CVV Attempt Monitoring and Alerting
Stay ahead of potential fraud with our CVV Attempt Monitoring and Alerting service.
Redeem your gift cards at any of our Merchants
You can purchase a gift card from any of these locations
Onyx Gift Cards is a Grenadian company designed to introduce, market and manage gift cards systems in Grenada for retailers and corporations. We are enthusiastic about the effect and influence we will have on the local market. We intend to expand our systems regionally with a range of product offerings and services.
Gift cards are the preferred way of giving and receiving gifts. They carry a monetary value that can be redeemed for gifts at your favorite store.
Onyx GiftCards are “Open Gift Cards” which means that they can be redeemed at multiple merchant locations. They are standard credit card size, can fit into the average wallet and made of PVC plastic. Onyx GiftCards are Barcoded for security and safety for the consumer and bear a disclaimer at the back.
Onyx Giftcards can be bought with a branded Card backer which is black in colour and is designed to fit the card. There is an area to write a brief message to the recipient as well.
It scores failed card verification value checks at the moment of authorization and decides whether the next attempt looks like a real cardholder fat-fingering the back of a card or someone working through a list of numbers. The call happens in milliseconds, made by the issuer's authorization system with input from the acquirer, the payment gateway, and the merchant's own fraud rules. Because the CVV cannot be stored after the check, detection rests on behavior and patterns, not on the value itself.
Every authorization request carrying a CVV comes back with a result. Match, mismatch, not provided, or not supported by the issuer. One mismatch means almost nothing. People mistype three-digit numbers constantly, and a decline on a first try is routine. What turns a mismatch into a signal is repetition and the company it keeps.
No single line item proves anything. The engine looks for stacking. Two or three weak indicators pointing the same direction raise the score past the threshold, and the response shifts from a decline to a block, a challenge, or a report.
Individual merchants only see their own traffic, which is why card networks built their own layers. Visa Account Attack Intelligence and comparable programs at other networks aggregate authorization data across acquirers to spot enumeration activity that no single site could see. When a BIN range gets hammered across a dozen unrelated merchants within an hour, the pattern surfaces at the network, not at the storefront. Issuers then get alerting and can block the range before losses accumulate.
There is no magic number of failures that triggers a lockout. Issuers tune limits by card product, portfolio risk, geography, and historical fraud rates, and they adjust them continuously. A premium travel card and a prepaid debit card will not behave the same way. Merchant categories with high legitimate decline rates, such as subscription billing or digital goods, get more headroom than a low-risk retail checkout. Anyone quoting a fixed cutoff is guessing.
Most merchants see the response code, the decline reason passed back by the gateway, and their own order metadata. Issuer-side clustering stays invisible. That gap is why velocity rules and device reputation scoring at the merchant level matter, and why a sudden spike in CVV mismatches is worth treating as an incident rather than noise. Reviewing logs after the fact still helps. Repeated mismatches from one subnet or one customer email domain are easy to spot in retrospect and cheap to block going forward.
Detection is layered: the issuer checks the code, the gateway counts attempts, the merchant watches devices and velocity, and the network correlates across everyone. Break any one layer and the others still hold. The mechanism is not a single tripwire. It is a scoring system that gets harder to fool as more of it sees your traffic.