer, you’ll be aware of the three-digit code on the back of your Visa debit card (or the four-digit one on the front of your American Express), even if you didn’t know what it was called. Well, this number has a name – CVV (Card Verification Value).
And, as it turns out, it benefits not only customers – but merchants, too.
CVV checks can help your business detect and prevent payment fraud, avoid chargebacks, and remain compliant with the payment industry’s strict data handling standards. But how?
Read on to find out. We’ll explain the meaning of a CVV code, how it works, when you should ask for it in an online transaction – and what you should do with the CVV when you’re done.
What is a CVV number?
CVV stands for Card Verification Value. It’s a security feature that allows you to authenticate credit and debit card transactions you accept online, over the phone, or via mail order.
Because every CVV is unique to each customer’s card and account holder, CVV checks are an excellent way of verifying the legitimacy of a debit or credit card transaction. Essentially, CVV checks tell you that the customer actually has access to the card they’re using to make a purchase from your business – and that they’re not using stolen debit or credit card data.
There are different types of CVV, which include:
- CVV1: this is encoded on the magnetic stripe of the card your customer swipes when they make a payment in-store, from your point of sale (POS) terminal.
- CVV2: this is the three-digit number printed on the back of the customer’s card – usually in the signature panel. They’ll use this when making online or phone-based purchases from your business, where neither the customer – or their card – are physically present. (These are called card-not-present, or CNP, transactions.)
- CVC2: this refers to Card Validation Code 2, and is simply another term for CVV2 that Mastercard uses. (As we’ll see, different card schemes – such as Visa, Discover, American Express, and Mastercard – have similar, but varying, CVV approaches.)
- CID: this stands for Card Identification Number, and it’s the four-digit code you’ll see on the front of an American Express card. (It’s printed just above the card number.) In an online transaction, it serves the exact same purpose as the CVV2 or CVC2.
The acronym CVV is also Discover’s version of CVV2 – the code on the back of the card, not the one encoded into the magstripe – and is not to be confused with CVV1. (Confusing, we know!)
For a handy, at-a-glance guide to the different acronyms each card scheme uses, see below:
- CVV2 is used by Visa
- CVC2 is used by Mastercard
- CID is used by American Express
- CVV is used by Discover
Where to find the CVV code
As with other card details, including your credit card number and the card’s expiration date, you can find your CVV on your physical card. However, unlike those details, it is printed rather than embossed and where it appears depends on your card network.
- Visa, Mastercard, Discover: you’ll find the three-digit CVV on the back of the card, usually within or next to the authorized signature box
- American Express: if it’s an Amex, the CVV is four digits and is located on the front of the card next to the contactless symbol
Difference between CVV and PIN
PINs and CVVs are both essential for security but perform different functions.
PIN stands for ‘personal identification number’. A PIN is usually a four-digit code that is issued in association with a payment card as an additional layer of security. A cardholder may have to enter their PIN when they withdraw cash using their debit card or attempt a payment using a card reader. It is often possible for the cardholder to choose their own PIN.
A CVV also provides an additional layer of security. However, it is automatically generated by the issuer and printed on the card. It cannot be changed. Unlike PINs, which are typically used during face-to-face transactions, CVVs are used for online or over-the-phone payments.