CVV Digit Test Checking Procedure: A Comprehensive Guide
Learn the step-by-step process of testing CVV digits for secure transactions and prevent fraud.
Redeem your gift cards at any of our Merchants
You can purchase a gift card from any of these locations
Onyx Gift Cards is a Grenadian company designed to introduce, market and manage gift cards systems in Grenada for retailers and corporations. We are enthusiastic about the effect and influence we will have on the local market. We intend to expand our systems regionally with a range of product offerings and services.
Gift cards are the preferred way of giving and receiving gifts. They carry a monetary value that can be redeemed for gifts at your favorite store.
Onyx GiftCards are “Open Gift Cards” which means that they can be redeemed at multiple merchant locations. They are standard credit card size, can fit into the average wallet and made of PVC plastic. Onyx GiftCards are Barcoded for security and safety for the consumer and bear a disclaimer at the back.
Onyx Giftcards can be bought with a branded Card backer which is black in colour and is designed to fit the card. There is an area to write a brief message to the recipient as well.
A CVV digit verification test checks that the card security code a cardholder enters matches the code the issuer has on file. The test runs during card authorization. It does not prove the cardholder owns the card. It confirms the code matches issuer records at that moment.
The CVV is a 3-digit code on Visa, Mastercard, and Discover cards. American Express uses a 4-digit code. The code sits on the card. Issuers generate it with the account number and expiry date. The test sends the code to the issuer in the authorization request. The issuer returns a match, no match, or not processed response.
The test runs at the payment gateway or processor. The gateway sends the authorization request to the card network. The network routes it to the issuer. The issuer compares the submitted code to its record. Response codes include M (match), N (no match), P (not processed), and U (unknown). Merchants see these codes in the authorization response.
Payment processors publish test card numbers. These numbers work only in sandbox mode. A test card number pairs with a fixed CVV. Some sandboxes use 123 for a successful match and 999 for a decline. Test values do not work on live accounts. Processors document test values in developer guides.
PCI DSS Requirement 3.2 prohibits storing the CVV after authorization. The code must not appear in logs, databases, or receipts. A merchant that stores the CVV fails PCI DSS. The test result is not a substitute for other fraud checks. Address verification (AVS) and 3-D Secure add separate signals.
Unknown: exact issuer response timing varies by network and region.