CVV

CVV stands for Card Verification Value, a security feature used to confirm that a payment card is in the possession of the user during transactions where the card is not physically present, such as online, by mail order, or over the phone. The term covers several network-specific codes, including CVV, CVV2, CVC, CID, and similar names, with the exact designation and format varying by card network.

Formats and placement vary by network. Visa, Mastercard, and Discover typically use a 3-digit code located on the back of the card, to the right of the signature area. American Express uses a 4-digit code called CID, printed on the front of the card above or near the card number. The purpose of these codes is to provide an additional check that the user has the actual card, beyond the card number alone.

Usage and limitations. CVV is primarily used in card-not-present transactions to help prevent fraud by verifying that the purchaser possesses the card. It is not a foolproof guarantee of authenticity and should not replace other risk controls. CVV data is generally not required for card-present transactions, where physical reader devices and PINs or signatures are used.

Security and privacy. Under industry standards such as the Payment Card Industry Data Security Standard (PCI DSS), merchants should not store CVV data after authorization. If CVV information is compromised, the impact is typically limited to specific transactions, but it remains a sensitive component of payment security and should be handled with appropriate safeguards.

See also: card security code, PCI DSS, CVV2, CVC, CID.